pubs qui s'ouvrent toutes eules sur firefox

Question

Bonjour,
comme beaucoup de personnes , j'ai des pubs intempestives qui s'ouvrent toutes seules sur mon navigateur mozilla firefox. Ce sont pour la plupart des pubs anti-spywares infectés du virus Win32.
J'ai fait un log. je vous le transmet en espérant que l'un de vous pourra m'aider.
Merci!!!!
Logfile of HijackThis v1.99.1
Scan saved at 14:00:34, on 01/04/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\Norman\Bin\Zanda.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Microsoft Hardware\Keyboard	ype32.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\WINDOWS\vVX3000.exe
C:\Program Files\Pando Networks\Pando\Pando.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Mailinfo\Mailinfo for Outlook Express\oe_mailinfo.exe
C:\Program Files\TuneUp Utilities 2006\MemOptimizer.exe
C:\Program Files\MessengerSkinner\MessengerSkinner.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\HP\Digital Imaging\bin\hpohmr08.exe
C:\Program Files\HP\Digital Imaging\bin\hpotdd01.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Christophe\Bureau\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*https://fr.search.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http:6588
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = ;localhost;<local>
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - (no file)
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: (no name) - {00A6FAF1-072E-44cf-8957-5838F569A31D} - (no file)
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - (no file)
O2 - BHO: eBay Toolbar Helper - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files\Mozilla Firefox\eBayTB.dll
O2 - BHO: TVEngine Helper /fleok=1D8A83A5C2E6107C91A475760EA83FA5EF80752B94E2DE775D79452137C2 - {4B18DD50-C996-44fc-AC52-0FECFF82ED58} - (no file)
O2 - BHO: (no name) - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn1\yt.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: eBay Toolbar - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\Mozilla Firefox\eBayTB.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [IntelliType] "C:\Program Files\Microsoft Hardware\Keyboard	ype32.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe 
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [EPSON Stylus DX4800 Series (Copie 1)] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIADE.EXE /P36 "EPSON Stylus DX4800 Series (Copie 1)" /O6 "USB001" /M "Stylus DX4800"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [VX3000] C:\WINDOWS\vVX3000.exe
O4 - HKLM\..\Run: [Pando] "C:\Program Files\Pando Networks\Pando\Pando.exe" /Automation
O4 - HKCU\..\Run: [NFREN] D:\Setup.exe -1
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [Nektra OEAPI] "C:\Program Files\Mailinfo\Mailinfo for Outlook Express\oe_mailinfo.exe"
O4 - HKCU\..\Run: [IncrediMail Tray Application] C:\PROGRA~1\INCRED~1\bin\IncMail.exe
O4 - HKCU\..\Run: [TuneUp MemOptimizer] "C:\Program Files\TuneUp Utilities 2006\MemOptimizer.exe" autostart
O4 - HKCU\..\Run: [messengerskinner] C:\Program Files\MessengerSkinner\MessengerSkinner.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\eMule.exe -AutoStart
O4 - Global Startup: E-Compagnon.lnk = C:\Program Files\ColiPoste\e-COMO\e-COMO.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
O8 - Extra context menu item: &eBay Search - res://C:\Program Files\Mozilla Firefox\eBayTb.dll/RCSearch.html
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZN
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?1d626d3f306b4d17bc8ead5ba52f095e
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?1d626d3f306b4d17bc8ead5ba52f095e
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.safety.live.com/resource/download/scanner/wlscbase969.cab
O16 - DPF: {87AF076E-D86D-4E87-ADDD-F05804E1F150} - https://www.virginmega.fr/DownloadManager/Release/Prod/DownMan.cab
O16 - DPF: {92E7E45A-D8C8-480E-AF99-176E43997CAA} (Aurigma Image Uploader 3.5 Combo Control) - https://www.photolitto.com/
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {DD3641E5-A9CF-11D1-9AA1-444553540000} (Surround Video V3.0 Control Object) - http://www.sunterra.com/downloads/svh/svideo3.cab
O16 - DPF: {E1AF091A-9F23-4059-89D7-C05EE073285D} (Canal+ Active MSWAY) - https://www.canalplus.com/canalplay/
O18 - Protocol: bw+0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Norman API-hooking helper (NipSvc) - Unknown owner - C:\Norman\Nvc\BIN
ipsvc.exe
O23 - Service: Norman NJeeves - Unknown owner - C:\Norman\bin\NJEEVES.EXE
O23 - Service: Norman ZANDA - Unknown owner - C:\Norman\Bin\Zanda.exe
O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\Norman\Nvc\bin
vcoas.exe
O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman Data Defense Systems - C:\Norman\Nvc\BIN\NVCSCHED.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe

green day · Answer

Salut

cherche et supprime ce programme ( cf panneau de configuration < ajout/supprimer un programme ) :

messengerskinner

ensuite, fais les manip de ce lien :

popups ouverture de fenetres internet publicitaires pop up

et enfin, reposte un nouveau hijack !

++

novice4 · Answer

Merci beaucoup, j'ai suivi la méthode 1 du lien que vous m'avez donné :
popups ouverture de fenetres internet publicitaires pop up 
Ca fonctionne impeccable.
Plus de pubs intempestives.
Mille merci

TropJean · Answer

Salut,

Si tu as envie de garder c’est programmes, les mises à jour sont de mise! Juste qlqs suggestions… Qlq’un Sur ce forum ma dit un jour que si mes programmes n’était pas à jour, je donnais l’occasion à n’importe qui d’avoir accès à mon ordi. Les mises à jour sont fait en fonction des failles qui ce retrouve dans les programmes antérieurs! … Je donne au prochain! ;o) 

Tu as le programme Sun Java V. 06 Ils sont rendu à la 11ièm! Voici le lien pour la mise à jour…
Java : https://www.java.com/fr/download/manual.jsp 
Après la mise à jour ferme Firefox puis ouvre le ensuite et retourne sur la même page pour vérifier si le programme est bien installé!

Tu as les programmes Adobe\Acrobat 7.0\Reader et Adobe\Acrobat 7.0\ActiveX … Ils sont rendus à la 8ièm pour ‘Reader’ Voici un lien pour la mise à jour mais surtout pour de l’infos concernant ces programmes…! Ça va aider encore plus ta cause ;o)
Adobe: https://www.adobe.com/support/security/bulletins/apsb06-20.html Le lien du programme est pendant la lecture.

Maintenant, tu peux m’expliquer pourquoi tu as Office10 et Office11? Tu n’as plus besoin d’Office10… En le désinstallant tu gagne en sécurité et en espace sur ton disque dur! Donc, je te suggère fortement de désinstaller Office10.

Autres questions… Ton ordi, au démarrage, es tu lent ou long à ouvrir/démarrer par pur hasard?
Tu as énormément de programmes qui démarrent en même temps que ton ordi, ce serait probablement la raison!

Si tu utilises Firefox pour surfer sur le net, pourquoi as-tu besoin de Yahoo comme ‘Toolbar – Barre de recherche’ si tu l’as déjà avec Firefox? 

Dans le coin haut/droit, juste à côté de la barre d’adresse, tu as le choix des barres de recherche que tu veux et tu peux même en rajouter! En passant, une autre raison pour des pubs intempestive… chaque recherche que tu fais avec, peu importe laquelle des barres de recherche que tu utilises, ils t’observent et savent exactement ce que tu cherches sur internet avec ton ordi… Imagine la suite maintenant…! Plus tu en utilises… C’est ma théorie des barres de recherche et je la partage loll

Pour ma part, j’ai vus des anomalies au travers de tes programmes sur ton rapport d’HijackThis dont les programmes qui démarre en même temps que ton ordi et d’autres qui sont dans ton ordi pour rien… Navilog est un excellent programme mais il ne nettoie pas tout…! 

Comme greenday (Celui qui t’as répondu en premier) n’est pas vraiment un novice, tu devrais reposter un scan de HijackThis pour qu’il puisse continuer à t’aider! Donc après avoir fait les mises à jour et supprimer ce que tu dois supprimer fait un scan avec HijackThis et poste le pour que greenday puisse continuer de t’aider!

Pour supprimer des programmes : Démarrer - Panneau de configuration - ajout/suppression de programme – le programme que tu veux désinstaller.
 
Bonne chance et prend soin de ton ordi, il te le rendras bien!

TropJean ;o)

novice4 · Answer

Merci pour ton message, 
j'ai fait la plupart des choses que tu m'as dites sauf :
-que je n'ai pas réussi à retirer le fichier dans active X
--je ne trouve plus l'ancienne version de office donc je n'arrive pas à la supprimer :(
En ce qui concerne la barre Yahoo, je l'avais téléchargé car j'ai à la fois Firefox et IE7 car je vais régulièrement sur un site qui n'est pas pris en charge par firefox.
je poste le nouveau log que je viens d'effectuer :

Logfile of HijackThis v1.99.1
Scan saved at 14:54:49, on 02/04/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\WINDOWS\Explorer.EXE
C:\Norman\Bin\Zanda.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Microsoft Hardware\Keyboard	ype32.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\WINDOWS\vVX3000.exe
C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
C:\Program Files\eMule\eMule.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\HP\Digital Imaging\bin\hpohmr08.exe
C:\Program Files\HP\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\WINDOWS\system32\WgaTray.exe
C:\Program Files\Fichiers communs\Logitech\KHAL\KHALMNPR.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\IncrediMail\bin\IncMail.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\Christophe\Bureau\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*https://fr.search.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http:6588
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = ;localhost;<local>
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - (no file)
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: (no name) - {00A6FAF1-072E-44cf-8957-5838F569A31D} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - (no file)
O2 - BHO: eBay Toolbar Helper - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files\Mozilla Firefox\eBayTB.dll
O2 - BHO: TVEngine Helper /fleok=1D8A83A5C2E6107C91A475760EA83FA5EF80752B94E2DE775D79452137C2 - {4B18DD50-C996-44fc-AC52-0FECFF82ED58} - (no file)
O2 - BHO: (no name) - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: eBay Toolbar - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\Mozilla Firefox\eBayTB.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [IntelliType] "C:\Program Files\Microsoft Hardware\Keyboard	ype32.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe 
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [VX3000] C:\WINDOWS\vVX3000.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
O4 - HKCU\..\Run: [NFREN] D:\Setup.exe -1
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\eMule.exe -AutoStart
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [Firefox] C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
O8 - Extra context menu item: &eBay Search - res://C:\Program Files\Mozilla Firefox\eBayTb.dll/RCSearch.html
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZN
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?1d626d3f306b4d17bc8ead5ba52f095e
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?1d626d3f306b4d17bc8ead5ba52f095e
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin
pjpi150_11.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin
pjpi150_11.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.safety.live.com/resource/download/scanner/wlscbase969.cab
O16 - DPF: {87AF076E-D86D-4E87-ADDD-F05804E1F150} - https://www.virginmega.fr/DownloadManager/Release/Prod/DownMan.cab
O16 - DPF: {92E7E45A-D8C8-480E-AF99-176E43997CAA} (Aurigma Image Uploader 3.5 Combo Control) - https://www.photolitto.com/
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {DD3641E5-A9CF-11D1-9AA1-444553540000} (Surround Video V3.0 Control Object) - http://www.sunterra.com/downloads/svh/svideo3.cab
O16 - DPF: {E1AF091A-9F23-4059-89D7-C05EE073285D} (Canal+ Active MSWAY) - https://www.canalplus.com/canalplay/
O18 - Protocol: bw+0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Norman API-hooking helper (NipSvc) - Unknown owner - C:\Norman\Nvc\BIN
ipsvc.exe
O23 - Service: Norman NJeeves - Unknown owner - C:\Norman\bin\NJEEVES.EXE
O23 - Service: Norman ZANDA - Unknown owner - C:\Norman\Bin\Zanda.exe
O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\Norman\Nvc\bin
vcoas.exe
O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman Data Defense Systems - C:\Norman\Nvc\BIN\NVCSCHED.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe


Thanks :)

novice4 · Answer

*

      Merci pour ton message,
      j'ai fait la plupart des choses que tu m'as dites sauf :
      -que je n'ai pas réussi à retirer le fichier dans active X
      --je ne trouve plus l'ancienne version de office donc je n'arrive pas à la supprimer :(
      En ce qui concerne la barre Yahoo, je l'avais téléchargé car j'ai à la fois Firefox et IE7 car je vais régulièrement sur un site qui n'est pas pris en charge par firefox.
      je poste le nouveau log que je viens d'effectuer :

      Logfile of HijackThis v1.99.1
      Scan saved at 14:54:49, on 02/04/2007
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
      C:\Program Files\Microsoft LifeCam\MSCamS32.exe
      C:\WINDOWS\Explorer.EXE
      C:\Norman\Bin\Zanda.exe
      C:\WINDOWS\system32
vsvc32.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Microsoft Hardware\Keyboard	ype32.exe
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
      C:\WINDOWS\system32\LVCOMSX.EXE
      C:\WINDOWS\vVX3000.exe
      C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
      C:\Program Files\eMule\eMule.exe
      C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
      C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\Program Files\HP\Digital Imaging\bin\hpohmr08.exe
      C:\Program Files\HP\Digital Imaging\bin\hpotdd01.exe
      C:\Program Files\Logitech\SetPoint\SetPoint.exe
      C:\WINDOWS\system32\WgaTray.exe
      C:\Program Files\Fichiers communs\Logitech\KHAL\KHALMNPR.EXE
      C:\WINDOWS\system32\wuauclt.exe
      C:\WINDOWS\system32\wuauclt.exe
      C:\Program Files\IncrediMail\bin\IncMail.exe
      C:\PROGRA~1\INCRED~1\bin\IMApp.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Documents and Settings\Christophe\Bureau\hijackthis\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*https://fr.search.yahoo.com/
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http:6588
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = ;localhost;<local>
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - (no file)
      R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
      O2 - BHO: (no name) - {00A6FAF1-072E-44cf-8957-5838F569A31D} - (no file)
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - (no file)
      O2 - BHO: eBay Toolbar Helper - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files\Mozilla Firefox\eBayTB.dll
      O2 - BHO: TVEngine Helper /fleok=1D8A83A5C2E6107C91A475760EA83FA5EF80752B94E2DE775D79452137C2 - {4B18DD50-C996-44fc-AC52-0FECFF82ED58} - (no file)
      O2 - BHO: (no name) - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
      O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
      O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
      O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
      O3 - Toolbar: eBay Toolbar - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\Mozilla Firefox\eBayTB.dll
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [IntelliType] "C:\Program Files\Microsoft Hardware\Keyboard	ype32.exe"
      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe" -osboot
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
      O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
      O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
      O4 - HKLM\..\Run: [VX3000] C:\WINDOWS\vVX3000.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
      O4 - HKCU\..\Run: [NFREN] D:\Setup.exe -1
      O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
      O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\eMule.exe -AutoStart
      O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
      O4 - HKCU\..\Run: [Firefox] C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      O4 - Global Startup: hp psc 1000 series.lnk = ?
      O4 - Global Startup: hpoddt01.exe.lnk = ?
      O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
      O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
      O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm
      O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
      O8 - Extra context menu item: &eBay Search - res://C:\Program Files\Mozilla Firefox\eBayTb.dll/RCSearch.html
      O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZN
      O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
      O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
      O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
      O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?1d626d3f306b4d17bc8ead5ba52f095e
      O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?1d626d3f306b4d17bc8ead5ba52f095e
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin
pjpi150_11.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin
pjpi150_11.dll
      O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
      O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
      O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
      O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
      O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.safety.live.com/resource/download/scanner/wlscbase969.cab
      O16 - DPF: {87AF076E-D86D-4E87-ADDD-F05804E1F150} - https://www.virginmega.fr/DownloadManager/Release/Prod/DownMan.cab
      O16 - DPF: {92E7E45A-D8C8-480E-AF99-176E43997CAA} (Aurigma Image Uploader 3.5 Combo Control) - https://www.photolitto.com/
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
      O16 - DPF: {DD3641E5-A9CF-11D1-9AA1-444553540000} (Surround Video V3.0 Control Object) - http://www.sunterra.com/downloads/svh/svideo3.cab
      O16 - DPF: {E1AF091A-9F23-4059-89D7-C05EE073285D} (Canal+ Active MSWAY) - https://www.canalplus.com/canalplay/
      O18 - Protocol: bw+0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw+0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
      O18 - Protocol: bwg0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwg0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: offline-8876480 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
      O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: Norman API-hooking helper (NipSvc) - Unknown owner - C:\Norman\Nvc\BIN
ipsvc.exe
      O23 - Service: Norman NJeeves - Unknown owner - C:\Norman\bin\NJEEVES.EXE
      O23 - Service: Norman ZANDA - Unknown owner - C:\Norman\Bin\Zanda.exe
      O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\Norman\Nvc\bin
vcoas.exe
      O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman Data Defense Systems - C:\Norman\Nvc\BIN\NVCSCHED.EXE
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
      O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe


      Thanks :)

green day · Answer

où en sont tes soucis ???

novice4 · Answer

Bonjour,
j'ai supprimé Messengerskinner comme tu me l'avais conseillé puis j'ai suivi la méthode 1 en utilisant Navilog.bat.
Plus de problèmes, plus de fenêtres publicitaires qui s'ouvrent.
Merci beaucoup :)

novice4 · Answer

Bonsoir, alors voilà ou j'en suis .
*J'ai supprimé :
-Ebay Toolbar
-Windows live Toolbar
-Office 10
-Dapextie

*J'ai installé :
-la mise à jour adobe active X (dernier lien que tu m'as donné)
-AVG
-Zonbe alarm

En effet, j'ai un sablier lors du redémarrage et même des plans noirs (3 ou 4)

Voici les rapports des scans AVG et Hijackthis effectué après redémarrage :
---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

 + Créé à:	19:13:50 07/04/2007

 + Résultat de l'analyse:	



C:\Program Files\Hotbar -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\AppID\WeatherOnTray.EXE -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\Contact.Contacts -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\Contact.Contacts.1 -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\Contact.Contacts\CLSID -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\Contact.Contacts\CurVer -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\HbTools.HbtCommBand -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\HbTools.HbtCommBand.1 -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\HbTools.HbtCommBand\CLSID -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\HbTools.HbtCommBand\CurVer -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\HbtCoreSrv.HbtCoreServices -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\HbtCoreSrv.HbtCoreServices.1 -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\HbtCoreSrv.HbtCoreServices\CLSID -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\HbtCoreSrv.HbtCoreServices\CurVer -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\HbtCoreSrv.LfgAx -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\HbtCoreSrv.LfgAx.1 -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\HbtCoreSrv.LfgAx\CLSID -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\HbtCoreSrv.LfgAx\CurVer -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\HbtHostIE.Bho -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\HbtHostIE.Bho.1 -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\HbtHostIE.Bho\CLSID -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\HbtHostIE.Bho\CurVer -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\HbtHostOL.HbtMailAnim -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\HbtHostOL.HbtMailAnim.1 -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\HbtHostOL.HbtMailAnim\CLSID -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\HbtHostOL.HbtMailAnim\CurVer -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\HbtHostOL.HbtWebmailSend -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\HbtHostOL.HbtWebmailSend.1 -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\HbtHostOL.HbtWebmailSend\CLSID -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\HbtHostOL.HbtWebmailSend\CurVer -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\HbtSrv.HbtCoreServices -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\HbtSrv.HbtCoreServices.1 -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\HbtSrv.HbtCoreServices\CLSID -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\HbtSrv.HbtCoreServices\CurVer -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\HbtToolbar.HbtHtmlMenuUI -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\HbtToolbar.HbtHtmlMenuUI.1 -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\HbtToolbar.HbtHtmlMenuUI\CLSID -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\HbtToolbar.HbtHtmlMenuUI\CurVer -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\HbtToolbar.HbtToolbarCtl -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\HbtToolbar.HbtToolbarCtl.1 -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\HbtToolbar.HbtToolbarCtl\CLSID -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\HbtToolbar.HbtToolbarCtl\CurVer -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\HbtTools.HbMain -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\HbtTools.HbMain.1 -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\HbtTools.HbMain\CLSID -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\HbtTools.HbMain\CurVer -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\Wallpaper.WallpaperManager -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\Wallpaper.WallpaperManager.1 -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\Wallpaper.WallpaperManager\CLSID -> Adware.HotBar : Ignoré.
HKLM\SOFTWARE\Classes\Wallpaper.WallpaperManager\CurVer -> Adware.HotBar : Ignoré.
C:\Documents and Settings\Christophe\Mes documents\serie1\EMOTICON\msn messenger 6.2 + generatore di disegni\MsgPlus-301.exe/sponsor.exe -> Downloader.Swizzor.ag : Ignoré.
C:\Documents and Settings\All Users\Documents\setup.exe -> Proxy.Horst.wx : Ignoré.
:mozilla.264:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.247realmedia : Ignoré.
:mozilla.265:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.247realmedia : Ignoré.
:mozilla.266:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.247realmedia : Ignoré.
:mozilla.267:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.247realmedia : Ignoré.
:mozilla.268:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.247realmedia : Ignoré.
:mozilla.269:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.247realmedia : Ignoré.
:mozilla.270:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.247realmedia : Ignoré.
:mozilla.16:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.2o7 : Ignoré.
:mozilla.17:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.2o7 : Ignoré.
:mozilla.18:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.2o7 : Ignoré.
:mozilla.19:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.2o7 : Ignoré.
:mozilla.20:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.2o7 : Ignoré.
:mozilla.242:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.2o7 : Ignoré.
:mozilla.257:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.2o7 : Ignoré.
:mozilla.500:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\Christophe\Cookies\christophe@2o7[1].txt -> TrackingCookie.2o7 : Ignoré.
C:\Documents and Settings\Christophe\Cookies\christophe@msnportal.112.2o7[2].txt -> TrackingCookie.2o7 : Ignoré.
:mozilla.354:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Adrevolver : Ignoré.
:mozilla.355:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Adrevolver : Ignoré.
:mozilla.356:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Adrevolver : Ignoré.
:mozilla.357:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Adrevolver : Ignoré.
:mozilla.358:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Adrevolver : Ignoré.
:mozilla.359:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Adrevolver : Ignoré.
:mozilla.298:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Adtech : Ignoré.
:mozilla.299:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Adtech : Ignoré.
C:\Documents and Settings\Christophe\Cookies\christophe@adtech[2].txt -> TrackingCookie.Adtech : Ignoré.
:mozilla.153:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Advertising : Ignoré.
:mozilla.154:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Advertising : Ignoré.
:mozilla.155:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Advertising : Ignoré.
:mozilla.156:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Advertising : Ignoré.
:mozilla.157:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Advertising : Ignoré.
C:\Documents and Settings\Christophe\Cookies\christophe@advertising[2].txt -> TrackingCookie.Advertising : Ignoré.
C:\Documents and Settings\Christophe\Cookies\christophe@adviva[1].txt -> TrackingCookie.Adviva : Ignoré.
:mozilla.113:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Atdmt : Ignoré.
C:\Documents and Settings\Christophe\Cookies\christophe@atdmt[2].txt -> TrackingCookie.Atdmt : Ignoré.
:mozilla.125:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Bluestreak : Ignoré.
:mozilla.304:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Bluestreak : Ignoré.
C:\Documents and Settings\Christophe\Cookies\christophe@bluestreak[2].txt -> TrackingCookie.Bluestreak : Ignoré.
:mozilla.96:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Doubleclick : Ignoré.
C:\Documents and Settings\Christophe\Cookies\christophe@doubleclick[2].txt -> TrackingCookie.Doubleclick : Ignoré.
:mozilla.43:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Estat : Ignoré.
C:\Documents and Settings\Christophe\Cookies\christophe@estat[1].txt -> TrackingCookie.Estat : Ignoré.
:mozilla.89:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Euroclick : Ignoré.
:mozilla.90:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Euroclick : Ignoré.
:mozilla.91:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Euroclick : Ignoré.
:mozilla.93:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Euroclick : Ignoré.
:mozilla.94:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Euroclick : Ignoré.
:mozilla.95:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Euroclick : Ignoré.
:mozilla.97:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Euroclick : Ignoré.
:mozilla.362:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Fastclick : Ignoré.
:mozilla.36:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Gemius : Ignoré.
:mozilla.457:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Googleadservices : Ignoré.
:mozilla.492:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Hitbox : Ignoré.
:mozilla.493:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Hitbox : Ignoré.
:mozilla.159:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Imrworldwide : Ignoré.
:mozilla.160:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Imrworldwide : Ignoré.
:mozilla.99:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Mediaplex : Ignoré.
C:\Documents and Settings\Christophe\Cookies\christophe@mediaplex[1].txt -> TrackingCookie.Mediaplex : Ignoré.
:mozilla.7:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Netflame : Ignoré.
C:\Documents and Settings\Christophe\Cookies\christophe@data3.perf.overture[1].txt -> TrackingCookie.Overture : Ignoré.
C:\Documents and Settings\Christophe\Cookies\christophe@perf.overture[1].txt -> TrackingCookie.Overture : Ignoré.
:mozilla.364:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Paypal : Ignoré.
:mozilla.214:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Questionmarket : Ignoré.
:mozilla.215:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Questionmarket : Ignoré.
:mozilla.216:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Questionmarket : Ignoré.
:mozilla.217:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Questionmarket : Ignoré.
:mozilla.218:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Questionmarket : Ignoré.
:mozilla.219:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Questionmarket : Ignoré.
:mozilla.244:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Realmedia : Ignoré.
:mozilla.245:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Realmedia : Ignoré.
:mozilla.389:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Reliablestats : Ignoré.
:mozilla.393:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Reliablestats : Ignoré.
:mozilla.394:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Reliablestats : Ignoré.
:mozilla.395:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Reliablestats : Ignoré.
:mozilla.396:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Reliablestats : Ignoré.
:mozilla.397:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Reliablestats : Ignoré.
:mozilla.398:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Reliablestats : Ignoré.
:mozilla.399:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Reliablestats : Ignoré.
:mozilla.400:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Reliablestats : Ignoré.
:mozilla.401:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Reliablestats : Ignoré.
:mozilla.402:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Reliablestats : Ignoré.
:mozilla.403:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Reliablestats : Ignoré.
:mozilla.404:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Reliablestats : Ignoré.
:mozilla.405:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Reliablestats : Ignoré.
:mozilla.406:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Reliablestats : Ignoré.
:mozilla.407:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Reliablestats : Ignoré.
:mozilla.408:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Reliablestats : Ignoré.
C:\Documents and Settings\Christophe\Cookies\christophe@stats1.reliablestats[2].txt -> TrackingCookie.Reliablestats : Ignoré.
:mozilla.208:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Serving-sys : Ignoré.
:mozilla.209:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Serving-sys : Ignoré.
:mozilla.210:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Serving-sys : Ignoré.
:mozilla.211:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Serving-sys : Ignoré.
:mozilla.212:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Serving-sys : Ignoré.
:mozilla.213:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Serving-sys : Ignoré.
:mozilla.13:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Smartadserver : Ignoré.
:mozilla.14:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Smartadserver : Ignoré.
:mozilla.15:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Smartadserver : Ignoré.
C:\Documents and Settings\Christophe\Cookies\christophe@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Ignoré.
:mozilla.178:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Specificclick : Ignoré.
:mozilla.179:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Specificclick : Ignoré.
:mozilla.180:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Specificclick : Ignoré.
:mozilla.181:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Specificclick : Ignoré.
:mozilla.182:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Statcounter : Ignoré.
:mozilla.75:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Tacoda : Ignoré.
:mozilla.76:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Tacoda : Ignoré.
:mozilla.77:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Tacoda : Ignoré.
:mozilla.78:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Tacoda : Ignoré.
:mozilla.79:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Tacoda : Ignoré.
:mozilla.199:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Tradedoubler : Ignoré.
:mozilla.200:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Tradedoubler : Ignoré.
:mozilla.201:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Tradedoubler : Ignoré.
:mozilla.202:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Tradedoubler : Ignoré.
C:\Documents and Settings\Christophe\Cookies\christophe@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Ignoré.
:mozilla.283:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Weborama : Ignoré.
:mozilla.284:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Weborama : Ignoré.
:mozilla.374:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Webtrends : Ignoré.
:mozilla.347:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Webtrendslive : Ignoré.
:mozilla.301:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Yieldmanager : Ignoré.
:mozilla.302:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Yieldmanager : Ignoré.
:mozilla.303:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Yieldmanager : Ignoré.
:mozilla.378:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Zedo : Ignoré.
:mozilla.379:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Zedo : Ignoré.
:mozilla.380:C:\Documents and Settings\Christophe\Application Data\Mozilla\Firefox\Profiles\36omkqsv.default\cookies.txt -> TrackingCookie.Zedo : Ignoré.
C:\WINDOWS\system\sup.reg -> Trojan.Cloner.as : Ignoré.
C:\WINDOWS\system
icks.txt -> Trojan.Cloner.au : Ignoré.
C:\WINDOWS\system\control.ini -> Trojan.Zapchas.F : Ignoré.
C:\WINDOWS\system\sup.bat -> Trojan.Zapchas.F : Ignoré.


Fin du rapport

       --------------------------------------------------------------

Logfile of HijackThis v1.99.1
Scan saved at 19:34:41, on 07/04/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Microsoft LifeCam\MSCamS32.exe
C:\Norman\Bin\Zanda.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Microsoft Hardware\Keyboard	ype32.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\WINDOWS\vVX3000.exe
C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
C:\Program Files\DAP\DAP.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\eMule\eMule.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\HP\Digital Imaging\bin\hpohmr08.exe
C:\Program Files\HP\Digital Imaging\bin\hpotdd01.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Fichiers communs\Logitech\KHAL\KHALMNPR.EXE
C:\Documents and Settings\Christophe\Bureau\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*https://fr.search.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http:6588
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = ;localhost;<local>
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - (no file)
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: (no name) - {00A6FAF1-072E-44cf-8957-5838F569A31D} - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - (no file)
O2 - BHO: eBay Toolbar Helper - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files\Mozilla Firefox\eBayTB.dll
O2 - BHO: TVEngine Helper /fleok=1D8A83A5C2E6107C91A475760EA83FA5EF80752B94E2DE775D79452137C2 - {4B18DD50-C996-44fc-AC52-0FECFF82ED58} - (no file)
O2 - BHO: (no name) - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: eBay Toolbar - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\Mozilla Firefox\eBayTB.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [IntelliType] "C:\Program Files\Microsoft Hardware\Keyboard	ype32.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe 
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [VX3000] C:\WINDOWS\vVX3000.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
O4 - HKLM\..\Run: [DownloadAccelerator] "C:\Program Files\DAP\DAP.EXE" /STARTUP
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [NFREN] D:\Setup.exe -1
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\eMule.exe -AutoStart
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [Firefox] C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &eBay Search - res://C:\Program Files\Mozilla Firefox\eBayTb.dll/RCSearch.html
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZN
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.safety.live.com/resource/download/scanner/wlscbase969.cab
O16 - DPF: {87AF076E-D86D-4E87-ADDD-F05804E1F150} - https://www.virginmega.fr/DownloadManager/Release/Prod/DownMan.cab
O16 - DPF: {92E7E45A-D8C8-480E-AF99-176E43997CAA} (Aurigma Image Uploader 3.5 Combo Control) - https://www.photolitto.com/
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {DD3641E5-A9CF-11D1-9AA1-444553540000} (Surround Video V3.0 Control Object) - http://www.sunterra.com/downloads/svh/svideo3.cab
O16 - DPF: {E1AF091A-9F23-4059-89D7-C05EE073285D} (Canal+ Active MSWAY) - https://www.canalplus.com/canalplay/
O18 - Protocol: bw+0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Norman API-hooking helper (NipSvc) - Unknown owner - C:\Norman\Nvc\BIN
ipsvc.exe
O23 - Service: Norman NJeeves - Unknown owner - C:\Norman\bin\NJEEVES.EXE
O23 - Service: Norman ZANDA - Unknown owner - C:\Norman\Bin\Zanda.exe
O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\Norman\Nvc\bin
vcoas.exe
O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman Data Defense Systems - C:\Norman\Nvc\BIN\NVCSCHED.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe

Merci pour ta grande aide et bonne soirée. :)

TropJean · Answer

Re, Télécharge ceci… CCleaner… **Ici c’est la version avec la mise à jour… Pas besoin de mise à jour!** https://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/32599.html SpyBot-Search & Destroy… **Pas de mise à jour nécessaire** http://www.infos-du-net.com/telecharger/Destroy-Search-Spybot,0301-324.html AVG-AS est mal paramétré… & n’as pas supprimé les virus!!! :o( Voici ce que tu v’as faire… Le fonctionnement d’AVG AS… **Mise à jour Importante** Si ce n’est pas déjà fait! Dans l’onglet , le bouclier résident et les mises à jour auto, doivent être sur **Actif** - Dans l’onglet , toutes les cases doivent **être coché** – Dans l’onglet , un onglet, y est, dans celui-ci tu as un premier paragraphe intitulé… . En cliquant droite avec ta souris, tu peux sélectionner l’action que tu veux entreprendre, choisis **Supprimer**** Important** Maintenant, **SUIT** cette directive **à la lettre** 1- Autorise l'affichage des fichiers et dossiers cachés, fais comme suit… Poste de travail menu Outils - Option des dossiers onglet Affichage - Cocher Afficher les Fichiers et dossiers cachés - Décocher Masquer les fichiers protégés du système d'exploitation (recommandé) - Décocher Masquer les extensions dont le type est connu - Clique sur **Appliquer et Ok** pour valider les changements. Enregistre ces ligne qlq part dans tes dossiers, il va falloir faire le contraire après les scans. Pour remettre le tout comme au début! 2- Désactiver la restauration du système Voici un lien pour que tu puisses voir exactement comment faire! https://blog.sosordi.net/category/astuces 3- Une fois les # 1 et 2 faits, l’installation des prog. et les mises à jour faits, redémarre ton PC en **mode sans échec** Tu n’as qu’à tapoter F8 jusqu’attend de voir un écran noir avec une petite ligne blanche dans le haut gauche de l’écran! Ça va prendre près d’une minute (tout dépend du système que tu as) avant de voir les choix, prend le premier en haut… mode sans échec. Cette dernière opération tu devras la faire après chaque scan car il faut redémarrer ton PC après chaque scan! 1er scan avec CCleaner... Le fonctionnement de CCleaner… Une fois le prog. ouvert! Clic sur le 1er bouton (Nettoyage) sur ta gauche, ensuite analyse sur la droite en bas - Une fois terminer tu clic sur **Lancer le nettoyage** - Ensuite tu clic sur le bouton **erreurs** sur ta gauche et sur ta droite en bas sur celui **chercher des erreurs** - Une fois terminer clic sur le bouton en bas à droite **réparer les erreurs sélectionnées** - ***Refais cette dernière opération tant qu’il trouve de quoi. Cela peu prendre 2, 3 coups…*** - Une fenêtre va s’ouvrir, clic sur **oui** (C’est pour un backup.) Une autre fenêtre va s’ouvrir, clic sur le bouton **Corriger toutes les erreurs....** Une autre fenêtre va s’ouvrir et tu clic sur OK.- Ensuite tu clic sur fermer - Voilà c’est fait! N’oublis pas de redémarre ton PC, en mode sans échec c’est **très Important** 2ièm scan avec Spybot S&D… Clic sur le 1ier icône sur ta droite qui est, **Search & Destroy** - Ensuite tu clic sur la loupe **Vérifier tout** - Une fois terminer il te reste plus qu’à **corriger les problèmes**, donc tu clic sur le 2ième bouton, sur le tableau de droite, et comme d’habitude dans la fenêtre qui va s’ouvrir tu clic sur OK.- Maintenant, tu clic sur le 3ième icône, **Vaccination**, une fenêtre va s’ouvrir, clic sur OK. - Dans la page d’en dessous tu va voir un carré, coche le et juste en haut tu vas voir un icône avec un gros + vert écrit **Vaccination** clic dessus. Ce que ça fait, c’est bloquer toute les entrées pour ce qu’il vient de supprimer. Voilà, tu viens de régler un bon problème…! Avant de poursuivre il est primordial que CCleaner et Spybot est nettoyer le PC, pour poursuivre! Une fois fait, n’oublis pas de redémarre ton PC, en mode sans échec c’est **très Important** 3ièm scan avec AVG Anti Spyware... Le fonctionnement d’AVG AS… Ds l’onglet , un onglet (Le premier) y est, clic dessus et dans cet onglet tu clic sur la première ligne qui est **Analyse complète du système** - Une fois terminé, **enregistre le rapport sous** - Sur ton bureau, ce sera plus facile d’accès pour un copie/coller du log ici. Une fois fait, n’oublis pas de redémarre ton PC, en mode normal c’est **très Important** Maintenant fais un scan en ligne avec Bit Defender et enregistre le rapport aussi (Sur ton bureau) pour le poster ici plus tard avec les autres! http:\www.bitdefender.com Une fois fait, n’oublis pas de redémarre ton PC, en mode sans échec c’est **très Important** Refais un autre scan avec Hijack et reposte tout tes logs/rapports (AVG-AS, Bit Defender, et HijackThis) ici. Dans l’ordre S.T.P. C’est très important!!! Nous allons voir ce qui a fonctionné ou pas et voir ce qui reste comme virus ou spyware! Après on va s’attaquer au reste du log de HJT *J'ai supprimé : -Ebay Toolbar Il reste des traces encore! -Windows live Toolbar Il reste des traces encore! -Office 10 Excellent! -Dapextie Il reste des traces encore! Des plans noir??? Explique… À:\+ TropJean ;o)

novice4 · Answer

Bonsoir, voilà j'ai fait ce que tu m'as dit. Déjà, il y a un problème car j'ai été obligé par 3 fois de désinstaller Zonealarm car firefox ne marchait plus.

Concernant les noires, c'est quand les programmes s'ouvrent et qu'il y a le sablier. L'écran de vient complètement noir durant 1 seconde 2 ou 3 fois...

Je ne sais pas si tu es spécialisé en virus mais je t'indique que j'ai un message avant l'ouverture de windows à la toute fin du premier écran avec les infos de l'ordi. Ca marque Coppy disk(s) fail.
 
D'autre part quand les programmes s'installe j'ai un Runner error indiquant Runner file name (logiteckdesktopmessenger.exe) locks à '-' (the app id separator).

Je crois qu'il reste des traces de la barre ebay sur hijackthis mais je ne trouve plus le programme quand je vais dans Ajouter/supprimer des programmes.

Je te poste dans l'ordre les 3 scans que tu m'as demandé :

---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

 + Créé à:	14:06:24 09/04/2007

 + Résultat de l'analyse:	



	Rien à signaler.



Fin du rapport

                           --------------------------------------------------------


//-----------------------------------------------------------------
//
//	Product: BitDefender 8 Free Edition
//	Version: 8.0
//
//	Created on:	09/04/2007	20:55:42
//
//-----------------------------------------------------------------


Statistics

Scan path	: C:\WINDOWS\system32\
Folders	: 225
Files	:  6679
Archives	: 21 
Packed files	: 294
Identified viruses	: 0
Infected files	: 0
Warnings	: 0
Suspect files	: 0
Disinfected files	: 0
Deleted files	: 0
Copied files	: 0
Moved files	: 0
Renamed files	: 0
I/O errors	: 10
Scan time	: 00:04:53
Scan speed (files/sec)	: 22

Virus definitions	: 484303
Scan plugins	: 14
Archive plugins	: 38
Unpack plugins	: 6
Mail plugins	: 6
System plugins	: 1

Scan options

Detection
[X] Scan boot sectors
[X] Scan archives
[X] Scan packed files
[X] Scan email

File mask
[ ] Programs
[X] All files
[ ] User defined extensions: 
[ ] Exclude extensions: ;

Action

Infected objects
[ ] Ignore
[X] Disinfect
[ ] Delete
[ ] Copy to quarantine
[ ] Move to quarantine
[ ] Rename
[ ] Prompt user

Second action
[ ] Ignore
[ ] Delete
[ ] Copy to quarantine
[X] Move to quarantine
[ ] Rename
[ ] Prompt user

Scan options
[X] Enable warnings
[X] Enable heuristics
[X] Show all files in log
[X] Report file: vscan.log
[ ] Append to existing report

Scanned files

C:\=>Master Boot Record	OK
C:\=>Primary partition 1 (Active)	OK
C:\WINDOWS\system32\$winnt$.inf	OK
C:\WINDOWS\system32\05E08DE755.sys	OK
C:\WINDOWS\system32\1033\dwintl.dll	OK
C:\WINDOWS\system32\1036\dwintl.dll	OK
C:\WINDOWS\system32\12520437.cpx	OK
C:\WINDOWS\system32\12520850.cpx	OK
C:\WINDOWS\system32\6to4svc.dll	OK
C:\WINDOWS\system32\aaaamon.dll	OK
C:\WINDOWS\system32\access.cpl	OK
C:\WINDOWS\system32\acctres.dll	OK
C:\WINDOWS\system32\accwiz.exe	OK
C:\WINDOWS\system32\acelpdec.ax	OK
C:\WINDOWS\system32\acledit.dll	OK
C:\WINDOWS\system32\aclui.dll	OK
C:\WINDOWS\system32\activeds.dll	OK
C:\WINDOWS\system32\activeds.tlb	OK
C:\WINDOWS\system32\ActiveSkin.ocx	OK
C:\WINDOWS\system32\actmovie.exe	OK
C:\WINDOWS\system32\actskin4.ocx	OK
C:\WINDOWS\system32\actxprxy.dll	OK
C:\WINDOWS\system32\admparse.dll	OK
C:\WINDOWS\system32\admwprox.dll	OK
C:\WINDOWS\system32\adptif.dll	OK
C:\WINDOWS\system32\adsiis.dll	OK
C:\WINDOWS\system32\adsldp.dll	OK
C:\WINDOWS\system32\adsldpc.dll	OK
C:\WINDOWS\system32\adsmsext.dll	OK
C:\WINDOWS\system32\adsnds.dll	OK
C:\WINDOWS\system32\adsnt.dll	OK
C:\WINDOWS\system32\adsnw.dll	OK
C:\WINDOWS\system32\advapi32.dll	OK
C:\WINDOWS\system32\advpack.dll	OK
C:\WINDOWS\system32\ahui.exe	OK
C:\WINDOWS\system32\akrip32.dll	OK
C:\WINDOWS\system32\alg.exe	OK
C:\WINDOWS\system32\alrsvc.dll	OK
C:\WINDOWS\system32\ALut.dll	OK
C:\WINDOWS\system32\ALZALZ.BIN	OK
C:\WINDOWS\system32\ALZZip.BIN	OK
C:\WINDOWS\system32\AM-Install.exe	OK
C:\WINDOWS\system32\AM-Install.exe=>:Zone.Identifier	OK
C:\WINDOWS\system32\amcompat.tlb	OK
C:\WINDOWS\system32\amstream.dll	OK
C:\WINDOWS\system32\AniGIF.ocx	OK
C:\WINDOWS\system32\ansi.sys	OK
C:\WINDOWS\system32\apcups.dll	OK
C:\WINDOWS\system32\aplcdl201.dll	OK
C:\WINDOWS\system32\append.exe	OK
C:\WINDOWS\system32\apphelp.dll	OK
C:\WINDOWS\system32\appmgmts.dll	OK
C:\WINDOWS\system32\appmgr.dll	OK
C:\WINDOWS\system32\appwiz.cpl	OK
C:\WINDOWS\system32\arp.exe	OK
C:\WINDOWS\system32\asctrls.ocx	OK
C:\WINDOWS\system32\asferror.dll	OK
C:\WINDOWS\system32\asfsipc.dll	OK
C:\WINDOWS\system32\asr_fmt.exe	OK
C:\WINDOWS\system32\asr_ldm.exe	OK
C:\WINDOWS\system32\asr_pfu.exe	OK
C:\WINDOWS\system32\aswBoot.exe	OK
C:\WINDOWS\system32\asycfilt.dll	OK
C:\WINDOWS\system32\at.exe	OK
C:\WINDOWS\system32\ATHPRXY.DLL	OK
C:\WINDOWS\system32\AthUnIns.exe	OK
C:\WINDOWS\system32\ati2cqag.dll	OK
C:\WINDOWS\system32\ati2dvaa.dll	OK
C:\WINDOWS\system32\ati2dvag.dll	OK
C:\WINDOWS\system32\ati3d1ag.dll	OK
C:\WINDOWS\system32\ati3duag.dll	OK
C:\WINDOWS\system32\ativdaxx.ax	OK
C:\WINDOWS\system32\ativmvxx.ax	OK
C:\WINDOWS\system32\ativtmxx.dll	OK
C:\WINDOWS\system32\ativvaxx.dll	OK
C:\WINDOWS\system32\atkctrs.dll	OK
C:\WINDOWS\system32\atl.dll	OK
C:\WINDOWS\system32\atl70.dll	OK
C:\WINDOWS\system32\atl71.dll	OK
C:\WINDOWS\system32\atmadm.exe	OK
C:\WINDOWS\system32\atmfd.dll	OK
C:\WINDOWS\system32\atmlib.dll	OK
C:\WINDOWS\system32\atmpvcno.dll	OK
C:\WINDOWS\system32\atrace.dll	OK
C:\WINDOWS\system32\attrib.exe	OK
C:\WINDOWS\system32\audiosrv.dll	OK
C:\WINDOWS\system32\auditusr.exe	OK
C:\WINDOWS\system32\authz.dll	OK
C:\WINDOWS\system32\autochk.exe	OK
C:\WINDOWS\system32\autoconv.exe	OK
C:\WINDOWS\system32\autodisc.dll	OK
C:\WINDOWS\system32\AUTOEXEC.NT	OK
C:\WINDOWS\system32\autofmt.exe	OK
C:\WINDOWS\system32\autolfn.exe	OK
C:\WINDOWS\system32\AVASTSS.scr	OK
C:\WINDOWS\system32\avicap.dll	OK
C:\WINDOWS\system32\avicap32.dll	OK
C:\WINDOWS\system32\avifil32.dll	OK
C:\WINDOWS\system32\avifile.dll	OK
C:\WINDOWS\system32\avmeter.dll	OK
C:\WINDOWS\system32\avtapi.dll	OK
C:\WINDOWS\system32\avwav.dll	OK
C:\WINDOWS\system32\axcolctl.ocx	OK
C:\WINDOWS\system32\AxFormEx6k.dep	OK
C:\WINDOWS\system32\basesrv.dll	OK
C:\WINDOWS\system32\batmeter.dll	OK
C:\WINDOWS\system32\batt.dll	OK
C:\WINDOWS\system32\bidispl.dll	OK
C:\WINDOWS\system32\bios1.rom	OK
C:\WINDOWS\system32\bios4.rom	OK
C:\WINDOWS\system32\bios4.rom=>REMOVED_NULLS	OK
C:\WINDOWS\system32\bitsprx2.dll	OK
C:\WINDOWS\system32\bitsprx3.dll	OK
C:\WINDOWS\system32\blackbox.dll	OK
C:\WINDOWS\system32\blastcln.exe	OK
C:\WINDOWS\system32\Bmpproc.dll	OK
C:\WINDOWS\system32\bootcfg.exe	OK
C:\WINDOWS\system32\bootok.exe	OK
C:\WINDOWS\system32\bootvid.dll	OK
C:\WINDOWS\system32\bootvrfy.exe	OK
C:\WINDOWS\system32\bopomofo.uce	OK
C:\WINDOWS\system32\browselc.dll	OK
C:\WINDOWS\system32\browser.dll	OK
C:\WINDOWS\system32\browseui.dll	OK
C:\WINDOWS\system32\browsewm.dll	OK
C:\WINDOWS\system32\bthci.dll	OK
C:\WINDOWS\system32\bthprops.cpl	OK
C:\WINDOWS\system32\bthserv.dll	OK
C:\WINDOWS\system32\btpanui.dll	OK
C:\WINDOWS\system32\cabinet.dll	OK
C:\WINDOWS\system32\cabview.dll	OK
C:\WINDOWS\system32\cacls.exe	OK
C:\WINDOWS\system32\calc.exe	OK
C:\WINDOWS\system32\camcpl.cpl	OK
C:\WINDOWS\system32\Camext30.ax	OK
C:\WINDOWS\system32\Camext30.dll	OK
C:\WINDOWS\system32\camocx.dll	OK
C:\WINDOWS\system32\capesnpn.dll	OK
C:\WINDOWS\system32\capicom.dll	OK
C:\WINDOWS\system32\cards.dll	OK
C:\WINDOWS\system32\CatRoot\TMP30.tmp	OK
C:\WINDOWS\system32\CatRoot\TMP7D.tmp	OK
C:\WINDOWS\system32\CatRoot\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\TimeStamp	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\CLASSES.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\codecs10.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\d3dx9_24_x86.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\d3dx9_25_x86.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\d3dx9_26_x86.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\d3dx9_27_x86.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\d3dx9_28_x86.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\d3dx9_29_x86.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\DAJAVAC.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\drm.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\DRM10.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\drmclien.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\DX3.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\fp4.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\HPCRDP.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\IASNT4.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\ims.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB832353.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB834707.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB867282.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB873333.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB873339.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB883939.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB885250.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB885835.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB885836.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB885884.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB886185.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB887472.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB887742.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB888113.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB888302.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB890046.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB890047.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB890175.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB890859.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB890923.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB891122.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB891781.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB893066.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB893086.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB893756.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB893803v2_wxp.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB893803_wxp.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB894391.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB896358.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB896422.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB896423.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB896424.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB896428.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB896688.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB896727.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB898461.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB899587.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB899588.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB899589.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB899591.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB900485.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB900725.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB901017.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB901190.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB901214.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB902400.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB903235.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB904706.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB905414.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB905749.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB905915.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB908519.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB908531.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB910437.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB911280.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB911562.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB911564.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB911565.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB911567.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB911927.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB912812.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB912919.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB913446.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB913580.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB914388.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB914389.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB916281.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB916595.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB917159.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB917344.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB917422.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB917537.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB917734.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB917953.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB918118.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB918439.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB918899.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB919007.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB920213.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB920214.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB920670.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB920683.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB920685.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB920872.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB921398.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB921883.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB922582.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB922616.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB922760.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB922819.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB923191.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB923414.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB923689.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB923694.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB923980.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB924191.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB924270.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB924496.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB924667.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB925398.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB925454.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB925486.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB925902.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB926247.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB926255.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB926436.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB927779.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB927802.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB928090.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB928255.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB928843.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB929338.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB929969.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\KB931836.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\MAPIMIG.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\mediactr.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\MPPRE10.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\MSJDBC.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\msmsgs.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\msn7.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\msn9.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\mstsweb.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\MW770.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}
etfx.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}
t5.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5IIS.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}
t5inf.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}
tprint.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem0.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem1.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem11.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem15.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem16.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem17.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem18.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem19.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem2.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem23.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem24.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem25.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem26.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem27.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem28.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem29.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem3.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem30.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem31.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem32.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem33.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem34.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem36.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem37.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem38.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem39.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem4.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem40.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem41.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem42.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem43.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem44.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem45.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem46.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem47.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem48.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem49.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem5.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem50.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem51.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem52.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem53.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem54.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem55.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem6.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem7.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem8.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem9.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\OEMBIOS.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\olddrm.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oldWMFSDK.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\sp2.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}	abletpc.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\TCLASSES.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\TimeStamp	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WFC.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WgaNotify.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WMDM10.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\wmerrenu.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\wmexpack.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WMFSDK.cat	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WMFSDK10.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\WPD10.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\xact_x86.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\xinput9_1_0_x86.CAT	OK
C:\WINDOWS\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\XMLDSOC.CAT	OK
C:\WINDOWS\system32\CatRoot2\dberr.txt	OK
C:\WINDOWS\system32\CatRoot2\edb.chk	OK
C:\WINDOWS\system32\CatRoot2\edb.log	OK
C:\WINDOWS\system32\CatRoot2\edb0038F.log	OK
C:\WINDOWS\system32\CatRoot2\edb00390.log	OK
C:\WINDOWS\system32\CatRoot2\edb00391.log	OK
C:\WINDOWS\system32\CatRoot2\edb00392.log	OK
C:\WINDOWS\system32\CatRoot2\edb00393.log	OK
C:\WINDOWS\system32\CatRoot2\edb00394.log	OK
C:\WINDOWS\system32\CatRoot2\edb00395.log	OK
C:\WINDOWS\system32\CatRoot2\edb00396.log	OK
C:\WINDOWS\system32\CatRoot2\edb00397.log	OK
C:\WINDOWS\system32\CatRoot2es1.log	OK
C:\WINDOWS\system32\CatRoot2es2.log	OK
C:\WINDOWS\system32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\catdb	OK
C:\WINDOWS\system32\CatRoot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}\TimeStamp	OK
C:\WINDOWS\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\catdb	OK
C:\WINDOWS\system32\CatRoot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\TimeStamp	OK
C:\WINDOWS\system32\catsrv.dll	OK
C:\WINDOWS\system32\catsrvps.dll	OK
C:\WINDOWS\system32\catsrvut.dll	OK
C:\WINDOWS\system32\ccfgnt.dll	OK
C:\WINDOWS\system32\cdfview.dll	OK
C:\WINDOWS\system32\cdm.dll	OK
C:\WINDOWS\system32\cdmodem.dll	OK
C:\WINDOWS\system32\cdosys.dll	OK
C:\WINDOWS\system32\cdplayer.exe.manifest	OK
C:\WINDOWS\system32\certcli.dll	OK
C:\WINDOWS\system32\certmgr.dll	OK
C:\WINDOWS\system32\certmgr.msc	OK
C:\WINDOWS\system32\cewmdm.dll	OK
C:\WINDOWS\system32\cfgbkend.dll	OK
C:\WINDOWS\system32\cfgmgr32.dll	OK
C:\WINDOWS\system32\charmap.exe	OK
C:\WINDOWS\system32\Chaînes.scf	OK
C:\WINDOWS\system32\chcp.com	OK
C:\WINDOWS\system32\chkdsk.exe	OK
C:\WINDOWS\system32\chkntfs.exe	OK
C:\WINDOWS\system32\ciadmin.dll	OK
C:\WINDOWS\system32\ciadv.msc	OK
C:\WINDOWS\system32\cic.dll	OK
C:\WINDOWS\system32\cidaemon.exe	OK
C:\WINDOWS\system32\CIMSVR.EXE	OK
C:\WINDOWS\system32\CIMSVRps.dll	OK
C:\WINDOWS\system32\CIMVIEW.dll	OK
C:\WINDOWS\system32\ciodm.dll	OK
C:\WINDOWS\system32\cipher.exe	OK
C:\WINDOWS\system32\cisvc.exe	OK
C:\WINDOWS\system32\ckcnv.exe	OK
C:\WINDOWS\system32\clb.dll	OK
C:\WINDOWS\system32\clbcatex.dll	OK
C:\WINDOWS\system32\clbcatq.dll	OK
C:\WINDOWS\system32\cleanmgr.exe	OK
C:\WINDOWS\system32\cliconf.chm	OK
C:\WINDOWS\system32\cliconf.chm=>/#SYSTEM	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_add_apple.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_add_apple.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_add_ipxspx1.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_add_ipxspx1.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_add_ipxspx2.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_add_ipxspx2.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_add_multi.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_add_multi.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_add_namedpipes.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_add_namedpipes.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_add_others.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_add_others.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_add_tcpip.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_add_tcpip.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_add_vines.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_add_vines.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_alias.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_alias.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_dblib.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_dblib.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_general.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_general.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_netlib.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/idh_netlib.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/_add_(or_edit)_via_library_configuration.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/_add_(or_edit)_via_library_configuration.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/_appletalk_protocol_default_value_setup.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/_appletalk_protocol_default_value_setup.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/_banyan_vines_protocol_default_value_setup.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/_banyan_vines_protocol_default_value_setup.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/_helphow_to_alias_a_client_to_an_alternate_pipe.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/_helphow_to_alias_a_client_to_an_alternate_pipe.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/_helphow_to_check_the_library_version_numbers.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/_helphow_to_check_the_library_version_numbers.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/_helphow_to_use_the_windows_sockets_net.2d.library_.28.windows.2d_.or_windows_nt.2d.based_clients.29.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/_helphow_to_use_the_windows_sockets_net.2d.library_.28.windows.2d_.or_windows_nt.2d.based_clients.29.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/_helphow_to_verify_that_sql_server_is_listening_on_appletalk_and_can_accept_a_client_connection.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/_helphow_to_verify_that_sql_server_is_listening_on_appletalk_and_can_accept_a_client_connection.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/_how_to_add_a_network_protocol_configuration_.28.client_configuration_utility.29.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/_how_to_add_a_network_protocol_configuration_.28.client_configuration_utility.29.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/_how_to_check_the_odbc_sql_server_driver_version_.28.windows_95.2d.based_clients.29.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/_how_to_check_the_odbc_sql_server_driver_version_.28.windows_95.2d.based_clients.29.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/_how_to_configure_a_client_to_a_nonstandard_network_protocol.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/_how_to_configure_a_client_to_a_nonstandard_network_protocol.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/_how_to_configure_a_client_to_use_the_appletalk_network_protocol.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/_how_to_configure_a_client_to_use_the_appletalk_network_protocol.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/_how_to_configure_a_client_to_use_the_banyan_vines_network_protocol.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/_how_to_configure_a_client_to_use_the_banyan_vines_network_protocol.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/_how_to_configure_a_client_to_use_the_nwlink_ipx.2f.spx_network_protocol.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/_how_to_configure_a_client_to_use_the_nwlink_ipx.2f.spx_network_protocol.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/_how_to_configure_a_client_to_use_the_via_network_library_(client_network_utility).htm	OK
C:\WINDOWS\system32\cliconf.chm=>/_how_to_configure_a_client_to_use_the_via_network_library_(client_network_utility).htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/_how_to_create_an_alias_for_a_specific_server_name_to_use_the_multi.2d.protocol_net.2d.library.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/_how_to_create_an_alias_for_a_specific_server_name_to_use_the_multi.2d.protocol_net.2d.library.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/_how_to_delete_a_network_protocol_configuration_.28.client_configuration_utility.29.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/_how_to_delete_a_network_protocol_configuration_.28.client_configuration_utility.29.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/_how_to_edit_a_network_protocol_configuration_.28.client_configuration_utility.29.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/_how_to_edit_a_network_protocol_configuration_.28.client_configuration_utility.29.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/_how_to_set_db.2d.library_conversion_preference.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/_how_to_set_db.2d.library_conversion_preference.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/_how_to_start_the_sql_client_configuration_utility_.28.windows_nt.2d_.or_windows_95.2d_.based_client.29.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/_how_to_start_the_sql_client_configuration_utility_.28.windows_nt.2d_.or_windows_95.2d_.based_client.29.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/_managing_clients.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/_managing_clients.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/_multiprotocol_protocol_default_value_setup.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/_multiprotocol_protocol_default_value_setup.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/_named_pipes_protocol_default_value_setup.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/_named_pipes_protocol_default_value_setup.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/_nwlink_ipx!spx_protocol_default_value_setup.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/_nwlink_ipx!spx_protocol_default_value_setup.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/_sql_server_2000_copyright_and_disclaimer.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/_sql_server_2000_copyright_and_disclaimer.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/_tcp!ip_protocol_default_value_setup.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/_tcp!ip_protocol_default_value_setup.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/_topic_unavailable_in_help.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/_topic_unavailable_in_help.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/_via_protocol_default_value_setup.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/_via_protocol_default_value_setup.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/_what_is_microsoft_sql_server_client_configurationy.htm	OK
C:\WINDOWS\system32\cliconf.chm=>/_what_is_microsoft_sql_server_client_configurationy.htm=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/plus.gif	OK
C:\WINDOWS\system32\cliconf.chm=>/Basics/coUA.css	OK
C:\WINDOWS\system32\cliconf.chm=>/Basics/coUA_Ex.css	OK
C:\WINDOWS\system32\cliconf.chm=>/Basics/coUA_Print.css	OK
C:\WINDOWS\system32\cliconf.chm=>/Basics/mailto.css	OK
C:\WINDOWS\system32\cliconf.chm=>/Basics/mailto.js	OK
C:\WINDOWS\system32\cliconf.chm=>/Basics/mailto.js=>(JAVASCRIPT 1)	OK
C:\WINDOWS\system32\cliconf.chm=>/Basics/mailto.js=>(JAVASCRIPT 2)	OK
C:\WINDOWS\system32\cliconf.chm=>/Basics/mailto.js=>(JAVASCRIPT 3)	OK
C:\WINDOWS\system32\cliconf.chm=>/Basics/shared.js	OK
C:\WINDOWS\system32\cliconf.chm=>/Basics/banner.gif	OK
C:\WINDOWS\system32\cliconf.chm=>/Basics/banner2.gif	OK
C:\WINDOWS\system32\cliconf.chm=>/Basics/banner_.gif	OK
C:\WINDOWS\system32\cliconf.chm=>/Basics/banner_2.gif	OK
C:\WINDOWS\system32\cliconf.chm=>/Basics/caution.gif	OK
C:\WINDOWS\system32\cliconf.chm=>/Basics/coC.gif	OK
C:\WINDOWS\system32\cliconf.chm=>/Basics/coCb.gif	OK
C:\WINDOWS\system32\cliconf.chm=>/Basics/coE.gif	OK
C:\WINDOWS\system32\cliconf.chm=>/Basics/coEb.gif	OK
C:\WINDOWS\system32\cliconf.chm=>/Basics/elle.gif	OK
C:\WINDOWS\system32\cliconf.chm=>/Basics/glossaryclick.gif	OK
C:\WINDOWS\system32\cliconf.chm=>/Basics/glossaryCold.gif	OK
C:\WINDOWS\system32\cliconf.chm=>/Basics/glossaryHot.gif	OK
C:\WINDOWS\system32\cliconf.chm=>/Basics/important.gif	OK
C:\WINDOWS\system32\cliconf.chm=>/Basics/keybrd.gif	OK
C:\WINDOWS\system32\cliconf.chm=>/Basics/mailto.gif	OK
C:\WINDOWS\system32\cliconf.chm=>/Basics/mailto_.gif	OK
C:\WINDOWS\system32\cliconf.chm=>/Basics/mailto_c.gif	OK
C:\WINDOWS\system32\cliconf.chm=>/Basics/note.gif	OK
C:\WINDOWS\system32\cliconf.chm=>/Basics/relglyph.gif	OK
C:\WINDOWS\system32\cliconf.chm=>/Basics/relglyph_.gif	OK
C:\WINDOWS\system32\cliconf.chm=>/Basics/relglyph_c.gif	OK
C:\WINDOWS\system32\cliconf.chm=>/Basics/shortcutclick.gif	OK
C:\WINDOWS\system32\cliconf.chm=>/Basics/shortcutcold.gif	OK
C:\WINDOWS\system32\cliconf.chm=>/Basics/shortcuthot.gif	OK
C:\WINDOWS\system32\cliconf.chm=>/Basics/spacer.gif	OK
C:\WINDOWS\system32\cliconf.chm=>/Basics/tip.gif	OK
C:\WINDOWS\system32\cliconf.chm=>/Basics/warning.gif	OK
C:\WINDOWS\system32\cliconf.chm=>/cliconf.hhc	OK
C:\WINDOWS\system32\cliconf.chm=>/#WINDOWS	OK
C:\WINDOWS\system32\cliconf.chm=>/#IVB	OK
C:\WINDOWS\system32\cliconf.chm=>/$WWKeywordLinks/Property	OK
C:\WINDOWS\system32\cliconf.chm=>/$WWAssociativeLinks/Property	OK
C:\WINDOWS\system32\cliconf.chm=>/$OBJINST	OK
C:\WINDOWS\system32\cliconf.chm=>/$FIftiMain	OK
C:\WINDOWS\system32\cliconf.chm=>/#IDXHDR	OK
C:\WINDOWS\system32\cliconf.chm=>/#TOCIDX	OK
C:\WINDOWS\system32\cliconf.chm=>/#TOPICS	OK
C:\WINDOWS\system32\cliconf.chm=>/#URLTBL	OK
C:\WINDOWS\system32\cliconf.chm=>/#URLSTR	OK
C:\WINDOWS\system32\cliconf.chm=>/#STRINGS	OK
C:\WINDOWS\system32\cliconfg.dll	OK
C:\WINDOWS\system32\cliconfg.exe	OK
C:\WINDOWS\system32\cliconfg.rll	OK
C:\WINDOWS\system32\clipbrd.exe	OK
C:\WINDOWS\system32\clipsrv.exe	OK
C:\WINDOWS\system32\clspack.exe	OK
C:\WINDOWS\system32\clusapi.dll	OK
C:\WINDOWS\system32\cmcfg32.dll	OK
C:\WINDOWS\system32\cmd.exe	OK
C:\WINDOWS\system32\cmdial32.dll	OK
C:\WINDOWS\system32\cmdl32.exe	OK
C:\WINDOWS\system32\cmdlib.wsc	OK
C:\WINDOWS\system32\cmdlib.wsc=>(VBSCRIPT   1)	OK
C:\WINDOWS\system32\cmmgr32.hlp	OK
C:\WINDOWS\system32\cmmon32.exe	OK
C:\WINDOWS\system32\cmos.ram	OK
C:\WINDOWS\system32\cmpbk32.dll	OK
C:\WINDOWS\system32\cmprops.dll	OK
C:\WINDOWS\system32\cmsetacl.dll	OK
C:\WINDOWS\system32\cmstp.exe	OK
C:\WINDOWS\system32\cmutil.dll	OK
C:\WINDOWS\system32\cnbjmon.dll	OK
C:\WINDOWS\system32\cnetcfg.dll	OK
C:\WINDOWS\system32\cnvfat.dll	OK
C:\WINDOWS\system32\colbact.dll	OK
C:\WINDOWS\system32\Com\comadmin.dll	OK
C:\WINDOWS\system32\Com\comempty.dat	OK
C:\WINDOWS\system32\Com\comexp.msc	OK
C:\WINDOWS\system32\Com\comrepl.exe	OK
C:\WINDOWS\system32\Com\comrereg.exe	OK
C:\WINDOWS\system32\Com\mtsadmin.tlb	OK
C:\WINDOWS\system32\comaddin.dll	OK
C:\WINDOWS\system32\comcat.dll	OK
C:\WINDOWS\system32\comct232.ocx	OK
C:\WINDOWS\system32\comctl32.dll	OK
C:\WINDOWS\system32\comctl32.ocx	OK
C:\WINDOWS\system32\comdlg32.dll	OK
C:\WINDOWS\system32\COMDLG32.OCX	OK
C:\WINDOWS\system32\comm.drv	OK
C:\WINDOWS\system32\command.com	OK
C:\WINDOWS\system32\commdlg.dll	OK
C:\WINDOWS\system32\comp.exe	OK
C:\WINDOWS\system32\compact.exe	OK
C:\WINDOWS\system32\compatui.dll	OK
C:\WINDOWS\system32\compmgmt.msc	OK
C:\WINDOWS\system32\compobj.dll	OK
C:\WINDOWS\system32\compstui.dll	OK
C:\WINDOWS\system32\comrepl.dll	OK
C:\WINDOWS\system32\comres.dll	OK
C:\WINDOWS\system32\comsdupd.exe	OK
C:\WINDOWS\system32\comsnap.dll	OK
C:\WINDOWS\system32\comsvcs.dll	OK
C:\WINDOWS\system32\comuid.dll	OK
C:\WINDOWS\system32\config\Antiviru.evt	OK
C:\WINDOWS\system32\config\Antivirus.Evt	OK
C:\WINDOWS\system32\config\AppEvent.Evt	OK
C:\WINDOWS\system32\config\default	OK
C:\WINDOWS\system32\config\default.LOG	OK
C:\WINDOWS\system32\config\default.sav	OK
C:\WINDOWS\system32\config\default_BAK_27312	OK
C:\WINDOWS\system32\config\default_BAK_35348	OK
C:\WINDOWS\system32\config\default_BAK_55601	OK
C:\WINDOWS\system32\config\default_TU_27312.LOG	OK
C:\WINDOWS\system32\config\default_TU_35348.LOG	OK
C:\WINDOWS\system32\config\default_TU_55601.LOG	OK
C:\WINDOWS\system32\config\SAM	OK
C:\WINDOWS\system32\config\SAM.LOG	OK
C:\WINDOWS\system32\config\SAM_BAK_15261	OK
C:\WINDOWS\system32\config\SAM_BAK_30469	OK
C:\WINDOWS\system32\config\SAM_BAK_94913	OK
C:\WINDOWS\system32\config\SAM_TU_15261.LOG	OK
C:\WINDOWS\system32\config\SAM_TU_30469.LOG	OK
C:\WINDOWS\system32\config\SAM_TU_94913.LOG	OK
C:\WINDOWS\system32\config\SecEvent.Evt	OK
C:\WINDOWS\system32\config\SECURITY	OK
C:\WINDOWS\system32\config\SECURITY.LOG	OK
C:\WINDOWS\system32\config\SECURITY_BAK_22977	OK
C:\WINDOWS\system32\config\SECURITY_BAK_31065	OK
C:\WINDOWS\system32\config\SECURITY_BAK_75647	OK
C:\WINDOWS\system32\config\SECURITY_TU_22977.LOG	OK
C:\WINDOWS\system32\config\SECURITY_TU_31065.LOG	OK
C:\WINDOWS\system32\config\SECURITY_TU_75647.LOG	OK
C:\WINDOWS\system32\config\software	OK
C:\WINDOWS\system32\config\software.LOG	OK
C:\WINDOWS\system32\config\software.sav	OK
C:\WINDOWS\system32\config\software_BAK_20969	OK
C:\WINDOWS\system32\config\software_BAK_64619	OK
C:\WINDOWS\system32\config\software_BAK_77125	OK
C:\WINDOWS\system32\config\software_TU_20969.LOG	OK
C:\WINDOWS\system32\config\software_TU_64619.LOG	OK
C:\WINDOWS\system32\config\software_TU_77125.LOG	OK
C:\WINDOWS\system32\config\SysEvent.Evt	OK
C:\WINDOWS\system32\config\system	OK
C:\WINDOWS\system32\config\system.LOG	OK
C:\WINDOWS\system32\config\system.sav	OK
C:\WINDOWS\system32\config\systemprofile\Application Data\desktop.ini	OK
C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\Content\303572DF538EDD8B1D606185F1D559B8	OK
C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\Content\79841F8EF00FBA86D33CC5A47696F165	OK
C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\Content\7C8A03C4580C6B04FDF34357F3474EDC	OK
C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\Content\904590238400AD963F77FAAAADC9BAB5	OK
C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\Content\A44F4E7CB3133FF765C39A53AD8FCFDD	OK
C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\Content\B82262A5D5DA4DDACE9EDA7F787D0DEB	OK
C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\Content\CFC456E7E410D69E2C6F3E2DB75C7DB3	OK
C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\MetaData\303572DF538EDD8B1D606185F1D559B8	OK
C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\MetaData\79841F8EF00FBA86D33CC5A47696F165	OK
C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\MetaData\7C8A03C4580C6B04FDF34357F3474EDC	OK
C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\MetaData\904590238400AD963F77FAAAADC9BAB5	OK
C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\MetaData\A44F4E7CB3133FF765C39A53AD8FCFDD	OK
C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\MetaData\B82262A5D5DA4DDACE9EDA7F787D0DEB	OK
C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\MetaData\CFC456E7E410D69E2C6F3E2DB75C7DB3	OK
C:\WINDOWS\system32\config\systemprofile\Application Data\Microsoft\Internet Explorer\brndlog.txt	OK
C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat	OK
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.DTD	OK
C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.XML	OK
C:\WINDOWS\system32\config\systemprofile\Local Settings\desktop.ini	OK
C:\WINDOWS\system32\config\systemprofile\Local Settings\Historique\desktop.ini	OK
C:\WINDOWS\system32\config\systemprofile\Local Settings\Historique\History.IE5\desktop.ini	OK
C:\WINDOWS\system32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat	OK
C:\WINDOWS\system32\config\systemprofile\Local Settings\Historique\History.IE5\MSHist012004090720040908\index.dat	OK
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\26Z03LCX\desktop.ini	OK
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\4G1EJ751\desktop.ini	OK
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\71G762J5\desktop.ini	OK
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini	OK
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\HI0R9CXW\desktop.ini	OK
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat	OK
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat=>REMOVED_NULLS	OK
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\desktop.ini	OK
C:\WINDOWS\system32\config\systemprofile\Menu Démarrer\desktop.ini	OK
C:\WINDOWS\system32\config\systemprofile\Menu Démarrer\Programmes\Accessoires\Accessibilité\Clavier visuel.lnk	OK
C:\WINDOWS\system32\config\systemprofile\Menu Démarrer\Programmes\Accessoires\Accessibilité\Clavier visuel.lnk=>C:\WINDOWS\system32\osk.exe	OK
C:\WINDOWS\system32\config\systemprofile\Menu Démarrer\Programmes\Accessoires\Accessibilité\desktop.ini	OK
C:\WINDOWS\system32\config\systemprofile\Menu Démarrer\Programmes\Accessoires\Accessibilité\Gestionnaire d'utilitaires.lnk	OK
C:\WINDOWS\system32\config\systemprofile\Menu Démarrer\Programmes\Accessoires\Accessibilité\Gestionnaire d'utilitaires.lnk=>C:\WINDOWS\system32\utilman.exe	OK
C:\WINDOWS\system32\config\systemprofile\Menu Démarrer\Programmes\Accessoires\Accessibilité\Loupe.lnk	OK
C:\WINDOWS\system32\config\systemprofile\Menu Démarrer\Programmes\Accessoires\Accessibilité\Loupe.lnk=>C:\WINDOWS\system32\magnify.exe	OK
C:\WINDOWS\system32\config\systemprofile\Menu Démarrer\Programmes\Accessoires\Assistant Compatibilité des programmes.lnk	OK
C:\WINDOWS\system32\config\systemprofile\Menu Démarrer\Programmes\Accessoires\Bloc-notes.lnk	OK
C:\WINDOWS\system32\config\systemprofile\Menu Démarrer\Programmes\Accessoires\Bloc-notes.lnk=>C:\WINDOWS\system32
otepad.exe	OK
C:\WINDOWS\system32\config\systemprofile\Menu Démarrer\Programmes\Accessoires\desktop.ini	OK
C:\WINDOWS\system32\config\systemprofile\Menu Démarrer\Programmes\Accessoires\Divertissement\desktop.ini	OK
C:\WINDOWS\system32\config\systemprofile\Menu Démarrer\Programmes\Accessoires\Explorateur Windows.lnk	OK
C:\WINDOWS\system32\config\systemprofile\Menu Démarrer\Programmes\Accessoires\Explorateur Windows.lnk=>C:\WINDOWS\explorer.exe	OK
C:\WINDOWS\system32\config\systemprofile\Menu Démarrer\Programmes\Accessoires\Invite de commandes.lnk	OK
C:\WINDOWS\system32\config\systemprofile\Menu Démarrer\Programmes\Accessoires\Invite de commandes.lnk=>C:\WINDOWS\system32\cmd.exe	OK
C:\WINDOWS\system32\config\systemprofile\Menu Démarrer\Programmes\Accessoires\Synchroniser.lnk	OK
C:\WINDOWS\system32\config\systemprofile\Menu Démarrer\Programmes\Accessoires\Synchroniser.lnk=>C:\WINDOWS\system32\mobsync.exe	OK
C:\WINDOWS\system32\config\systemprofile\Menu Démarrer\Programmes\Accessoires\Visite guidée de Windows XP.lnk	OK
C:\WINDOWS\system32\config\systemprofile\Menu Démarrer\Programmes\Accessoires\Visite guidée de Windows XP.lnk=>C:\WINDOWS\system32	ourstart.exe	OK
C:\WINDOWS\system32\config\systemprofile\Menu Démarrer\Programmes\Assistance à distance.lnk	OK
C:\WINDOWS\system32\config\systemprofile\Menu Démarrer\Programmes\Assistance à distance.lnk=>C:\WINDOWS\system32cimlby.exe	OK
C:\WINDOWS\system32\config\systemprofile\Menu Démarrer\Programmes\desktop.ini	OK
C:\WINDOWS\system32\config\systemprofile\Menu Démarrer\Programmes\Démarrage\desktop.ini	OK
C:\WINDOWS\system32\config\systemprofile\Menu Démarrer\Programmes\Lecteur Windows Media.lnk	OK
C:\WINDOWS\system32\config\systemprofile\Menu Démarrer\Programmes\Lecteur Windows Media.lnk=>C:\Program Files\Windows Media Player\wmplayer.exe	OK
C:\WINDOWS\system32\config\systemprofile\Modèles\amipro.sam	OK
C:\WINDOWS\system32\config\systemprofile\Modèles\excel.xls	OK
C:\WINDOWS\system32\config\systemprofile\Modèles\excel4.xls	OK
C:\WINDOWS\system32\config\systemprofile\Modèles\lotus.wk4	OK
C:\WINDOWS\system32\config\systemprofile\Modèles\powerpnt.ppt	OK
C:\WINDOWS\system32\config\systemprofile\Modèles\presenta.shw	OK
C:\WINDOWS\system32\config\systemprofile\Modèles\quattro.wb2	OK
C:\WINDOWS\system32\config\systemprofile\Modèles\wordpfct.wpd	OK
C:\WINDOWS\system32\config\systemprofile\Modèles\wordpfct.wpg	OK
C:\WINDOWS\system32\config\systemprofile
tuser.dat	OK
C:\WINDOWS\system32\config\systemprofile
tuser.dat.LOG	OK
C:\WINDOWS\system32\config\systemprofile\SendTo\Bureau (créer un raccourci).DeskLink	OK
C:\WINDOWS\system32\config\systemprofile\SendTo\desktop.ini	OK
C:\WINDOWS\system32\config\systemprofile\SendTo\Destinataire.MAPIMail	OK
C:\WINDOWS\system32\config\systemprofile\SendTo\Dossier compressé.ZFSendToTarget	OK
C:\WINDOWS\system32\config\system_BAK_46375	OK
C:\WINDOWS\system32\config\system_BAK_69247	OK
C:\WINDOWS\system32\config\system_BAK_73050	OK
C:\WINDOWS\system32\config\system_TU_46375.LOG	OK
C:\WINDOWS\system32\config\system_TU_69247.LOG	OK
C:\WINDOWS\system32\config\system_TU_73050.LOG	OK
C:\WINDOWS\system32\config\TempKey.LOG	OK
C:\WINDOWS\system32\config\userdiff	OK
C:\WINDOWS\system32\config\userdiff.LOG	OK
C:\WINDOWS\system32\CONFIG.NT	OK
C:\WINDOWS\system32\confmsp.dll	OK
C:\WINDOWS\system32\conime.exe	OK
C:\WINDOWS\system32\console.dll	OK
C:\WINDOWS\system32\control.exe	OK
C:\WINDOWS\system32\convert.exe	OK
C:\WINDOWS\system32\corpol.dll	OK
C:\WINDOWS\system32\country.sys	OK
C:\WINDOWS\system32\credui.dll	OK
C:\WINDOWS\system32\crtdll.dll	OK
C:\WINDOWS\system32\crypt32.dll	OK
C:\WINDOWS\system32\cryptdlg.dll	OK
C:\WINDOWS\system32\cryptdll.dll	OK
C:\WINDOWS\system32\cryptext.dll	OK
C:\WINDOWS\system32\cryptnet.dll	OK
C:\WINDOWS\system32\cryptsvc.dll	OK
C:\WINDOWS\system32\cryptui.dll	OK
C:\WINDOWS\system32\cscdll.dll	OK
C:\WINDOWS\system32\cscript.exe	OK
C:\WINDOWS\system32\cscui.dll	OK
C:\WINDOWS\system32\csrsrv.dll	OK
C:\WINDOWS\system32\csrss.exe	OK
C:\WINDOWS\system32\csseqchk.dll	OK
C:\WINDOWS\system32\ctfmon.exe	OK
C:\WINDOWS\system32\ctl3d32.dll	OK
C:\WINDOWS\system32\ctl3dv2.dll	OK
C:\WINDOWS\system32\ctlist.ocx	OK
C:\WINDOWS\system32\ctrldll.dll	OK
C:\WINDOWS\system32\ctToolBar.ocx	OK
C:\WINDOWS\system32\ctype.nls	OK
C:\WINDOWS\system32\cVX3000.dll	OK
C:\WINDOWS\system32\c_037.nls	OK
C:\WINDOWS\system32\c_10000.nls	OK
C:\WINDOWS\system32\c_10006.nls	OK
C:\WINDOWS\system32\c_10007.nls	OK
C:\WINDOWS\system32\c_10010.nls	OK
C:\WINDOWS\system32\c_10017.nls	OK
C:\WINDOWS\system32\c_10029.nls	OK
C:\WINDOWS\system32\c_10079.nls	OK
C:\WINDOWS\system32\c_10081.nls	OK
C:\WINDOWS\system32\c_10082.nls	OK
C:\WINDOWS\system32\c_1026.nls	OK
C:\WINDOWS\system32\c_1250.nls	OK
C:\WINDOWS\system32\c_1251.nls	OK
C:\WINDOWS\system32\c_1252.nls	OK
C:\WINDOWS\system32\c_1253.nls	OK
C:\WINDOWS\system32\c_1254.nls	OK
C:\WINDOWS\system32\c_1255.nls	OK
C:\WINDOWS\system32\c_1256.nls	OK
C:\WINDOWS\system32\c_1257.nls	OK
C:\WINDOWS\system32\c_1258.nls	OK
C:\WINDOWS\system32\c_20127.nls	OK
C:\WINDOWS\system32\c_20261.nls	OK
C:\WINDOWS\system32\c_20866.nls	OK
C:\WINDOWS\system32\c_20905.nls	OK
C:\WINDOWS\system32\c_21866.nls	OK
C:\WINDOWS\system32\c_28591.nls	OK
C:\WINDOWS\system32\c_28592.nls	OK
C:\WINDOWS\system32\c_28593.nls	OK
C:\WINDOWS\system32\C_28594.NLS	OK
C:\WINDOWS\system32\C_28595.NLS	OK
C:\WINDOWS\system32\C_28597.NLS	OK
C:\WINDOWS\system32\c_28598.nls	OK
C:\WINDOWS\system32\c_28599.nls	OK
C:\WINDOWS\system32\c_28603.nls	OK
C:\WINDOWS\system32\c_28605.nls	OK
C:\WINDOWS\system32\c_437.nls	OK
C:\WINDOWS\system32\c_500.nls	OK
C:\WINDOWS\system32\c_737.nls	OK
C:\WINDOWS\system32\c_775.nls	OK
C:\WINDOWS\system32\c_850.nls	OK
C:\WINDOWS\system32\c_852.nls	OK
C:\WINDOWS\system32\c_855.nls	OK
C:\WINDOWS\system32\c_857.nls	OK
C:\WINDOWS\system32\c_860.nls	OK
C:\WINDOWS\system32\c_861.nls	OK
C:\WINDOWS\system32\c_863.nls	OK
C:\WINDOWS\system32\c_865.nls	OK
C:\WINDOWS\system32\c_866.nls	OK
C:\WINDOWS\system32\c_869.nls	OK
C:\WINDOWS\system32\c_874.nls	OK
C:\WINDOWS\system32\c_875.nls	OK
C:\WINDOWS\system32\c_932.nls	OK
C:\WINDOWS\system32\c_936.nls	OK
C:\WINDOWS\system32\c_949.nls	OK
C:\WINDOWS\system32\c_950.nls	OK
C:\WINDOWS\system32\d3d8.dll	OK
C:\WINDOWS\system32\d3d8thk.dll	OK
C:\WINDOWS\system32\d3d9.dll	OK
C:\WINDOWS\system32\d3dim.dll	OK
C:\WINDOWS\system32\d3dim700.dll	OK
C:\WINDOWS\system32\d3dpmesh.dll	OK
C:\WINDOWS\system32\d3dramp.dll	OK
C:\WINDOWS\system32\d3drm.dll	OK
C:\WINDOWS\system32\d3dx9_24.dll	OK
C:\WINDOWS\system32\d3dx9_25.dll	OK
C:\WINDOWS\system32\d3dx9_26.dll	OK
C:\WINDOWS\system32\d3dx9_27.dll	OK
C:\WINDOWS\system32\d3dx9_28.dll	OK
C:\WINDOWS\system32\d3dx9_29.dll	OK
C:\WINDOWS\system32\d3dxof.dll	OK
C:\WINDOWS\system32\danim.dll	OK
C:\WINDOWS\system32\DartCertificate.dll	OK
C:\WINDOWS\system32\DartSecure2.dll	OK
C:\WINDOWS\system32\DartSock.dll	OK
C:\WINDOWS\system32\DartWebASP.dll	OK
C:\WINDOWS\system32\DartWebUtil.dll	OK
C:\WINDOWS\system32\dataclen.dll	OK
C:\WINDOWS\system32\datime.dll	OK
C:\WINDOWS\system32\Dav3_32.dll	OK
C:\WINDOWS\system32\davclnt.dll	OK
C:\WINDOWS\system32\daxctle.ocx	OK
C:\WINDOWS\system32\dbgeng.dll	OK
C:\WINDOWS\system32\dbghelp.dll	OK
C:\WINDOWS\system32\dbmsadsn.dll	OK
C:\WINDOWS\system32\dbmsrpcn.dll	OK
C:\WINDOWS\system32\dbmsvinn.dLL	OK
C:\WINDOWS\system32\dbnetlib.dll	OK
C:\WINDOWS\system32\dbnmpntw.dll	OK
C:\WINDOWS\system32\DC89F9	OK
C:\WINDOWS\system32\dcache.bin	OK
C:\WINDOWS\system32\dciman32.dll	OK
C:\WINDOWS\system32\dcomcnfg.exe	OK
C:\WINDOWS\system32\ddeml.dll	OK
C:\WINDOWS\system32\ddeshare.exe	OK
C:\WINDOWS\system32\ddraw.dll	OK
C:\WINDOWS\system32\ddrawex.dll	OK
C:\WINDOWS\system32\debug.exe	OK
C:\WINDOWS\system32\defrag.exe	OK
C:\WINDOWS\system32\desk.cpl	OK
C:\WINDOWS\system32\deskadp.dll	OK
C:\WINDOWS\system32\deskmon.dll	OK
C:\WINDOWS\system32\deskperf.dll	OK
C:\WINDOWS\system32\desktop.ini	OK
C:\WINDOWS\system32\devenum.dll	OK
C:\WINDOWS\system32\devmgmt.msc	OK
C:\WINDOWS\system32\devmgr.dll	OK
C:\WINDOWS\system32\dfrg.msc	OK
C:\WINDOWS\system32\dfrgfat.exe	OK
C:\WINDOWS\system32\dfrgntfs.exe	OK
C:\WINDOWS\system32\dfrgres.dll	OK
C:\WINDOWS\system32\dfrgsnap.dll	OK
C:\WINDOWS\system32\dfrgui.dll	OK
C:\WINDOWS\system32\dfsshlex.dll	OK
C:\WINDOWS\system32\dgnet.dll	OK
C:\WINDOWS\system32\dgrpsetu.dll	OK
C:\WINDOWS\system32\dgsetup.dll	OK
C:\WINDOWS\system32\dhcpcsvc.dll	OK
C:\WINDOWS\system32\dhcpmon.dll	OK
C:\WINDOWS\system32\dhcpsapi.dll	OK
C:\WINDOWS\system32\diactfrm.dll	OK
C:\WINDOWS\system32\diantz.exe	OK
C:\WINDOWS\system32\digest.dll	OK
C:\WINDOWS\system32\dimap.dll	OK
C:\WINDOWS\system32\dinput.dll	OK
C:\WINDOWS\system32\dinput8.dll	OK
C:\WINDOWS\system32\DirectX\Dinput\actc094.ini	OK
C:\WINDOWS\system32\DirectX\Dinput\act_rs.png	OK
C:\WINDOWS\system32\DirectX\Dinput\glmda.ini	OK
C:\WINDOWS\system32\DirectX\Dinput\glmda.png	OK
C:\WINDOWS\system32\DirectX\Dinput\glmdiggp.ini	OK
C:\WINDOWS\system32\DirectX\Dinput\glmdiggp.png	OK
C:\WINDOWS\system32\DirectX\Dinput\gr3001.ini	OK
C:\WINDOWS\system32\DirectX\Dinput\gr3001.png	OK
C:\WINDOWS\system32\DirectX\Dinput\gr3001_g.ini	OK
C:\WINDOWS\system32\DirectX\Dinput\gr4001.ini	OK
C:\WINDOWS\system32\DirectX\Dinput\gr4001.png	OK
C:\WINDOWS\system32\DirectX\Dinput\gr4001_g.ini	OK
C:\WINDOWS\system32\DirectX\Dinput\gr4001_g.png	OK
C:\WINDOWS\system32\DirectX\Dinput\gr4003.ini	OK
C:\WINDOWS\system32\DirectX\Dinput\gr4003.png	OK
C:\WINDOWS\system32\DirectX\Dinput\gr4005.ini	OK
C:\WINDOWS\system32\DirectX\Dinput\gr4005.png	OK
C:\WINDOWS\system32\DirectX\Dinput\hammer.ini	OK
C:\WINDOWS\system32\DirectX\Dinput\ia3002.ini	OK
C:\WINDOWS\system32\DirectX\Dinput\ia3002_1.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ia3002_2.png	OK
C:\WINDOWS\system32\DirectX\Dinput\lgc202.ini	OK
C:\WINDOWS\system32\DirectX\Dinput\lgc202.png	OK
C:\WINDOWS\system32\DirectX\Dinput\lgc207.ini	OK
C:\WINDOWS\system32\DirectX\Dinput\lgc207.png	OK
C:\WINDOWS\system32\DirectX\Dinput\lgc209.ini	OK
C:\WINDOWS\system32\DirectX\Dinput\lgc209.png	OK
C:\WINDOWS\system32\DirectX\Dinput\lgc20a.ini	OK
C:\WINDOWS\system32\DirectX\Dinput\lgc20a.png	OK
C:\WINDOWS\system32\DirectX\Dinput\lgc291.ini	OK
C:\WINDOWS\system32\DirectX\Dinput\lgc291.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms1b.ini	OK
C:\WINDOWS\system32\DirectX\Dinput\ms1b.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms1b_01.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms1b_02.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms1b_03.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms1b_04.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms1b_05.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms1b_06.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms1b_07.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms1b_08.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms1b_09.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms1b_10.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms26.ini	OK
C:\WINDOWS\system32\DirectX\Dinput\ms26.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms26_01.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms26_02.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms26_03.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms26_04.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms26_05.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms26_06.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms26_07.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms26_08.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms27.ini	OK
C:\WINDOWS\system32\DirectX\Dinput\ms27.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms27_1.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms27_2.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms27_3.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms27_4.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms27_5.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms28.ini	OK
C:\WINDOWS\system32\DirectX\Dinput\ms28.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms28_1.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms28_2.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms28_3.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms28_4.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms28_5.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms28_6.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms28_7.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms28_8.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms34.ini	OK
C:\WINDOWS\system32\DirectX\Dinput\ms34.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms34_01.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms34_02.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms34_03.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms34_04.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms34_05.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms34_06.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms34_07.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms34_08.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms3b.ini	OK
C:\WINDOWS\system32\DirectX\Dinput\ms3b.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms3b_1.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms3b_2.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms3b_3.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms3b_4.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms3b_a.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms3b_c.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms3b_m.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms3b_t.png	OK
C:\WINDOWS\system32\DirectX\Dinput\ms56.ini	OK
C:\WINDOWS\system32\DirectX\Dinput\ms56

TropJean · Answer

Re,

Tu me renvoieras les logs car il manque de l’infos de BitD (Log incomplet) et il n’y a pas le log de HJT!

Pour ton erreur fais ceci…

Démarré – Panneau de config. – Ajout/Supprim – et ds cette fenêtre tout ce qui porte le nom de Logitech, tu désinstalles le programme et tu le réinstalleras à la fin de tout.

C’est quoi Logitech pour toi? Caméra? Audio? Vidéo? Scanner? Clavier? Souris?
Si c’est l’un des derniers, réinstalle le prog après l’avoir désinstallé…

Pour ton écran noir de qlq seconde, c’est normal… Souvent c’est la carte vidéo… Es tu sous Windows XP Media? Ça expliquerait!

Pour ceci… (Coppy disk(s) fail) Je vérifie c’est quoi…

Donc renvois moi les logs manquant et delà nous continuerons d’améliorer ton PC.

À:\+

TropJean ;o)

novice4 · Answer

Le log Bitdefender est beaucoup trop long je crois. Je poste celui exécuté par Hijackthis.

Logfile of HijackThis v1.99.1
Scan saved at 21:07:04, on 09/04/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Documents and Settings\Christophe\Bureau\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*https://fr.search.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http:6588
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = ;localhost;<local>
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: eBay Toolbar Helper - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files\Mozilla Firefox\eBayTB.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: eBay Toolbar - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\Mozilla Firefox\eBayTB.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [IntelliType] "C:\Program Files\Microsoft Hardware\Keyboard	ype32.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe 
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [VX3000] C:\WINDOWS\vVX3000.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
O4 - HKLM\..\Run: [DownloadAccelerator] "C:\Program Files\DAP\DAP.EXE" /STARTUP
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [BDMCon] "C:\Program Files\Softwin\BitDefender8\bdmcon.exe"
O4 - HKLM\..\Run: [BDNewsAgent] "C:\Program Files\Softwin\BitDefender8\bdnagent.exe"
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [NFREN] D:\Setup.exe -1
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\eMule.exe -AutoStart
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [Firefox] C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &eBay Search - res://C:\Program Files\Mozilla Firefox\eBayTb.dll/RCSearch.html
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZN
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.safety.live.com/resource/download/scanner/wlscbase969.cab
O16 - DPF: {87AF076E-D86D-4E87-ADDD-F05804E1F150} - https://www.virginmega.fr/DownloadManager/Release/Prod/DownMan.cab
O16 - DPF: {92E7E45A-D8C8-480E-AF99-176E43997CAA} (Aurigma Image Uploader 3.5 Combo Control) - https://www.photolitto.com/
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {DD3641E5-A9CF-11D1-9AA1-444553540000} (Surround Video V3.0 Control Object) - http://www.sunterra.com/downloads/svh/svideo3.cab
O16 - DPF: {E1AF091A-9F23-4059-89D7-C05EE073285D} (Canal+ Active MSWAY) - https://www.canalplus.com/canalplay/
O18 - Protocol: bw+0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {AF6ACF9C-6601-4FB6-8DBE-2D2FF4C24467} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Norman API-hooking helper (NipSvc) - Unknown owner - C:\Norman\Nvc\BIN
ipsvc.exe
O23 - Service: Norman NJeeves - Unknown owner - C:\Norman\bin\NJEEVES.EXE
O23 - Service: Norman ZANDA - Unknown owner - C:\Norman\Bin\Zanda.exe
O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\Norman\Nvc\bin
vcoas.exe
O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman Data Defense Systems - C:\Norman\Nvc\BIN\NVCSCHED.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)

Merci ;)

TropJean · Answer

Re,

Comment va ton PC?

Comme je les vois (logs) il n’y a rien comme malware ds ce PC! Des erreurs de prog oui! Mais aucun malware. En désinstallant/réinstallant Logitech, les messages d’erreurs apparaissent t’ils encore? 

Coppy disk(s) fail… J’ai beau cherché sur le net mais je trouve rien! Ça peut y avoir rapport avec Logitech aussi…! Je suppose ici, ce n’est pas véridique!!!    

Tu peux m’envoyer un log de HJT en mode sans échec S.T.P.?

J’vais regarder ce qui a fonctionné ou pas! En même temps je vais t’aider pour un démarrage plus rapide de Windows!!! Regarder pour les lignes 018 où il y avait les erreurs de protocol! 

Avast est t’il un Firewall/Pare-feu ou un Anti Virus?

Si c’est un AV il faudrait que tu choisisses entre Avast ou BitD! Aucun AV n’est compatible. L’un peu fausser les données de l’autre….

À toi de choisir…

As-tu un Firewall/Pare-feu? Si Avast est un AV comme je le vois!

À:\+

TropJean ;o)

novice4 · Answer

onjour, tout d'abord en désinstallant les éléments Logitech, les messages d'erreur ont disparu :)

Quand je vais dans le centre de sécurité on me dit que le pare-feu de windows est actif. Mais quel pare-feu.
Avast n'est qu'un anti-virus je crois. Du coup, je ne sais pas si je dois installer Bitdefender ou pas.

Je te donne le log comme tu me l'as demandé. Merci beaucoup de ton aide ;)

ogfile of HijackThis v1.99.1
Scan saved at 12:00:57, on 23/04/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Documents and Settings\Christophe\Bureau\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*https://fr.search.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http:6588
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = ;localhost;<local>
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: eBay Toolbar Helper - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files\Mozilla Firefox\eBayTB.dll
O2 - BHO: (no name) - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: eBay Toolbar - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\Mozilla Firefox\eBayTB.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [IntelliType] "C:\Program Files\Microsoft Hardware\Keyboard	ype32.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [VX3000] C:\WINDOWS\vVX3000.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
O4 - HKLM\..\Run: [DownloadAccelerator] "C:\Program Files\DAP\DAP.EXE" /STARTUP
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Fichiers communs\Logitech\CamDrvr\LVCOMS.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files\Google\Gmail Notifier\gnotify.exe
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [NFREN] D:\Setup.exe -1
O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\eMule.exe -AutoStart
O4 - HKCU\..\Run: [Firefox] C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: hp psc 1000 series.lnk = ?
O4 - Global Startup: hpoddt01.exe.lnk = ?
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &eBay Search - res://C:\Program Files\Mozilla Firefox\eBayTb.dll/RCSearch.html
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZN
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.safety.live.com/resource/download/scanner/wlscbase969.cab
O16 - DPF: {87AF076E-D86D-4E87-ADDD-F05804E1F150} - https://www.virginmega.fr/DownloadManager/Release/Prod/DownMan.cab
O16 - DPF: {92E7E45A-D8C8-480E-AF99-176E43997CAA} (Aurigma Image Uploader 3.5 Combo Control) - https://www.photolitto.com/
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {DD3641E5-A9CF-11D1-9AA1-444553540000} (Surround Video V3.0 Control Object) - http://www.sunterra.com/downloads/svh/svideo3.cab
O16 - DPF: {E1AF091A-9F23-4059-89D7-C05EE073285D} (Canal+ Active MSWAY) - https://www.canalplus.com/canalplay/
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Norman API-hooking helper (NipSvc) - Unknown owner - C:\Norman\Nvc\BIN
ipsvc.exe
O23 - Service: Norman NJeeves - Unknown owner - C:\Norman\bin\NJEEVES.EXE
O23 - Service: Norman ZANDA - Unknown owner - C:\Norman\Bin\Zanda.exe
O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\Norman\Nvc\bin
vcoas.exe
O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman Data Defense Systems - C:\Norman\Nvc\BIN\NVCSCHED.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe

Merci pur tout. Bonne journée à toi.

novice4 · Answer

Re-bonjour, quant au firewall, quand j'installe zonaalarm, je ne peux plus accéder à Firefox. Peux-tu me conseiller un firewall simple et efficace. je te rappelle que j'ai Avast comme antivirus.
Je te remercie beaucoup!
Novice4

TropJean · Answer

Re, J’ai aussi Avast comme AV et mon ZoneAlarm fonctionne très bien avec Firefox aussi! Qnd tu ouvres Firefox, ZA devrait te demander si tu laisses Firefox se connecter au net… Une bulbe devrait apparaître de ZA, à ce moment tu dois coché la case qui dit **tjrs se souvenir…** et ensuite cliquer sur accepter. mythes zonealarm et avast sont incompatibles Voici un lien concernant la compatibilité d’Avast et ZoneAlarm. À la fin du texte tu as un lien, suit le et tu v’as avoir d’autres infos concernant l’installation et configuration de ZA. Suite à ça tu ne devrais plus avoir de prob avec ZA et Firefox! Tu as le programme Sun Java V. 5.11 Ils sont rendu à la V6.1! Voici le lien pour la mise à jour… Java : https://www.java.com/fr/download/manual.jsp MS est rendu à la V7 de IE et tu as la V6… IE V7 https://support.microsoft.com/fr-fr/allproducts Un fois les mises à jour faite, fait ceci… Démarré – Panneau de config/Control panel – Ajout/Suppr*Add/Remove – Patiente un peu le temps que Windows trouve les prog – Maintenant tout ce qui a le mot toolbar ou barre de recherche, tu désinstalles… Yahoo, Google, etc… toutes!!! Tu as un 2ièm AV du nom de Norman ou de Zanda. Désinstalle tout ce qui a le mot Norman et/ou Zanda ds le lien. Avast fait très bien le travail seul…! Maintenant que tu as fait la mise à jour de Java, tu dois désinstaller celle qui porte ceci Java\jre1.5.0_11\ … <- Seulement elle! Si tu vois ici un prog qui porte le mot DAP et/ou Dapextie, désinstalle le! Ferme le tout et redémarre ton PC en Mode Sans Échec (MSÉ) – Ouvre HJT – Do a scan only – Coche ces lignes… (Celles qui seront souligné, peuvent ne pas y être.) - Clic Fix checked - R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll O2 - BHO: eBay Toolbar Helper - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files\Mozilla Firefox\eBayTB.dll O2 - BHO: (no name) - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file) O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll O3 - Toolbar: eBay Toolbar - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\Mozilla Firefox\eBayTB.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll Les (04) sont des prog qui démarrent en même temps que Windows, (Ralenti le démarrage) Mise à part les toolbars/barre de recherches le reste seront prêt d’utilisation au moment que tu en auras besoin, elle ne sont pas supprimé. O4 - HKLM\..\Run: [IntelliType] "C:\Program Files\Microsoft Hardware\Keyboard ype32.exe" O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB ealsched.exe" -osboot O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE O4 - HKLM\..\Run: [LifeCam] "C:\Program Files\Microsoft LifeCam\LifeExp.exe" O4 - HKLM\..\Run: [VX3000] C:\WINDOWS\vVX3000.exe O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe O4 - HKLM\..\Run: [DownloadAccelerator] "C:\Program Files\DAP\DAP.EXE" /STARTUP O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Fichiers communs\Logitech\CamDrvr\LVCOMS.EXE O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files\Google\Gmail Notifier\gnotify.exe O4 - HKCU\..\Run: [NFREN] D:\Setup.exe -1 O4 - HKCU\..\Run: [eMuleAutoStart] C:\Program Files\eMule\eMule.exe -AutoStart O4 - HKCU\..\Run: [Firefox] C:\PROGRA~1\MOZILL~1\FIREFOX.EXE O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: hp psc 1000 series.lnk = ? O4 - Global Startup: hpoddt01.exe.lnk = ? O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe O8 - Extra context menu item: &eBay Search - res://C:\Program Files\Mozilla Firefox\eBayTb.dll/RCSearch.html O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZN O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Norman API-hooking helper (NipSvc) - Unknown owner - C:\Norman\Nvc\BIN ipsvc.exe O23 - Service: Norman NJeeves - Unknown owner - C:\Norman\bin\NJEEVES.EXE O23 - Service: Norman ZANDA - Unknown owner - C:\Norman\Bin\Zanda.exe O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\Norman\Nvc\bin vcoas.exe O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman Data Defense Systems - C:\Norman\Nvc\BIN\NVCSCHED.EXE Redémarre en mode normal – Va sur BitD et fait un scan online – Installe l’ActiveX - Après l’installation tu devrais voir un texte qui contient ceci… Settings By default, BitDefender will try to clean the infected files it finds. Warning If the disinfection fails, the infected files will be deleted without prompt. To change this and other settings, click here. Please use these options with care. – Pour le configurer clic sur le lien en rouge (Click here) – Une fenêtre va s’ouvrir – 1 er option (Scanning option) Toutes les cases se doivent d’être coché – 2ièm option (Action option) Coche disinfect – Ds la 3ièm option (Second action) Coche delete – Ferme la fenêtre – Débute le scan - Enregistre le rapport (VERSION SIMPLE!) - Ensuite redémarre en MSÉ et fait un scan avec HJT – Do a scan & logfile – Enregistre le rapport – Redémarre en mode normal et post les rapports. Laisse moi savoir ce qui en devient de ZA avec Firefox et si tu as d’autres souci! À:\+ TropJean ;o)

novice4 · Answer

Bonsoir TropJean,
j'ai presque fait ce que tu m'as dit sauf que j'ai été bloqué après l'installation de BitDefender8 free edition  car je ne sais pas comment installer l'active X. Du coup, je ne suis pas allé jusqu'au bout.
Avant, j'ai tout fait sauf que je ne veux pas installer IE7 mais supprimer tout à fait IE. Or, je ne le trouve pas dans mes programmes (supprimer ou modifier des programmes). Je ne suis pas sur que Norman soit vraiment supprimé également.
Merci de ta réponse. Si tu pouvais m'expliquer pour l'Active X, je pourrai faire les scans et les poster.
Merci beaucoup à toi et passe une très bonne soirée.
Novice4

TropJean · Answer

Salut Novice, C’est une bonne chose de ne pas avoir été jusqu’au bout… En fait, je croyais t’avoir déjà donner l’adresse de Bit Defender pour faire un scan online! Après avoir lus ta réponse, j’ai été voir mes précédent post pour constater que je ne t’ai jamais donner cette dite adresse! Sincèrement désolé Novice! Je te fais faire déjà assez de procédure comme ça, ce n’est pas le temps que je te fasse faire qlq chose que tu n’as pas besoin!!! :o( Si tu as installé BitD, désinstalle le, sinon ne l’installe pas… Maintenant va sur BitD https://www.bitdefender.fr/ avec IE - Sur ta gauche un peu plus bas, tu as un bouton gris et rouge avec la terre écrit dessus, Bit Defender scan online… Clic dessus et une fenêtre va s’ouvrir – Clic I Agree - À ce moment IE va t’informer que tu as besoin d’un ActiveX pour BitD (Haut de la fenêtre) – Accepte le et l’installation va ce faire tout seul… - Une fois l’installation fait, ds la section Scan online, tu as ceci… Settings By default, BitDefender will try to clean the infected files it finds. Warning If the disinfection fails, the infected files will be deleted without prompt. To change this and other settings, click here. Please use these options with care. Pour le configurer clic sur le lien en rouge – Une fenêtre va s’ouvrir – 1 er option (Scanning option) Toutes les cases se doivent d’être coché – 2ièm option (Action option) Coche disinfect – Ds la 3ièm option (Second action) Coche delete – Ferme la fenêtre – Clic sur Click here to scan – Une fois terminé, enregistre le rapport (VERSION SIMPLE!) - Ensuite redémarre en MSÉ et fait un scan avec HJT – Do a scan & logfile – Enregistre le rapport – Redémarre en mode normal et post les rapports. 2 choses… La 1ièr, ds un de tes post (pubs qui s ouvrent toutes eules sur firefox#5) tu m’avais mentionné que tu allais souvent sur un site et que tu avais besoin de IE pour y accéder (prend pas en charge Firefox!)…! La 2ièm, tu m’avais mentionné… un site… avais besoin de IE… prend pas en charge Firefox! Tu l’as dis tout seul… Il y a plein de site ou tu v’as avoir besoin de IE pour y accéder! Sad but True!!! C’est la seule et unique raison pour laquelle tu te dois de garder IE et de faire sa mise à jour le plus tôt possible! Tu veux vraiment t’en débarrasser? OK! Ajout/Suppr*Add/Remove – Windows Internet Explorer 6 – Désinstalle le mais si je serais toi…! < Je ne suis pas sur que Norman soit vraiment supprimé également.> Qnd tu me posteras les logs de BitD et HJT nous allons pouvoir mieux évaluer la situation et voir ce que nous allons faire par la suite, d’ici là, je ne peux rien faire de plus! Merci de ta patience ;o) C’est ce que j’ai fais plus haut. Si tu as d’autres prob, gène toi pas je suis là pour ça! Bonne journée à toi À:\+ TropJean ;o)

novice4 · Answer

Bonjour,
j'ai oublié de te dire que tout va bien entre Avast! et zoneAlarm :) Je te remercie.
J'ai fait les logs que tu m'as demandés.
Les voici :

BitDefender Online Scanner
	

 
	

 

Rapport d'analyse généré à: Fri, Apr 27, 2007 - 10:04:00

 
	

 
	

 

Voie d'analyse: A:\;C:\;D:\;
	

 
	

 

 
	

 
	

 

Statistiques

Temps
	

02:54:43

Fichiers
	

479614

Directoires
	

10914

Secteurs de boot
	

2

Archives
	

18649

Paquets programmes
	

47368
	

 
	

 

Résultats

Virus identifiés
	

1

Fichiers infectés
	

1

Fichiers suspects
	

0

Avertissements
	

0

Désinfectés
	

0

Fichiers effacés
	

1
	

 
	

 

Info sur les moteurs

Définition virus
	

494098

Version des moteurs
	

AVCORE v1.0 (build 2397) (i386) (Feb 8 2007 14:24:08)

Analyse des plugins
	

14

Archive des plugins
	

38

Unpack des plugins
	

6

E-mail plugins
	

6

Système plugins
	

1
	

 
	

 

Paramètres d'analyse

Première action
	

Désinfecté

Seconde Action
	

Supprimé

Heuristique
	

Oui

Acceptez les avertissements
	

Oui

Extensions analysées
	

*;

Excludez les extensions
	

 

Analyse d'emails
	

Oui

Analyse des Archives
	

Oui

Analyser paquets programmes
	

Oui

Analyse des fichiers
	

Oui

Analyse de boot
	

Oui
	

 
	

 
 

Fichier analysé
	

 Statut

C:\Documents and Settings\Christophe\Local Settings\Application Data\Identities\{5ABE805F-4997-4608-9D14-B3280071463A}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 1678)=>[Subject: [avast! - INFECTED] Mail Delivery (f][Date: Tue, 14 Mar 2006 20:19:11 +0000]=>(MIME part)=>(MIME part)=>(message body)
	

Infecté par: Exploit.Iframe.Vulnerability.B

C:\Documents and Settings\Christophe\Local Settings\Application Data\Identities\{5ABE805F-4997-4608-9D14-B3280071463A}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 1678)=>[Subject: [avast! - INFECTED] Mail Delivery (f][Date: Tue, 14 Mar 2006 20:19:11 +0000]=>(MIME part)=>(MIME part)=>(message body)
	

Echec de la désinfection

C:\Documents and Settings\Christophe\Local Settings\Application Data\Identities\{5ABE805F-4997-4608-9D14-B3280071463A}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 1678)=>[Subject: [avast! - INFECTED] Mail Delivery (f][Date: Tue, 14 Mar 2006 20:19:11 +0000]=>(MIME part)=>(MIME part)=>(message body)
	

Supprimé

C:\Documents and Settings\Christophe\Local Settings\Application Data\Identities\{5ABE805F-4997-4608-9D14-B3280071463A}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 1678)=>[Subject: [avast! - INFECTED] Mail Delivery (f][Date: Tue, 14 Mar 2006 20:19:11 +0000]=>(MIME part)=>(MIME part)
	

Mis à jour

C:\Documents and Settings\Christophe\Local Settings\Application Data\Identities\{5ABE805F-4997-4608-9D14-B3280071463A}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 1678)=>[Subject: [avast! - INFECTED] Mail Delivery (f][Date: Tue, 14 Mar 2006 20:19:11 +0000]=>(MIME part)
	

Mis à jour

C:\Documents and Settings\Christophe\Local Settings\Application Data\Identities\{5ABE805F-4997-4608-9D14-B3280071463A}\Microsoft\Outlook Express\Éléments supprimés.dbx=>(message 1678)
	

Mis à jour

C:\Documents and Settings\Christophe\Local Settings\Application Data\Identities\{5ABE805F-4997-4608-9D14-B3280071463A}\Microsoft\Outlook Express\Éléments supprimés.dbx
	

Echec de la mise à jour
	 
                                    ------------------------------------------

ogfile of HijackThis v1.99.1
Scan saved at 10:16:43, on 27/04/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\PCHealth\HelpCtr\Binaries\HelpSvc.exe
C:\WINDOWS\Explorer.EXE
C:\Documents and Settings\Christophe\Bureau\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.cinema-france.com/affiche_forum_prive_cinefr14_49.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://fr.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*https://fr.search.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http:6588
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = ;localhost;<local>
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\PROGRA~1\Yahoo!\Common\yhexbmesfr.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.safety.live.com/resource/download/scanner/wlscbase969.cab
O16 - DPF: {87AF076E-D86D-4E87-ADDD-F05804E1F150} - https://www.virginmega.fr/DownloadManager/Release/Prod/DownMan.cab
O16 - DPF: {92E7E45A-D8C8-480E-AF99-176E43997CAA} (Aurigma Image Uploader 3.5 Combo Control) - https://www.photolitto.com/
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {DD3641E5-A9CF-11D1-9AA1-444553540000} (Surround Video V3.0 Control Object) - http://www.sunterra.com/downloads/svh/svideo3.cab
O16 - DPF: {E1AF091A-9F23-4059-89D7-C05EE073285D} (Canal+ Active MSWAY) - https://www.canalplus.com/canalplay/
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Norman API-hooking helper (NipSvc) - Unknown owner - C:\Norman\Nvc\BIN
ipsvc.exe
O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\Norman\Nvc\bin
vcoas.exe
O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman Data Defense Systems - C:\Norman\Nvc\BIN\NVCSCHED.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

Merci 100 fois de ton aide précieuse. Bonne journée.
Novice4

cacahuete · Answer

Bonjour, 
j'ai le meme probleme depuis hier, les pages de pubs s'ouvrent toutes seules...
voilà le rapport Hijackthis : si vous pouvez m'aider, merci !

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:56:50, on 03/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
c:\APPS\HIDSERVICE\HIDSERVICE.exe
C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLService.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\system32\svchost.exe
c:\APPS\Powercinema\Kernel\TV\CLSched.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\ALCMTR.EXE
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Apps\Powercinema\PCMService.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\drivers\RMC.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0K2.EXE
C:\WINDOWS\LBTWiz.exe
C:\WINDOWS\mrofinu1148.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ClamWin\bin\ClamTray.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Insider\Insider.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\WinAble\winable.exe
C:\WINDOWS\system32\SEMBLY~1\javaw.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Documents and Settings\Camille\Application Data\W?nSxS\m?iexec.exe
C:\Documents and Settings\Camille\Application Data\Microsoft\Windows\rayiou.exe
C:\Documents and Settings\Camille\Application Data\WinTouch\WinTouch.exe
C:\Program Files\ClamWin\bin\ClamWin.exe
C:\Program Files\ClamWin\bin\clamscan.exe
C:\Program Files\Microsoft Office\Office\POWERPNT.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\Camille\LOCALS~1\Temp\Rar$EX00.079\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://resultsmaster.com/...
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Packard Bell
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: HbTools - {74CC49F7-EB32-4A08-B204-948962A6E3DB} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: (no name) - {BADB8B62-138A-6D5D-D828-38E605815EC0} - C:\WINDOWS\system32\dro.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O3 - Toolbar: (no name) - {74CC49F7-EB32-4A08-B204-948962A6E3DB} - (no file)
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [PCMService] "c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [RMC] C:\WINDOWS\system32\drivers\RMC.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [EPSON Stylus Photo RX500] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0K2.EXE /P24 "EPSON Stylus Photo RX500" /O6 "USB001" /M "Stylus Photo RX500"
O4 - HKLM\..\Run: [LBTWiz.exe] C:\WINDOWS\LBTWiz.exe
O4 - HKLM\..\Run: [runner1] C:\WINDOWS\mrofinu1148.exe 61A847B5BBF72813339F30466188719AB689201522886B092CBD44BD8689220221DD3257
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ClamWin] "C:\Program Files\ClamWin\bin\ClamTray.exe" --logon
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Insider] C:\Program Files\Insider\Insider.exe
O4 - HKCU\..\Run: [WinAble] C:\Program Files\WinAble\winable.exe
O4 - HKCU\..\Run: [Acmw] "C:\WINDOWS\system32\SEMBLY~1\javaw.exe" -vt yazb
O4 - HKCU\..\Run: [Qpkxpmxv] "C:\Documents and Settings\Camille\Application Data\W?nSxS\m?iexec.exe"
O4 - HKCU\..\Run: [WinTouch] C:\Documents and Settings\Camille\Application Data\WinTouch\WinTouch.exe
O4 - HKCU\..\Run: [SfKg6w] C:\Documents and Settings\Camille\Application Data\Microsoft\Windows\rayiou.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\microsoft office\Office\OSA9.EXE
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O17 - HKLM\System\CCS\Services\Tcpip\..\{BC3279C8-89F8-460D-9277-4DB9B90E53EA}: NameServer = 212.27.32.5,213.228.0.168
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\Shared Files\CLML_NTService\CLMLServer.exe
O23 - Service: Generic Service for HID Keyboard Input Collections (GenericHidService) - Unknown owner - c:\APPS\HIDSERVICE\HIDSERVICE.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Sunbelt Kerio Personal Firewall 4 (KPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe
O23 - Service: MySqlInventime - Unknown owner - c:\mysql\bin\mysqld-max-nt.exe
O23 - Service: SmartLinkService (SLService) -   - C:\WINDOWS\SYSTEM32\slserv.exe
O23 - Service: WLSVC - Unknown owner - C:\Program Files\Linksys Wireless-G PCI Wireless Network Monitor\WLService.exe (file missing)

green day · Answer

Salut

Télécharge ceci: (by Moe) : 

http://sosvirus.changelog.fr/Green_day/Lopxpsetup.exe 

Double clic sur Lopxpsetup.exe pour lancer l'installation 
Au menu, choisir l'option 1 
Patienter jusqu'à que l'on demande d'appuyer sur une touche, appuyer ! 
Une rapport sera alors crée, à copie/colle en entier sur le forum. 

++

Pubs qui s'ouvrent toutes eules sur firefox - Page 2

Discussions similaires

Newsletters