analyse de mon log Hijackthis svp

Question

Bonjour, alors voila : depuis quelque temps quand je vais sur internet j'ai des fenêtres qui s'ouvrent pour me dire que si mon PC ralenti c'est qu'il est peut être infecté de Spaware. Il me conseil alors de télécharger Spuware Secure ou autre ... En plus, quand je lance un programme ( exel, word ou autre ) j'ai un message d'erreur XP qui apparait me demander d'envoyer un rapport d'erreur et ça m'oblige à fermer le programme.
Voici mon rapport Hijackthis :

Logfile of HijackThis v1.99.1
Scan saved at 21:30:54, on 16/06/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Fichiers communs\Logitech\Bluetooth\LBTSERV.EXE
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Logitech\Easy Synchronization\servicestub.exe
C:\WINDOWS\system32
vsvc32.exe
C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wwSecure.exe
C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\system32\hphmon06.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\WINDOWS\system32undll32.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
C:\Program Files\Logitech\ImageStudio\LogiTray.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\Program Files\Logitech\SetPoint\LBTWiz.exe
C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe
C:\Program Files\Fichiers communs\DriveCleaner Free\udcsdr.exe
C:\Program Files\Fichiers communs\DriveCleaner Free\udcwap.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exe
C:\Program Files\Fichiers communs\Logitech\khalshared\KHALMNPR.EXE
C:\WINDOWS\system32undll32.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.msn.com/fr-fr?cobrand=hp-desktop.msn.com&ocid=HPDHP&pc=HPDTDF
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost;*.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: {1A03F196-9617-4CA0-842B-A83CEECB022B} -  - (no file)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe
O1 - Hosts: 255.255.255.255 www.casinoxo.com
O1 - Hosts: 255.255.255.255 www.theblackjacktable.com
O1 - Hosts: 255.255.255.255 www.theblackjacktable.com
O1 - Hosts: 255.255.255.255 royaldutchcasino.com
O1 - Hosts: 255.255.255.255 www.royaldutchcasino.com
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: DgnWebIE - {2843DAC1-05EF-11D2-95BA-0060083493D6} - C:\Program Files\Dragon Systems\NaturallySpeaking\Program\web_ie.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe 
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [PCGUARD] C:\WINDOWS\system32\v30wx32.exe
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
O4 - HKLM\..\Run: [LogitechGalleryRepair] C:\Program Files\Logitech\ImageStudio\ISStart.exe
O4 - HKLM\..\Run: [LogitechImageStudioTray] C:\Program Files\Logitech\ImageStudio\LogiTray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [kis] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [Logitech BT Wizard] LBTWiz.exe -silent
O4 - HKLM\..\Run: [Easy Synchronization] C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe
O4 - HKLM\..\Run: [SDR6V_Check] "C:\Program Files\Fichiers communs\DriveCleaner Free\udcsdr.exe"
O4 - HKLM\..\Run: [WA6PV_Check] "C:\Program Files\Fichiers communs\DriveCleaner Free\udcwap.exe"
O4 - HKLM\..\RunOnce: [Easy Synchronization] C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe --ports
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: wkcalrem.LNK = C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
O8 - Extra context menu item: Ajouter à Kaspersky Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\ie_banner_deny.htm
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin
pjpi142_03.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_03\bin
pjpi142_03.dll
O9 - Extra button: Antivirus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scieplugin.dll
O9 - Extra button: SmartShopper - Compare product prices - {679B2A8D-B2FF-41ed-B3ED-C5CFB8564CB0} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: SmartShopper - Compare travel rates - {9E4DF170-217F-4658-A11F-590664542B73} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} - https://www.fileplanet.com/
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by107w.bay107.mail.live.com/mail/resources/MsnPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O18 - Protocol: bw+0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll
O20 - Winlogon Notify: LBTWlgn - c:\program files\fichiers communs\logitech\bluetooth\LBTWlgn.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Kaspersky Internet Security 6.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" -r (file missing)
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: C-DillaCdaC11BA - C-Dilla Ltd - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech Inc. - C:\Program Files\Fichiers communs\Logitech\Bluetooth\LBTSERV.EXE
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Logitech Easy Synchronization - Unknown owner - C:\Program Files\Logitech\Easy Synchronization\servicestub.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: Washer Security Access (wwSecSvc) - Webroot Software, Inc. - C:\WINDOWS\system32\wwSecure.exe

pouvez vous m'aider ... MERCI !

Utilisateur anonyme · Answer

Bonjour

Qu'as-tu comme pare-feu et anti-spywares ?

julienddd · Answer

Par feu :  Kapersky INternet Security ( il me fait antivirus + parfeu )
anti-saware : Kapersky aussi + ad-aware + spy-bot

Utilisateur anonyme · Answer

Ok.

¤ Clic sur démarrer, poste de travail, C:, program files, fichiers communs et supprime ce dossier :

- DriveCleaner Free

- clic sur démarrer, rechercher, tous les fichiers et dossiers, cherche et supprime :

- ALCXMNTR.EXE

**Si un fichier/dossier persiste lors de la suppression fait ceci:
- Redémarre ton PC. Dès l'allumage de celui-ci tapote la touche F8 (ou F5 si F8 ne fonctionne pas), à l'écran qui va apparaître choisis "mode sans echec" attends un peu.. 
Puis va supprimer les fichiers/dossiers, vide ta corbeille et redémarre ton PC normalement.


¤ Clic sur démarrer, pannea ude configuration, ajouter/supprimer des programmes et désinstalle :

- Desktop Messenger (inutile - suspect)
- Java (si tu en as plusieurs, désinstalle les - plus à jour on les réinstallera après)


¤ Clic sur "démarrer", "exécuter", tape: services.msc 
Cherche dans la liste les lignes ci-dessous, tu fais un clic droit dessus choisis "propriétés" et régle les sur "désactivé"

- Planificateur LiveUpdate automatique
- Boonty Games
- NVIDIA Display Driver Service
- LiveUpdate
-  InstallDriver Table Manager



¤ Télécharge HostsXpert
http://www.funkytoad.com/download/HostsXpert.zip

Dézippe-le sur ton bureau, double clic sur hoster.exe
Sur la droite clic sur "Restore Microsoft's Hosts file"
Puis ferme le programme.



¤ Télécharge SmitfraudFix et enregistre le sur le bureau. Si ton anti-virus t'alerte d'un virus, désactive-le.
http://siri.urz.free.fr/Fix/SmitfraudFix.zip

décompresse SmitfraudFix
Lance le fichier SmitfraudFix ou SmitfraudFix.cmd et choisit l option 1 copie le rapport ici 


ET


¤ Télécharge Clean
----> http://www.malekal.com/download/clean.zip 

Dézippe tout le contenu dans le même dossier. Double clic sur clean ou clean.cmd choisissez l'option 1. 
Un rapport va s'ouvrir, copie et colle le contenu ici stp

julienddd · Answer

voila le rapport de  SmitfraudFix :

SmitFraudFix v2.195

Rapport fait à 23:00:03,67, 16/06/2007
Executé à partir de C:\Documents and Settings\HP_Propri‚taire\Bureau\SmitfraudFix
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
Le type du système de fichiers est NTFS
Fix executé en mode normal

»»»»»»»»»»»»»»»»»»»»»»»» Process

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Fichiers communs\Logitech\Bluetooth\LBTSERV.EXE
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Logitech\Easy Synchronization\servicestub.exe
C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe
C:\WINDOWS\system32
vsvc32.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wwSecure.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\system32\hphmon06.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\WINDOWS\system32undll32.exe
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
C:\Program Files\Logitech\ImageStudio\LogiTray.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\Program Files\Logitech\SetPoint\LBTWiz.exe
C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe
C:\windows\system32\eqotea.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exe
C:\Program Files\Fichiers communs\Logitech\khalshared\KHALMNPR.EXE
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\WINDOWS\system32\cmd.exe

»»»»»»»»»»»»»»»»»»»»»»»» hosts


»»»»»»»»»»»»»»»»»»»»»»»» C:\


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32


»»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\HP_Propri‚taire


»»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\HP_Propri‚taire\Application Data


»»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer


»»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\HP_PRO~1\Favoris


»»»»»»»»»»»»»»»»»»»»»»»» Bureau


»»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files 


»»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues


»»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau
 
 

»»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

SrchSTS.exe by S!Ri
Search SharedTaskScheduler's .dll


»»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
"AppInit_Dlls"="C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll"
"LoadAppInit_DLLs"=dword:00000001


»»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=""


»»»»»»»»»»»»»»»»»»»»»»»» Rustock



»»»»»»»»»»»»»»»»»»»»»»»» DNS

Description: SiS 900-Based PCI Fast Ethernet Adapter - Miniport d'ordonnancement de paquets
DNS Server Search Order: 192.168.0.1

HKLM\SYSTEM\CCS\Services\Tcpip\..\{1EF4D6D9-E09E-43B7-B186-2CA7A5D8DB05}: DhcpNameServer=192.168.0.1
HKLM\SYSTEM\CS1\Services\Tcpip\..\{1EF4D6D9-E09E-43B7-B186-2CA7A5D8DB05}: DhcpNameServer=192.168.0.1
HKLM\SYSTEM\CS3\Services\Tcpip\..\{1EF4D6D9-E09E-43B7-B186-2CA7A5D8DB05}: DhcpNameServer=192.168.0.1
HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1
HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1
HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1


»»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll


»»»»»»»»»»»»»»»»»»»»»»»» Fin


Voila le rapport de Clean :

 16/06/2007 a 23:01:36,17 
 
*** Recherche des fichiers dans C: 
 
*** Recherche des fichiers dans C:\WINDOWS\ 
 
*** Recherche des fichiers dans C:\WINDOWS\system32 
 
*** Recherche des fichiers dans C:\Program Files 
"C:\Program Files\Every Toolbar 1.1\" FOUND 
"C:\Program Files\Free Offers from Freeze.com" FOUND 
*** Fin du rapport ! 


MERCI d'avoir répondu vite ^^

Utilisateur anonyme · Answer

Tu peux jeter smitfraudfix.


Pour Clean :

- Redémarre ton PC. Dès l'allumage de celui-ci tapote la touche F8 (ou F5 si F8 ne fonctionne pas), à l'écran qui va apparaître choisis "mode sans echec" attends un peu.. 
Entre dans le dossier Clean
Double clic sur clean ou clean.cmd et choisis l'option 2
Dès qu'il a terminé redémarre normalement.



¤ Fais un clic droit sur ce lien :Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau.
 http://perso.orange.fr/il.mafioso/Navifix/Navilog1.zip 

Fais un clic droit sur navilog1.zip et choisis "tout extraire"
Ensuite double clique sur navilog1.exe pour lancer l'installation.
Une fois l'installation terminée, le fix s'exécutera automatiquement.
(Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau).

Laisse-toi guider. Au menu principal choisis F, ensuite choisis 1 et valides.
(ne fais pas le choix 2,3 ou 4 sansmon avis)

Patiente jusqu'au message :
*** Analyse Termine le ..... ***

Appuie sur une touche comme demandé, le bloc-note va s'ouvrir.
Copie-colle l'intégralité dans un nouveau message
Le rapport est aussi sauvegardé à la racine du disque (fixnavi.txt)

julienddd · Answer

voila le rapport de Navilog :


Search Navipromo version 2.0.3 commencé le 16/06/2007 à 23:42:30,93
 
!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Poster ce rapport sur le forum pour le faire analyser !!!
!!! Ne pas lancer la partie désinfection sans l'avis d'un spécialiste !!!

Fix lancé depuis C:\Program Files
avilog1
Mise a jour le 08.06.2007 a 17h00 by IL-MAFIOSO

Executé en mode normal

*** Recherche Programmes installes *** 

 


*** Recherche dossiers dans C:\WINDOWS ***




*** Recherche dossiers dans C:\Program Files ***




*** Recherche dossiers dans C:\Documents and Settings\All Users\Application Data ***




*** Recherche dossiers dans C:\Documents and Settings\HP_Propri‚taire\Application Data ***



*** Recherche avec BlackLight Engine/F-secure ***
BlackLight Engine est un produit de F-secure, pour + d'infos :
https://www.f-secure.com/en


F-SECURE BLACKLIGHT ROOTKIT ELIMINATOR
======================================

Copyright 2005-2006 F-Secure Corporation. All rights reserved.
This is a beta version. It will expire on 1st of April, 2007.
Version information: 2.2.1061.

[+] Started on 06/16/07 at 23:42:33.
[+] Initializing ...
[+] Starting scan, press Ctrl-C to abort.
[+] Scanning for hidden items .............................................................................................................................................
[+] Scan complete.
[+] Summary: 0 hidden item(s) found, 0 scheduled for renaming.
[+] Exited on 06/16/07 at 23:57:21 (return code = 0).


*** Recherche fichiers *** 


C:\WINDOWS\pack.epk trouvé !
C:\WINDOWS\system32
vs2.inf trouvé !


*** Recherche cles registre ***


Recherche dans [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs] 
 
 

Recherche dans [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage] 
 
 

Recherche Clé Magic Control 
 
HKEY_CURRENT_USER\Software\Lanconfig trouvé ! 
 
 
*** Module de Recherche complémentaire *** 
(Recherche fichiers spécifiques) 
 
1)Recherche fichiers connus:


2)Recherche Heuristique :
* 
C:\WINDOWS\system32\eqotea.dat trouvé !
C:\WINDOWS\system32\qccmwfcmvh.dat trouvé !
** 
C:\WINDOWS\system32\eqotea.dat trouvé !
C:\WINDOWS\system32\qccmwfcmvh.dat trouvé !
*** 
**** 
C:\WINDOWS\system32\eqotea_navps.dat trouvé !
C:\WINDOWS\system32\qccmwfcmvh_navps.dat trouvé !
***** 
C:\WINDOWS\system32\eqotea_nav.dat trouvé !
C:\WINDOWS\system32\qccmwfcmvh_nav.dat trouvé !
****** 
******* 
******** 
 
 
*** Analyse Terminé le 16/06/2007 à 23:57:49,98 *** 



Voila le rapport de CLean :

Script execute en mode sans echec 
Rapport clean par Malekal_morte - http://www.malekal.com 
Script execute en mode sans echec 16/06/2007 a 23:33:23,48 

Microsoft Windows XP [version 5.1.2600]
 
*** Suppression des fichiers dans C: 
 
*** Suppression des fichiers dans C:\WINDOWS\ 
 
*** Suppression des fichiers dans C:\WINDOWS\system32 
 
*** Suppression des fichiers dans C:\Program Files 
tentative de suppression de "C:\Program Files\Every Toolbar 1.1\" 
tentative de suppression de "C:\Program Files\Free Offers from Freeze.com" 
 
*** Suppression des clefs du registre effectuee.. 
*** Fin du rapport ! 


et bah ! l'analyse était bien longue !

Utilisateur anonyme · Answer

Tu peux jeter Clean


Pour Navilog

Double clique sur le raccourci Navilog1 présent sur le bureau et laisse-toi guider. 
Au menu principal, choisis 2 et valide. 

Le fix va t'informer qu'il va alors redémarrer ton PC 
Ferme toutes les fenêtres ouvertes et enregistre tes documents personnels ouverts
Appuie sur une touche comme demandé.
(si ton Pc ne redémarre pas automatiquement, fais le toi même)
Au redémarrage de ton PC, choisis ta session habituelle.

Patiente jusqu'au message : 
*** Nettoyage Termine le ..... *** 
Le blocnote va s'ouvrir. 
Sauvegarde le rapport de manière à le retrouver 
Referme le blocnote. Ton bureau va réapparaitre 

Si ton bureau ne réapparait pas, appuie en même temps sur les touches CTRL+ALT+SUPP pour ouvrir le gestionnaire de tâches. 
Puis rends-toi à l'onglet "processus". Clique en haut à gauche sur fichiers et choisis "exécuter" 
Tape explorer et valide. Cela te fera apparaitre ton bureau.

julienddd · Answer

Voici le nouveau rapport :


Clean Navipromo version 2.0.3 commencé le 17/06/2007 à  0:07:52,76

Fix lancé depuis C:\Program Files
avilog1
Mise a jour le 08.06.2007 a 17h00 by IL-MAFIOSO

Mode suppression automatique avec prise en charge résultats Blacklight


 
*** fsbl1.txt non trouvé ***
(Assurez-vous que Blacklight n'avait rien trouvé lors de la recherche)
 

*** Suppression dossiers dans C:\WINDOWS ***


*** Suppression dossiers dans C:\Program Files ***


*** Suppression dossiers dans C:\Documents and Settings\All Users\Application Data ***


*** Suppression dossiers dans C:\Documents and Settings\HP_Propri‚taire\Application Data ***



*** Suppression fichiers ***

C:\WINDOWS\pack.epk supprimé !
C:\WINDOWS\system32
vs2.inf supprimé !

*** Suppression fichiers temporaires ***

Nettoyage contenu C:\WINDOWS\Temp effectué !
Nettoyage contenu C:\Documents and Settings\HP_Propri‚taire\Local Settings\Temp effectué !

 
*** Sauvegarde du registre vers dossier Backupnavi*** 
 
 
sauvegarde du registre réalise avec succes !


*** Nettoyage registre ***


Nettoyage registre Ok

*** Traitement Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche fichiers connus:


2)Recherche et Suppression Heuristique :

* 
C:\WINDOWS\System32\eqotea.dat trouvé !
Copie C:\WINDOWS\system32\eqotea.dat réalise avec succes !
C:\WINDOWS\system32\eqotea.dat supprimé !

C:\WINDOWS\System32\qccmwfcmvh.dat trouvé !
Copie C:\WINDOWS\system32\qccmwfcmvh.dat réalise avec succes !
C:\WINDOWS\system32\qccmwfcmvh.dat supprimé !

** 
*** 
**** 
C:\WINDOWS\System32\eqotea_navps.dat trouvé !
Copie C:\WINDOWS\system32\eqotea_navps.dat réalise avec succes !
C:\WINDOWS\system32\eqotea_navps.dat supprimé !

C:\WINDOWS\System32\qccmwfcmvh_navps.dat trouvé !
Copie C:\WINDOWS\system32\qccmwfcmvh_navps.dat réalise avec succes !
C:\WINDOWS\system32\qccmwfcmvh_navps.dat supprimé !

***** 
C:\WINDOWS\System32\eqotea_nav.dat trouvé !
Copie C:\WINDOWS\system32\eqotea_nav.dat réalise avec succes !
C:\WINDOWS\system32\eqotea_nav.dat supprimé !

C:\WINDOWS\System32\qccmwfcmvh_nav.dat trouvé !
Copie C:\WINDOWS\system32\qccmwfcmvh_nav.dat réalise avec succes !
C:\WINDOWS\system32\qccmwfcmvh_nav.dat supprimé !

****** 
******* 
******** 

3)Contrôle présence clés Rootkit dans le registre :

Aucune autre clés présente dans le registre !

*** Nettoyage termine le 17/06/2007 à  0:10:50,46 ***

julienddd · Answer

qu'est ce que je dois faire maintenant ??

Utilisateur anonyme · Answer

Désintalle Navilog via ajouter/supprimer des programmes et remet un rapport hijackthis

julienddd · Answer

Voila le nouveau rapport hijackthis :


Logfile of HijackThis v1.99.1
Scan saved at 12:05:09, on 17/06/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Fichiers communs\Logitech\Bluetooth\LBTSERV.EXE
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Logitech\Easy Synchronization\servicestub.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wwSecure.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\system32\hphmon06.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\WINDOWS\system32undll32.exe
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
C:\Program Files\Logitech\ImageStudio\LogiTray.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\Program Files\Logitech\SetPoint\LBTWiz.exe
C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe
C:\windows\system32\eqotea.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exe
C:\Program Files\Fichiers communs\Logitech\khalshared\KHALMNPR.EXE
C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
C:\Hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.msn.com/fr-fr?cobrand=hp-desktop.msn.com&ocid=HPDHP&pc=HPDTDF
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost;*.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: {1A03F196-9617-4CA0-842B-A83CEECB022B} -  - (no file)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: DgnWebIE - {2843DAC1-05EF-11D2-95BA-0060083493D6} - C:\Program Files\Dragon Systems\NaturallySpeaking\Program\web_ie.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe 
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [PCGUARD] C:\WINDOWS\system32\v30wx32.exe
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
O4 - HKLM\..\Run: [LogitechGalleryRepair] C:\Program Files\Logitech\ImageStudio\ISStart.exe
O4 - HKLM\..\Run: [LogitechImageStudioTray] C:\Program Files\Logitech\ImageStudio\LogiTray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [kis] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [Logitech BT Wizard] LBTWiz.exe -silent
O4 - HKLM\..\Run: [Easy Synchronization] C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe
O4 - HKLM\..\Run: [WA6PV_Check] "C:\Program Files\Fichiers communs\DriveCleaner Free\udcwap.exe"
O4 - HKLM\..\Run: [eqotea] c:\windows\system32\eqotea.exe eqotea
O4 - HKLM\..\RunOnce: [Easy Synchronization] C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe --ports
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: wkcalrem.LNK = C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
O8 - Extra context menu item: Ajouter à Kaspersky Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\ie_banner_deny.htm
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: Antivirus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scieplugin.dll
O9 - Extra button: SmartShopper - Compare product prices - {679B2A8D-B2FF-41ed-B3ED-C5CFB8564CB0} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: SmartShopper - Compare travel rates - {9E4DF170-217F-4658-A11F-590664542B73} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} - https://www.fileplanet.com/
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by107w.bay107.mail.live.com/mail/resources/MsnPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O18 - Protocol: bw+0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {D7C2BCD3-55C9-4D09-8D81-E7D6326D1B06} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll
O20 - Winlogon Notify: LBTWlgn - c:\program files\fichiers communs\logitech\bluetooth\LBTWlgn.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Kaspersky Internet Security 6.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" -r (file missing)
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: C-DillaCdaC11BA - C-Dilla Ltd - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech Inc. - C:\Program Files\Fichiers communs\Logitech\Bluetooth\LBTSERV.EXE
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Logitech Easy Synchronization - Unknown owner - C:\Program Files\Logitech\Easy Synchronization\servicestub.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: Washer Security Access (wwSecSvc) - Webroot Software, Inc. - C:\WINDOWS\system32\wwSecure.exe

Alors ... c'est un peu plus propre ?

julienddd · Answer

Le rapport Hijackthis est-il plus propre qu'au début ??

Utilisateur anonyme · Answer

Tu n'as pas tout appliqué ce que je t'ai demandé .. relis tout.

julienddd · Answer

j'ai bien tout lu et re-lu, et j'ai tout appliqué comme tu me la indiqué...

Utilisateur anonyme · Answer

Comment expliques-tu qu'il reste ce "logiciel" : Desktop Messenger

Et ces services : 
- Planificateur LiveUpdate automatique
- LiveUpdate

julienddd · Answer

Pour Desktop messenger, c'est bon, je viens de l'effacer ... dsl, je croyait pourtant l'avoir fait ...

Sinon pour LiveUpdate et Planificateur LiveUpdate automatique, je ne les ai pas supprimé mais je les ai désactivé comme tu me la demandé : 

             "Cherche dans la liste les lignes ci-dessous, tu fais un clic droit dessus choisis "propriétés" et régle les sur "désactivé"

- Planificateur LiveUpdate automatique
- Boonty Games
- NVIDIA Display Driver Service
- LiveUpdate
- InstallDriver Table Manager "

Voila, j'attends tes nouvelles consignes ... 

PS: encore merci pour ton aide !

julienddd · Answer

J'ai re-regarder  pour ce qui est de LiveUpdate et Planificateur LiveUpdate, ca s'éatto remis en automatique ! Je viens de les re-désactiver.


Voila le nouveau rapport Hijackthis :


Logfile of HijackThis v1.99.1
Scan saved at 18:42:27, on 18/06/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Fichiers communs\Logitech\Bluetooth\LBTSERV.EXE
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Logitech\Easy Synchronization\servicestub.exe
C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wwSecure.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\system32\hphmon06.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\WINDOWS\system32undll32.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
C:\Program Files\Logitech\ImageStudio\LogiTray.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\Program Files\Logitech\SetPoint\LBTWiz.exe
C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe
C:\windows\system32\eqotea.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exe
C:\Program Files\Fichiers communs\Logitech\khalshared\KHALMNPR.EXE
C:\Program Files\Webroot\Washer\wwDisp.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.msn.com/fr-fr?cobrand=hp-desktop.msn.com&ocid=HPDHP&pc=HPDTDF
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost;*.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: {1A03F196-9617-4CA0-842B-A83CEECB022B} -  - (no file)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: DgnWebIE - {2843DAC1-05EF-11D2-95BA-0060083493D6} - C:\Program Files\Dragon Systems\NaturallySpeaking\Program\web_ie.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe 
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [PCGUARD] C:\WINDOWS\system32\v30wx32.exe
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
O4 - HKLM\..\Run: [LogitechGalleryRepair] C:\Program Files\Logitech\ImageStudio\ISStart.exe
O4 - HKLM\..\Run: [LogitechImageStudioTray] C:\Program Files\Logitech\ImageStudio\LogiTray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [kis] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [Logitech BT Wizard] LBTWiz.exe -silent
O4 - HKLM\..\Run: [Easy Synchronization] C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe
O4 - HKLM\..\Run: [WA6PV_Check] "C:\Program Files\Fichiers communs\DriveCleaner Free\udcwap.exe"
O4 - HKLM\..\Run: [eqotea] c:\windows\system32\eqotea.exe eqotea
O4 - HKLM\..\RunOnce: [Easy Synchronization] C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe --ports
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\RunOnce: [Index Washer] C:\Program Files\Webroot\Washer\WashIdx.exe "HP_Propriétaire"
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: wkcalrem.LNK = C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
O8 - Extra context menu item: Ajouter à Kaspersky Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\ie_banner_deny.htm
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: Antivirus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scieplugin.dll
O9 - Extra button: SmartShopper - Compare product prices - {679B2A8D-B2FF-41ed-B3ED-C5CFB8564CB0} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: SmartShopper - Compare travel rates - {9E4DF170-217F-4658-A11F-590664542B73} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} - https://www.fileplanet.com/
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by107w.bay107.mail.live.com/mail/resources/MsnPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll
O20 - Winlogon Notify: LBTWlgn - c:\program files\fichiers communs\logitech\bluetooth\LBTWlgn.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Kaspersky Internet Security 6.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" -r (file missing)
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: C-DillaCdaC11BA - C-Dilla Ltd - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech Inc. - C:\Program Files\Fichiers communs\Logitech\Bluetooth\LBTSERV.EXE
O23 - Service: Logitech Easy Synchronization - Unknown owner - C:\Program Files\Logitech\Easy Synchronization\servicestub.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: Washer Security Access (wwSecSvc) - Webroot Software, Inc. - C:\WINDOWS\system32\wwSecure.exe


J'attends tes prochaines consignes.

Utilisateur anonyme · Answer

Oki !


¤ Rends toi sur se site 
http://www.virustotal.com/en/virustotalx.html 


En haut à droite clic sur "choisir" 
Tu vas dans C:, windows, system32 tu cherches le processus ci-dessous et tu clic sur "ouvrir" 

C:\windows\system32\eqotea.exe

dès que c'est fait, clic sur "send" 
Tu attends un peu qu'il analyse ton fichier ça peut duré plusieurs minutes et colle le rapport ici une fois qu'il a terminé stp



¤ Télécharge ce programme puis double clic dessus (ferme ton antivirus s'il te détecte quoi que ce soit)
http://www.suspectfile.com/systemscan/

* Coche uniquement ces cases, décoche tout le reste :

- Recent Files, 30 days
- Loaded modules
- Hidden objects
- suspucious files
- installed applications

Puis clic sur scan now, soit patient.
Une fois qu'il aura terminé, un rapport va s'ouvrir, copie et colle son contenu ici et vérifie qu'il soit bien en entier, si besoin crée deux messages.

julienddd · Answer

voila le rapport de VIRUSTOTAL :

Complete scanning result of "eqotea.exe", received in VirusTotal at 06.18.2007, 21:03:27 (CET).

Antivirus	Version	Update	Result
AhnLab-V3	2007.6.16.0	06.18.2007	no virus found
AntiVir	7.4.0.32	06.18.2007	no virus found
Authentium	4.93.8	06.18.2007	no virus found
Avast	4.7.997.0	06.18.2007	no virus found
AVG	7.5.0.467	06.18.2007	no virus found
BitDefender	7.2	06.18.2007	no virus found
CAT-QuickHeal	9.00	06.18.2007	no virus found
ClamAV	devel-20070416	06.18.2007	no virus found
DrWeb	4.33	06.18.2007	no virus found
eSafe	7.0.15.0	06.17.2007	no virus found
eTrust-Vet	30.7.3726	06.18.2007	no virus found
Ewido	4.0	06.18.2007	no virus found
FileAdvisor	1	06.18.2007	no virus found
Fortinet	2.85.0.0	06.18.2007	no virus found
F-Prot	4.3.2.48	06.15.2007	no virus found
F-Secure	6.70.13030.0	06.18.2007	no virus found
Ikarus	T3.1.1.8	06.18.2007	no virus found
Kaspersky	4.0.2.24	06.18.2007	no virus found
McAfee	5054	06.15.2007	no virus found
Microsoft	1.2607	06.18.2007	no virus found
NOD32v2	2336	06.18.2007	no virus found
Norman	5.80.02	06.18.2007	no virus found
Panda	9.0.0.4	06.18.2007	Suspicious file
Prevx1	V2	06.18.2007	no virus found
Sophos	4.18.0	06.12.2007	no virus found
Sunbelt	2.2.907.0	06.16.2007	no virus found
Symantec	10	06.18.2007	no virus found
TheHacker	6.1.6.134	06.18.2007	no virus found
VBA32	3.12.0.2	06.15.2007	no virus found
VirusBuster	4.3.23:9	06.18.2007	no virus found
Webwasher-Gateway	6.0.1	06.18.2007	Virus.Win32.FileInfector.gen (suspicious)

Aditional Information
File size: 454144 bytes
MD5: 71f07995bc50b78590d7f8daf190f929
SHA1: b19ee90bfe00cfc6cc837c9dbcee1a3a119efe05


dsl, la présentation n'est pas très clair mais jai pas pu faire autrement. Sinon essaye cette adresse : http://www.virustotal.com/vt/en/resultadox?ddea1c1035c3df0685137b29f6b4a205

Bon, je fait ta deuxième consigne. Je t'envoi le rapport dès que s'est fini.

Utilisateur anonyme · Answer

C'est très clair ;-)

Tu peux jeter : eqotea.exe

julienddd · Answer

voila le rapport de suspectfile :

SystemScan - www.suspectfile.com - ver. 3.1.2

Running on: Windows XP HOME Edition, Service Pack 2 (2600.5.1)
System directory: C:\WINDOWS

Date: 18/06/2007
Time: 21:22:46
  
Output limited to: 
 -Recent files
 -Loaded Dlls
 -Hidden objects
 -Suspicious Files
 -Installed Applications

===================== Recent files (30 days old)=====================

----- recent files in C:\
22/05/2007 17:05:41          78961 byte     27 days old -- MP4debug.log
09/06/2007 12:14:56 (DIR)        0 byte      9 days old -- World of Elendil
16/06/2007 21:59:11 (DIR)        0 byte      2 days old -- a240eff159e7876326f7d7
16/06/2007 22:46:02 (DIR)        0 byte      2 days old -- Documents and Settings
16/06/2007 22:47:25 (DIR)        0 byte      2 days old -- RECYCLER
16/06/2007 22:54:01 (DIR)        0 byte      2 days old -- Config.Msi
16/06/2007 23:00:16           4946 byte      2 days old -- rapport.txt
16/06/2007 23:36:14            630 byte      2 days old -- rapport_clean.txt
17/06/2007 00:06:51 (DIR)        0 byte      1 days old -- Program Files
17/06/2007 00:10:08 (DIR)        0 byte      1 days old -- WINDOWS
17/06/2007 00:10:50           2466 byte      1 days old -- cleannavi.txt
18/06/2007 12:35:00      805306368 byte      0 days old -- pagefile.sys
18/06/2007 12:35:03 (DIR)1610141696 byte      0 days old -- hiberfil.sys
18/06/2007 18:44:27 (DIR)        0 byte      0 days old -- Hijackthis
18/06/2007 21:22:46 (DIR)        0 byte      0 days old -- suspectfile

----- recent files in C:\WINDOWS\
24/05/2007 03:01:08 (DIR)        0 byte     25 days old -- $NtUninstallKB927891$
24/05/2007 03:01:18           8608 byte     25 days old -- KB927891.log
24/05/2007 18:07:24             46 byte     25 days old -- mxcdr.INI
28/05/2007 11:01:09 (DIR)        0 byte     21 days old -- WinSxS
28/05/2007 12:08:15 (DIR)        0 byte     21 days old -- Microsoft.NET
28/05/2007 12:08:36 (DIR)        0 byte     21 days old -- assembly
04/06/2007 19:31:14          30331 byte     14 days old -- Dark and Light Uninstall Log.txt
06/06/2007 15:04:56           8340 byte     12 days old -- ModemLog_Agere Systems PCI Soft Modem.txt
13/06/2007 12:14:03 (DIR)        0 byte      5 days old -- $hf_mig$
13/06/2007 12:18:33         169360 byte      5 days old -- updspapi.log
13/06/2007 12:18:43          22954 byte      5 days old -- KB933566-IE7.log
13/06/2007 12:18:46 (DIR)        0 byte      5 days old -- $NtUninstallKB935839$
13/06/2007 12:18:50          17415 byte      5 days old -- KB935839.log
13/06/2007 12:20:15 (DIR)        0 byte      5 days old -- $NtUninstallKB935840$
13/06/2007 12:20:18          17971 byte      5 days old -- KB935840.log
13/06/2007 12:20:18           1374 byte      5 days old -- imsins.BAK
13/06/2007 12:20:21 (DIR)        0 byte      5 days old -- $NtUninstallKB929123$
13/06/2007 12:20:24         936254 byte      5 days old -- FaxSetup.log
13/06/2007 12:20:24          18761 byte      5 days old -- KB929123.log
13/06/2007 12:20:24         477913 byte      5 days old -- ocgen.log
13/06/2007 12:20:24          47330 byte      5 days old -- msgsocm.log
13/06/2007 12:20:25         193513 byte      5 days old -- ntdtcsetup.log
13/06/2007 12:20:25           1374 byte      5 days old -- imsins.log
13/06/2007 12:20:25         363930 byte      5 days old -- tsoc.log
13/06/2007 12:20:25          51621 byte      5 days old -- ocmsn.log
13/06/2007 12:20:25         316681 byte      5 days old -- comsetup.log
13/06/2007 12:20:25         144205 byte      5 days old -- iis6.log
13/06/2007 21:20:03 (DIR)        0 byte      5 days old -- Fonts
15/06/2007 19:09:37           7781 byte      3 days old -- KB892130.log
15/06/2007 20:03:05             62 byte      3 days old -- SpywareDoctor5Install.log
15/06/2007 21:40:17 (DIR)        0 byte      3 days old -- Minidump
15/06/2007 21:54:51            922 byte      3 days old -- SpywareDoctor5Uninstall.log
16/06/2007 21:49:18 (DIR)        0 byte      2 days old -- inf
16/06/2007 21:49:21         520525 byte      2 days old -- setupapi.log
16/06/2007 21:53:45           1164 byte      2 days old -- win.ini
16/06/2007 21:55:29 (DIR)        0 byte      2 days old -- Downloaded Program Files
16/06/2007 21:57:07 (DIR)        0 byte      2 days old -- system
16/06/2007 21:58:25 (DIR)        0 byte      2 days old -- AppPatch
16/06/2007 22:54:09 (DIR)        0 byte      2 days old -- Installer
16/06/2007 23:31:35         282050 byte      2 days old -- ntbtlog.txt
16/06/2007 23:36:14         234178 byte      2 days old -- setupact.log
17/06/2007 01:14:33 (DIR)        0 byte      1 days old -- system32
18/06/2007 00:19:35          32538 byte      0 days old -- SchedLgU.Txt
18/06/2007 12:35:05           2048 byte      0 days old -- bootstat.dat
18/06/2007 12:35:12             50 byte      0 days old -- wiaservc.log
18/06/2007 12:35:14        1860958 byte      0 days old -- WindowsUpdate.log
18/06/2007 12:35:14            159 byte      0 days old -- wiadebug.log
18/06/2007 12:35:27              0 byte      0 days old -- 0.log
18/06/2007 21:21:38 (DIR)        0 byte      0 days old -- Temp
18/06/2007 21:22:46 (DIR)        0 byte      0 days old -- Prefetch

----- recent files in C:\WINDOWS\Downloaded Program Files\

----- recent files in C:\WINDOWS\system\
18/06/2007 12:35:30            188 byte      0 days old -- hpsysdrv.DAT

----- recent files in C:\WINDOWS\system32\
28/05/2007 11:01:46          63152 byte     21 days old -- perfc009.dat
28/05/2007 11:01:46         402542 byte     21 days old -- perfh009.dat
28/05/2007 11:01:46          76376 byte     21 days old -- perfc00C.dat
28/05/2007 11:01:46         985950 byte     21 days old -- PerfStringBackup.INI
28/05/2007 11:01:46         470040 byte     21 days old -- perfh00C.dat
06/06/2007 08:38:41       15747032 byte     12 days old -- MRT.exe
13/06/2007 12:20:23 (DIR)        0 byte      5 days old -- dllcache
13/06/2007 15:55:25             24 byte      5 days old -- DKRNL.JAX
13/06/2007 23:26:23        1620096 byte      5 days old -- FNTCACHE.DAT
15/06/2007 18:07:36              5 byte      3 days old -- bacacada_g.dll
15/06/2007 18:07:36              5 byte      3 days old -- caffbae6_g.ocx
15/06/2007 21:51:13          28546 byte      3 days old -- iklog.log
16/06/2007 21:46:07         454144 byte      2 days old -- eqotea.exe
16/06/2007 21:48:36          30590 byte      2 days old -- pavas.ico
16/06/2007 21:48:36           1406 byte      2 days old -- Help.ico
16/06/2007 21:48:37           2550 byte      2 days old -- Uninstall.ico
16/06/2007 21:55:09              0 byte      2 days old -- asfiles.txt
16/06/2007 21:55:28 (DIR)        0 byte      2 days old -- ActiveScan
16/06/2007 21:57:26 (DIR)        0 byte      2 days old -- drivers
16/06/2007 21:58:01 (DIR)        0 byte      2 days old -- wbem
16/06/2007 23:00:09           5198 byte      2 days old -- tmp.reg
16/06/2007 23:00:09              0 byte      2 days old -- tmp.txt
17/06/2007 01:13:25             22 byte      1 days old -- nvs2.inf
17/06/2007 01:13:45         268015 byte      1 days old -- eqotea_nav.dat
18/06/2007 12:35:50           7883 byte      0 days old -- nvapps.xml
18/06/2007 12:35:58           1158 byte      0 days old -- wpa.dbl
18/06/2007 12:38:29 (DIR)        0 byte      0 days old -- CatRoot2
18/06/2007 21:22:28           4648 byte      0 days old -- eqotea.dat
18/06/2007 21:22:37            294 byte      0 days old -- eqotea_navps.dat

----- recent files in C:\WINDOWS\system32\drivers\
18/06/2007 00:19:40         203144 byte      0 days old -- fidbox2.idx
18/06/2007 00:19:40         515468 byte      0 days old -- fidbox.idx
18/06/2007 21:21:55       38454560 byte      0 days old -- fidbox.dat
18/06/2007 21:22:02        2146336 byte      0 days old -- fidbox2.dat

----- recent files in C:\WINDOWS	emp\
18/06/2007 13:45:50          16384 byte      0 days old -- ~DF7B7.tmp
18/06/2007 21:18:52           8192 byte      0 days old -- cch~1a37ee9b2d.htp
18/06/2007 21:18:52           8192 byte      0 days old -- cch~1a37ee96cc.htp
18/06/2007 21:19:17           8192 byte      0 days old -- cch~1a3d4a963a.htp
18/06/2007 21:19:17           8192 byte      0 days old -- cch~1a3d4a91d1.htp

----- recent files in C:\Program Files\
22/05/2007 20:27:24 (DIR)        0 byte     27 days old -- FileZilla
24/05/2007 18:08:59 (DIR)        0 byte     25 days old -- VSO
27/05/2007 11:01:59 (DIR)        0 byte     22 days old -- Eggiz
08/06/2007 09:52:53 (DIR)        0 byte     10 days old -- Spybot - Search & Destroy
13/06/2007 12:20:23 (DIR)        0 byte      5 days old -- Outlook Express
13/06/2007 15:54:43 (DIR)        0 byte      5 days old -- Ulead Systems
13/06/2007 23:47:41 (DIR)        0 byte      5 days old -- Adobe
15/06/2007 17:34:20 (DIR)        0 byte      3 days old -- ToniArts
15/06/2007 17:38:40 (DIR)        0 byte      3 days old -- InstallShield Installation Information
15/06/2007 17:38:40 (DIR)        0 byte      3 days old -- EPSON
15/06/2007 17:40:13 (DIR)        0 byte      3 days old -- 3DO
15/06/2007 18:07:35 (DIR)        0 byte      3 days old -- RegSupreme
15/06/2007 18:42:26 (DIR)        0 byte      3 days old -- eMule
15/06/2007 21:51:14 (DIR)        0 byte      3 days old -- Google
15/06/2007 21:55:01 (DIR)        0 byte      3 days old -- Spyware Doctor
16/06/2007 20:27:41 (DIR)        0 byte      2 days old -- MSN Messenger
16/06/2007 20:27:41 (DIR)        0 byte      2 days old -- Windows Live
16/06/2007 20:27:42 (DIR)        0 byte      2 days old -- Messenger Plus! Live
16/06/2007 20:44:22 (DIR)        0 byte      2 days old -- Kaspersky Lab
16/06/2007 21:55:42 (DIR)        0 byte      2 days old -- Internet Explorer
16/06/2007 21:55:58 (DIR)        0 byte      2 days old -- Mozilla Firefox
16/06/2007 21:56:35 (DIR)        0 byte      2 days old -- Messenger
16/06/2007 21:56:55 (DIR)        0 byte      2 days old -- QuickTime
16/06/2007 21:57:32 (DIR)        0 byte      2 days old -- WinRAR
16/06/2007 21:57:44 (DIR)        0 byte      2 days old -- Windows Media Player
16/06/2007 21:58:13 (DIR)        0 byte      2 days old -- Bonjour
16/06/2007 22:47:27 (DIR)        0 byte      2 days old -- Fichiers communs
17/06/2007 12:04:36 (DIR)        0 byte      1 days old -- Navilog1
18/06/2007 12:40:28 (DIR)        0 byte      0 days old -- Logitech
18/06/2007 14:37:28 (DIR)        0 byte      0 days old -- World Of Elendil

----- recent files in C:\Program Files\Fichiers communs\
13/06/2007 12:20:23 (DIR)        0 byte      5 days old -- System
13/06/2007 23:35:01 (DIR)        0 byte      5 days old -- Macrovision Shared
13/06/2007 23:49:13 (DIR)        0 byte      5 days old -- Adobe

===================== loaded Dlls =====================

*** NOTE *** Process xdlvurognh.exe belongs to SystemScan
Already known legit dlls are not shown

------------------------------------------------------------------------------
System pid: 4
Command line: <no command line>
------------------------------------------------------------------------------
smss.exe pid: 572
Command line: \SystemRoot\System32\smss.exe

  Base        Size      Version	        Path
  0x48580000  0xf000                    \SystemRoot\System32\smss.exe
------------------------------------------------------------------------------
csrss.exe pid: 644
Command line: C:\WINDOWS\system32\csrss.exe ObjectDirectory=\Windows SharedSection=1024,3072,512 Windows=On SubSystemType=Windows ServerDll=basesrv,1 ServerDll=winsrv:UserServerDllInitialization,3 ServerDll=winsrv:ConServerDllInitialization,2 ProfileControl=Off MaxRequestThreads=16

  Base        Size      Version	        Path
  0x4a680000  0x5000                    \??\C:\WINDOWS\system32\csrss.exe
  0x75ad0000  0xb000    5.01.2600.2180  C:\WINDOWS\system32\CSRSRV.dll
  0x75ae0000  0x10000   5.01.2600.2180  C:\WINDOWS\system32\basesrv.dll
  0x75af0000  0x4b000   5.01.2600.3103  C:\WINDOWS\system32\winsrv.dll
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
------------------------------------------------------------------------------
winlogon.exe pid: 668
Command line: winlogon.exe

  Base        Size      Version	        Path
  0x01000000  0x81000                   \??\C:\WINDOWS\system32\winlogon.exe
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x77680000  0x11000   5.01.2600.2622  C:\WINDOWS\system32\AUTHZ.dll
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x77390000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x75140000  0x2e000   5.01.2600.2180  C:\WINDOWS\system32\msctfime.ime
  0x10000000  0x7000    6.00.0000.0299  C:\WINDOWS\system32\klogon.dll
  0x016f0000  0x12000   3.30.0165.0000  c:\program files\fichiers communs\logitech\bluetooth\LBTWlgn.dll
  0x01730000  0x21000   3.30.0165.0000  c:\program files\fichiers communs\logitech\bluetooth\LBTServ.dll
  0x01840000  0x3b000   1.07.0017.0000  C:\WINDOWS\system32\WgaLogon.dll
  0x70de0000  0x13000   5.01.2600.2180  C:\WINDOWS\system32\asycfilt.dll
------------------------------------------------------------------------------
services.exe pid: 712
Command line: C:\WINDOWS\system32\services.exe

  Base        Size      Version	        Path
  0x01000000  0x1c000   5.01.2600.2180  C:\WINDOWS\system32\services.exe
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x76a20000  0x53000   5.01.2600.2180  C:\WINDOWS\system32\SCESRV.dll
  0x77680000  0x11000   5.01.2600.2622  C:\WINDOWS\system32\AUTHZ.dll
  0x7dbc0000  0x21000   5.01.2600.2744  C:\WINDOWS\system32\umpnpmgr.dll
  0x76010000  0x65000   6.02.3104.0000  C:\WINDOWS\system32\MSVCP60.dll
  0x5cea0000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\ShimEng.dll
  0x47260000  0xf000    5.01.2600.3008  C:\WINDOWS\AppPatch\AcAdProc.dll
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x77b80000  0x11000   5.01.2600.2180  C:\WINDOWS\system32\eventlog.dll
------------------------------------------------------------------------------
lsass.exe pid: 724
Command line: C:\WINDOWS\system32\lsass.exe

  Base        Size      Version	        Path
  0x01000000  0x6000    5.01.2600.2180  C:\WINDOWS\system32\lsass.exe
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x756b0000  0xb5000   5.01.2600.2976  C:\WINDOWS\system32\LSASRV.dll
  0x76740000  0x13000   5.01.2600.2180  C:\WINDOWS\system32\NTDSAPI.dll
  0x76ed0000  0x27000   5.01.2600.2938  C:\WINDOWS\system32\DNSAPI.dll
  0x743b0000  0x6e000   5.01.2600.2180  C:\WINDOWS\system32\SAMSRV.dll
  0x76730000  0xc000    5.01.2600.2180  C:\WINDOWS\system32\cryptdll.dll
  0x5cea0000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\ShimEng.dll
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x77390000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x20000000  0xe000    5.01.2600.2180  C:\WINDOWS\system32\msprivs.dll
  0x71c50000  0x4b000   5.01.2600.2698  C:\WINDOWS\system32\kerberos.dll
  0x74420000  0x65000   5.01.2600.2180  C:\WINDOWS\system32
etlogon.dll
  0x76760000  0x2d000   5.01.2600.2180  C:\WINDOWS\system32\w32time.dll
  0x76010000  0x65000   6.02.3104.0000  C:\WINDOWS\system32\MSVCP60.dll
  0x76790000  0x27000   5.01.2600.3126  C:\WINDOWS\system32\schannel.dll
  0x742e0000  0xf000    5.01.2600.2874  C:\WINDOWS\system32\wdigest.dll
  0x74370000  0x30000   5.01.2600.2180  C:\WINDOWS\system32\scecli.dll
  0x74340000  0x30000   5.01.2600.2180  C:\WINDOWS\system32\ipsecsvc.dll
  0x77680000  0x11000   5.01.2600.2622  C:\WINDOWS\system32\AUTHZ.dll
  0x75dd0000  0xce000   5.01.2600.2180  C:\WINDOWS\system32\oakley.DLL
  0x742d0000  0xb000    5.01.2600.2180  C:\WINDOWS\system32\WINIPSEC.DLL
  0x74300000  0xb000    5.01.2600.2180  C:\WINDOWS\system32\pstorsvc.dll
  0x71990000  0x40000   5.01.2600.2180  C:\WINDOWS\system32\mswsock.dll
  0x62e40000  0x59000   5.01.2600.2180  C:\WINDOWS\system32\hnetcfg.dll
  0x719d0000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\wshtcpip.dll
  0x74320000  0x1b000   5.01.2600.2180  C:\WINDOWS\system32\psbase.dll
  0x68100000  0x24000   5.01.2600.2133  C:\WINDOWS\system32\dssenh.dll
------------------------------------------------------------------------------
svchost.exe pid: 884
Command line: C:\WINDOWS\system32\svchost -k DcomLaunch

  Base        Size      Version	        Path
  0x01000000  0x6000    5.01.2600.2180  C:\WINDOWS\system32\svchost.exe
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x5cea0000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\ShimEng.dll
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x77390000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x77680000  0x11000   5.01.2600.2622  c:\windows\system32\AUTHZ.dll
  0x76ac0000  0x11000   3.05.2284.0000  c:\windows\system32\ATL.DLL
------------------------------------------------------------------------------
svchost.exe pid: 944
Command line: C:\WINDOWS\system32\svchost -k rpcss

  Base        Size      Version	        Path
  0x01000000  0x6000    5.01.2600.2180  C:\WINDOWS\system32\svchost.exe
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x5cea0000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\ShimEng.dll
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x77390000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x71990000  0x40000   5.01.2600.2180  C:\WINDOWS\system32\mswsock.dll
  0x62e40000  0x59000   5.01.2600.2180  C:\WINDOWS\system32\hnetcfg.dll
  0x719d0000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\wshtcpip.dll
  0x76ed0000  0x27000   5.01.2600.2938  C:\WINDOWS\system32\DNSAPI.dll
  0x16080000  0x19000   1.00.0003.0001  C:\Program Files\Bonjour\mdnsNSP.dll
------------------------------------------------------------------------------
svchost.exe pid: 1012
Command line: C:\WINDOWS\System32\svchost.exe -k netsvcs

  Base        Size      Version	        Path
  0x01000000  0x6000    5.01.2600.2180  C:\WINDOWS\System32\svchost.exe
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x5cea0000  0x26000   5.01.2600.2180  C:\WINDOWS\System32\ShimEng.dll
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\System32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\System32\USP10.dll
  0x77390000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x76ed0000  0x27000   5.01.2600.2938  c:\windows\system32\DNSAPI.dll
  0x71990000  0x40000   5.01.2600.2180  C:\WINDOWS\system32\mswsock.dll
  0x62e40000  0x59000   5.01.2600.2180  C:\WINDOWS\System32\hnetcfg.dll
  0x719d0000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\wshtcpip.dll
  0x76ac0000  0x11000   3.05.2284.0000  c:\windows\system32\ATL.DLL
  0x00ce0000  0x9000    6.00.5441.0000  C:\WINDOWS\system32\Normaliz.dll
  0x43e00000  0x45000   7.00.6000.16473  C:\WINDOWS\system32\iertutil.dll
  *** File timestamp:         Wed Aug 04 09:53:42 2004
  *** Loaded image timestamp: Wed Aug 04 09:58:24 2004
  0x76790000  0x27000   5.01.2600.3126  C:\WINDOWS\System32\SCHANNEL.dll
  0x61300000  0xa000    6.00.0000.0299  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\adialhk.dll
  0x76740000  0x13000   5.01.2600.2180  c:\windows\system32\NTDSAPI.dll
  0x776d0000  0x41000   2001.12.4414.0308  c:\windows\system32\es.dll
  0x74eb0000  0xc000    5.01.2600.2180  c:\windows\pchealth\helpctr\binaries\pchsvc.dll
  0x68d40000  0x9000    5.01.2600.2180  c:\windows\system32\hidserv.dll
  0x76bb0000  0x2f000   5.01.2600.2180  c:\windows\system32\credui.dll
  0x76760000  0x2d000   5.01.2600.2180  c:\windows\system32\w32time.dll
  0x76010000  0x65000   6.02.3104.0000  c:\windows\system32\MSVCP60.dll
  0x4f0b0000  0x28000   5.01.2600.2180  c:\windows\system32\wbem\wmisvc.dll
  0x50000000  0x5000    5.04.3790.2180  c:\windows\system32\wuauserv.dll
  0x50040000  0x14a000  5.08.0000.2469  C:\WINDOWS\system32\wuaueng.dll
  0x44330000  0x2e000   7.00.6000.16473  C:\WINDOWS\System32\ADVPACK.dll
  0x750c0000  0x14000   5.01.2600.2180  C:\WINDOWS\System32\Cabinet.dll
  0x60440000  0xb000    5.01.2600.2180  C:\WINDOWS\System32\mspatcha.dll
  0x77680000  0x11000   5.01.2600.2622  c:\windows\system32\AUTHZ.dll
  0x742d0000  0xb000    5.01.2600.2180  C:\WINDOWS\System32\WINIPSEC.DLL
  0x57f70000  0x36000   5.01.2600.2180  C:\WINDOWS\System32\unimdm.tsp
  0x5b390000  0x16000   5.01.2600.2180  C:\WINDOWS\System32\unimdmat.dll
  0x61a20000  0x29000   5.01.2600.2180  C:\WINDOWS\system32\modemui.dll
  0x57ff0000  0xb000    5.01.2600.2180  C:\WINDOWS\System32\kmddsp.tsp
  0x57fd0000  0x10000   5.01.2600.2180  C:\WINDOWS\System32
dptsp.tsp
  0x58000000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\ipconf.tsp
  0x58020000  0x46000   5.01.2600.2180  C:\WINDOWS\System32\h323.tsp
  0x58010000  0xa000    5.01.2600.2180  C:\WINDOWS\System32\hidphone.tsp
  0x748f0000  0x10e000  8.70.1113.0000  C:\WINDOWS\system32\msxml3.dll
  0x71c50000  0x4b000   5.01.2600.2698  C:\WINDOWS\system32\kerberos.dll
  0x76730000  0xc000    5.01.2600.2180  C:\WINDOWS\System32\cryptdll.dll
  0x16080000  0x19000   1.00.0003.0001  C:\Program Files\Bonjour\mdnsNSP.dll
  0x68100000  0x24000   5.01.2600.2133  C:\WINDOWS\System32\dssenh.dll
  0x70000000  0x9e000   2001.12.4414.0308  C:\WINDOWS\System32\catsrvut.dll
  0x700c0000  0x3d000   2001.12.4414.0308  C:\WINDOWS\System32\catsrv.dll
  0x61d60000  0x9000    2001.12.4414.0258  C:\WINDOWS\System32\MfcSubs.dll
  0x74e40000  0xe000    5.01.2600.2180  C:\WINDOWS\system32\wbem\wbemsvc.dll
------------------------------------------------------------------------------
btwdins.exe pid: 1036
Command line: "C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe"

  Base        Size      Version	        Path
  0x00400000  0x5c000   5.01.0000.2700  C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x77390000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
------------------------------------------------------------------------------
LBTSERV.EXE pid: 1068
Command line: "C:\Program Files\Fichiers communs\Logitech\Bluetooth\LBTSERV.EXE"

  Base        Size      Version	        Path
  0x00400000  0x1d000   3.30.0165.0000  C:\Program Files\Fichiers communs\Logitech\Bluetooth\LBTSERV.EXE
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x74a50000  0x7000    5.01.2600.2180  C:\WINDOWS\system32\CfgMgr32.dll
------------------------------------------------------------------------------
svchost.exe pid: 1232
Command line: C:\WINDOWS\system32\svchost.exe -k NetworkService

  Base        Size      Version	        Path
  0x01000000  0x6000    5.01.2600.2180  C:\WINDOWS\system32\svchost.exe
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x5cea0000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\ShimEng.dll
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x77390000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x76ed0000  0x27000   5.01.2600.2938  c:\windows\system32\DNSAPI.dll
  0x71990000  0x40000   5.01.2600.2180  C:\WINDOWS\system32\mswsock.dll
  0x62e40000  0x59000   5.01.2600.2180  C:\WINDOWS\system32\hnetcfg.dll
  0x719d0000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\wshtcpip.dll
------------------------------------------------------------------------------
svchost.exe pid: 1364
Command line: C:\WINDOWS\system32\svchost.exe -k LocalService

  Base        Size      Version	        Path
  0x01000000  0x6000    5.01.2600.2180  C:\WINDOWS\system32\svchost.exe
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x5cea0000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\ShimEng.dll
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x77390000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x007b0000  0x9000    6.00.5441.0000  C:\WINDOWS\system32\Normaliz.dll
  0x43e00000  0x45000   7.00.6000.16473  C:\WINDOWS\system32\iertutil.dll
  0x62e40000  0x59000   5.01.2600.2180  C:\WINDOWS\system32\hnetcfg.dll
  0x71990000  0x40000   5.01.2600.2180  C:\WINDOWS\system32\mswsock.dll
  0x719d0000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\wshtcpip.dll
  0x68f30000  0x31000   5.01.2600.3077  c:\windows\system32\upnphost.dll
------------------------------------------------------------------------------
explorer.exe pid: 1468
Command line: C:\WINDOWS\Explorer.EXE

  Base        Size      Version	        Path
  0x01000000  0x100000  6.00.2900.2180  C:\WINDOWS\Explorer.EXE
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x75f10000  0xfd000   6.00.2900.3020  C:\WINDOWS\system32\BROWSEUI.dll
  0x77720000  0x170000  6.00.2900.3020  C:\WINDOWS\system32\SHDOCVW.dll
  0x00400000  0x9000    6.00.5441.0000  C:\WINDOWS\system32\Normaliz.dll
  0x43e00000  0x45000   7.00.6000.16473  C:\WINDOWS\system32\iertutil.dll
  0x5cea0000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\ShimEng.dll
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x77390000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x75140000  0x2e000   5.01.2600.2180  C:\WINDOWS\system32\msctfime.ime
  0x5b950000  0x73000   6.00.2900.2180  C:\WINDOWS\system32	hemeui.dll
  0x76310000  0x5000    5.01.2600.2180  C:\WINDOWS\system32\MSIMG32.dll
  0x75d30000  0x91000   6.00.2900.2180  C:\WINDOWS\system32\MLANG.dll
  0x10000000  0x13000                   C:\Program Files\Logitech\Easy Synchronization\shellexecutehook.dll
  0x44360000  0x5cb000  7.00.6000.16473  C:\WINDOWS\system32\ieframe.dll
  0x13420000  0x1a000   11.00.5721.5145  C:\PROGRA~1\WINDOW~2\wmpband.dll
  0x76ac0000  0x11000   3.05.2284.0000  C:\WINDOWS\system32\ATL.DLL
  0x76920000  0x8000    5.01.2600.2751  C:\WINDOWS\system32\LINKINFO.dll
  0x76540000  0x21000   5.01.2600.2180  C:\WINDOWS\system32\stobject.dll
  0x74a60000  0xa000    6.00.2900.2180  C:\WINDOWS\system32\BatMeter.dll
  0x76bb0000  0x2f000   5.01.2600.2180  C:\WINDOWS\system32\credui.dll
  0x5b2a0000  0x3e000   5.01.2600.2180  C:\WINDOWS\system32\upnpui.dll
  0x62e40000  0x59000   5.01.2600.2180  C:\WINDOWS\system32\hnetcfg.dll
  0x71990000  0x40000   5.01.2600.2180  C:\WINDOWS\system32\mswsock.dll
  0x719d0000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\wshtcpip.dll
  0x164a0000  0x23000   5.02.5721.5145  C:\WINDOWS\system32\WPDShServiceObj.dll
  0x01d30000  0x11000   5.01.0000.2700  C:\WINDOWS\system32\btncopy.dll
  0x109c0000  0x2c000   5.02.5721.5145  C:\WINDOWS\system32\PortableDeviceTypes.dll
  0x10930000  0x49000   5.02.5721.5145  C:\WINDOWS\system32\PortableDeviceApi.dll
  0x748f0000  0x10e000  8.70.1113.0000  C:\WINDOWS\system32\msxml3.dll
  0x69270000  0x8d000   5.02.2600.2180  C:\WINDOWS\system32\fxsst.dll
  0x61410000  0x72000   5.02.2600.2180  C:\WINDOWS\system32\FXSAPI.dll
  0x025f0000  0x167000  6.14.0010.6674  C:\WINDOWS\system32
view.dll
  0x02800000  0x49000   6.14.0010.6674  C:\WINDOWS\system32\NVWRSFR.DLL
  0x74690000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x75ef0000  0x7000    5.01.2600.2180  C:\WINDOWS\System32\drprov.dll
  0x71b70000  0xe000    5.01.2600.2180  C:\WINDOWS\System32
tlanman.dll
  0x71c30000  0x17000   5.01.2600.2180  C:\WINDOWS\System32\NETUI0.dll
  0x71bf0000  0x40000   5.01.2600.2180  C:\WINDOWS\System32\NETUI1.dll
  0x75f00000  0x9000    5.01.2600.2180  C:\WINDOWS\System32\davclnt.dll
  0x10100000  0xf000    3.30.0165.0000  C:\Program Files\Logitech\SetPoint\lgscroll.dll
  0x78130000  0x9b000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCR80.dll
  0x7c420000  0x87000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCP80.dll
  0x00cd0000  0x15000   5.01.0000.2700  C:\WINDOWS\system32\btmmhook.dll
  0x60970000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\mslbui.dll
  0x018b0000  0x6b000                   C:\Program Files\Ashampoo\Ashampoo WinOptimizer Platinum 3\ContextHandler.dll
  0x01430000  0x2c000                   C:\Program Files\WinRARarext.dll
  0x67800000  0xa000    6.00.0000.0299  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\shellex.dll
  0x76010000  0x65000   6.02.3104.0000  C:\WINDOWS\system32\MSVCP60.dll
  0x00cc0000  0x7000    6.00.0000.0759  C:\Program Files\ABBYY\FineReader 6.0\FECMenu.dll
  0x02a20000  0x9a000   1.02.0000.0043  C:\PROGRA~1\VSO\COPYTO~1\CTCDSH~1.DLL
  0x71d10000  0x32000   5.01.2600.2180  C:\WINDOWS\system32\syncui.dll
  0x12300000  0x8000    3.30.0165.0000  C:\Program Files\Logitech\SetPoint\IMHook.dll
  0x00c60000  0x13000   6.00.2900.2180  C:\WINDOWS\system32\browselc.dll
  0x6c650000  0x4d000   5.01.2600.2180  C:\WINDOWS\system32\DUSER.dll
  0x00c80000  0x15000   6.14.0010.6674  C:\WINDOWS\system32
vwddi.dll
  0x03650000  0x8e000   6.00.2900.2180  C:\WINDOWS\system32\shdoclc.dll
  0x73e60000  0x5c000   5.03.2600.2180  C:\WINDOWS\system32\DSOUND.dll
  0x4eb80000  0x1a3000  5.01.3102.2180  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll
  0x03410000  0x1c000   7.00.0000.0000  C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll
  0x73af0000  0x14000   5.01.2600.2180  C:\WINDOWS\system32\sti.dll
  0x74a50000  0x7000    5.01.2600.2180  C:\WINDOWS\system32\CFGMGR32.dll
------------------------------------------------------------------------------
spoolsv.exe pid: 1592
Command line: C:\WINDOWS\system32\spoolsv.exe

  Base        Size      Version	        Path
  0x01000000  0x10000   5.01.2600.2696  C:\WINDOWS\system32\spoolsv.exe
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x5cea0000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\ShimEng.dll
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x77390000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x76ed0000  0x27000   5.01.2600.2938  C:\WINDOWS\system32\DNSAPI.dll
  0x50400000  0x14000   1.06.0000.0000  C:\WINDOWS\system32\EBPMON24.DLL
  0x00a90000  0x8000    0.03.1897.0000  C:\WINDOWS\system32\mdimon.dll
  0x69380000  0x9000    5.02.2600.2180  C:\WINDOWS\system32\FXSMON.DLL
  0x693a0000  0x13000   5.02.2600.2180  C:\WINDOWS\system32\FXSEVENT.dll
  0x10000000  0x1d000   5.01.0000.2700  C:\WINDOWS\system32\bthcrp.dll
  0x00dd0000  0x103000  5.01.0000.2700  C:\WINDOWS\system32\WidcommSdk.dll
  0x00ee0000  0xb8000   5.01.0000.2700  C:\WINDOWS\system32\wbtapi.dll
  0x76010000  0x65000   6.02.3104.0000  C:\WINDOWS\system32\MSVCP60.dll
  0x00ac0000  0x8000    0.03.1897.0000  C:\WINDOWS\System32\spool\PRTPROCS\W32X86\mdippr.dll
  0x71990000  0x40000   5.01.2600.2180  C:\WINDOWS\System32\mswsock.dll
  0x16080000  0x19000   1.00.0003.0001  C:\Program Files\Bonjour\mdnsNSP.dll
  0x76740000  0x13000   5.01.2600.2180  C:\WINDOWS\system32\NTDSAPI.dll
------------------------------------------------------------------------------
avp.exe pid: 1704
Command line: "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" -r

------------------------------------------------------------------------------
mDNSResponder.exe pid: 1720
Command line: "C:\Program Files\Bonjour\mDNSResponder.exe"

  Base        Size      Version	        Path
  0x00400000  0x57000   1.00.0003.0001  C:\Program Files\Bonjour\mDNSResponder.exe
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x71990000  0x40000   5.01.2600.2180  C:\WINDOWS\system32\mswsock.dll
  0x62e40000  0x59000   5.01.2600.2180  C:\WINDOWS\system32\hnetcfg.dll
  0x719d0000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\wshtcpip.dll
  0x76ac0000  0x11000   3.05.2284.0000  C:\WINDOWS\system32\ATL.DLL
------------------------------------------------------------------------------
CDAC11BA.EXE pid: 1748
Command line: C:\WINDOWS\system32\drivers\CDAC11BA.EXE

  Base        Size      Version	        Path
  0x00400000  0xe000    4.11.0050.0000  C:\WINDOWS\system32\drivers\CDAC11BA.EXE
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
------------------------------------------------------------------------------
svchost.exe pid: 1824
Command line: C:\WINDOWS\System32\svchost.exe -k HTTPFilter

  Base        Size      Version	        Path
  0x01000000  0x6000    5.01.2600.2180  C:\WINDOWS\System32\svchost.exe
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x5cea0000  0x26000   5.01.2600.2180  C:\WINDOWS\System32\ShimEng.dll
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\System32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\System32\USP10.dll
  0x77390000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x5ada0000  0x7000    6.00.2600.2180  c:\windows\system32\w3ssl.dll
  0x5a1f0000  0x16000   6.00.2600.2180  C:\WINDOWS\System32\strmfilt.dll
  0x679d0000  0x9000    5.01.2600.2180  C:\WINDOWS\System32\HTTPAPI.dll
------------------------------------------------------------------------------
servicestub.exe pid: 1856
Command line: "C:\Program Files\Logitech\Easy Synchronization\servicestub.exe"

  Base        Size      Version	        Path
  0x00400000  0x12000                   C:\Program Files\Logitech\Easy Synchronization\servicestub.exe
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
------------------------------------------------------------------------------
LogitechEasySync.exe pid: 1904
Command line: "C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe" --service

  Base        Size      Version	        Path
  0x00400000  0xd000                    C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x1e000000  0xf0000   2.03.3150.1012  C:\Program Files\Logitech\Easy Synchronization\python23.dll
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x77390000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x1e1c0000  0x9000                    C:\Program Files\Logitech\Easy Synchronization\_winreg.pyd
  0x10000000  0x225000                  C:\Program Files\Logitech\Easy Synchronization\wxc.pyd
  0x00810000  0x372000                  C:\Program Files\Logitech\Easy Synchronization\wxmsw24uh.dll
  0x006f0000  0xd000                    C:\Program Files\Logitech\Easy Synchronization\pybluetooth.pyd
  0x00e10000  0xc000                    C:\Program Files\Logitech\Easy Synchronization\libbluetooth.dll
  0x00e30000  0x7000                    C:\Program Files\Logitech\Easy Synchronization\libwidcommc.dll
  0x7c340000  0x56000   7.10.3052.0004  C:\Program Files\Logitech\Easy Synchronization\MSVCR71.dll
  0x00e50000  0x5b000                   C:\Program Files\Logitech\Easy Synchronization\libwidcommc-2.dll
  0x01320000  0xb8000   5.01.0000.2700  C:\WINDOWS\system32\wbtapi.dll
  0x76010000  0x65000   6.02.3104.0000  C:\WINDOWS\system32\MSVCP60.dll
  0x00ec0000  0x11000                   C:\Program Files\Logitech\Easy Synchronization\win32api.pyd
  0x00ee0000  0x13000                   C:\Program Files\Logitech\Easy Synchronization\pywintypes23.dll
  0x013e0000  0x50000                   C:\Program Files\Logitech\Easy Synchronization\pythoncom23.dll
  0x01430000  0x17000                   C:\Program Files\Logitech\Easy Synchronization\shell.pyd
  0x1e1e0000  0xe000                    C:\Program Files\Logitech\Easy Synchronization\_sre.pyd
  0x00f00000  0x9000                    C:\Program Files\Logitech\Easy Synchronization\win32process.pyd
  0x01450000  0x7000                    C:\Program Files\Logitech\Easy Synchronization\pywidcommc.pyd
  0x01460000  0x30000                   C:\Program Files\Logitech\Easy Synchronization\htmlc.pyd
  0x014a0000  0x6000                    C:\Program Files\Logitech\Easy Synchronization\win32event.pyd
  0x014b0000  0xe000                    C:\Program Files\Logitech\Easy Synchronization\win32security.pyd
  0x1e1d0000  0xc000                    C:\Program Files\Logitech\Easy Synchronization\_socket.pyd
  0x014c0000  0x7c000                   C:\Program Files\Logitech\Easy Synchronization\_ssl.pyd
  0x1e1b0000  0xf000                    C:\Program Files\Logitech\Easy Synchronization\zlib.pyd
  0x01d40000  0x6000                    C:\Program Files\Logitech\Easy Synchronization\pyvspdxp.pyd
  0x01d50000  0x12000                   C:\Program Files\Logitech\Easy Synchronization\win32file.pyd
  0x71990000  0x40000   5.01.2600.2180  C:\WINDOWS\system32\MSWSOCK.dll
  0x01d70000  0x6000                    C:\Program Files\Logitech\Easy Synchronization\win32pipe.pyd
  0x01d80000  0x13000                   C:\Program Files\Logitech\Easy Synchronization\win32gui.pyd
  0x01da0000  0x8000                    C:\Program Files\Logitech\Easy Synchronization\win32pdh.pyd
  0x582e0000  0x6000    2000.85.1117.0000  C:\WINDOWS\system32\odbcbcp.dll
  0x1d100000  0x21000                   C:\Program Files\Logitech\Easy Synchronization\pyexpat.pyd
------------------------------------------------------------------------------
AluSchedulerSvc.exe pid: 1920
Command line: "C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe"

  Base        Size      Version	        Path
  0x00400000  0x17000   3.00.0000.0171  C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x7c3a0000  0x7b000   7.10.3077.0000  C:\Program Files\Symantec\LiveUpdate\MSVCP71.dll
  0x7c340000  0x56000   7.10.3052.0004  C:\Program Files\Symantec\LiveUpdate\MSVCR71.dll
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x77390000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x76ed0000  0x27000   5.01.2600.2938  C:\WINDOWS\system32\DNSAPI.dll
------------------------------------------------------------------------------
StarWindService.exe pid: 992
Command line: "C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe"

  Base        Size      Version	        Path
  0x00400000  0x3a000   2.06.0000.1025  C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x71990000  0x40000   5.01.2600.2180  C:\WINDOWS\System32\mswsock.dll
  0x76ed0000  0x27000   5.01.2600.2938  C:\WINDOWS\system32\DNSAPI.dll
  0x16080000  0x19000   1.00.0003.0001  C:\Program Files\Bonjour\mdnsNSP.dll
  0x62e40000  0x59000   5.01.2600.2180  C:\WINDOWS\system32\hnetcfg.dll
  0x719d0000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\wshtcpip.dll
------------------------------------------------------------------------------
svchost.exe pid: 1156
Command line: C:\WINDOWS\system32\svchost.exe -k imgsvc

  Base        Size      Version	        Path
  0x01000000  0x6000    5.01.2600.2180  C:\WINDOWS\system32\svchost.exe
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x5cea0000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\ShimEng.dll
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x77390000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x75a00000  0x55000   5.01.2600.3051  c:\windows\system32\wiaservc.dll
  0x74a50000  0x7000    5.01.2600.2180  c:\windows\system32\CFGMGR32.dll
  0x73a80000  0x15000   5.01.2600.2709  c:\windows\system32\mscms.dll
  0x5a7b0000  0x26000   5.01.2600.0000  C:\WINDOWS\system32\wiavusd.dll
  0x4eb80000  0x1a3000  5.01.3102.2180  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll
  0x71ca0000  0x1c000   6.00.2900.2180  C:\WINDOWS\system32\actxprxy.dll
  0x73af0000  0x14000   5.01.2600.2180  C:\WINDOWS\system32\sti.dll
------------------------------------------------------------------------------
wwSecure.exe pid: 1320
Command line: C:\WINDOWS\system32\wwSecure.exe

  Base        Size      Version	        Path
  0x00400000  0x7d000   6.00.0001.0010  C:\WINDOWS\system32\wwSecure.exe
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
------------------------------------------------------------------------------
wmpnetwk.exe pid: 2084
Command line: "C:\Program Files\Windows Media Player\WMPNetwk.exe"

  Base        Size      Version	        Path
  0x01000000  0xe5000   11.00.5721.5145  C:\Program Files\Windows Media Player\WMPNetwk.exe
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x679d0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\HTTPAPI.dll
  0x13f30000  0x9c000   11.00.5721.5145  C:\WINDOWS\system32\wmpmde.dll
  0x0bef0000  0x37000   11.00.5721.5145  C:\WINDOWS\system32\MFPlat.DLL
  0x698e0000  0x16000   5.01.2600.2180  C:\WINDOWS\system32\faultrep.dll
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x77390000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x62e40000  0x59000   5.01.2600.2180  C:\WINDOWS\system32\hnetcfg.dll
  0x71990000  0x40000   5.01.2600.2180  C:\WINDOWS\system32\mswsock.dll
  0x719d0000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\wshtcpip.dll
  0x12950000  0xa64000  11.00.5721.5145  C:\WINDOWS\system32\wmp.dll
  0x75ba0000  0x21000   5.01.2600.2180  C:\WINDOWS\system32\MSVFW32.dll
  0x5d3f0000  0xa1000   5.01.2600.2180  C:\WINDOWS\system32\dbghelp.dll
  0x13740000  0x7ea000  11.00.5721.5145  C:\WINDOWS\system32\wmploc.dll
  0x4eb80000  0x1a3000  5.01.3102.2180  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll
  0x71ca0000  0x1c000   6.00.2900.2180  C:\WINDOWS\system32\actxprxy.dll
  0x14030000  0x24000   11.00.5721.5145  C:\WINDOWS\system32\wmpps.dll
------------------------------------------------------------------------------
hpsysdrv.exe pid: 2612
Command line: "C:\windows\system\hpsysdrv.exe" 

  Base        Size      Version	        Path
  0x00400000  0x12000   1.07.0000.0000  C:\windows\system\hpsysdrv.exe
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x75140000  0x2e000   5.01.2600.2180  C:\WINDOWS\system32\msctfime.ime
  0x10000000  0x167000  6.14.0010.6674  C:\WINDOWS\system32
view.dll
  0x77390000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x00e50000  0x49000   6.14.0010.6674  C:\WINDOWS\system32\NVWRSFR.DLL
  0x74690000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x00ea0000  0xf000    3.30.0165.0000  C:\Program Files\Logitech\SetPoint\lgscroll.dll
  0x78130000  0x9b000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCR80.dll
  0x7c420000  0x87000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCP80.dll
------------------------------------------------------------------------------
alg.exe pid: 2648
Command line: C:\WINDOWS\System32\alg.exe

  Base        Size      Version	        Path
  0x01000000  0xd000    5.01.2600.2180  C:\WINDOWS\System32\alg.exe
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x76ac0000  0x11000   3.05.2284.0000  C:\WINDOWS\System32\ATL.DLL
  0x71990000  0x40000   5.01.2600.2180  C:\WINDOWS\System32\MSWSOCK.DLL
  0x5cea0000  0x26000   5.01.2600.2180  C:\WINDOWS\System32\ShimEng.dll
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\System32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\System32\USP10.dll
  0x77390000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x62e40000  0x59000   5.01.2600.2180  C:\WINDOWS\system32\hnetcfg.dll
  0x719d0000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\wshtcpip.dll
------------------------------------------------------------------------------
hphmon06.exe pid: 2968
Command line: "C:\WINDOWS\system32\hphmon06.exe" 

  Base        Size      Version	        Path
  0x00400000  0xb6000   6.00.0072.0000  C:\WINDOWS\system32\hphmon06.exe
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x10000000  0xc000    1.00.0000.0005  C:\WINDOWS\system32\hpzjrd01.dll
  0x00330000  0x7000    4.02.0009.0000  C:\WINDOWS\system32\hpzjfw01.dll
  0x76010000  0x65000   6.02.3104.0000  C:\WINDOWS\system32\MSVCP60.dll
  0x00340000  0x18000   1.00.0000.0003  C:\WINDOWS\system32\HPZJSN01.dll
  0x71f80000  0xe000    5.01.2600.2180  C:\WINDOWS\system32\WSNMP32.dll
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x77390000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x75140000  0x2e000   5.01.2600.2180  C:\WINDOWS\system32\msctfime.ime
  0x74a50000  0x7000    5.01.2600.2180  C:\WINDOWS\system32\cfgmgr32.dll
  0x00b90000  0x167000  6.14.0010.6674  C:\WINDOWS\system32
view.dll
  0x00db0000  0x49000   6.14.0010.6674  C:\WINDOWS\system32\NVWRSFR.DLL
  0x74690000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x10100000  0xf000    3.30.0165.0000  C:\Program Files\Logitech\SetPoint\lgscroll.dll
  0x78130000  0x9b000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCR80.dll
  0x7c420000  0x87000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCP80.dll
------------------------------------------------------------------------------
kbd.exe pid: 3040
Command line: "C:\HP\KBD\KBD.EXE" 

  Base        Size      Version	        Path
  0x63000000  0x11000   1.00.0002.0000  C:\HP\KBD\KBD.EXE
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x77390000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x75140000  0x2e000   5.01.2600.2180  C:\WINDOWS\system32\msctfime.ime
  0x63080000  0xe000    1.00.0002.0000  C:\HP\KBD\led.dll
  0x63190000  0x14000   1.00.0002.0002  C:\HP\KBD\USB.dll
  0x74a50000  0x7000    5.01.2600.2180  C:\WINDOWS\system32\CFGMGR32.dll
  0x63130000  0x11000   1.00.0002.0002  C:\HP\KBD\ps2.dll
  0x630a0000  0xf000    1.00.0002.0002  C:\HP\KBD\msg.dll
  0x63110000  0x1e000   1.00.0002.0002  C:\HP\KBD\osd.dll
  0x63150000  0x15000   1.00.0002.0002  C:\HP\KBD\sct.dll
  0x630e0000  0x10000   1.00.0002.0001  C:\HP\KBD\onl.dll
  0x63020000  0x10000   1.00.0002.0002  C:\HP\KBD\aol.dll
  0x01160000  0x9000    6.00.5441.0000  C:\WINDOWS\system32\Normaliz.dll
  0x43e00000  0x45000   7.00.6000.16473  C:\WINDOWS\system32\iertutil.dll
  0x63170000  0x10000   1.00.0002.0002  C:\HP\KBD\url.dll
  0x63040000  0x18000   1.00.0002.0001  C:\HP\KBD\cfg.dll
  0x72220000  0x5000    5.01.2600.2180  C:\WINDOWS\system32\sensapi.dll
  0x630c0000  0x11000   1.00.0002.0000  C:\HP\KBD\MSIKBDIF.DLL
  0x01e50000  0x11000   7.00.2600.2180  C:\WINDOWS\system32\MSVCIRT.dll
  *** File timestamp:         Wed Aug 04 09:53:42 2004
  *** Loaded image timestamp: Wed Aug 04 09:58:24 2004
  0x61300000  0xa000    6.00.0000.0299  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\adialhk.dll
  0x10000000  0x167000  6.14.0010.6674  C:\WINDOWS\system32
view.dll
  0x028b0000  0x49000   6.14.0010.6674  C:\WINDOWS\system32\NVWRSFR.DLL
  0x74690000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x60970000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\mslbui.dll
  0x025c0000  0xf000    3.30.0165.0000  C:\Program Files\Logitech\SetPoint\lgscroll.dll
  0x78130000  0x9b000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCR80.dll
  0x7c420000  0x87000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCP80.dll
  0x02600000  0x15000   5.01.0000.2700  C:\WINDOWS\system32\btmmhook.dll
------------------------------------------------------------------------------
issch.exe pid: 3084
Command line: "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start

  Base        Size      Version	        Path
  0x00400000  0x15000   3.10.0100.1146  C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x61300000  0xa000    6.00.0000.0299  C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll
  0x10100000  0xf000    3.30.0165.0000  C:\Program Files\Logitech\SetPoint\lgscroll.dll
  0x78130000  0x9b000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCR80.dll
  0x7c420000  0x87000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCP80.dll
  0x74690000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
------------------------------------------------------------------------------
AGRSMMSG.exe pid: 3204
Command line: "C:\WINDOWS\AGRSMMSG.exe" 

  Base        Size      Version	        Path
  0x00400000  0x1b000   2.01.0051.0000  C:\WINDOWS\AGRSMMSG.exe
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x77390000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x75140000  0x2e000   5.01.2600.2180  C:\WINDOWS\system32\msctfime.ime
  0x10000000  0x167000  6.14.0010.6674  C:\WINDOWS\system32
view.dll
  0x00d40000  0x49000   6.14.0010.6674  C:\WINDOWS\system32\NVWRSFR.DLL
  0x74690000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x00da0000  0xf000    3.30.0165.0000  C:\Program Files\Logitech\SetPoint\lgscroll.dll
  0x78130000  0x9b000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCR80.dll
  0x7c420000  0x87000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCP80.dll
------------------------------------------------------------------------------
LVCOMSX.EXE pid: 3312
Command line: "C:\WINDOWS\system32\LVCOMSX.EXE" 

  Base        Size      Version	        Path
  0x00400000  0x38000   8.04.0001.1092  C:\WINDOWS\system32\LVCOMSX.EXE
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x74a50000  0x7000    5.01.2600.2180  C:\WINDOWS\system32\CFGMGR32.dll
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x77390000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x10000000  0x3f000   8.04.0001.1092  C:\WINDOWS\system32\lvmaenum.dll
  0x7c3a0000  0x7b000   7.10.3077.0000  C:\WINDOWS\system32\MSVCP71.dll
  0x7c340000  0x56000   7.10.3052.0004  C:\WINDOWS\system32\MSVCR71.dll
  0x75140000  0x2e000   5.01.2600.2180  C:\WINDOWS\system32\msctfime.ime
  0x01240000  0x167000  6.14.0010.6674  C:\WINDOWS\system32
view.dll
  0x01410000  0x49000   6.14.0010.6674  C:\WINDOWS\system32\NVWRSFR.DLL
  0x01220000  0xf000    7.00.0000.1221  C:\WINDOWS\system32\LVComC.dll
  0x01570000  0x14000   8.04.0001.1092  C:\WINDOWS\system32\lvcomcx.dll
  0x74690000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x10100000  0xf000    3.30.0165.0000  C:\Program Files\Logitech\SetPoint\lgscroll.dll
  0x78130000  0x9b000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCR80.dll
  0x7c420000  0x87000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCP80.dll
------------------------------------------------------------------------------
LogiTray.exe pid: 3704
Command line: "C:\Program Files\Logitech\Video\LogiTray.exe" 

  Base        Size      Version	        Path
  0x00400000  0x36000   8.04.0001.1092  C:\Program Files\Logitech\Video\LogiTray.exe
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x10000000  0x73000   8.04.0001.1092  C:\Program Files\Logitech\Video\QCUI2.dll
  0x73aa0000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\AVIFIL32.dll
  0x75ba0000  0x21000   5.01.2600.2180  C:\WINDOWS\system32\MSVFW32.dll
  0x76310000  0x5000    5.01.2600.2180  C:\WINDOWS\system32\MSIMG32.dll
  0x00440000  0xd7000   12.01.0000.0058  C:\Program Files\Logitech\Video\LTWVC12n.dll
  0x7c140000  0x103000  7.10.3077.0000  C:\WINDOWS\system32\MFC71.DLL
  0x7c340000  0x56000   7.10.3052.0004  C:\WINDOWS\system32\MSVCR71.dll
  0x7c3a0000  0x7b000   7.10.3077.0000  C:\WINDOWS\system32\MSVCP71.dll
  0x1ffc0000  0x27000   12.01.0000.0058  C:\Program Files\Logitech\Video\LTFIL12n.DLL
  0x1fff0000  0x69000   12.01.0000.0058  C:\Program Files\Logitech\Video\LTKRN12n.dll
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x77390000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x5d360000  0xf000    7.10.3077.0000  C:\WINDOWS\system32\MFC71FRA.DLL
  0x00a40000  0x16000   8.04.0001.1092  C:\Program Files\Logitech\Video\LQCUI2.dll
  0x01720000  0x167000  6.14.0010.6674  C:\WINDOWS\system32
view.dll
  0x01930000  0x49000   6.14.0010.6674  C:\WINDOWS\system32\NVWRSFR.DLL
  0x00a90000  0x16000   8.04.0001.1092  C:\Program Files\Logitech\Video\LLogTray.dll
  0x75140000  0x2e000   5.01.2600.2180  C:\WINDOWS\system32\msctfime.ime
  0x01980000  0x15000   6.14.0010.6674  C:\WINDOWS\system32
vwddi.dll
  0x1ff70000  0x44000   12.01.0000.0058  C:\Program Files\Logitech\Video\LTDIS12N.DLL
  0x01dd0000  0x2c000   12.01.0000.0058  C:\Program Files\Logitech\Video\LTIMG12N.DLL
  0x1fc40000  0x37000   12.01.0000.0058  C:\Program Files\Logitech\Video\LTEFX12N.DLL
  0x1fda0000  0x18000   12.01.0000.0020  C:\Program Files\Logitech\Video\LFFAX12N.DLL
  0x1fcb0000  0x56000   12.01.0000.0058  C:\Program Files\Logitech\Video\LFCMP12N.DLL
  0x1fed0000  0x26000   12.01.0000.0058  C:\Program Files\Logitech\Video\LFTIF12N.DLL
  0x1feb0000  0xc000    12.01.0000.0058  C:\Program Files\Logitech\Video\LFBMP12N.DLL
  0x74690000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x03de0000  0x3f000   8.04.0001.1092  C:\WINDOWS\system32\lvmaenum.dll
  0x74a50000  0x7000    5.01.2600.2180  C:\WINDOWS\system32\CFGMGR32.dll
  0x03e20000  0x14000   8.04.0001.1092  C:\WINDOWS\system32\lvcomcx.dll
  0x04350000  0x7000    8.04.0001.1092  C:\Program Files\Logitech\Video\FXSvrps.dll
  0x10100000  0xf000    3.30.0165.0000  C:\Program Files\Logitech\SetPoint\lgscroll.dll
  0x78130000  0x9b000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCR80.dll
  0x7c420000  0x87000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCP80.dll
------------------------------------------------------------------------------
rundll32.exe pid: 3756
Command line: rundll32.exe nview.dll,nViewInitialize

  Base        Size      Version	        Path
  0x01000000  0xb000    5.01.2600.2180  C:\WINDOWS\system32undll32.exe
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x5cea0000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\ShimEng.dll
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x77390000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x10000000  0x167000  6.14.0010.6674  C:\WINDOWS\system32
vie

julienddd · Answer

euh ... comment ça je peut jeter Eqotea.exe ??? je le supprime de mon PC c'est ça ?

julienddd · Answer

partie 2/3 du rapport :

0x10000000  0x167000  6.14.0010.6674  C:\WINDOWS\system32
view.dll
  0x00a90000  0x49000   6.14.0010.6674  C:\WINDOWS\system32\NVWRSFR.DLL
  0x75140000  0x2e000   5.01.2600.2180  C:\WINDOWS\system32\msctfime.ime
  0x00b30000  0x15000   6.14.0010.6674  C:\WINDOWS\system32
vwddi.dll
  0x00be0000  0x72000   6.14.0010.6674  C:\WINDOWS\system32
vshell.dll
  0x74690000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x00c90000  0xf000    3.30.0165.0000  C:\Program Files\Logitech\SetPoint\lgscroll.dll
  0x78130000  0x9b000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCR80.dll
  0x7c420000  0x87000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCP80.dll
------------------------------------------------------------------------------
realsched.exe pid: 3812
Command line: "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot

  Base        Size      Version	        Path
  0x00400000  0x2f000   0.01.0000.3292  C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x77390000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x75140000  0x2e000   5.01.2600.2180  C:\WINDOWS\system32\msctfime.ime
  0x10000000  0x167000  6.14.0010.6674  C:\WINDOWS\system32
view.dll
  0x00f90000  0x49000   6.14.0010.6674  C:\WINDOWS\system32\NVWRSFR.DLL
  0x74690000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x01100000  0xf000    3.30.0165.0000  C:\Program Files\Logitech\SetPoint\lgscroll.dll
  0x78130000  0x9b000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCR80.dll
  0x7c420000  0x87000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCP80.dll
------------------------------------------------------------------------------
LVComS.exe pid: 3928
Command line: "C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE" 

  Base        Size      Version	        Path
  0x00400000  0x18000   7.02.0000.1124  C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x74a50000  0x7000    5.01.2600.2180  C:\WINDOWS\system32\CFGMGR32.dll
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x77390000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x75140000  0x2e000   5.01.2600.2180  C:\WINDOWS\system32\msctfime.ime
  0x74690000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x10100000  0xf000    3.30.0165.0000  C:\Program Files\Logitech\SetPoint\lgscroll.dll
  0x78130000  0x9b000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCR80.dll
  0x7c420000  0x87000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCP80.dll
------------------------------------------------------------------------------
LogiTray.exe pid: 4052
Command line: "C:\Program Files\Logitech\ImageStudio\LogiTray.exe" 

  Base        Size      Version	        Path
  0x00400000  0xc000    7.02.0000.1125  C:\Program Files\Logitech\ImageStudio\LogiTray.exe
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x10000000  0x60000   7.02.0000.1125  C:\Program Files\Logitech\ImageStudio\QCUI.dll
  0x73aa0000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\AVIFIL32.dll
  0x75ba0000  0x21000   5.01.2600.2180  C:\WINDOWS\system32\MSVFW32.dll
  0x76310000  0x5000    5.01.2600.2180  C:\WINDOWS\system32\MSIMG32.dll
  0x00410000  0xd6000   12.01.0000.0011  C:\Program Files\Logitech\ImageStudio\LTWVC12n.dll
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x77390000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x00a00000  0x9000    7.02.0000.1125  C:\Program Files\Logitech\ImageStudio\LQCUI.dll
  0x00ea0000  0x167000  6.14.0010.6674  C:\WINDOWS\system32
view.dll
  0x010b0000  0x49000   6.14.0010.6674  C:\WINDOWS\system32\NVWRSFR.DLL
  0x00a70000  0x4000    7.02.0000.1125  C:\Program Files\Logitech\ImageStudio\LLogTray.dll
  0x75140000  0x2e000   5.01.2600.2180  C:\WINDOWS\system32\msctfime.ime
  0x01210000  0x26000   7.00.0000.1221  C:\WINDOWS\Twain_32\QuickCam\HPortal.dll
  0x5f140000  0x17000   5.01.2600.2180  C:\WINDOWS\system32\OLEPRO32.DLL
  0x01240000  0x75000   7.00.0000.1221  C:\WINDOWS\Twain_32\QuickCam\LHPortal.dll
  0x015c0000  0xf000    7.00.0000.1221  C:\WINDOWS\system32\LVComC.dll
  0x75d30000  0x91000   6.00.2900.2180  C:\WINDOWS\system32\MLANG.dll
  0x43e00000  0x45000   7.00.6000.16473  C:\WINDOWS\system32\iertutil.dll
  0x74690000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x10100000  0xf000    3.30.0165.0000  C:\Program Files\Logitech\SetPoint\lgscroll.dll
  0x78130000  0x9b000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCR80.dll
  0x7c420000  0x87000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCP80.dll
------------------------------------------------------------------------------
qttask.exe pid: 4088
Command line: "C:\Program Files\QuickTime\qttask.exe" -atboottime

  Base        Size      Version	        Path
  0x00400000  0x47000   7.01.0000.0210  C:\Program Files\QuickTime\qttask.exe
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x77390000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x10000000  0x167000  6.14.0010.6674  C:\WINDOWS\system32
view.dll
  0x00b90000  0x49000   6.14.0010.6674  C:\WINDOWS\system32\NVWRSFR.DLL
  0x75140000  0x2e000   5.01.2600.2180  C:\WINDOWS\system32\msctfime.ime
  0x74690000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x00a50000  0xf000    3.30.0165.0000  C:\Program Files\Logitech\SetPoint\lgscroll.dll
  0x78130000  0x9b000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCR80.dll
  0x7c420000  0x87000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCP80.dll
------------------------------------------------------------------------------
avp.exe pid: 228
Command line: "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" 

------------------------------------------------------------------------------
LBTWiz.exe pid: 536
Command line: "C:\Program Files\Logitech\SetPoint\LBTWiz.exe" -silent

  Base        Size      Version	        Path
  0x00400000  0xe000    1.00.0000.0001  C:\Program Files\Logitech\SetPoint\LBTWiz.exe
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x10000000  0x21000   3.30.0165.0000  C:\Program Files\Fichiers communs\Logitech\Bluetooth\LBTServ.dll
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x77390000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x00b40000  0x167000  6.14.0010.6674  C:\WINDOWS\system32
view.dll
  0x00dd0000  0x49000   6.14.0010.6674  C:\WINDOWS\system32\NVWRSFR.DLL
  0x01220000  0x18000   3.30.0165.0000  C:\Program Files\Fichiers communs\Logitech\Bluetooth\lbtintw.dll
  0x01250000  0x68000   5.01.0000.2700  C:\WINDOWS\system32\BtCoreIf.dll
  0x10100000  0xf000    3.30.0165.0000  C:\Program Files\Logitech\SetPoint\lgscroll.dll
  0x78130000  0x9b000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCR80.dll
  0x7c420000  0x87000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCP80.dll
  0x74690000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
------------------------------------------------------------------------------
LogitechEasySync.exe pid: 544
Command line: "C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe" 

  Base        Size      Version	        Path
  0x00400000  0xd000                    C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x1e000000  0xf0000   2.03.3150.1012  C:\Program Files\Logitech\Easy Synchronization\python23.dll
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x77390000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x1e1c0000  0x9000                    C:\Program Files\Logitech\Easy Synchronization\_winreg.pyd
  0x10000000  0x225000                  C:\Program Files\Logitech\Easy Synchronization\wxc.pyd
  0x00af0000  0x372000                  C:\Program Files\Logitech\Easy Synchronization\wxmsw24uh.dll
  0x00ef0000  0x167000  6.14.0010.6674  C:\WINDOWS\system32
view.dll
  0x01100000  0x49000   6.14.0010.6674  C:\WINDOWS\system32\NVWRSFR.DLL
  0x01750000  0xd000                    C:\Program Files\Logitech\Easy Synchronization\pybluetooth.pyd
  0x01760000  0xc000                    C:\Program Files\Logitech\Easy Synchronization\libbluetooth.dll
  0x01780000  0x7000                    C:\Program Files\Logitech\Easy Synchronization\libwidcommc.dll
  0x7c340000  0x56000   7.10.3052.0004  C:\Program Files\Logitech\Easy Synchronization\MSVCR71.dll
  0x017a0000  0x5b000                   C:\Program Files\Logitech\Easy Synchronization\libwidcommc-2.dll
  0x01800000  0xb8000   5.01.0000.2700  C:\WINDOWS\system32\wbtapi.dll
  0x76010000  0x65000   6.02.3104.0000  C:\WINDOWS\system32\MSVCP60.dll
  0x018d0000  0x11000                   C:\Program Files\Logitech\Easy Synchronization\win32api.pyd
  0x018f0000  0x13000                   C:\Program Files\Logitech\Easy Synchronization\pywintypes23.dll
  0x01910000  0x50000                   C:\Program Files\Logitech\Easy Synchronization\pythoncom23.dll
  0x01960000  0x17000                   C:\Program Files\Logitech\Easy Synchronization\shell.pyd
  0x1e1e0000  0xe000                    C:\Program Files\Logitech\Easy Synchronization\_sre.pyd
  0x01a20000  0x6000                    C:\Program Files\Logitech\Easy Synchronization\win32pipe.pyd
  0x01a30000  0x12000                   C:\Program Files\Logitech\Easy Synchronization\win32file.pyd
  0x71990000  0x40000   5.01.2600.2180  C:\WINDOWS\system32\MSWSOCK.dll
  0x01a50000  0x6000                    C:\Program Files\Logitech\Easy Synchronization\win32event.pyd
  0x01a60000  0xe000                    C:\Program Files\Logitech\Easy Synchronization\win32security.pyd
  0x01a80000  0x9000                    C:\Program Files\Logitech\Easy Synchronization\win32process.pyd
  0x01a90000  0x7000                    C:\Program Files\Logitech\Easy Synchronization\pywidcommc.pyd
  0x01aa0000  0x30000                   C:\Program Files\Logitech\Easy Synchronization\htmlc.pyd
  0x022e0000  0x6000                    C:\Program Files\Logitech\Easy Synchronization\pyvspdxp.pyd
  0x022f0000  0x13000                   C:\Program Files\Logitech\Easy Synchronization\win32gui.pyd
  0x02310000  0x8000                    C:\Program Files\Logitech\Easy Synchronization\win32pdh.pyd
  0x582e0000  0x6000    2000.85.1117.0000  C:\WINDOWS\system32\odbcbcp.dll
  0x1d100000  0x21000                   C:\Program Files\Logitech\Easy Synchronization\pyexpat.pyd
  0x02670000  0xa5000                   C:\Program Files\Logitech\Easy Synchronization\win32ui.pyd
  0x02730000  0xa000                    C:\Program Files\Logitech\Easy Synchronization\dde.pyd
  0x74690000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x02890000  0xf000    3.30.0165.0000  C:\Program Files\Logitech\SetPoint\lgscroll.dll
  0x78130000  0x9b000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCR80.dll
  0x7c420000  0x87000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCP80.dll
  0x75140000  0x2e000   5.01.2600.2180  C:\WINDOWS\system32\msctfime.ime
  0x12300000  0x8000    3.30.0165.0000  C:\Program Files\Logitech\SetPoint\IMHook.dll
  0x02e20000  0x15000   5.01.0000.2700  C:\WINDOWS\system32\btmmhook.dll
------------------------------------------------------------------------------
eqotea.exe pid: 640
Command line: "C:\windows\system32\eqotea.exe" eqotea

  Base        Size      Version	        Path
  0x00400000  0x72000                   C:\windows\system32\eqotea.exe
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x62dc0000  0x9000    5.01.2600.2180  C:\windows\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\windows\system32\USP10.dll
  0x00a00000  0x11000   7.00.2600.2180  C:\windows\system32\MSVCIRT.dll
  *** File timestamp:         Wed Aug 04 09:53:42 2004
  *** Loaded image timestamp: Wed Aug 04 09:58:24 2004
  0x77390000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x61300000  0xa000    6.00.0000.0299  C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\adialhk.dll
  0x43e00000  0x45000   7.00.6000.16473  C:\WINDOWS\system32\iertutil.dll
  0x00a60000  0x9000    6.00.5441.0000  C:\WINDOWS\system32\Normaliz.dll
  0x10000000  0x167000  6.14.0010.6674  C:\WINDOWS\system32
view.dll
  0x00de0000  0x49000   6.14.0010.6674  C:\windows\system32\NVWRSFR.DLL
  0x74e60000  0x8000    5.01.2600.2180  C:\WINDOWS\system32\wbem\wbemprox.dll
  0x74e40000  0xe000    5.01.2600.2180  C:\WINDOWS\system32\wbem\wbemsvc.dll
  0x76010000  0x65000   6.02.3104.0000  C:\WINDOWS\system32\MSVCP60.dll
  0x76740000  0x13000   5.01.2600.2180  C:\WINDOWS\system32\NTDSAPI.dll
  0x76ed0000  0x27000   5.01.2600.2938  C:\WINDOWS\system32\DNSAPI.dll
  0x748f0000  0x10e000  8.70.1113.0000  C:\WINDOWS\system32\msxml3.dll
  0x74bf0000  0x2c000   4.02.5406.0000  C:\windows\system32\OLEACC.DLL
  0x44360000  0x5cb000  7.00.6000.16473  C:\WINDOWS\system32\ieframe.dll
  0x44a40000  0x370000  7.00.6000.16481  C:\WINDOWS\system32\mshtml.dll
  0x746c0000  0x29000   3.10.0349.0000  C:\WINDOWS\system32\msls31.dll
  0x75140000  0x2e000   5.01.2600.2180  C:\WINDOWS\system32\msctfime.ime
  0x014a0000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x027d0000  0xf000    3.30.0165.0000  C:\Program Files\Logitech\SetPoint\lgscroll.dll
  0x78130000  0x9b000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCR80.dll
  0x7c420000  0x87000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCP80.dll
  0x12300000  0x8000    3.30.0165.0000  C:\Program Files\Logitech\SetPoint\IMHook.dll
------------------------------------------------------------------------------
ctfmon.exe pid: 2288
Command line: "C:\WINDOWS\system32\ctfmon.exe" 

  Base        Size      Version	        Path
  0x00400000  0x6000    5.01.2600.2180  C:\WINDOWS\system32\ctfmon.exe
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x74690000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x5ffb0000  0x33000   5.01.2600.2180  C:\WINDOWS\system32\MSUTB.dll
  0x5cea0000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\ShimEng.dll
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x77390000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x10000000  0x167000  6.14.0010.6674  C:\WINDOWS\system32
view.dll
  0x00a50000  0x49000   6.14.0010.6674  C:\WINDOWS\system32\NVWRSFR.DLL
  0x75140000  0x2e000   5.01.2600.2180  C:\WINDOWS\system32\msctfime.ime
  0x00bb0000  0xf000    3.30.0165.0000  C:\Program Files\Logitech\SetPoint\lgscroll.dll
  0x78130000  0x9b000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCR80.dll
  0x7c420000  0x87000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCP80.dll
------------------------------------------------------------------------------
msmsgs.exe pid: 716
Command line: "C:\Program Files\Messenger\msmsgs.exe" /background

  Base        Size      Version	        Path
  0x01000000  0x1a3000  4.07.0000.3001  C:\Program Files\Messenger\msmsgs.exe
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x77390000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\X86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\COMCTL32.dll
  0x4eb80000  0x1a3000  5.01.3102.2180  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll
  0x76310000  0x5000    5.01.2600.2180  C:\WINDOWS\system32\MSIMG32.dll
  0x00400000  0x9000    6.00.5441.0000  C:\WINDOWS\system32\Normaliz.dll
  0x43e00000  0x45000   7.00.6000.16473  C:\WINDOWS\system32\iertutil.dll
  0x76730000  0xc000    5.01.2600.2180  C:\WINDOWS\system32\cryptdll.dll
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x74690000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x10000000  0x167000  6.14.0010.6674  C:\WINDOWS\system32
view.dll
  0x00b10000  0x49000   6.14.0010.6674  C:\WINDOWS\system32\NVWRSFR.DLL
  0x20000000  0x6e000   5.01.2600.2180  C:\WINDOWS\system32\XPOB2RES.DLL
  0x75140000  0x2e000   5.01.2600.2180  C:\WINDOWS\system32\msctfime.ime
  0x776d0000  0x41000   2001.12.4414.0308  C:\WINDOWS\system32\es.dll
  0x76bb0000  0x2f000   5.01.2600.2180  C:\WINDOWS\system32\credui.dll
  0x011b0000  0xf000    3.30.0165.0000  C:\Program Files\Logitech\SetPoint\lgscroll.dll
  0x78130000  0x9b000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCR80.dll
  0x7c420000  0x87000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCP80.dll
------------------------------------------------------------------------------
wmpnscfg.exe pid: 1996
Command line: "C:\Program Files\Windows Media Player\WMPNSCFG.exe" 

  Base        Size      Version	        Path
  0x01000000  0x34000   11.00.5721.5145  C:\Program Files\Windows Media Player\WMPNSCFG.exe
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x4eb80000  0x1a3000  5.01.3102.2180  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x74690000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x10000000  0x167000  6.14.0010.6674  C:\WINDOWS\system32
view.dll
  0x77390000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\COMCTL32.dll
  0x00be0000  0x49000   6.14.0010.6674  C:\WINDOWS\system32\NVWRSFR.DLL
  0x75140000  0x2e000   5.01.2600.2180  C:\WINDOWS\system32\msctfime.ime
  0x13fe0000  0x34000   11.00.5721.5145  C:\Program Files\Windows Media Player\wmpnssci.dll
  0x00d70000  0xf000    3.30.0165.0000  C:\Program Files\Logitech\SetPoint\lgscroll.dll
  0x78130000  0x9b000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCR80.dll
  0x7c420000  0x87000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCP80.dll
------------------------------------------------------------------------------
BTTray.exe pid: 2868
Command line: "C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe" 

  Base        Size      Version	        Path
  0x00400000  0xc5000   5.01.0000.2700  C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x10000000  0xb8000   5.01.0000.2700  C:\WINDOWS\system32\wbtapi.dll
  0x76010000  0x65000   6.02.3104.0000  C:\WINDOWS\system32\MSVCP60.dll
  *** File timestamp:         Wed Aug 04 09:53:42 2004
  *** Loaded image timestamp: Wed Aug 04 09:58:24 2004
  0x00340000  0x20000   5.01.0000.2700  C:\WINDOWS\system32\btosif.dll
  0x00360000  0x39000   5.01.0000.2700  C:\WINDOWS\system32\btwhidcs.DLL
  0x74a50000  0x7000    5.01.2600.2180  C:\WINDOWS\system32\CFGMGR32.dll
  0x77390000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\COMCTL32.dll
  0x003b0000  0xd000    5.01.0000.2700  C:\Program Files\WIDCOMM\Bluetooth Software\BtBalloon.dll
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x61300000  0xa000    6.00.0000.0299  C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll
  0x00a90000  0x30b000  5.01.0000.2700  C:\WINDOWS\system32\btrez.dll
  0x74690000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x00e40000  0x167000  6.14.0010.6674  C:\WINDOWS\system32
view.dll
  0x01060000  0x49000   6.14.0010.6674  C:\WINDOWS\system32\NVWRSFR.DLL
  0x012b0000  0x15000   5.01.0000.2700  C:\WINDOWS\system32\btmmhook.dll
  0x10100000  0xf000    3.30.0165.0000  C:\Program Files\Logitech\SetPoint\lgscroll.dll
  0x78130000  0x9b000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCR80.dll
  0x7c420000  0x87000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCP80.dll
------------------------------------------------------------------------------
FxSvr2.exe pid: 2892
Command line: "C:\Program Files\Logitech\Video\FxSvr2.exe" -Embedding

  Base        Size      Version	        Path
  0x00400000  0x30000   8.04.0001.1092  C:\Program Files\Logitech\Video\FxSvr2.exe
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x7c140000  0x103000  7.10.3077.0000  C:\WINDOWS\system32\MFC71.DLL
  0x7c340000  0x56000   7.10.3052.0004  C:\WINDOWS\system32\MSVCR71.dll
  0x7c3a0000  0x7b000   7.10.3077.0000  C:\WINDOWS\system32\MSVCP71.dll
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x5d360000  0xf000    7.10.3077.0000  C:\WINDOWS\system32\MFC71FRA.DLL
  0x74690000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x10000000  0x167000  6.14.0010.6674  C:\WINDOWS\system32
view.dll
  0x77390000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x00bc0000  0x49000   6.14.0010.6674  C:\WINDOWS\system32\NVWRSFR.DLL
  0x01110000  0x3f000   8.04.0001.1092  C:\WINDOWS\system32\lvmaenum.dll
  0x74a50000  0x7000    5.01.2600.2180  C:\WINDOWS\system32\CFGMGR32.dll
  0x00b50000  0x14000   8.04.0001.1092  C:\WINDOWS\system32\lvcomcx.dll
  0x75140000  0x2e000   5.01.2600.2180  C:\WINDOWS\system32\msctfime.ime
  0x01270000  0x7000    8.04.0001.1092  C:\Program Files\Logitech\Video\FXSvrps.dll
  0x00f10000  0xf000    3.30.0165.0000  C:\Program Files\Logitech\SetPoint\lgscroll.dll
  0x78130000  0x9b000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCR80.dll
  0x7c420000  0x87000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCP80.dll
------------------------------------------------------------------------------
hpqtra08.exe pid: 2952
Command line: "C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe" 

  Base        Size      Version	        Path
  0x00400000  0x3b000   43.01.0005.0000  C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x76010000  0x65000   6.02.3104.0000  C:\WINDOWS\system32\MSVCP60.dll
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x74690000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x10000000  0x167000  6.14.0010.6674  C:\WINDOWS\system32
view.dll
  0x77390000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x00b90000  0x49000   6.14.0010.6674  C:\WINDOWS\system32\NVWRSFR.DLL
  0x75140000  0x2e000   5.01.2600.2180  C:\WINDOWS\system32\msctfime.ime
  0x14a00000  0x23000   43.01.0005.0000  c:\Program Files\HP\Digital Imaging\bin\hpqcxm08.dll
  0x14000000  0x16000   43.01.0005.0000  c:\Program Files\HP\Digital Imaging\bin\hpquio08.dll
  0x15000000  0xb000    43.01.0005.0000  C:\Program Files\HP\Digital Imaging\bin\hpqtra08.rsc
  0x15800000  0xf000    43.01.0005.0000  c:\Program Files\HP\Digital Imaging\bin\hpqtao08.dll
  0x00e00000  0xf000    3.30.0165.0000  C:\Program Files\Logitech\SetPoint\lgscroll.dll
  0x78130000  0x9b000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCR80.dll
  0x7c420000  0x87000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCP80.dll
  0x00e40000  0x1f000   4.00.0000.0204  c:\Program Files\HP\Digital Imaging\Unload\hpiCamTA.dll
  0x7c140000  0x103000  7.10.3077.0000  C:\WINDOWS\system32\MFC71.DLL
  0x7c340000  0x56000   7.10.3052.0004  C:\WINDOWS\system32\MSVCR71.dll
  0x7c120000  0x19000   7.10.3077.0000  C:\WINDOWS\system32\ATL71.DLL
  0x7c3a0000  0x7b000   7.10.3077.0000  C:\WINDOWS\system32\MSVCP71.dll
  0x5d360000  0xf000    7.10.3077.0000  C:\WINDOWS\system32\MFC71FRA.DLL
  0x00e70000  0x1c000   4.00.0000.0204  c:\Program Files\HP\Digital Imaging\Unload\HpqUnRes.dll
  0x16600000  0x34000   43.00.0213.0000  c:\Program Files\HP\Digital Imaging\bin\hpotra08.dll
  0x74a50000  0x7000    5.01.2600.2180  C:\WINDOWS\system32\CFGMGR32.dll
  0x16750000  0x7000    43.00.0213.0000  c:\Program Files\HP\Digital Imaging\bin\hpotra08.rsc
  0x00fb0000  0xd000    43.00.0213.0000  c:\Program Files\HP\Digital Imaging\bin\hpotradd.dll
  0x00fc0000  0x30000   4.00.0000.0204  c:\Program Files\HP\Digital Imaging\bin\HpqUtil.dll
  0x3ab00000  0x12000   43.00.0213.0000  c:\Program Files\HP\Digital Imaging\bin\hpodvd09.dll
  0x3af00000  0x19000   43.00.0213.0000  C:\Program Files\HP\Digital Imaging\bin\hpoddcomm09.dll
------------------------------------------------------------------------------
SetPoint.exe pid: 3156
Command line: "C:\Program Files\Logitech\SetPoint\SetPoint.exe" 

  Base        Size      Version	        Path
  0x00400000  0xa9000   3.30.0165.0000  C:\Program Files\Logitech\SetPoint\SetPoint.exe
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x10700000  0x27000   3.30.0165.0000  C:\WINDOWS\system32\KemUtil.dll
  0x782e0000  0x10c000  8.00.50727.0042  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_dec6ddd2\MFC80U.DLL
  0x78130000  0x9b000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCR80.dll
  0x7c420000  0x87000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCP80.dll
  0x12a00000  0xa000    3.30.0165.0000  C:\Program Files\Logitech\SetPoint\SetPointCOM.dll
  0x10800000  0x2a000   3.30.0165.0000  C:\WINDOWS\system32\kemutb.dll
  0x10b00000  0x1b000   3.30.0165.0000  C:\WINDOWS\system32\KemWnd.dll
  0x76310000  0x5000    5.01.2600.2180  C:\WINDOWS\system32\MSIMG32.dll
  0x4eb80000  0x1a3000  5.01.3102.2180  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll
  0x10900000  0x11000   3.30.0165.0000  C:\WINDOWS\system32\KemXML.dll
  0x10100000  0xf000    3.30.0165.0000  C:\Program Files\Logitech\SetPoint\lgscroll.dll
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x5d360000  0xf000    8.00.50727.0042  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_3415f6d0\MFC80FRA.DLL
  0x77390000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x74690000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x00c20000  0x167000  6.14.0010.6674  C:\WINDOWS\system32
view.dll
  0x10000000  0x49000   6.14.0010.6674  C:\WINDOWS\system32\NVWRSFR.DLL
  0x75140000  0x2e000   5.01.2600.2180  C:\WINDOWS\system32\msctfime.ime
  0x10600000  0xe5000   3.30.0165.0000  C:\Program Files\Logitech\SetPoint\Macros\MacroCore.dll
  0x1f900000  0x25000   3.30.0165.0000  C:\Program Files\Logitech\SetPoint\WebBrowserSupport.dll
  0x12300000  0x8000    3.30.0165.0000  C:\Program Files\Logitech\SetPoint\IMHook.dll
  0x7c630000  0x1b000   8.00.50727.0042  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_6e805841\ATL80.DLL
  0x01190000  0x64000   3.30.0165.0000  C:\Program Files\Fichiers communs\Logitech\khalshared\KhalApi.dll
  0x01450000  0x21000   3.30.0165.0000  C:\Program Files\Fichiers communs\Logitech\bluetooth\LBTServ.dll
  0x10e00000  0x11000   3.30.0165.0000  C:\Program Files\Logitech\SetPoint\kgame.dll
  0x10d00000  0xf000    3.30.0165.0000  C:\Program Files\Logitech\SetPoint\GameHook.dll
  0x44360000  0x5cb000  7.00.6000.16473  C:\WINDOWS\system32\ieframe.dll
  0x43e00000  0x45000   7.00.6000.16473  C:\WINDOWS\system32\iertutil.dll
  0x01710000  0x13000                   C:\Program Files\Logitech\Easy Synchronization\shellexecutehook.dll
  0x01750000  0x18000   3.30.0165.0000  C:\Program Files\Fichiers communs\Logitech\bluetooth\lbtintw.dll
  0x01780000  0x68000   5.01.0000.2700  C:\WINDOWS\system32\BtCoreIf.dll
  0x10a00000  0x1f000   3.30.0165.0000  C:\Program Files\Logitech\SetPoint\LCabHandler.dll
  0x10f00000  0x2a000   3.30.0165.0000  C:\Program Files\Logitech\SetPoint\Macros\MacroEmail.dll
  0x10300000  0x9000    3.30.0165.0000  C:\Program Files\Logitech\SetPoint\KEMHook.dll
  0x01980000  0x3d000   3.30.0165.0000  C:\Program Files\Logitech\SetPoint\Macros\MacroMedia.dll
  0x10500000  0x15000   3.30.0165.0000  C:\Program Files\Logitech\SetPoint\Macros\MacroBT.dll
  0x11f00000  0x44000   3.30.0165.0000  C:\Program Files\Logitech\SetPoint\Mx5000.dll
  0x75d30000  0x91000   6.00.2900.2180  C:\WINDOWS\system32\MLANG.dll
------------------------------------------------------------------------------
BTSTAC~1.EXE pid: 3380
Command line: C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE -Embedding

  Base        Size      Version	        Path
  0x00400000  0x371000  5.01.0000.2700  C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x10000000  0x90000   5.01.0000.2700  C:\WINDOWS\system32\btins.dll
  0x76010000  0x65000   6.02.3104.0000  C:\WINDOWS\system32\MSVCP60.dll
  0x00330000  0x20000   5.01.0000.2700  C:\WINDOWS\system32\btosif.dll
  0x00350000  0x14000   5.01.0000.2700  C:\WINDOWS\system32\BtAudioHelper.dll
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x77390000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x00d40000  0x30b000  5.01.0000.2700  C:\WINDOWS\system32\btrez.dll
  0x01050000  0x35000   5.01.0000.2700  C:\WINDOWS\system32\btosif_ol.dll
  0x00d00000  0x25000   5.01.0000.2700  C:\WINDOWS\system32\btosif_olx.dll
  0x61dd0000  0x23000   1.00.2536.0000  C:\WINDOWS\system32\MAPI32.dll
  0x01090000  0x29000   5.01.0000.2700  C:\WINDOWS\system32\btosif_notes.dll
  0x74690000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x01880000  0x167000  6.14.0010.6674  C:\WINDOWS\system32
view.dll
  0x01aa0000  0x49000   6.14.0010.6674  C:\WINDOWS\system32\NVWRSFR.DLL
  0x75140000  0x2e000   5.01.2600.2180  C:\WINDOWS\system32\msctfime.ime
  0x10100000  0xf000    3.30.0165.0000  C:\Program Files\Logitech\SetPoint\lgscroll.dll
  0x78130000  0x9b000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCR80.dll
  0x7c420000  0x87000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCP80.dll

julienddd · Answer

partie 3 /4 du rapport :

------------------------------------------------------------------------------
WkCalRem.exe pid: 3500
Command line: "C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exe" 

  Base        Size      Version	        Path
  0x00400000  0x6000    8.04.0623.0000  C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exe
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x7c340000  0x56000   7.10.3052.0004  C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\MSVCR71.dll
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x74690000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x10000000  0x167000  6.14.0010.6674  C:\WINDOWS\system32
view.dll
  0x77390000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x00c90000  0x49000   6.14.0010.6674  C:\WINDOWS\system32\NVWRSFR.DLL
  0x00bd0000  0xf000    3.30.0165.0000  C:\Program Files\Logitech\SetPoint\lgscroll.dll
  0x78130000  0x9b000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCR80.dll
  0x7c420000  0x87000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCP80.dll
  0x75140000  0x2e000   5.01.2600.2180  C:\WINDOWS\system32\msctfime.ime
------------------------------------------------------------------------------
KHALMNPR.exe pid: 3680
Command line: KHALMNPR.EXE /API

  Base        Size      Version	        Path
  0x00400000  0x18000   3.30.0152.0000  C:\Program Files\Fichiers communs\Logitech\khalshared\KHALMNPR.EXE
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x10000000  0x64000   3.30.0165.0000  C:\Program Files\Fichiers communs\Logitech\khalshared\KHALAPI.DLL
  0x77390000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x74690000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x00fc0000  0x167000  6.14.0010.6674  C:\WINDOWS\system32
view.dll
  0x01260000  0x49000   6.14.0010.6674  C:\WINDOWS\system32\NVWRSFR.DLL
  0x10100000  0xf000    3.30.0165.0000  C:\Program Files\Logitech\SetPoint\lgscroll.dll
  0x78130000  0x9b000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCR80.dll
  0x7c420000  0x87000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCP80.dll
  0x75140000  0x2e000   5.01.2600.2180  C:\WINDOWS\system32\msctfime.ime
  0x012f0000  0x21000   3.30.0165.0000  C:\Program Files\Fichiers communs\Logitech\bluetooth\LBTServ.dll
  0x74a50000  0x7000    5.01.2600.2180  C:\WINDOWS\system32\cfgmgr32.dll
  0x01340000  0x3f000   3.30.0165.0000  C:\Program Files\Fichiers communs\Logitech\khalshared\KHALITCH.DLL
  0x013a0000  0x48000   3.30.0165.0000  C:\Program Files\Fichiers communs\Logitech\khalshared\KHALMW.DLL
  0x01410000  0x66000   3.30.0165.0000  C:\Program Files\Fichiers communs\Logitech\khalshared\KHALHPP.DLL
  0x014a0000  0x57000   3.30.0165.0000  C:\Program Files\Fichiers communs\Logitech\khalshared\KHALMOU.DLL
  0x01520000  0x50000   3.30.0165.0000  C:\Program Files\Fichiers communs\Logitech\khalshared\KHALHID.DLL
  0x01590000  0x4f000   3.30.0165.0000  C:\Program Files\Fichiers communs\Logitech\khalshared\KHALUSB.DLL
  0x01900000  0x18000   3.30.0165.0000  C:\Program Files\Fichiers communs\Logitech\bluetooth\lbtintw.dll
  0x01930000  0x68000   5.01.0000.2700  C:\WINDOWS\system32\BtCoreIf.dll
------------------------------------------------------------------------------
wwDisp.exe pid: 2200
Command line: "C:\Program Files\Webroot\Washer\wwDisp.exe" /shortcut

  Base        Size      Version	        Path
  0x00400000  0xa98000  6.00.0002.0466  C:\Program Files\Webroot\Washer\wwDisp.exe
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x77390000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x43e00000  0x45000   7.00.6000.16473  C:\WINDOWS\system32\iertutil.dll
  0x00340000  0x9000    6.00.5441.0000  C:\WINDOWS\system32\Normaliz.dll
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x12300000  0x8000    3.30.0165.0000  C:\Program Files\Logitech\SetPoint\IMHook.dll
  0x78130000  0x9b000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCR80.dll
  0x74690000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x10000000  0x167000  6.14.0010.6674  C:\WINDOWS\system32
view.dll
  0x01970000  0x49000   6.14.0010.6674  C:\WINDOWS\system32\NVWRSFR.DLL
  0x019c0000  0xf000    3.30.0165.0000  C:\Program Files\Logitech\SetPoint\lgscroll.dll
  0x7c420000  0x87000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCP80.dll
  0x75140000  0x2e000   5.01.2600.2180  C:\WINDOWS\system32\msctfime.ime
  0x01a10000  0x15000   5.01.0000.2700  C:\WINDOWS\system32\btmmhook.dll
  0x01b70000  0x21000                   C:\Program Files\Webroot\Washer\Languages\French.dll
  0x60970000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\mslbui.dll
  0x73230000  0x5000    5.01.2600.0000  C:\WINDOWS\system32\RICHED32.DLL
  0x74da0000  0x6c000   5.30.0023.1228  C:\WINDOWS\system32\RICHED20.dll
  0x02d80000  0x15000   6.14.0010.6674  C:\WINDOWS\system32
vwddi.dll
  0x77720000  0x170000  6.00.2900.3020  C:\WINDOWS\system32\shdocvw.dll
  0x03410000  0x11000   5.01.0000.2700  C:\WINDOWS\system32\btncopy.dll
  0x76ac0000  0x11000   3.05.2284.0000  C:\WINDOWS\system32\ATL.DLL
  0x44360000  0x5cb000  7.00.6000.16473  C:\WINDOWS\system32\ieframe.dll
  0x75d30000  0x91000   6.00.2900.2180  C:\WINDOWS\system32\MLANG.dll
------------------------------------------------------------------------------
firefox.exe pid: 3452
Command line: "C:\PROGRA~1\MOZILL~1\FIREFOX.EXE" -url "https://www.google.fr/?gws_rd=ssl" -requestPending

  Base        Size      Version	        Path
  0x00400000  0x75e000  1.08.20070.51502  C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x600d0000  0x71000   4.00.0000.0000  C:\PROGRA~1\MOZILL~1\js3250.dll
  0x601a0000  0x27000   4.06.0007.0000  C:\PROGRA~1\MOZILL~1
spr4.dll
  0x60350000  0x6a000   1.08.20070.51502  C:\PROGRA~1\MOZILL~1\xpcom_core.dll
  0x60270000  0x7000    4.06.0007.0000  C:\PROGRA~1\MOZILL~1\plc4.dll
  0x60280000  0x6000    4.06.0007.0000  C:\PROGRA~1\MOZILL~1\plds4.dll
  0x602a0000  0x1a000   3.11.0005.0000  C:\PROGRA~1\MOZILL~1\smime3.dll
  0x601d0000  0x5b000   3.11.0005.0000  C:\PROGRA~1\MOZILL~1
ss3.dll
  0x602c0000  0x3f000   3.11.0004.0000  C:\PROGRA~1\MOZILL~1\softokn3.dll
  0x60300000  0x20000   3.11.0005.0000  C:\PROGRA~1\MOZILL~1\ssl3.dll
  0x60330000  0x14000   1.08.20070.51502  C:\PROGRA~1\MOZILL~1\xpcom_compat.dll
  0x77390000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\COMCTL32.dll
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x12300000  0x8000    3.30.0165.0000  C:\Program Files\Logitech\SetPoint\IMHook.dll
  0x78130000  0x9b000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCR80.dll
  0x74690000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x10000000  0x167000  6.14.0010.6674  C:\WINDOWS\system32
view.dll
  0x01130000  0x49000   6.14.0010.6674  C:\WINDOWS\system32\NVWRSFR.DLL
  0x01180000  0xf000    3.30.0165.0000  C:\Program Files\Logitech\SetPoint\lgscroll.dll
  0x7c420000  0x87000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCP80.dll
  0x75140000  0x2e000   5.01.2600.2180  C:\WINDOWS\system32\msctfime.ime
  0x60040000  0xa000    1.08.20070.51502  C:\PROGRA~1\MOZILL~1\components\myspell.dll
  0x71990000  0x40000   5.01.2600.2180  C:\WINDOWS\system32\mswsock.dll
  0x62e40000  0x59000   5.01.2600.2180  C:\WINDOWS\system32\hnetcfg.dll
  0x719d0000  0x8000    5.01.2600.2180  C:\WINDOWS\System32\wshtcpip.dll
  0x60010000  0x12000   1.08.20070.51502  C:\PROGRA~1\MOZILL~1\components\jar50.dll
  0x76ed0000  0x27000   5.01.2600.2938  C:\WINDOWS\system32\DNSAPI.dll
  0x16080000  0x19000   1.00.0003.0001  C:\Program Files\Bonjour\mdnsNSP.dll
  0x01e30000  0x24000                   C:\Documents and Settings\HP_Propriétaire\Application Data\Mozilla\Firefox\Profiles\gishxfns.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\metrics.dll
  0x60320000  0x6000    1.08.20070.51502  C:\PROGRA~1\MOZILL~1\xpcom.dll
  0x74660000  0x2a000   5.01.2600.2180  C:\WINDOWS\system32\msimtf.dll
  0x02170000  0x15000   5.01.0000.2700  C:\WINDOWS\system32\btmmhook.dll
  0x021a0000  0x4f000                   C:\Documents and Settings\HP_Propriétaire\Application Data\Mozilla\Firefox\Profiles\gishxfns.default\extensions\{3112ca9c-de6d-4884-a869-9855de68056c}\components\googletoolbar.dll
  0x021f0000  0x9000    6.00.5441.0000  C:\WINDOWS\system32\Normaliz.dll
  0x43e00000  0x45000   7.00.6000.16473  C:\WINDOWS\system32\iertutil.dll
  0x60090000  0x31000   3.11.0004.0000  C:\PROGRA~1\MOZILL~1\freebl3.dll
  0x60230000  0x3e000   1.62.0000.0000  C:\Program Files\Mozilla Firefox
ssckbi.dll
  0x60050000  0xe000    1.08.20070.51502  C:\PROGRA~1\MOZILL~1\components\spellchk.dll
  0x76310000  0x5000    5.01.2600.2180  C:\WINDOWS\system32\msimg32.dll
  0x60970000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\mslbui.dll
  0x75f10000  0xfd000   6.00.2900.3020  C:\WINDOWS\system32\browseui.dll
  0x76ac0000  0x11000   3.05.2284.0000  C:\WINDOWS\system32\ATL.DLL
  0x75d30000  0x91000   6.00.2900.2180  C:\WINDOWS\system32\MLANG.dll
  0x77720000  0x170000  6.00.2900.3020  C:\WINDOWS\system32\shdocvw.dll
  0x75ef0000  0x7000    5.01.2600.2180  C:\WINDOWS\System32\drprov.dll
  0x71b70000  0xe000    5.01.2600.2180  C:\WINDOWS\System32
tlanman.dll
  0x71c30000  0x17000   5.01.2600.2180  C:\WINDOWS\System32\NETUI0.dll
  0x71bf0000  0x40000   5.01.2600.2180  C:\WINDOWS\System32\NETUI1.dll
  0x75f00000  0x9000    5.01.2600.2180  C:\WINDOWS\System32\davclnt.dll
  0x4eb80000  0x1a3000  5.01.3102.2180  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\gdiplus.dll
  0x10930000  0x49000   5.02.5721.5145  C:\WINDOWS\system32\PortableDeviceApi.dll
  0x4eec0000  0x94000   5.01.2600.2180  C:\WINDOWS\system32\wiashext.dll
  0x73af0000  0x14000   5.01.2600.2180  C:\WINDOWS\system32\sti.dll
  0x74a50000  0x7000    5.01.2600.2180  C:\WINDOWS\system32\CFGMGR32.dll
  0x055f0000  0x15000   6.14.0010.6674  C:\WINDOWS\system32
vwddi.dll
  0x01e70000  0x1c000   7.00.0000.0000  C:\Program Files\Adobe\Acrobat 7.0\ActiveX\PDFShell.dll
  0x44360000  0x5cb000  7.00.6000.16473  C:\WINDOWS\system32\ieframe.dll
  0x05730000  0x471000  6.14.0010.6674  C:\WINDOWS\system32
vcpl.dll
  0x74bf0000  0x2c000   4.02.5406.0000  C:\WINDOWS\system32\OLEACC.dll
  0x76010000  0x65000   6.02.3104.0000  C:\WINDOWS\system32\MSVCP60.dll
  0x01ef0000  0x3e000   6.14.0010.6674  C:\WINDOWS\system32\NVRSFR.DLL
  0x01f30000  0x3c000   3.00.0000.3889  C:\WINDOWS\system32\igfxpph.dll
  0x02ec0000  0x1e000   3.00.0000.3889  C:\WINDOWS\system32\hccutils.DLL
  0x04ad0000  0x72000   6.14.0010.6674  C:\WINDOWS\system32
vshell.dll
  0x76920000  0x8000    5.01.2600.2751  C:\WINDOWS\system32\LINKINFO.dll
------------------------------------------------------------------------------
sys79273.exe pid: 2236
Command line: "C:\Documents and Settings\HP_Propriétaire\Bureau\sys79273.exe" 

  Base        Size      Version	        Path
  0x00400000  0x39000                   C:\Documents and Settings\HP_Propriétaire\Bureau\sys79273.exe
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x77390000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x12300000  0x8000    3.30.0165.0000  C:\Program Files\Logitech\SetPoint\IMHook.dll
  0x78130000  0x9b000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCR80.dll
  0x74690000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x10000000  0x167000  6.14.0010.6674  C:\WINDOWS\system32
view.dll
  0x00bc0000  0x49000   6.14.0010.6674  C:\WINDOWS\system32\NVWRSFR.DLL
  0x00c10000  0xf000    3.30.0165.0000  C:\Program Files\Logitech\SetPoint\lgscroll.dll
  0x7c420000  0x87000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCP80.dll
  0x75140000  0x2e000   5.01.2600.2180  C:\WINDOWS\system32\msctfime.ime
  0x00d50000  0x15000   5.01.0000.2700  C:\WINDOWS\system32\btmmhook.dll
  0x60970000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\mslbui.dll
  0x00e70000  0x15000   6.14.0010.6674  C:\WINDOWS\system32
vwddi.dll
------------------------------------------------------------------------------
runme.exe pid: 3920
Command line: runme.exe

  Base        Size      Version	        Path
  0x00400000  0x59000   3.01.0000.0002  C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp
ss6.tmpunme.exe
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x66000000  0x152000  6.00.0097.0082  C:\WINDOWS\system32\MSVBVM60.DLL
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x66630000  0x20000   6.00.0089.0088  C:\WINDOWS\system32\VB6FR.DLL
  0x12300000  0x8000    3.30.0165.0000  C:\Program Files\Logitech\SetPoint\IMHook.dll
  0x78130000  0x9b000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCR80.dll
  0x74690000  0x4b000   5.01.2600.2180  C:\WINDOWS\system32\MSCTF.dll
  0x10000000  0x167000  6.14.0010.6674  C:\WINDOWS\system32
view.dll
  0x77390000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
  0x01040000  0x49000   6.14.0010.6674  C:\WINDOWS\system32\NVWRSFR.DLL
  0x00f80000  0xf000    3.30.0165.0000  C:\Program Files\Logitech\SetPoint\lgscroll.dll
  0x7c420000  0x87000   8.00.50727.0163  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\MSVCP80.dll
  0x75140000  0x2e000   5.01.2600.2180  C:\WINDOWS\system32\msctfime.ime
  0x015c0000  0x15000   5.01.0000.2700  C:\WINDOWS\system32\btmmhook.dll
  0x015f0000  0x15000   6.14.0010.6674  C:\WINDOWS\system32
vwddi.dll
  0x734f0000  0x25000   5.06.0000.8820  C:\WINDOWS\system32\scrrun.dll
  0x60970000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\mslbui.dll
------------------------------------------------------------------------------
cmd.exe pid: 3000
Command line: cmd /c xdlvurognh.exe >> C:\suspectfile	empd.txt

  Base        Size      Version	        Path
  0x4ad00000  0x64000   5.01.2600.2180  C:\WINDOWS\system32\cmd.exe
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x5cea0000  0x26000   5.01.2600.2180  C:\WINDOWS\system32\ShimEng.dll
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x77390000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
------------------------------------------------------------------------------
xdlvurognh.exe pid: 3444
Command line: xdlvurognh.exe 

  Base        Size      Version	        Path
  0x00400000  0x14000   2.25.0000.0000  C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp
ss6.tmp\xdlvurognh.exe
  *** File timestamp:         Mon Apr 16 17:53:11 2007
  *** Loaded image timestamp: Mon Apr 16 17:53:12 2007
  0x62dc0000  0x9000    5.01.2600.2180  C:\WINDOWS\system32\LPK.DLL
  0x753c0000  0x6b000   1.420.2600.2180  C:\WINDOWS\system32\USP10.dll
  0x77390000  0x103000  6.00.2900.2982  C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\comctl32.dll
 
===================== Hidden Objects =====================


SCAN ABORTED: an unknown error has occurred. Please check Rootkit presence with another tool

===================== Checking Rustock rootkit =====================

 

===================== Checking Suspicious files =====================
(Unusually Runtime packers compressed exe and dll files in C:\, %windir%\,  %windir%\system32\

-This file is compressed with UPX C:\WINDOWS\UNWASH.EXE
-This file is compressed with UPX C:\WINDOWS\UNWASH6.EXE
-This file is compressed with UPX C:\WINDOWS\SYSTEM32\SRCHSTS.EXE
-This file is compressed with UPX C:\WINDOWS\SYSTEM32\SWREG.EXE
-This file is compressed with UPX C:\WINDOWS\SYSTEM32\SWSC.EXE
-This file is compressed with UPX C:\WINDOWS\SYSTEM32\SWXCACLS.EXE
-This file is compressed with UPX C:\WINDOWS\SYSTEM32\AVISYNTH.DLL
-This file is compressed with UPX C:\WINDOWS\SYSTEM32\SSUBTMR.DLL
-This file is compressed with UPX C:\WINDOWS\SYSTEM32\VBALNCSM.DLL
-This file is compressed with Upack C:\WINDOWS\SYSTEM32\MRT.EXE
-This file is compressed with Upack C:\WINDOWS\SYSTEM32\IFMON.DLL
-This file is compressed with Nspack C:\WINDOWS\SYSTEM32\MRT.EXE
-This file is compressed with Nspack C:\WINDOWS\SYSTEM32\JAVAAC~1.DLL
-This file is compressed with polycrypt C:\WINDOWS\SYSTEM32\MRT.EXE
-This file is compressed with PECompact C:\WINDOWS\SYSTEM32\MRT.EXE
-This file is compressed with PECompact C:\WINDOWS\SYSTEM32\DIVX.DLL

===================== Installed Applications =====================


-----HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall-----

[Uninstall]
  "DisplayName"=""

[Uninstall\ABBYY FineReader 5.0 Sprint]

[Uninstall\Ad-Aware SE Personal]
  "DisplayName"="Ad-Aware SE Personal"
  "UninstallString"="C:\PROGRA~1\Lavasoft\AD-AWA~1\UNWISE.EXE C:\PROGRA~1\Lavasoft\AD-AWA~1\INSTALL.LOG"
  "DisplayIcon"="C:\PROGRA~1\Lavasoft\AD-AWA~1\Ad-Aware.exe,-0"

[Uninstall\AddressBook]

[Uninstall\Adobe After Effects 7.0]
  "UninstallString"="msiexec /I {DD362256-A7A2-4524-9457-213DDC2AFC2A}"
  "DisplayName"="Adobe After Effects 7.0"
  "DisplayIcon"="C:\Program Files\Adobe\Adobe After Effects 7.0\Support Files\AfterFx.exe,0"

[Uninstall\Adobe Encore DVD 2.0]
  "DisplayIcon"="C:\Program Files\Adobe\Adobe Encore DVD 2.0\Adobe Encore DVD.exe,0"
  "DisplayName"="Adobe Encore DVD 2.0"
  "UninstallString"="msiexec /I {2ECE7ECE-D15B-4999-8B8D-01C998F489D5}"

[Uninstall\Adobe Photoshop CS2 - {236BB7C4-4419-42FD-040C-1E257A25E34D}]
  "DisplayName"="Adobe Photoshop CS2"
  "UninstallString"="msiexec /I {236BB7C4-4419-42FD-040C-1E257A25E34D}"
  "DisplayIcon"="C:\Program Files\Adobe\Adobe Photoshop CS2\Photoshop.exe,0"

[Uninstall\Adobe Premiere Pro 2.0]
  "UninstallString"="msiexec /I {FA17A726-B229-4116-B793-A2AB1A4EAE2E}"
  "DisplayName"="Adobe Premiere Pro 2.0"
  "DisplayIcon"="C:\Program Files\Adobe\Adobe Premiere Pro 2.0\Adobe Premiere Pro.exe,0"

[Uninstall\Adobe_e21d2df5563f0bf421cf2cc5ec26c42]
  "DisplayName"="Adobe Illustrator CS3"
  "DisplayIcon"="C:\Program Files\Fichiers communs\Adobe\Installers\e21d2df5563f0bf421cf2cc5ec26c42\Setup.exe,0"
  "UninstallString"="C:\Program Files\Fichiers communs\Adobe\Installers\e21d2df5563f0bf421cf2cc5ec26c42\Setup.exe"

[Uninstall\Agere Systems Soft Modem]
  "DisplayName"="Agere Systems PCI Soft Modem"
  "UninstallString"="agrsmdel"

[Uninstall\AnyDVD]
  "DisplayName"="AnyDVD"
  "UninstallString"="\"C:\Program Files\SlySoft\AnyDVD\AnyDVD-uninst.exe\" /D=\"C:\Program Files\SlySoft\AnyDVD\""

[Uninstall\Ashampoo WinOptimizer Platinum 3]
  "DisplayName"="Ashampoo WinOptimizer Platinum 3"
  "UninstallString"="\"C:\Program Files\Ashampoo\Ashampoo WinOptimizer Platinum 3\Uninstall\WOP3_Uninstall.exe\""
  "DisplayIcon"="C:\Program Files\Ashampoo\Ashampoo WinOptimizer Platinum 3\WOP3.exe,-0"

[Uninstall\AviSynth]
  "DisplayName"="AviSynth 2.5"
  "UninstallString"="\"C:\Program Files\AviSynth 2.5\Uninstall.exe\""

[Uninstall\BackWeb-8876480 Uninstaller]

[Uninstall\BIBAZ]
  "DisplayName"="BIBAZ"
  "UninstallString"="C:\Program Files\BIBAZ\uninstal.exe"

[Uninstall\Client_Fix_1.9.2]
  "DisplayName"="Client Hack 1.9.2d"
  "UninstallString"="C:\WINDOWS\iun6002.exe \"C:\Program Files\World of Warcraft\irunin.ini\""

[Uninstall\CloneCD]
  "DisplayName"="CloneCD"
  "UninstallString"="\"C:\Program Files\SlySoft\CloneCD\ccd-uninst.exe\" /D=\"C:\Program Files\SlySoft\CloneCD\""

[Uninstall\CloneDVD]
  "DisplayName"="CloneDVD"
  "UninstallString"="\"C:\Program Files\Elaborate Bytes\CloneDVD\CloneDVD-uninst.exe\" /D=\"C:\Program Files\Elaborate Bytes\CloneDVD\""

[Uninstall\Connection Manager]

[Uninstall\CopyToDVD_is1]
  "DisplayName"="VSO CopyToDVD 3"
  "DisplayIcon"="C:\Program Files\VSO\CopyToCd.exe"
  "UninstallString"="\"C:\Program Files\VSO\unins000.exe\""

[Uninstall\CTDVDAudio Plugin]
  "DisplayName"="Creative DVD Audio Plugin for Audigy Series"
  "UninstallString"="\"C:\Program Files\Creative\CTDPlugin\CTUIDVD.exe \" -u"

[Uninstall\DirectAnimation]

[Uninstall\DirectDrawEx]

[Uninstall\DivX Content Uploader]
  "DisplayName"="DivX Content Uploader"
  "DisplayIcon"="C:\Program Files\DivX\DivXContentUploaderUninstall.exe\someicon.ico,0"
  "UninstallString"="C:\Program Files\DivX\DivXContentUploaderUninstall.exe /CUPLOADER"

[Uninstall\Download Accelerator Plus (DAP)]
  "DisplayName"="Download Accelerator Plus (DAP)"
  "UninstallString"="C:\PROGRA~1\DAP\DAPREMOVE.EXE"
  "DisplayIcon"="C:\Program Files\DAP\DAP.EXE,0"

[Uninstall\eMule]
  "DisplayName"="eMule"
  "UninstallString"="\"C:\Program Files\eMule\Uninstall.exe\""

[Uninstall\EPSON Printer and Utilities]
  "DisplayName"="EPSON Logiciel imprimante"
  "UninstallString"="C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\EPUPDATE.EXE /r"

[Uninstall\EPSON Printer and Utilities\Applications]

[Uninstall\EPSON Printer and Utilities\Applications\EPSON Stylus CX5400 Temporary Files]

[Uninstall\EPSON Printer and Utilities\Applications\EPSON Stylus CX5400 Temporary Files\Files]

[Uninstall\EPSON Printer and Utilities\Applications\EPSON Stylus CX5400 Temporary Files\Files\Extension]

[Uninstall\EPSON Printer and Utilities\Applications\EPSON Stylus CX5400 Temporary Files\Settings]

[Uninstall\EPSON Printer and Utilities\PrinterDrivers]

[Uninstall\EPSON Printer and Utilities\PrinterDrivers\EPSON Stylus CX5400]

[Uninstall\EPSON Printer and Utilities\PrinterDrivers\EPSON Stylus CX5400\Files]

[Uninstall\EPSON Printer and Utilities\PrinterDrivers\EPSON Stylus CX5400\Files\Extension]

[Uninstall\EPSON Printer and Utilities\PrinterDrivers\EPSON Stylus CX5400\Files\Extension\0]

[Uninstall\EPSON Printer and Utilities\PrinterDrivers\EPSON Stylus CX5400\Files\Extension\1]

[Uninstall\EPSON Printer and Utilities\PrinterDrivers\EPSON Stylus CX5400\Files\Extension\101]

[Uninstall\EPSON Printer and Utilities\PrinterDrivers\EPSON Stylus CX5400\Files\Extension\102]

[Uninstall\EPSON Printer and Utilities\PrinterDrivers\EPSON Stylus CX5400\Files\Extension\103]

[Uninstall\EPSON Printer and Utilities\PrinterDrivers\EPSON Stylus CX5400\Files\Extension\104]

[Uninstall\EPSON Printer and Utilities\PrinterDrivers\EPSON Stylus CX5400\Files\Extension\2]

[Uninstall\EPSON Printer and Utilities\PrinterDrivers\EPSON Stylus CX5400\Files\Extension\3]

[Uninstall\EPSON Printer and Utilities\PrinterDrivers\EPSON Stylus CX5400\Files\Extension\4]

[Uninstall\EPSON Printer and Utilities\PrinterDrivers\EPSON Stylus CX5400\Files\Extension\5]

[Uninstall\EPSON Printer and Utilities\PrinterDrivers\EPSON Stylus CX5400\Files\Extension\6]

[Uninstall\EPSON Printer and Utilities\PrinterDrivers\EPSON Stylus CX5400\Files\Extension\7]

[Uninstall\EPSON Printer and Utilities\PrinterDrivers\EPSON Stylus CX5400\Settings]

[Uninstall\EPSON Printer and Utilities\PrinterDrivers\EPSON Stylus CX5400\Settings\HKEY_LOCAL_MACHINE]

[Uninstall\Fontcore]

[Uninstall\Help and Support Additions]
  "DisplayName"="Help and Support Additions"
  "UninstallString"="C:\PROGRA~1\HELPAN~1\UNWISE.EXE C:\PROGRA~1\HELPAN~1\INSTALL.LOG"

[Uninstall\HijackThis]
  "DisplayName"="HijackThis 1.99.1"
  "UninstallString"="C:\Hijackthis\HijackThis.exe /uninstall"
  "DisplayIcon"="C:\Hijackthis\HijackThis.exe"

[Uninstall\HP Photo & Imaging]
  "UninstallString"="C:\Program Files\HP\Digital Imaging\uninstall\hpzscr01.exe -datfile hpqscr01.dat"
  "DisplayName"="HP Image Zone 4.2.3"
  "DisplayIcon"="C:\Program Files\HP\Digital Imaging\uninstall\hpzscr01.exe,0"

[Uninstall\ICW]

[Uninstall\IDNMitigationAPIs]
  "DisplayName"="Microsoft Internationalized Domain Names Mitigation APIs"
  "UninstallString"="\"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe\""

[Uninstall\IE40]

[Uninstall\IE4Data]

[Uninstall\IE5BAKEX]

[Uninstall\ie7]
  "DisplayName"="Windows Internet Explorer 7"
  "UninstallString"="\"C:\WINDOWS\ie7\spuninst\spuninst.exe\""
  "DisplayIcon"="C:\Program Files\Internet Explorer\iexplore.exe"

[Uninstall\IEData]

[Uninstall\IncrediMail]
  "UninstallString"="C:\PROGRA~1\INCRED~1\bin\imsetup.exe /remove /addon:IncrediMail /log:IncMail.log"
  "DisplayName"="IncrediMail Xe"
  "DisplayIcon"="C:\PROGRA~1\INCRED~1\bin\IncMail.exe"

[Uninstall\InstallShield Uninstall Information]

[Uninstall\InstallShield Uninstall Information\{0C66761E-497A-4BE3-AE0D-8EC30FC9A9AA}]

[Uninstall\InstallShield Uninstall Information\{C21D5524-A970-42FA-AC8A-59B8C7CDCA31}]

[Uninstall\InstallShield Uninstall Information\{DB518BA6-CB74-4EB6-9ABD-880B6D6E1F38}]

[Uninstall\InstallShield_{0C66761E-497A-4BE3-AE0D-8EC30FC9A9AA}]
  "UninstallString"="C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{0C66761E-497A-4BE3-AE0D-8EC30FC9A9AA} /l1036 "
  "DisplayName"="PC-Doctor for Windows"
  "DisplayIcon"="C:\Program Files\PC-Doctor for Windows\Pcdrw32.exe"

[Uninstall\InstallShield_{C21D5524-A970-42FA-AC8A-59B8C7CDCA31}]
  "UninstallString"="C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{C21D5524-A970-42FA-AC8A-59B8C7CDCA31} /l1036 "
  "DisplayName"="QuickTime"
  "DisplayIcon"=expand:"C:\WINDOWS\Installer\{C21D5524-A970-42FA-AC8A-59B8C7CDCA31}\ARPPRODUCTICON.exe"

[Uninstall\InstallShield_{DB518BA6-CB74-4EB6-9ABD-880B6D6E1F38}]

[Uninstall\InstallWIX_{D0DCD54F-C829-41A5-AF32-71E632BB0E2C}]
  "DisplayName"="Kaspersky Internet Security 6.0"
  "UninstallString"="MsiExec.exe /I{D0DCD54F-C829-41A5-AF32-71E632BB0E2C}"

[Uninstall\KB834707]
  "DisplayName"="Correctif Windows XP - KB834707"
  "UninstallString"="C:\WINDOWS\$NtUninstallKB834707$\spuninst\spuninst.exe"

[Uninstall\KB835221WXP]
  "DisplayName"="High Definition Audio Driver Package - KB835221"
  "UninstallString"="C:\WINDOWS\$NtUninstallKB835221WXP$\spuninst\spuninst.exe"

[Uninstall\KB867282]
  "DisplayName"="Correctif Windows XP - KB867282"
  "UninstallString"="C:\WINDOWS\$NtUninstallKB867282$\spuninst\spuninst.exe"

[Uninstall\KB873333]
  "DisplayName"="Correctif Windows XP - KB873333"
  "UninstallString"="C:\WINDOWS\$NtUninstallKB873333$\spuninst\spuninst.exe"

[Uninstall\KB873339]
  "DisplayName"="Correctif Windows XP - KB873339"
  "UninstallString"="C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.exe"

[Uninstall\KB883667]
  "DisplayName"="Correctif Windows XP - KB883667"
  "UninstallString"="C:\WINDOWS\$NtUninstallKB883667$\spuninst\spuninst.exe"

[Uninstall\KB883939]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB883939)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB883939$\spuninst\spuninst.exe\""

[Uninstall\KB884016]

[Uninstall\KB884267]

[Uninstall\KB885250]
  "DisplayName"="Correctif Windows XP - KB885250"
  "UninstallString"="C:\WINDOWS\$NtUninstallKB885250$\spuninst\spuninst.exe"

[Uninstall\KB885353]

[Uninstall\KB885835]
  "DisplayName"="Correctif Windows XP - KB885835"
  "UninstallString"="C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.exe"

[Uninstall\KB885836]
  "DisplayName"="Correctif Windows XP - KB885836"
  "UninstallString"="C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.exe"

[Uninstall\KB885884]
  "DisplayName"="Correctif Windows XP - KB885884"
  "UninstallString"="C:\WINDOWS\$NtUninstallKB885884$\spuninst\spuninst.exe"

[Uninstall\KB886185]
  "DisplayName"="Correctif Windows XP - KB886185"
  "UninstallString"="C:\WINDOWS\$NtUninstallKB886185$\spuninst\spuninst.exe"

[Uninstall\KB886612]

[Uninstall\KB887078]

[Uninstall\KB887472]
  "DisplayName"="Correctif Windows XP - KB887472"
  "UninstallString"="C:\WINDOWS\$NtUninstallKB887472$\spuninst\spuninst.exe"

[Uninstall\KB887626]

[Uninstall\KB887742]
  "DisplayName"="Correctif Windows XP - KB887742"
  "UninstallString"="C:\WINDOWS\$NtUninstallKB887742$\spuninst\spuninst.exe"

[Uninstall\KB887797]
  "DisplayName"="Correctif Windows XP - KB887797"
  "UninstallString"="C:\WINDOWS\$NtUninstallKB887797$\spuninst\spuninst.exe"

[Uninstall\KB888113]
  "DisplayName"="Correctif Windows XP - KB888113"
  "UninstallString"="C:\WINDOWS\$NtUninstallKB888113$\spuninst\spuninst.exe"

[Uninstall\KB888302]
  "DisplayName"="Correctif Windows XP - KB888302"
  "UninstallString"="C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe"

[Uninstall\KB888656]

[Uninstall\KB889858]

[Uninstall\KB890046]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB890046)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB890046$\spuninst\spuninst.exe\""

[Uninstall\KB890047]
  "DisplayName"="Correctif Windows XP - KB890047"
  "UninstallString"="C:\WINDOWS\$NtUninstallKB890047$\spuninst\spuninst.exe"

[Uninstall\KB890175]
  "DisplayName"="Correctif Windows XP - KB890175"
  "UninstallString"="C:\WINDOWS\$NtUninstallKB890175$\spuninst\spuninst.exe"

[Uninstall\KB890859]
  "DisplayName"="Correctif Windows XP - KB890859"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB890859$\spuninst\spuninst.exe\""

[Uninstall\KB890923]
  "DisplayName"="Correctif Windows XP - KB890923"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB890923$\spuninst\spuninst.exe\""

[Uninstall\KB891122]

[Uninstall\KB891781]
  "DisplayName"="Correctif Windows XP - KB891781"
  "UninstallString"="C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.exe"

[Uninstall\KB892130]
  "DisplayName"="Windows Genuine Advantage Validation Tool (KB892130)"
  "UninstallString"=""

[Uninstall\KB892313]

[Uninstall\KB893066]
  "DisplayName"="Correctif Windows XP - KB893066"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB893066$\spuninst\spuninst.exe\""

[Uninstall\KB893086]
  "DisplayName"="Correctif Windows XP - KB893086"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB893086$\spuninst\spuninst.exe\""

[Uninstall\KB893240]

[Uninstall\KB893241]

[Uninstall\KB893756]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB893756)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB893756$\spuninst\spuninst.exe\""

[Uninstall\KB893803]
  "DisplayName"="Windows Installer 3.1 (KB893803)"
  "UninstallString"="\"C:\WINDOWS\$MSI31Uninstall_KB893803$\spuninst\spuninst.exe\""
  "DisplayIcon"=expand:"%windir%\system32\msiexec.exe"

[Uninstall\KB893803v2]
  "DisplayName"="Windows Installer 3.1 (KB893803)"
  "UninstallString"="\"C:\WINDOWS\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.exe\""
  "DisplayIcon"=expand:"%windir%\system32\msiexec.exe"

[Uninstall\KB894391]
  "DisplayName"="Mise à jour pour Windows XP (KB894391)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB894391$\spuninst\spuninst.exe\""

[Uninstall\KB895181]

[Uninstall\KB895316]

[Uninstall\KB895572]

[Uninstall\KB896358]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB896358)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB896358$\spuninst\spuninst.exe\""

[Uninstall\KB896422]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB896422)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB896422$\spuninst\spuninst.exe\""

[Uninstall\KB896423]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB896423)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB896423$\spuninst\spuninst.exe\""

[Uninstall\KB896424]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB896424)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB896424$\spuninst\spuninst.exe\""

[Uninstall\KB896428]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB896428)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB896428$\spuninst\spuninst.exe\""

[Uninstall\KB896688]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB896688)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB896688$\spuninst\spuninst.exe\""

[Uninstall\KB896727]
  "DisplayName"="Mise à jour pour Windows XP (KB896727)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB896727$\spuninst\spuninst.exe\""

[Uninstall\KB897586]

[Uninstall\KB898461]
  "DisplayName"="Mise à jour pour Windows XP (KB898461)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe\""

[Uninstall\KB898549]

[Uninstall\KB899587]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB899587)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB899587$\spuninst\spuninst.exe\""

[Uninstall\KB899588]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB899588)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB899588$\spuninst\spuninst.exe\""

[Uninstall\KB899591]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB899591)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB899591$\spuninst\spuninst.exe\""

[Uninstall\KB900399]

[Uninstall\KB900485]
  "DisplayName"="Mise à jour pour Windows XP (KB900485)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB900485$\spuninst\spuninst.exe\""

[Uninstall\KB900725]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB900725)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB900725$\spuninst\spuninst.exe\""

[Uninstall\KB901017]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB901017)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB901017$\spuninst\spuninst.exe\""

[Uninstall\KB901190]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB901190)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB901190$\spuninst\spuninst.exe\""

[Uninstall\KB901214]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB901214)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB901214$\spuninst\spuninst.exe\""

[Uninstall\KB902344]

[Uninstall\KB902400]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB902400)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB902400$\spuninst\spuninst.exe\""

[Uninstall\KB903235]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB903235)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB903235$\spuninst\spuninst.exe\""

[Uninstall\KB904706]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB904706)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB904706$\spuninst\spuninst.exe\""

[Uninstall\KB904942]
  "DisplayName"="Mise à jour pour Windows XP (KB904942)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB904942$\spuninst\spuninst.exe\""

[Uninstall\KB905414]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB905414)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB905414$\spuninst\spuninst.exe\""

[Uninstall\KB905749]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB905749)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB905749$\spuninst\spuninst.exe\""

[Uninstall\KB905915]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB905915)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB905915$\spuninst\spuninst.exe\""

[Uninstall\KB907658]

[Uninstall\KB908519]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB908519)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB908519$\spuninst\spuninst.exe\""

[Uninstall\KB908531]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB908531)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB908531$\spuninst\spuninst.exe\""

[Uninstall\KB910437]
  "DisplayName"="Mise à jour pour Windows XP (KB910437)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB910437$\spuninst\spuninst.exe\""

[Uninstall\KB911280]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB911280)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB911280$\spuninst\spuninst.exe\""

[Uninstall\KB911562]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB911562)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB911562$\spuninst\spuninst.exe\""

[Uninstall\KB911564]
  "DisplayName"="Mise à jour de sécurité pour Lecteur Windows Media (KB911564)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB911564$\spuninst\spuninst.exe\""
  "DisplayIcon"=expand:"\"%ProgramFiles%\windows media player\wmplayer.exe\""

[Uninstall\KB911565]
  "DisplayName"="Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB911565$\spuninst\spuninst.exe\""
  "DisplayIcon"=expand:"\"%ProgramFiles%\windows media player\wmplayer.exe\""

[Uninstall\KB911567]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB911567)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB911567$\spuninst\spuninst.exe\""

[Uninstall\KB911854]

[Uninstall\KB911927]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB911927)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB911927$\spuninst\spuninst.exe\""

[Uninstall\KB912812]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB912812)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB912812$\spuninst\spuninst.exe\""

[Uninstall\KB912919]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB912919)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB912919$\spuninst\spuninst.exe\""

[Uninstall\KB913446]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB913446)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB913446$\spuninst\spuninst.exe\""

[Uninstall\KB913580]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB913580)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB913580$\spuninst\spuninst.exe\""

[Uninstall\KB914388]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB914388)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB914388$\spuninst\spuninst.exe\""

[Uninstall\KB914389]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB914389)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB914389$\spuninst\spuninst.exe\""

[Uninstall\KB914440]
  "DisplayName"="Correctif pour Windows XP (KB914440)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB914440$\spuninst\spuninst.exe\""

[Uninstall\KB915865]
  "DisplayName"="Hotfix for Windows XP (KB915865)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB915865$\spuninst\spuninst.exe\""

[Uninstall\KB916281]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB916281)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB916281$\spuninst\spuninst.exe\""

[Uninstall\KB916595]
  "DisplayName"="Mise à jour pour Windows XP (KB916595)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB916595$\spuninst\spuninst.exe\""

[Uninstall\KB917159]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB917159)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB917159$\spuninst\spuninst.exe\""

[Uninstall\KB917283.T1_1ToU93_1]
  "UninstallString"="C:\WINDOWS\system32\msiexec.exe /promptrestart /uninstall {967B098A-042D-4367-BAC9-8BC11684174F} /package {7131646D-CD3C-40F4-97B9-CD9E4E6262EF}"
  "DisplayIcon"="C:\WINDOWS\system32\msiexec.exe"
  "DisplayName"="Security Update pour Microsoft .NET Framework 2.0 (KB917283)"

[Uninstall\KB917344]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB917344)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB917344$\spuninst\spuninst.exe\""

[Uninstall\KB917422]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB917422)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB917422$\spuninst\spuninst.exe\""

julienddd · Answer

partie 4/4 du rapport :

[Uninstall\KB917734_WMP10]
  "DisplayName"="Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe\""
  "DisplayIcon"=expand:"\"%ProgramFiles%\windows media player\wmplayer.exe\""

[Uninstall\KB917953]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB917953)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB917953$\spuninst\spuninst.exe\""

[Uninstall\KB918118]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB918118)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB918118$\spuninst\spuninst.exe\""

[Uninstall\KB918439]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB918439)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB918439$\spuninst\spuninst.exe\""

[Uninstall\KB918899]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB918899)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB918899$\spuninst\spuninst.exe\""

[Uninstall\KB919007]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB919007)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB919007$\spuninst\spuninst.exe\""

[Uninstall\KB920213]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB920213)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB920213$\spuninst\spuninst.exe\""

[Uninstall\KB920214]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB920214)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB920214$\spuninst\spuninst.exe\""

[Uninstall\KB920670]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB920670)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB920670$\spuninst\spuninst.exe\""

[Uninstall\KB920683]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB920683)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB920683$\spuninst\spuninst.exe\""

[Uninstall\KB920685]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB920685)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB920685$\spuninst\spuninst.exe\""

[Uninstall\KB920872]
  "DisplayName"="Mise à jour pour Windows XP (KB920872)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB920872$\spuninst\spuninst.exe\""

[Uninstall\KB921398]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB921398)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB921398$\spuninst\spuninst.exe\""

[Uninstall\KB921883]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB921883)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB921883$\spuninst\spuninst.exe\""

[Uninstall\KB922582]
  "DisplayName"="Mise à jour pour Windows XP (KB922582)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB922582$\spuninst\spuninst.exe\""

[Uninstall\KB922616]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB922616)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB922616$\spuninst\spuninst.exe\""

[Uninstall\KB922760]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB922760)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB922760$\spuninst\spuninst.exe\""

[Uninstall\KB922770.T1_1ToU168_1]
  "UninstallString"="C:\WINDOWS\system32\msiexec.exe /promptrestart /uninstall {0E92DD42-76F5-4EF2-B381-F9C1D72BE23D} /package {7131646D-CD3C-40F4-97B9-CD9E4E6262EF}"
  "DisplayIcon"="C:\WINDOWS\system32\msiexec.exe"
  "DisplayName"="Security Update for Microsoft .NET Framework 2.0 (KB922770)"

[Uninstall\KB922819]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB922819)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB922819$\spuninst\spuninst.exe\""

[Uninstall\KB923191]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB923191)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB923191$\spuninst\spuninst.exe\""

[Uninstall\KB923414]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB923414)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB923414$\spuninst\spuninst.exe\""

[Uninstall\KB923689]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB923689)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB923689$\spuninst\spuninst.exe\""

[Uninstall\KB923694]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB923694)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB923694$\spuninst\spuninst.exe\""

[Uninstall\KB923980]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB923980)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB923980$\spuninst\spuninst.exe\""

[Uninstall\KB924191]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB924191)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB924191$\spuninst\spuninst.exe\""

[Uninstall\KB924270]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB924270)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB924270$\spuninst\spuninst.exe\""

[Uninstall\KB924496]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB924496)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB924496$\spuninst\spuninst.exe\""

[Uninstall\KB924667]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB924667)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB924667$\spuninst\spuninst.exe\""

[Uninstall\KB925398_WMP64]
  "DisplayName"="Mise à jour de sécurité pour Lecteur Windows Media 6.4 (KB925398)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB925398_WMP64$\spuninst\spuninst.exe\""
  "DisplayIcon"=expand:"\"%ProgramFiles%\windows media player\mplayer2.exe\""

[Uninstall\KB925454]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB925454)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB925454$\spuninst\spuninst.exe\""

[Uninstall\KB925486]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB925486)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB925486$\spuninst\spuninst.exe\""

[Uninstall\KB925902]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB925902)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB925902$\spuninst\spuninst.exe\""

[Uninstall\KB926239]
  "DisplayName"="Hotfix for Windows XP (KB926239)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB926239$\spuninst\spuninst.exe\""

[Uninstall\KB926255]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB926255)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB926255$\spuninst\spuninst.exe\""

[Uninstall\KB926436]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB926436)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB926436$\spuninst\spuninst.exe\""

[Uninstall\KB927779]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB927779)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB927779$\spuninst\spuninst.exe\""

[Uninstall\KB927802]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB927802)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB927802$\spuninst\spuninst.exe\""

[Uninstall\KB927891]
  "DisplayName"="Mise à jour pour Windows XP (KB927891)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB927891$\spuninst\spuninst.exe\""

[Uninstall\KB928090-IE7]
  "DisplayName"="Mise à jour de sécurité pour Windows Internet Explorer 7 (KB928090)"
  "UninstallString"="\"C:\WINDOWS\ie7updates\KB928090-IE7\spuninst\spuninst.exe\""
  "DisplayIcon"="C:\Program Files\internet explorer\iexplore.exe"

[Uninstall\KB928255]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB928255)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB928255$\spuninst\spuninst.exe\""

[Uninstall\KB928843]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB928843)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB928843$\spuninst\spuninst.exe\""

[Uninstall\KB929123]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB929123)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB929123$\spuninst\spuninst.exe\""

[Uninstall\KB929338]
  "DisplayName"="Mise à jour pour Windows XP (KB929338)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB929338$\spuninst\spuninst.exe\""

[Uninstall\KB929399]
  "DisplayName"="Hotfix for Windows Media Format 11 SDK (KB929399)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe\""
  "DisplayIcon"=expand:"\"%ProgramFiles%\windows media player\wmplayer.exe\""

[Uninstall\KB929969]
  "DisplayName"="Mise à jour de sécurité pour Windows Internet Explorer 7 (KB929969)"
  "UninstallString"=""
  "DisplayIcon"="C:\Program Files\internet explorer\iexplore.exe"

[Uninstall\KB930178]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB930178)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB930178$\spuninst\spuninst.exe\""

[Uninstall\KB930916]
  "DisplayName"="Mise à jour pour Windows XP (KB930916)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB930916$\spuninst\spuninst.exe\""

[Uninstall\KB931261]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB931261)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB931261$\spuninst\spuninst.exe\""

[Uninstall\KB931768-IE7]
  "DisplayName"="Mise à jour de sécurité pour Windows Internet Explorer 7 (KB931768)"
  "UninstallString"="\"C:\WINDOWS\ie7updates\KB931768-IE7\spuninst\spuninst.exe\""
  "DisplayIcon"="C:\Program Files\internet explorer\iexplore.exe"

[Uninstall\KB931784]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB931784)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB931784$\spuninst\spuninst.exe\""

[Uninstall\KB931836]
  "DisplayName"="Mise à jour pour Windows XP (KB931836)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB931836$\spuninst\spuninst.exe\""

[Uninstall\KB932168]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB932168)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB932168$\spuninst\spuninst.exe\""

[Uninstall\KB933566-IE7]
  "DisplayName"="Mise à jour de sécurité pour Windows Internet Explorer 7 (KB933566)"
  "UninstallString"="\"C:\WINDOWS\ie7updates\KB933566-IE7\spuninst\spuninst.exe\""
  "DisplayIcon"="C:\Program Files\internet explorer\iexplore.exe"

[Uninstall\KB935839]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB935839)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB935839$\spuninst\spuninst.exe\""

[Uninstall\KB935840]
  "DisplayName"="Mise à jour de sécurité pour Windows XP (KB935840)"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallKB935840$\spuninst\spuninst.exe\""

[Uninstall\KBD]
  "DisplayName"="KBD"
  "UninstallString"="C:\HP\KBD\KBD.EXE uninstalled"

[Uninstall\KLiteCodecPack_is1]
  "DisplayName"="K-Lite Codec Pack 2.89 Full"
  "UninstallString"="\"C:\Program Files\K-Lite Codec Pack\unins000.exe\""

[Uninstall\Le code de la route]
  "UninstallString"="C:\WINDOWS\unin040c.exe -f\"C:\Program Files\Ediser\Le code de la route\DeIsL1.isu\"  -c\"C:\Program Files\Ediser\Le code de la route\_ISREG32.DLL\""
  "DisplayName"="Le code de la route"

[Uninstall\LHTTSFRF]
  "DisplayName"="L&H TTS3000 Français"
  "UninstallString"="RunDll32 advpack.dll,LaunchINFSection C:\WINDOWS\INF\LHTTSFRF.inf, Uninstall"

[Uninstall\LiveUpdate]
  "UninstallString"="\"C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE\" /U"
  "DisplayName"="LiveUpdate 3.0 (Symantec Corporation)"
  "DisplayIcon"="\"C:\Program Files\Symantec\LiveUpdate\LUALL.EXE\""

[Uninstall\M886903]
  "DisplayName"="Microsoft .NET Framework 1.1 Hotfix (KB886903)"
  "UninstallString"="\"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe\" \"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M886903\M886903Uninstall.msp\""
  "DisplayIcon"="C:\WINDOWS\system32\msiexec.exe"

[Uninstall\Macromedia Shockwave Player]
  "DisplayName"="Macromedia Shockwave Player"
  "UninstallString"="C:\WINDOWS\system32\Macromed\SHOCKW~2\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~2\Install.log"

[Uninstall\MAGIX Media Manager 2004 gold]
  "DisplayName"="MAGIX Media Manager 2004 gold"
  "UninstallString"="C:\MAGIX\Media_Manager_2004\instslct.exe"
  "DisplayIcon"="C:\MAGIX\Media_Manager_2004\MediaManager.exe"

[Uninstall\MAGIX video deLuxe 2005 PLUS]
  "DisplayName"="MAGIX video deLuxe 2005 PLUS"
  "UninstallString"="C:\MAGIX\video_deLuxe_2005_PLUS\instslct.exe"
  "DisplayIcon"="C:\MAGIX\video_deLuxe_2005_PLUS\videodeLuxe.exe"

[Uninstall\Messenger Plus! Live]
  "UninstallString"="\"C:\Program Files\Messenger Plus! Live\Uninstall.exe\""
  "DisplayIcon"="\"C:\Program Files\Messenger Plus! Live\Uninstall.exe\""
  "DisplayName"="Messenger Plus! Live"

[Uninstall\Microsoft .NET Framework 1.1  (1033)]
  "UninstallString"="msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}"
  "DisplayName"="Microsoft .NET Framework 1.1"
  "DisplayIcon"="C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322
dpsetup.ico"

[Uninstall\Microsoft .NET Framework 2.0]
  "DisplayIcon"="C:\WINDOWS\system32\msiexec.exe"
  "DisplayName"="Microsoft .NET Framework 2.0"
  "UninstallString"="C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0\install.exe"

[Uninstall\MobileOptionPack]

[Uninstall\Mozilla Firefox (2.0.0.3)]
  "DisplayIcon"="C:\Program Files\Mozilla Firefox\firefox.exe,0"
  "DisplayName"="Mozilla Firefox (2.0.0.3)"
  "UninstallString"="C:\Program Files\Mozilla Firefox\uninstall\helper.exe"

[Uninstall\Mozilla Firefox (2.0.0.4)]
  "DisplayIcon"="C:\PROGRA~1\Mozilla Firefox\firefox.exe,0"
  "DisplayName"="Mozilla Firefox (2.0.0.4)"
  "UninstallString"="C:\PROGRA~1\Mozilla Firefox\uninstall\helper.exe"

[Uninstall\MSCompPackV1]
  "DisplayName"="Microsoft Compression Client Pack 1.0 for Windows XP"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe\""

[Uninstall\MSI30-Beta1]

[Uninstall\MSI30-Beta2]

[Uninstall\MSI30-KB884016]

[Uninstall\MSI30-RC1]

[Uninstall\MSI30-RC2]

[Uninstall\MSI30a-KB884016]

[Uninstall\MSI31-Beta]

[Uninstall\MSI31-RC1]

[Uninstall\NetMeeting]

[Uninstall\NLSDownlevelMapping]
  "DisplayName"="Microsoft National Language Support Downlevel APIs"
  "UninstallString"="\"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe\""

[Uninstall\NVIDIA Drivers]
  "DisplayName"="NVIDIA Drivers"
  "UninstallString"="C:\WINDOWS\system32
vudisp.exe UninstallGUI"

[Uninstall\NVIDIA Drivers\SubComponents]

[Uninstall\OutlookExpress]

[Uninstall\Panda ActiveScan]
  "DisplayIcon"="C:\WINDOWS\system32\pavas.ico"
  "UninstallString"="C:\WINDOWS\system32\ASUninst.exe Panda ActiveScan"
  "DisplayName"="Panda ActiveScan"

[Uninstall\PCHealth]
  "UninstallString"="rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf"

[Uninstall\PictureItPrem_v10]
  "DisplayName"="Microsoft Photo Premium 10"
  "UninstallString"="\"C:\Program Files\Fichiers communs\Microsoft Shared\Picture It!\RmvSuite.exe\" ADDREMOVE=1 SKU=PREM"
  "DisplayIcon"="C:\Program Files\Fichiers communs\Microsoft Shared\Picture It!\RmvSuite.exe"
  "InstallSource"="F:\pip\pod\"

[Uninstall\PS2]
  "DisplayName"="PS2"
  "UninstallString"="C:\WINDOWS\system32\ps2.exe uninstall"

[Uninstall\Python 2.2 combined Win32 extensions]
  "DisplayName"="Python 2.2 combined Win32 extensions"
  "UninstallString"="C:\Python22\Lib\SITE-P~1\UNWISE~1.EXE C:\Python22\Lib\SITE-P~1\w32inst.log"

[Uninstall\Python 2.2.1]
  "DisplayName"="Python 2.2.1"
  "UninstallString"="C:\Python22\UNWISE.EXE C:\Python22\INSTALL.LOG"
  "DisplayIcon"="C:\Python22\py.ico,-0"

[Uninstall\QcDrv]
  "DisplayName"="Programme de gestion Camera de Logitech®"
  "UninstallString"="\"C:\Program Files\Fichiers communs\Logitech\QCDRV\BIN\SETUP.EXE\" UNINSTALL REMOVEPROMPT"
  "DisplayIcon"="C:\Program Files\Fichiers communs\Logitech\QCDRV\BIN\icon.ico"
  "InstallSource"="C:\Program Files\Logitech\QuickCamWebInstall\Drivers\Bin"

[Uninstall\Questions-Réponses]
  "DisplayIcon"="C:\Program Files\Atlence\Questions-Réponses 1.54\Questions Réponses.exe"
  "DisplayName"="Questions-Réponses 1.54"
  "UninstallString"="C:\Program Files\Atlence\Questions-Réponses 1.54\unins000.exe"

[Uninstall\RealJukebox 1.0]
  "UninstallString"="C:\Program Files\Fichiers communs\Real\Update_OB1puninst.exe RealNetworks|RealPlayer|6.0"

[Uninstall\RealPlayer 6.0]
  "UninstallString"="C:\Program Files\Fichiers communs\Real\Update_OB1puninst.exe RealNetworks|RealPlayer|6.0"
  "DisplayName"="RealPlayer"
  "DisplayIcon"="C:\Program Files\Real\RealPlayerealplay.exe"

[Uninstall\RecordNow.exe]
  "UninstallString"="c:\WINDOWS\system32\MSIEXEC.EXE /x {9541FED0-327F-4df0-8B96-EF57EF622F19}"

[Uninstall\RegSupreme_is1]
  "DisplayName"="RegSupreme 1.4"
  "DisplayIcon"="C:\Program Files\RegSupreme\RegSupreme.exe"
  "UninstallString"="\"C:\Program Files\RegSupreme\unins000.exe\""

[Uninstall\Ri4m v5]
  "DisplayName"="Ri4m v5"
  "UninstallString"="C:\Program Files\Ripp-it_AM\Ri4m_Uninstal.exe"

[Uninstall\SAMSUNG CDMA Modem]
  "DisplayName"="SAMSUNG CDMA Modem Driver Set"
  "UninstallString"="C:\WINDOWS\system32\Samsung_USB_Drivers\3\SSCDUninstall.exe"

[Uninstall\SAMSUNG Mobile USB Modem]
  "DisplayName"="SAMSUNG Mobile USB Modem Software"
  "UninstallString"="C:\WINDOWS\system32\Samsung_USB_Drivers\2\SSM_Uninstall.exe"

[Uninstall\SAMSUNG Mobile USB Modem 1.0]
  "DisplayName"="SAMSUNG Mobile USB Modem 1.0 Software"
  "UninstallString"="C:\WINDOWS\system32\Samsung_USB_Drivers\1\SS_Uninstall.exe"

[Uninstall\Sandlot Games Client Services_is1]
  "DisplayName"="Sandlot Games Client Services"
  "UninstallString"="\"C:\Program Files\Fichiers communs\Sandlot Shared\unins000.exe\""

[Uninstall\SchedulingAgent]

[Uninstall\SereneScreen Marine Aquarium 2_is1]
  "DisplayName"="SereneScreen Marine Aquarium 2"
  "DisplayIcon"="C:\WINDOWS\system32\Marine Aquarium 2.scr"
  "UninstallString"="\"C:\Program Files\SereneScreen\Marine Aquarium 2\unins000.exe\""

[Uninstall\Shockwave]
  "DisplayName"="Shockwave"
  "UninstallString"="C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log"

[Uninstall\ShockwaveFlash]
  "DisplayName"="Adobe Flash Player 9 ActiveX"
  "UninstallString"="C:\WINDOWS\system32\Macromed\Flash\FlashUtil9b.exe -uninstallDelete"

[Uninstall\SiS VGA Driver]
  "DisplayName"="SiS VGA Utilities"
  "UninstallString"="Rundll32 SiSInst.dll,Uninstall VGA,R,oem53.inf"

[Uninstall\Spybot - Search & Destroy_is1]
  "DisplayName"="Spybot - Search & Destroy 1.4"
  "DisplayIcon"="C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe"
  "UninstallString"="\"C:\Program Files\Spybot - Search & Destroy\unins000.exe\""

[Uninstall\Teamspeak 2 RC2_is1]
  "DisplayName"="TeamSpeak 2 RC2"
  "UninstallString"="\"C:\Program Files\Teamspeak2_RC2\unins000.exe\""

[Uninstall\Vodafone 804SS USB driver]
  "DisplayName"="SAMSUNG Mobile USB Modem ^^"
  "UninstallString"="C:\WINDOWS\system32\Samsung_USB_Drivers\4\SSVDUninstall.exe"

[Uninstall\Wdf01000]

[Uninstall\Wdf01001]

[Uninstall\Wdf01005]
  "DisplayName"="Microsoft Kernel-Mode Driver Framework Feature Pack 1.5"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallWdf01005$\spuninst\spuninst.exe\""

[Uninstall\WGA]
  "DisplayName"="Windows Genuine Advantage Validation Tool (KB892130)"

[Uninstall\WgaNotify]
  "DisplayName"="Windows Genuine Advantage Notifications (KB905474)"
  "UninstallString"=""

[Uninstall\WinAVI iPod]

[Uninstall\WinAVI iPod\PSP]

[Uninstall\WinAVI iPod\PSP\3GP]

[Uninstall\WinAVI iPod\PSP\3GP\MP4 Video Converter_is1]
  "DisplayName"="WinAVI MP4 Converter 3.1"
  "UninstallString"="\"C:\Program Files\WinAVI MP4 Converter\unins000.exe\""

[Uninstall\Window Washer]
  "DisplayName"="Window Washer"
  "UninstallString"="C:\WINDOWS\Unwash6.exe"

[Uninstall\Windows Live OneCare safety scanner]
  "DisplayName"="Windows Live OneCare safety scanner"
  "UninstallString"="RunDll32.exe \"C:\Program Files\Windows Live Safety Center\wlscCore.dll\",UninstallFunction WLSC_SCANNER_PRODUCT"

[Uninstall\Windows Media Format Runtime]
  "DisplayName"="Windows Media Format 11 runtime"
  "UninstallString"="\"C:\Program Files\Windows Media Player\wmsetsdk.exe\" /UninstallAll"
  "DisplayIcon"="C:\Program Files\Windows Media Player\wmplayer.exe"

[Uninstall\Windows Media Player]
  "DisplayName"="Lecteur Windows Media 11"
  "UninstallString"="\"C:\Program Files\Windows Media Player\Setup_wm.exe\" /Uninstall"
  "DisplayIcon"="C:\Program Files\Windows Media Player\wmplayer.exe"

[Uninstall\WinRAR archiver]
  "DisplayName"="Archiveur WinRAR"
  "UninstallString"="C:\Program Files\WinRAR\uninstall.exe"

[Uninstall\WMCSetup]

[Uninstall\WMFDist11]
  "DisplayName"="Windows Media Format 11 runtime"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe\""

[Uninstall\wmp11]
  "DisplayName"="Windows Media Player 11"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe\""

[Uninstall\Works2005Setup]
  "UninstallString"="C:\Program Files\Microsoft Works Suite 2005\Setup\Launcher.exe /ARP F:\"
  "DisplayName"="Sélecteur d'installation de Microsoft Works 2005"
  "DisplayIcon"="C:\Program Files\Microsoft Works Suite 2005\Setup\launcher.exe\00/ARP F:\"

[Uninstall\World Of Elendil_is1]
  "DisplayName"="World Of Elendil 1.0"
  "UninstallString"="\"C:\Program Files\World Of Elendil\unins000.exe\""

[Uninstall\Wow Cartographe]
  "DisplayName"="Wow Cartographe 1.07"
  "UninstallString"="C:\Program Files\WowCartographe\uninst.exe"
  "DisplayIcon"="C:\Program Files\WowCartographe\WowCartographe.exe"

[Uninstall\Wudf01000]
  "DisplayName"="Microsoft User-Mode Driver Framework Feature Pack 1.0"
  "UninstallString"="\"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe\""

[Uninstall\{0003040C-78E1-11D2-B60F-006097C998E7}]
  "InstallSource"="F:\"
  "UninstallString"=expand:"MsiExec.exe /I{0003040C-78E1-11D2-B60F-006097C998E7}"
  "DisplayName"="Microsoft Office 2000 SR-1 Small Business"

[Uninstall\{01521746-02A6-4A72-00BD-A285DF6B80C6}]
  "DisplayName"="Les Sims 2 Académie"
  "UninstallString"="C:\Program Files\EA GAMES\Les Sims 2 Académie\EAUninstall.exe"
  "DisplayIcon"="C:\Program Files\EA GAMES\Les Sims 2 Académie\Sims2EP1.ico"

[Uninstall\{0456ebd7-5f67-4ab6-852e-63781e3f389c}]
  "UninstallString"=expand:"MsiExec.exe /X{0456ebd7-5f67-4ab6-852e-63781e3f389c}"
  "DisplayName"="Macromedia Flash Player"

[Uninstall\{04AF207D-9A77-465A-8B76-991F6AB66245}]
  "InstallSource"="C:\Documents and Settings\HP_Propriétaire\Bureau\Adobe CS3\Illustrator\Adobe CS3\payloads\AdobeHelpViewerAll\"
  "UninstallString"=expand:"MsiExec.exe /I{04AF207D-9A77-465A-8B76-991F6AB66245}"
  "DisplayName"="Adobe Help Viewer CS3"

[Uninstall\{05460044-64A6-4248-A026-9745C1E9E159}]
  "InstallSource"="F:\Encarta\"
  "UninstallString"=expand:"MsiExec.exe /I{05460044-64A6-4248-A026-9745C1E9E159}"
  "DisplayName"="Encyclopédie Microsoft Encarta 2005"

[Uninstall\{0585AFE2-148B-4184-BCFA-3980704E45D8}]
  "InstallSource"="E:\Redist\enx\"
  "UninstallString"=expand:"MsiExec.exe /X{0585AFE2-148B-4184-BCFA-3980704E45D8}"
  "DisplayName"="RealSpeakEnx"

[Uninstall\{08783603-FFD0-479c-9160-E2FA46E62883}]
  "InstallSource"="F:\WksUpGrd\"
  "DisplayName"="Mise à niveau de Works"

[Uninstall\{08B32819-6EEF-4057-AEDA-5AB681A36A23}]
  "InstallSource"="C:\Documents and Settings\HP_Propriétaire\Bureau\Adobe CS3\Illustrator\Adobe CS3\payloads\BridgeStartMeeting\"
  "UninstallString"=expand:"MsiExec.exe /I{08B32819-6EEF-4057-AEDA-5AB681A36A23}"
  "DisplayName"="Adobe Bridge Start Meeting"

[Uninstall\{0C66761E-497A-4BE3-AE0D-8EC30FC9A9AA}]
  "DisplayName"="PC-Doctor for Windows"

[Uninstall\{0D182A5E-AEE0-42ca-BD1D-4EEB2FFA256D}]
  "UninstallString"="C:\Program Files\HP\Digital Imaging\{0D182A5E-AEE0-42ca-BD1D-4EEB2FFA256D}\setup\hpzscr01.exe -datfile hpdscr01.dat"
  "DisplayName"="HP Image Zone Plus 4.2.3"
  "DisplayIcon"="C:\Program Files\HP\Digital Imaging\{0D182A5E-AEE0-42ca-BD1D-4EEB2FFA256D}\setup\hpzscr01.exe,0"

[Uninstall\{0E0131B2-CF18-40D9-A331-60A3746C1204}]
  "UninstallString"="RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup \"C:\Program Files\InstallShield Installation Information\{0E0131B2-CF18-40D9-A331-60A3746C1204}\SETUP.EXE\" -l0x40c UNINSTALL"
  "DisplayName"="EPSON Scan"

[Uninstall\{11E83B33-972B-4512-A447-FF0FD0246EE9}]
  "UninstallString"="RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup \"C:\Program Files\InstallShield Installation Information\{11E83B33-972B-4512-A447-FF0FD0246EE9}\setup.exe\" -l0x40c "

[Uninstall\{1526D87C-A955-4FAB-BF18-697BA457E352}]
  "DisplayIcon"="C:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe,0"

[Uninstall\{17E57E89-DDB3-4f76-9AF1-A8E01CC633E4}]
  "InstallSource"="F:\WordAdd\"
  "UninstallString"=expand:"MsiExec.exe /I{17E57E89-DDB3-4f76-9AF1-A8E01CC633E4}"
  "DisplayName"="Complément Microsoft Word pour Microsoft Works Suite"

[Uninstall\{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}]
  "InstallSource"="C:\Documents and Settings\HP_Propriétaire\Bureau\Adobe CS3\Illustrator\Adobe CS3\payloads\AdobeWinSoftLinguisticsPluginAll\"
  "UninstallString"=expand:"MsiExec.exe /I{184CE391-7E0E-4C63-9935-D7A10EDFD3C6}"
  "DisplayName"="Adobe WinSoft Linguistics Plugin"

[Uninstall\{18D10072035C4515918F7E37EAFAACFC}]
  "DisplayName"="AutoUpdate"

[Uninstall\{1967D67C-6F3F-4001-9644-BAC704F7EE84}]
  "InstallSource"="C:\Program Files\Samsung\Samsung PC Studio 3\{1967D67C-6F3F-4001-9644-BAC704F7EE84}\"
  "DisplayName"="Samsung PC Studio"

[Uninstall\{1F63ED0B-EDD2-4037-B6AB-1358C624AF48}]
  "DisplayName"="Scan"

[Uninstall\{21B6F79B-2286-4BB0-B1E3-BA6B9498D110}]
  "UninstallString"="RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup \"C:\Program Files\InstallShield Installation Information\{21B6F79B-2286-4BB0-B1E3-BA6B9498D110}\setup.exe\" -l0x40c "

[Uninstall\{21E75254-410E-49C4-8981-2E1A2A2221F2}]
  "DisplayName"="HP Diagnostic Assistant"

[Uninstall\{236BB7C4-4419-42FD-040C-1E257A25E34D}]
  "InstallSource"="C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\Rar$EX30.906\Adobe Photoshop CS2 (9.0) Fr\Adobe(R) Photoshop(R) CS2\"
  "DisplayName"="Adobe Photoshop CS2"

[Uninstall\{23EFDB58-0874-4883-9810-EDA510B19FAE}]
  "UninstallString"="RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup \"C:\Program Files\InstallShield Installation Information\{23EFDB58-0874-4883-9810-EDA510B19FAE}\setup.exe\" -l0x40c "

[Uninstall\{267868CE-6DFF-40F7-9C58-C01119B7B117}]
  "DisplayName"="Fax"

[Uninstall\{29E5EA97-5F74-4A57-B8B2-D4F169117183}]
  "InstallSource"="C:\Documents and Settings\HP_Propriétaire\Bureau\Adobe CS3\Illustrator\Adobe CS3\payloads\AdobeStockPhotos1.5All\"
  "UninstallString"=expand:"MsiExec.exe /I{29E5EA97-5F74-4A57-B8B2-D4F169117183}"
  "DisplayName"="Adobe Stock Photos CS3"

[Uninstall\{2BB79C8D-9DCC-4861-8A23-AE1B0B45E2B6}]
  "UninstallString"="RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup \"C:\Program Files\InstallShield Installation Information\{2BB79C8D-9DCC-4861-8A23-AE1B0B45E2B6}\setup.exe\" -l0x40c "

[Uninstall\{2BBC9458-07CA-4843-848B-5C8146E5EFA8}]
  "InstallSource"="c:\hp\drivers\hpiz423\Setup\CreativeProjects\"
  "DisplayName"="CreativeProjects"

[Uninstall\{2BFBC62A-3353-443D-93BE-7AC641D9F342}]
  "UninstallString"="RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup \"C:\Program Files\InstallShield Installation Information\{2BFBC62A-3353-443D-93BE-7AC641D9F342}\setup.exe\" -l0x40c "

[Uninstall\{2CCBABCB-6427-4A55-B091-49864623C43F}]

[Uninstall\{2E8EAC71-BFE4-417A-88F0-5A1BDFBCF5D3}]
  "UninstallString"="RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup \"C:\Program Files\InstallShield Installation Information\{2E8EAC71-BFE4-417A-88F0-5A1BDFBCF5D3}\setup.exe\" -l0x40c  -removeonly"
  "InstallSource"="F:\1b-SetPoint\"
  "DisplayName"="Logitech SetPoint"
  "DisplayIcon"="C:\Program Files\Logitech\SetPoint\SetPoint.exe,7"

[Uninstall\{2ECE7ECE-D15B-4999-8B8D-01C998F489D5}]
  "InstallSource"="C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\Rar$EX01.188\Encore 2.0 Tryout\"
  "DisplayName"="Adobe Encore DVD 2.0"

[Uninstall\{2FCE4FC5-6930-40E7-A4F1-F862207424EF}]
  "UninstallString"="\"C:\Program Files\InstallShield Installation Information\{2FCE4FC5-6930-40E7-A4F1-F862207424EF}\setup.exe\" REMOVEALL"
  "DisplayName"="InterVideo WinDVD Creator"
  "DisplayIcon"="\"C:\Program Files\InterVideo\WCreator2\WCreator.exe\""

[Uninstall\{34A59AC3-6C5C-4A09-A7F5-369A37176C8A}]
  "DisplayName"="AiOSoftware"

[Uninstall\{350C940c-3D7C-4EE8-BAA9-00BCB3D54227}]
  "InstallSource"="C:\WINDOWS\system32\"
  "DisplayName"="WebFldrs XP"

[Uninstall\{37477865-A3F1-4772-AD43-AAFC6BCFF99F}]
  "InstallSource"="c:\a240eff159e7876326f7d7\"
  "UninstallString"=expand:"MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}"
  "DisplayName"="MSXML 4.0 SP2 (KB927978)"

[Uninstall\{3AE681E0-4E8D-453F-950A-48534D3C0724}]
  "DisplayName"="Copy"

[Uninstall\{3AEF2F6C-F1D3-47CD-BF3B-A327F1FABE58}]
  "DisplayName"="PSPrinters06"

[Uninstall\{3F262ADC-5AD2-48E5-A586-44315E04A9E2}]
  "InstallSource"="F:\pip\pod\"
  "DisplayName"="Microsoft Picture It! Album 10"

[Uninstall\{41254D7B-EADF-4078-AE4A-BD73B300EE86}]
  "DisplayName"="Unload"

[Uninstall\{42756145-9997-4D28-809B-8756BFD00106}]
  "InstallSource"="F:\pip\"
  "DisplayName"="Microsoft Photo Premium 10"

[Uninstall\{43DCF766-6838-4F9A-8C91-D92DA586DFA7}]
  "UninstallString"=expand:"MsiExec.exe /X{43DCF766-6838-4F9A-8C91-D92DA586DFA7}"
  "DisplayName"="Visionneuse Journal Windows Microsoft"

[Uninstall\{457791C5-D702-4143-A7B2-2744BE9573F2}]
  "UninstallString"=expand:"MsiExec.exe /X{457791C5-D702-4143-A7B2-2744BE9573F2}"
  "DisplayName"="HP Software Update"

[Uninstall\{4817189D-1785-4627-A33C-39FD90919300}]
  "DisplayName"="Les Sims™ 2 Animaux & Cie"
  "UninstallString"="C:\Program Files\EA GAMES\Les Sims 2 Animaux & Cie\EAUninstall.exe"
  "DisplayIcon"="C:\Program Files\EA GAMES\Les Sims 2 Animaux & Cie\Sims2EP4.ico"

[Uninstall\{49FC50FC-F965-40D9-89B4-CBFF80941FRA}]
  "DisplayName"="Windows Movie Maker 2.0"

[Uninstall\{4C04DF1B-6A39-4299-9DD1-1FA60000266E}]
  "UninstallString"="C:\Program Files\HP\Digital Imaging\{4C04DF1B-6A39-4299-9DD1-1FA60000266E}\setup\hpzscr01.exe -datfile hpiscr01.dat"
  "DisplayName"="HP Appareils photos Photosmart 4.0"
  "DisplayIcon"="C:\Program Files\HP\Digital Imaging\uninstall\hpzscr01.exe,0"

[Uninstall\{503AA035-41E2-4858-B31F-1E49AC66C309}]
  "DisplayIcon"="c:\Program Files\Fichiers communs\Symantec Shared\Security Center\SymWSC.exe,0"

[Uninstall\{54793AA1-5001-42F4-ABB6-C364617C6078}]
  "InstallSource"="C:\Documents and Settings\HP_Propriétaire\Bureau\Adobe CS3\Illustrator\Adobe CS3\payloads\AdobeLinguisticsAll\"
  "UninstallString"=expand:"MsiExec.exe /I{54793AA1-5001-42F4-ABB6-C364617C6078}"
  "DisplayName"="Adobe Linguistics CS3"

[Uninstall\{561A9B4E-2E48-4149-B977-59C7AFF62B52}]
  "InstallSource"="c:\hp\drivers\hpiz423\Setup\CPC\"
  "UninstallString"=expand:"MsiExec.exe /X{561A9B4E-2E48-4149-B977-59C7AFF62B52}"
  "DisplayName"="HPIZ423"

[Uninstall\{5A24DD7E-7B01-41AC-ADA8-F1776177A3BA}]
  "InstallSource"="E:\ImageStudio\fra\"
  "UninstallString"=expand:"MsiExec.exe /I{5A24DD7E-7B01-41AC-ADA8-F1776177A3BA}"
  "DisplayName"="Logitech ImageStudio"

[Uninstall\{5C29CB8B-AC1E-4114-8D68-9CD080140D4A}]
  "UninstallString"="RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup \"C:\Program Files\InstallShield Installation Information\{5C29CB8B-AC1E-4114-8D68-9CD080140D4A}\Setup.exe\" UNINSTALL"
  "DisplayName"="Sony USB Driver"

[Uninstall\{62369F2F77534556AEF4C58152E3BDE5}]

[Uninstall\{63569CE9-FA00-469C-AF5C-E5D4D93ACF91}]
  "UninstallString"=expand:"MsiExec.exe /I{63569CE9-FA00-469C-AF5C-E5D4D93ACF91}"
  "DisplayName"="Windows Genuine Advantage v1.3.0254.0"

[Uninstall\{66349B1A-A8CB-4DBF-8643-FEBE86F8AF16}]
  "UninstallString"="RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup \"C:\Program Files\InstallShield Installation Information\{66349B1A-A8CB-4DBF-8643-FEBE86F8AF16}\setup.exe\" "
  "DisplayName"="Dragon NaturallySpeaking XP Edition"
  "DisplayIcon"="C:\PROGRA~1\DRAGON~1\NATURA~1\Program\NatSpeak.exe"
  "InstallSource"="E:\"

[Uninstall\{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}]
  "UninstallString"=expand:"MsiExec.exe /I{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}"
  "DisplayName"="Sonic Express Labeler"

[Uninstall\{67E4EE98-59F4-4220-89A6-A20AF5BEC689}]
  "DisplayIcon"="C:\Program Files\Microsoft AutoRoute\AutoRout.exe,0"
  "InstallSource"="F:\AutoRte\MSMap\"
  "UninstallString"=expand:"MsiExec.exe /I{67E4EE98-59F4-4220-89A6-A20AF5BEC689}"
  "DisplayName"="Microsoft AutoRoute 2005"

[Uninstall\{6ABE0BEE-D572-4FE8-B434-9E72A289431B}]
  "InstallSource"="C:\Documents and Settings\HP_Propriétaire\Bureau\Adobe CS3\Illustrator\Adobe CS3\payloads\AdobeFontsAll\"
  "UninstallString"=expand:"MsiExec.exe /I{6ABE0BEE-D572-4FE8-B434-9E72A289431B}"
  "DisplayName"="Adobe Fonts All"

[Uninstall\{6B350CA4-0031-0002-3757-34999AD85AEC}]
  "DisplayName"="InterVideo WinDVD Creator 2"

[Uninstall\{6BDD9CE6-D0A6-478A-BAD3-BA6945E89EB0}]
  "DisplayName"="Les Sims 2 Fun en Famille Kit"
  "UninstallString"="C:\Program Files\EA GAMES\Les Sims 2 Fun en Famille Kit\EAUninstall.exe"
  "DisplayIcon"="C:\Program Files\EA GAMES\Les Sims 2 Fun en Famille Kit\Sims2SP1.ico"

[Uninstall\{6C11D561-620B-47DA-A693-4C597F3CDF40}]
  "UninstallString"="RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup \"C:\Program Files\InstallShield Installation Information\{6C11D561-620B-47DA-A693-4C597F3CDF40}\SETUP.EXE\" -l0x40c Uninstall"
  "DisplayName"="EPSON Smart Panel"
  "DisplayIcon"="C:\Program Files\Smart Panel\SmaPanel.exe"

[Uninstall\{6E08CE13-C2AB-4749-9335-5900B958929E}]
  "InstallSource"="C:\Documents and Settings\HP_Propriétaire\Bureau\Adobe CS3\Illustrator\Adobe CS3\payloads\AdobeIllustrator13fr_FR\"
  "UninstallString"=expand:"MsiExec.exe /I{6E08CE13-C2AB-4749-9335-5900B958929E}"
  "DisplayName"="Adobe Illustrator CS3"

[Uninstall\{6E7DD182-9FC6-4651-0095-2E666CC6AF35}]
  "DisplayName"="Les Sims 2"
  "UninstallString"="C:\Program Files\EA GAMES\Les Sims 2\EAUninstall.exe"
  "DisplayIcon"="C:\Program Files\EA GAMES\Les Sims 2\Sims2.ico"

[Uninstall\{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}]
  "InstallSource"="C:\Documents and Settings\HP_Propriétaire\Bureau\Adobe CS3\Illustrator\Adobe CS3\payloads\AdobeAssetServices3All\"
  "UninstallString"=expand:"MsiExec.exe /I{6FF5DD7A-FE28-4439-B8CF-1E9AF4EA0A61}"
  "DisplayName"="Adobe Asset Services CS3"

[Uninstall\{7131646D-CD3C-40F4-97B9-CD9E4E6262EF}]
  "DisplayIcon"="C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727
dpsetup.ico"
  "DisplayName"="Microsoft .NET Framework 2.0"

[Uninstall\{716E0306-8318-4364-8B8F-0CC4E9376BAC}]
  "InstallSource"="C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\"
  "UninstallString"=expand:"MsiExec.exe /I{716E0306-8318-4364-8B8F-0CC4E9376BAC}"
  "DisplayName"="MSXML 4.0 SP2 Parser and SDK"

[Uninstall\{725249C3-B94C-4141-8799-0D3BA43D0812}]
  "DisplayName"="CameraDrivers"

[Uninstall\{73B5D990-04EA-4751-B10F-5534770B91F2}]
  "InstallSource"="C:\Documents and Settings\HP_Propriétaire\Bureau\Adobe CS3\Illustrator\Adobe CS3\payloads\AdobeColorEU_RecommendedAll\"
  "UninstallString"=expand:"MsiExec.exe /I{73B5D990-04EA-4751-B10F-5534770B91F2}"
  "DisplayName"="Adobe Color EU Recommended Settings"

[Uninstall\{7585478E9D9B42108671C12F8714CEFE}]
  "DisplayIcon"="C:\Program Files\DivX\DivX Converter\Converter.exe,0"
  "UninstallString"="C:\Program Files\DivX\ConverterUninstall.exe /CONVERTER"

[Uninstall\{775FFF70-4A8C-4500-908D-3C34DBEB11D5}]
  "UninstallString"="RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup \"C:\Program Files\InstallShield Installation Information\{775FFF70-4A8C-4500-908D-3C34DBEB11D5}\setup.exe\" -l0x40c "

[Uninstall\{786C5747-0C40-4930-9AFE-113BCE553101}]
  "InstallSource"="C:\Documents and Settings\HP_Propriétaire\Bureau\Dossier de Julien\logiciels\PhotoshopTryout\Photoshop_CS2_F_TryOut\Stock Photography\"
  "UninstallString"=expand:"MsiExec.exe /I{786C5747-0C40-4930-9AFE-113BCE553101}"
  "DisplayName"="Adobe Stock Photos 1.0"

[Uninstall\{786C5747-1437-443D-B06E-79A00FE45110}]
  "InstallSource"="C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\Rar$EX04.375\Stock Photography\"
  "UninstallString"=expand:"MsiExec.exe /I{786C5747-1437-443D-B06E-79A00FE45110}"
  "DisplayName"="Adobe Stock Photos 1.0"

[Uninstall\{7B3577F5-1D82-4C9B-008B-69D026FD8BCA}]
  "DisplayName"="Les Sims 2 : La bonne affaire"
  "UninstallString"="C:\Program Files\EA GAMES\Les Sims 2  La bonne affaire\EAUninstall.exe"
  "DisplayIcon"="C:\Program Files\EA GAMES\Les Sims 2  La bonne affaire\Sims2EP3.ico"

[Uninstall\{7B63B2922B174135AFC0E1377DD81EC2}]
  "DisplayName"="DivX Codec"
  "DisplayIcon"="C:\Program Files\DivX\DivX Codec\config.exe,0"
  "UninstallString"="C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC"

[Uninstall\{802771A9-A856-4A41-ACF7-1450E523C923}]
  "InstallSource"="C:\Documents and Settings\HP_Propriétaire\Bureau\Adobe CS3\Illustrator\Adobe CS3\payloads\AdobeXMPPanelsAll\"
  "UninstallString"=expand:"MsiExec.exe /I{802771A9-A856-4A41-ACF7-1450E523C923}"
  "DisplayName"="Adobe XMP Panels CS3"

[Uninstall\{84814E6B-2581-46EC-926A-823BD1C670F6}]
  "InstallSource"="F:\1b-SetPoint\Widcomm\Win32\"
  "UninstallString"=expand:"MsiExec.exe /X{84814E6B-2581-46EC-926A-823BD1C670F6}"
  "DisplayName"="WIDCOMM Bluetooth Software"

[Uninstall\{8777AC6D-89F9-4793-8266-DE406F343E89}]
  "DisplayName"="QFolder"

[Uninstall\{8ADFC4160D694100B5B8A22DE9DCABD9}]
  "DisplayName"="DivX Player"
  "DisplayIcon"="C:\Program Files\DivX\DivX Player\DivX Player.exe,0"
  "UninstallString"="C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER"

[Uninstall\{8BDCD34E-4C0F-4260-A4B4-38422C5A2FF5}]
  "UninstallString"="RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup \"C:\Program Files\InstallShield Installation Information\{8BDCD34E-4C0F-4260-A4B4-38422C5A2FF5}\setup.exe\" -l0x40c "
  "DisplayName"="Thrustmaster FFB Joystick driver"
  "DisplayIcon"="C:\Program Files\Thrustmaster\FFB Joystick\uninst.ico"

[Uninstall\{8CC990CD-87C8-475C-AC32-8A7984E2FCFA}]
  "UninstallString"=expand:"MsiExec.exe /I{8CC990CD-87C8-475C-AC32-8A7984E2FCFA}"
  "DisplayName"="CDDRV_Installer"

[Uninstall\{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}]
  "InstallSource"="C:\Documents and Settings\HP_Propriétaire\Bureau\Adobe CS3\Illustrator\Adobe CS3\payloads\AdobeDeviceCentralAll\"
  "UninstallString"=expand:"MsiExec.exe /I{8D2BA474-F406-4710-9AE4-D4F22D21F0DD}"
  "DisplayName"="Adobe Device Central CS3"

[Uninstall\{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}]
  "InstallSource"="C:\Documents and Settings\HP_Propriétaire\Bureau\Adobe CS3\Illustrator\Adobe CS3\payloads\AdobeTypeSupportAll\"
  "UninstallString"=expand:"MsiExec.exe /I{8E6808E2-613D-4FCD-81A2-6C8FA8E03312}"
  "DisplayName"="Adobe Type Support"

[Uninstall\{8EDBA74D-0686-4C99-BFDD-F894678E5102}]
  "UninstallString"=expand:"MsiExec.exe /I{8EDBA74D-0686-4C99-BFDD-F894678E5102}"
  "DisplayName"="Adobe Common File Installer"

[Uninstall\{8FFC924C-ED06-44CB-8867-3CA778ECE903}]
  "InstallSource"="C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\Rar$EX04.375\Help Center\"
  "UninstallString"=expand:"MsiExec.exe /I{8FFC924C-ED06-44CB-8867-3CA778ECE903}"
  "DisplayName"="Adobe Help Center 2.0"

[Uninstall\{9011040C-6000-11D3-8CFE-0150048383C9}]
  "InstallSource"="C:\MSOCache\All Users\9000040c-6000-11D3-8CFE-0150048383C9\"
  "UninstallString"=expand:"MsiExec.exe /I{9011040C-6000-11D3-8CFE-0150048383C9}"
  "DisplayName"="Microsoft Office Professional Edition 2003"

[Uninstall\{90176341-0A8B-4CCC-A78D-F862228A6B95}]
  "InstallSource"="C:\Documents and Settings\HP_Propriétaire\Bureau\Adobe CS3\Illustrator\Adobe CS3\payloads\AdobeALMAnchorServiceAll\"
  "UninstallString"=expand:"MsiExec.exe /I{90176341-0A8B-4CCC-A78D-F862228A6B95}"
  "DisplayName"="Adobe Anchor Service CS3"

[Uninstall\{90885A82-9673-49EA-AB39-AF776639C67C}]
  "UninstallString"="\"C:\Program Files\InstallShield Installation Information\{90885A82-9673-49EA-AB39-AF776639C67C}\setup.exe\" REMOVEALL"
  "DisplayName"="InterVideo WinDVD 7"
  "DisplayIcon"="\"C:\Program Files\InterVideo\DVD7\WinDVD.exe\""

[Uninstall\{911B040C-6000-11D3-8CFE-0050048383C9}]
  "InstallSource"="F:\MSWord\"
  "UninstallString"=expand:"MsiExec.exe /I{911B040C-6000-11D3-8CFE-0050048383C9}"
  "DisplayName"="Microsoft Word 2002"

[Uninstall\{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}]
  "UninstallString"="\"C:\Program Files\InstallShield Installation Information\{91810AFC-A4F8-4EBA-A5AA-B198BBC81144}\setup.exe\" REMOVEALL"
  "DisplayName"="InterVideo WinDVD Player"
  "DisplayIcon"="\"C:\Program Files\InterVideo\WinDVD\WinDVD.exe\""

[Uninstall\{9541FED0-327F-4DF0-8B96-EF57EF622F19}]
  "UninstallString"=expand:"MsiExec.exe /I{9541FED0-327F-4DF0-8B96-EF57EF622F19}"
  "DisplayName"="Sonic RecordNow!"

[Uninstall\{981FB376-8418-4EA8-BBED-9DE5AA63E7D5}]
  "InstallSource"="c:\hp\drivers\hpiz423\Setup\SkinsHP1\"
  "DisplayName"="SkinsHP1"

[Uninstall\{984F10FD-11FD-4BED-8163-92DB81E6A825}]
  "UninstallString"="RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup \"C:\Program Files\InstallShield Installation Information\{984F10FD-11FD-4BED-8163-92DB81E6A825}\Setup.exe\" -l0x40c UNINSTALL"
  "DisplayName"="Logitech IM Video Companion"
  "DisplayIcon"="\"C:\Program Files\Logitech\IM Video Companion\VideoIM.exe\",0"
  "InstallSource"="E:\VideoIM\FRA\"

[Uninstall\{99D7F4D0-E6A7-11D6-AB3E-000102B0F79A}]
  "UninstallString"="RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup \"C:\Program Files\InstallShield Installation Information\{99D7F4D0-E6A7-11D6-AB3E-000102B0F79A}\Setup.exe\" -l0x9 "
  "DisplayName"="Readiris Pro 8 Demo"

[Uninstall\{9A394342-4A68-4EBA-85A6-55B559F4E700}]
  "UninstallString"=expand:"MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}"
  "DisplayName"="Microsoft .NET Framework 1.1 French Language Pack"

[Uninstall\{9C9824D9-9000-4373-A6A5-D0E5D4831394}]
  "InstallSource"="C:\Documents and Settings\HP_Propriétaire\Bureau\Adobe CS3\Illustrator\Adobe CS3\payloads\AdobeBridge2All\"
  "UninstallString"=expand:"MsiExec.exe /I{9C9824D9-9000-4373-A6A5-D0E5D4831394}"
  "DisplayName"="Adobe Bridge CS3"

[Uninstall\{9CB2512B-3EC4-43DF-8002-46BDAB5EDD1B}]
  "DisplayName"="QuickProjects"

[Uninstall\{9EEBF8D5-8712-4D1D-88F4-4CDC2D270BC3}]
  "DisplayName"="PrintScreen"

[Uninstall\{9F7FC79B-3059-4264-9450-39EB368E3225}]
  "DisplayName"="Microsoft Digital Image Library 9 - Blocker"

[Uninstall\{A059DE09-1B49-4450-B340-7AE097EC3F04}]
  "InstallSource"="F:\msworks\"
  "UninstallString"=expand:"MsiExec.exe /I{A059DE09-1B49-4450-B340-7AE097EC3F04}"
  "DisplayName"="Microsoft Works"

[Uninstall\{A1062847-0846-427A-92A1-BB8251A91E91}]
  "UninstallString"="\"C:\Program Files\HP\Digital Imaging\{A1062847-0846-427A-92A1-BB8251A91E91}\setup\hpzscr01.exe\" -datfile hposcr04.dat"
  "DisplayName"="HP PSC & OfficeJet 4.0"
  "DisplayIcon"="C:\Program Files\HP\Digital Imaging\{A1062847-0846-427A-92A1-BB8251A91E91}\setup\hpzscr01.exe,0"

[Uninstall\{A1DCC235-DACC-4E1F-8D11-D630634B4AEF}]
  "InstallSource"="c:\hp\drivers\hpiz423\Setup\PhotoGallery\"
  "DisplayName"="PhotoGallery"

[Uninstall\{A2500497-FD32-493e-B8E5-28D6728DBEF5}]
  "DisplayName"="Readme"

[Uninstall\{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}]
  "InstallSource"="C:\Documents and Settings\HP_Propriétaire\Bureau\Adobe CS3\Illustrator\Adobe CS3\payloads\AdobeCMapsAll\"
  "UninstallString"=expand:"MsiExec.exe /I{A2B242BD-FF8D-4840-9DAA-9170EABEC59C}"
  "DisplayName"="Adobe CMaps"

[Uninstall\{A49F249F-0C91-497F-86DF-B2585E8E76B7}]
  "InstallSource"="C:\Program Files\InstallShield Installation Information\{2E8EAC71-BFE4-417A-88F0-5A1BDFBCF5D3}\Redist\"
  "UninstallString"=expand:"MsiExec.exe /X{A49F249F-0C91-497F-86DF-B2585E8E76B7}"
  "DisplayName"="Microsoft Visual C++ 2005 Redistributable"

[Uninstall\{A4EA3AB4-E78C-4286-96DF-26035507CE55}]
  "DisplayName"="AiO_Scan"

[Uninstall\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}]
  "UninstallString"="C:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\setup\hpzscr01.exe -datfile hphscr01.dat"
  "DisplayName"="Photosmart 320,370,7400,8100,8400 Series (fra)"
  "DisplayIcon"="C:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\setup\hpzscr01.exe,0"

[Uninstall\{AC134D03-97F1-45B9-B32A-52E885AFA895}]
  "UninstallString"="RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup \"C:\Program Files\InstallShield Installation Information\{AC134D03-97F1-45B9-B32A-52E885AFA895}\setup.exe\" -l0x40c "
  "DisplayName"="Mobile Phone Suite Easy Synchronization"

[Uninstall\{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}]
  "InstallSource"="C:\Documents and Settings\HP_Propriétaire\Bureau\Adobe CS3\Illustrator\Adobe CS3\payloads\AdobePDFSettingsAll\"
  "UninstallString"=expand:"MsiExec.exe /I{AC5B0C19-D851-42F4-BDA0-410ECF7F70A5}"
  "DisplayName"="PDF Settings"

[Uninstall\{AC76BA86-7AD7-1036-7B44-A70900000002}]
  "InstallSource"="C:\Program Files\Adobe\Acrobat 7.0\Setup Files\RdrBig709\FRA\"
  "UninstallString"=expand:"MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A70900000002}"
  "DisplayName"="Adobe Reader 7.0.9 - Français"

[Uninstall\{AE3D38A6-13B1-40B3-9423-D1FA9982FB6A}]
  "UninstallString"=expand:"MsiExec.exe /I{AE3D38A6-13B1-40B3-9423-D1FA9982FB6A}"
  "DisplayName"="Adobe Bridge 1.0"

[Uninstall\{AF600F7B-67A7-48D9-BA3B-0FF97F35F970}]
  "DisplayName"="ABBYY FineReader 6.0"
  "InstallSource"="F:\ABBYY\FR60\"
  "UninstallString"=expand:"MsiExec.exe /I{AF600F7B-67A7-48D9-BA3B-0FF97F35F970}"

[Uninstall\{B100B05B-E290-41EF-9366-8BC4C76D7769}]
  "UninstallString"="RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup \"C:\Program Files\InstallShield Installation Information\{B100B05B-E290-41EF-9366-8BC4C76D7769}\setup.exe\" -l0x40c "

[Uninstall\{B13A7C41581B411290FBC0395694E2A9}]
  "DisplayName"="DivX Converter"
  "DisplayIcon"="C:\Program Files\DivX\DivX Converter\Converter.exe,0"
  "UninstallString"="C:\Program Files\DivX\ConverterUninstall.exe /CONVERTER"

[Uninstall\{B14F9B26-D695-4C4A-8B11-0FE6CDCC797B}]
  "UninstallString"="RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup \"C:\Program Files\InstallShield Installation Information\{B14F9B26-D695-4C4A-8B11-0FE6CDCC797B}\setup.exe\" -l0x40c "

[Uninstall\{B32C75F2-7495-4D01-9431-C11E97D66F8C}]
  "DisplayName"="DocProc"

[Uninstall\{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}]
  "InstallSource"="C:\Documents and Settings\HP_Propriétaire\Bureau\Adobe CS3\Illustrator\Adobe CS3\payloads\AdobeCameraRaw4.0All\"
  "UninstallString"=expand:"MsiExec.exe /I{B3BF6689-A81D-40D8-9A86-4AC4ACD9FC1C}"
  "DisplayName"="Adobe Camera Raw 4.0"

[Uninstall\{B3D5D4E0-E965-41C4-ABFD-A7B1AD0663C2}]
  "InstallSource"="c:\hp\drivers\hpiz423\Setup\Director\"
  "DisplayName"="Director"

[Uninstall\{B45D9FEE-1AF4-46F3-9A83-2545F81547F5}]
  "InstallSource"="c:\hp\drivers\hpiz423\Setup\CreativeProjectsTemplates\"
  "DisplayName"="CreativeProjectsTemplates"

[Uninstall\{B56D5B09-C4FB-4EA0-8EAD-7BC3E2715A2D}]
  "DisplayName"="DocumentViewer"

[Uninstall\{B69CC1A5-0404-11D6-ABCB-005004C21D30}]
  "UninstallString"="RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup \"C:\Program Files\InstallShield Installation Information\{B69CC1A5-0404-11D6-ABCB-005004C21D30}\setup.exe\" -l0x40c ADDREMOVEDLG"
  "DisplayName"="EPSON Copy Utility"

[Uninstall\{B7050CBDB2504B34BC2A9CA0A692CC29}]
  "DisplayName"="DivX Web Player"
  "DisplayIcon"="C:\Program Files\DivX\DivX Web Player
pdivx32.dll,0"
  "UninstallString"="C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN"

[Uninstall\{B74D4E10-0000-0000-0000-EDED00000102}]
  "InstallSource"="C:\DOCUME~1\HP_PRO~1\LOCALS~1\Temp\Rar$EX04.375\ExtendScript Toolkit\"
  "UninstallString"=expand:"MsiExec.exe /I{B74D4E10-0000-0000-0000-EDED00000102}"
  "DisplayName"="Adobe ExtendScript Toolkit 1.0"

[Uninstall\{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}]
  "InstallSource"="C:\Documents and Settings\HP_Propriétaire\Bureau\Adobe CS3\Illustrator\Adobe CS3\payloads\AdobeDefaultLanguageCS3All\"
  "UninstallString"=expand:"MsiExec.exe /I{B9B35331-B7E4-4E5C-BF4C-7BC87856124D}"
  "DisplayName"="Adobe Default Language CS3"

[Uninstall\{BA1BE991-D723-41BE-AD16-42EAFDA794EA}]
  "UninstallString"="RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup \"C:\Program Files\InstallShield Installation Information\{BA1BE991-D723-41BE-AD16-42EAFDA794EA}\Setup.exe\" "
  "DisplayName"="Ulead COOL 3D 3.5"
  "DisplayIcon"="C:\Program Files\Ulead Systems\Ulead COOL 3D 3.5\u3dedit2.ico"

[Uninstall\{BCC992E5-5C81-4066-9B55-03DC10B24D21}]
  "DisplayName"="InstantShare"

[Uninstall\{BF018D2F-C788-4AB1-AB95-1280EAB8F13E}]
  "InstallSource"="c:\hp\drivers\hpiz423\Setup\TrayApp\"
  "DisplayName"="TrayApp"

[Uninstall\{C21D5524-A970-42FA-AC8A-59B8C7CDCA31}]
  "DisplayName"="QuickTime"

[Uninstall\{C2D69781-F392-4118-A5A7-C7E9C38DBFC2}]
  "InstallSource"="C:\Do

Utilisateur anonyme · Answer

Double clique sur le raccourci Navilog1 présent sur le bureau et laisse-toi guider. 
Au menu principal, choisis 4 et valide. 

Le fix va te demander de saisir le nom de fichier.
Saisies ce qui est en gras ci-dessous et rien d'autre puis valide: 

eqotea

Le fix va te demander de le resaisir, fais-le et valide 

Le fix va t'informer qu'il va alors redémarrer ton PC 
Ferme toutes les fenêtres ouvertes et enregistre tes documents personnels ouverts
Appuie sur une touche comme demandé.
(si ton Pc ne redémarre pas automatiquement, fais le toi même)
Au redémarrage de ton PC, choisis ta session habituelle.

Patiente jusqu'au message : 
*** Nettoyage Termine le ..... *** 
Le blocnote va s'ouvrir. 
Sauvegarde le rapport de manière à le retrouver 
Referme le blocnote. Ton bureau va réapparaitre 

PS:Si ton bureau ne réapparait pas, fais CTRL+ALT+SUPP pour ouvrir le gestionnaire de tâches. 
Puis rends-toi à l'onglet "processus". Cliques en haut à gauche sur fichiers et choisis "exécuter" 
Tapes explorer et valides. Celà te fera apparaitre ton bureau


Ensuite :

¤Rends toi sur se site 
http://www.virustotal.com/en/virustotalx.html 


En haut à droite clic sur "choisir" 
Tu vas dans C:, windows, system32 tu cherches le processus ci-dessous et tu clic sur "ouvrir" 

 C:\WINDOWS\system32\bacacada_g.dll

dès que c'est fait, clic sur "send" 
Tu attends un peu qu'il analyse ton fichier ça peut duré plusieurs minutes et colle le rapport ici une fois qu'il a terminé stp

Fais la même chose avec celui-ci

C:\WINDOWS\system32\caffbae6_g.ocx

julienddd · Answer

Excuse moi, je viens de remarquer que le rapport n'était pas complet. Voila le dernier petit bout du rapport. Avant d'exécuter la consigne précédente, j'attends ta nouvelle réponse sur ce rapport. Ce dernier p'tit bout de rapport pourrait peut être changer quelque chose ... je ne sais pas. Donc, j'attends ta réponse.



[Uninstall\{C2D69781-F392-4118-A5A7-C7E9C38DBFC2}]
  "InstallSource"="C:\Documents and Settings\HP_Propriétaire\Bureau\Adobe CS3\Illustrator\Adobe CS3\payloads\AdobeExtendScriptToolKitAll\"
  "UninstallString"=expand:"MsiExec.exe /I{C2D69781-F392-4118-A5A7-C7E9C38DBFC2}"
  "DisplayName"="Adobe ExtendScript Toolkit 2"

[Uninstall\{C3F058C0-A21C-452D-8D99-95B1A45F417D}]
  "UninstallString"="RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup \"C:\Program Files\InstallShield Installation Information\{C3F058C0-A21C-452D-8D99-95B1A45F417D}\setup.exe\"  REMOVEALL"
  "DisplayName"="InterVideo DiscLabel"

[Uninstall\{C43048A9-742C-4DAD-90D2-E3B53C9DB825}]
  "UninstallString"="RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\00\Intel32\Ctor.dll,LaunchSetup \"C:\Program Files\InstallShield Installation Information\{C43048A9-742C-4DAD-90D2-E3B53C9DB825}\setup.exe\" -l0x40c "
  "DisplayName"="Logiciel QuickCam de Logitech"
  "DisplayIcon"="C:\Program Files\Logitech\Video\Launcher.exe"
  "InstallSource"="C:\Program Files\Logitech\QuickCamWebInstall\AppInst\"

[Uninstall\{C4A4722E-79F9-417C-BD72-8D359A090C97}]
  "UninstallString"="RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup \"C:\Program Files\InstallShield Installation Information\{C4A4722E-79F9-417C-BD72-8D359A090C97}\setup.exe\" -l0x40c  -removeonly"
  "DisplayName"="Samsung PC Studio"
  "DisplayIcon"="C:\Program Files\Samsung\Samsung PC Studio 3\Launcher.exe"

[Uninstall\{C51957C2-F025-4FB3-B181-09131504A29D}]
  "UninstallString"="RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup \"C:\Program Files\InstallShield Installation Information\{C51957C2-F025-4FB3-B181-09131504A29D}\setup.exe\" -l0x40c MyUninstall"
  "DisplayName"="EPSON Photo Print"

[Uninstall\{C7340571-7773-4A8C-9EBC-4E4243B38C76}]
  "DisplayName"="Microsoft XML Parser"

[Uninstall\{C89C8D86-4423-4A58-AA40-DD259ACE07C1}]
  "InstallSource"="F:\1b-SetPoint\KHAL\"
  "UninstallString"=expand:"MsiExec.exe /I{C89C8D86-4423-4A58-AA40-DD259ACE07C1}"
  "DisplayName"="KhalSetup"

[Uninstall\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}]
  "DisplayIcon"="C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322
dpsetup.ico"
  "UninstallString"=expand:"MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}"
  "DisplayName"="Microsoft .NET Framework 1.1"

[Uninstall\{CE67DBBB-2ED0-4F35-B482-0CFE4CFC1570}]
  "InstallSource"="C:\Documents and Settings\HP_Propriétaire\Bureau\Adobe CS3\Illustrator\Adobe CS3\"
  "UninstallString"=expand:"MsiExec.exe /I{CE67DBBB-2ED0-4F35-B482-0CFE4CFC1570}"
  "DisplayName"="Adobe Setup"

[Uninstall\{D0DCD54F-C829-41A5-AF32-71E632BB0E2C}]
  "InstallSource"="G:\"
  "DisplayName"="Kaspersky Internet Security 6.0"

[Uninstall\{D0DFF92A-492E-4C40-B862-A74A173C25C5}]
  "InstallSource"="C:\Documents and Settings\HP_Propriétaire\Bureau\Adobe CS3\Illustrator\Adobe CS3\payloads\AdobeVersionCueClient3All\"
  "UninstallString"=expand:"MsiExec.exe /I{D0DFF92A-492E-4C40-B862-A74A173C25C5}"
  "DisplayName"="Adobe Version Cue CS3 Client"

[Uninstall\{D10EC365-8936-4B40-AE2E-FCDA61C326D3}]
  "UninstallString"=expand:"MsiExec.exe /I{D10EC365-8936-4B40-AE2E-FCDA61C326D3}"
  "DisplayName"="Alias DirectConnect 2.0"

[Uninstall\{D1696920-9794-4BBC-8A30-7A88763DE5A2}]
  "InstallSource"="F:\ABBYY\"
  "UninstallString"=expand:"MsiExec.exe /X{D1696920-9794-4BBC-8A30-7A88763DE5A2}"
  "DisplayName"="ABBYY FineReader 5.0 Sprint Plus"

[Uninstall\{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}]
  "InstallSource"="C:\Documents and Settings\HP_Propriétaire\Bureau\Adobe CS3\Illustrator\Adobe CS3\payloads\AdobePDFL8All\"
  "UninstallString"=expand:"MsiExec.exe /I{D2559B88-CC9D-4B48-81BB-F492BAA9C48C}"
  "DisplayName"="Adobe PDF Library Files"

[Uninstall\{D3568156-59C3-42DF-A520-2C25B6706C91}]
  "UninstallString"="RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup \"C:\Program Files\InstallShield Installation Information\{D3568156-59C3-42DF-A520-2C25B6706C91}\setup.exe\" -l0x9 "

[Uninstall\{DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9}]
  "InstallSource"="C:\Documents and Settings\HP_Propriétaire\Bureau\Adobe CS3\Illustrator\Adobe CS3\payloads\AdobeColorCommonSetAll\"
  "UninstallString"=expand:"MsiExec.exe /I{DADD7B8A-BCB0-44F5-967A-ECB6B4F2ECD9}"
  "DisplayName"="Adobe Color Common Settings"

[Uninstall\{DB518BA6-CB74-4EB6-9ABD-880B6D6E1F38}]
  "DisplayName"="HpSdpAppCoreApp"

[Uninstall\{DD362256-A7A2-4524-9457-213DDC2AFC2A}]
  "DisplayName"="Adobe After Effects 7.0"

[Uninstall\{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}]
  "InstallSource"="C:\Documents and Settings\HP_Propriétaire\Bureau\Adobe CS3\Illustrator\Adobe CS3\payloads\AdobeColorJA_ExtraSettingsAll\"
  "UninstallString"=expand:"MsiExec.exe /I{DD7DB3C5-6FA3-4FA3-8A71-C2F2940EB029}"
  "DisplayName"="Adobe Color JA Extra Settings"

[Uninstall\{dddd60db-c067-4896-b847-323ecb70f9b6}]
  "InstallSource"="E:\Redist\fra\"
  "UninstallString"=expand:"MsiExec.exe /X{dddd60db-c067-4896-b847-323ecb70f9b6}"
  "DisplayName"="RealSpeakFra"

[Uninstall\{E06E4F4E-72D6-4497-BFFD-BCB43077C2F4}]
  "UninstallString"="RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup \"C:\Program Files\InstallShield Installation Information\{E06E4F4E-72D6-4497-BFFD-BCB43077C2F4}\setup.exe\" -l0x40c  -uninst "

[Uninstall\{E213C271-AEFA-481D-A9B4-914D88925B8D}]
  "UninstallString"="RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup \"C:\Program Files\InstallShield Installation Information\{E213C271-AEFA-481D-A9B4-914D88925B8D}\setup.exe\" -l0x40c "

[Uninstall\{E69AE897-9E0B-485C-8552-7841F48D42D8}]
  "InstallSource"="C:\Documents and Settings\HP_Propriétaire\Bureau\Adobe CS3\Illustrator\Adobe CS3\payloads\AdobeAUM5.1All\"
  "UninstallString"=expand:"MsiExec.exe /I{E69AE897-9E0B-485C-8552-7841F48D42D8}"
  "DisplayName"="Adobe Update Manager CS3"

[Uninstall\{EBA29752-DDD2-4B62-B2E3-9841F92A3E3A}]
  "UninstallString"="RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup \"C:\Program Files\InstallShield Installation Information\{EBA29752-DDD2-4B62-B2E3-9841F92A3E3A}\setup.exe\" -l0x40c  -removeonly"
  "DisplayName"="Samsung PC Studio 3 USB Driver Installer"
  "DisplayIcon"="C:\WINDOWS\system32\UnInstall_Driver.ico"

[Uninstall\{EBAE381B-60A6-4863-AA9F-FCAB755BC9E5}]
  "UninstallString"="RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup \"C:\Program Files\InstallShield Installation Information\{EBAE381B-60A6-4863-AA9F-FCAB755BC9E5}\setup.exe\" ADDREMOVEDLG"
  "DisplayName"="ScanToWeb"

[Uninstall\{EC8673DA-F96B-497E-B2DB-BC7B029FD680}]
  "DisplayName"="BufferChm"

[Uninstall\{F419D20A-7719-4639-8E30-C073A040D878}]
  "UninstallString"=expand:"MsiExec.exe /X{F419D20A-7719-4639-8E30-C073A040D878}"
  "DisplayName"="HP Deskjet Preloaded Printer Drivers"

[Uninstall\{F4F47155-5B4D-42AA-97F8-490BC52EA7F3}]
  "InstallSource"="c:\hp\drivers\hpiz423\Setup\Destinations\"
  "DisplayName"="Destinations"

[Uninstall\{F5346614-B7C4-4E94-826A-E2363155233D}]
  "UninstallString"="RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup \"C:\Program Files\InstallShield Installation Information\{F5346614-B7C4-4E94-826A-E2363155233D}\setup.exe\" -l0x9 "
  "DisplayName"="EasyCleaner"

[Uninstall\{F6326B60-1B1D-4ABF-BFCD-7B7404F44411}]
  "UninstallString"=expand:"MsiExec.exe /I{F6326B60-1B1D-4ABF-BFCD-7B7404F44411}"
  "DisplayName"="Windows Live Messenger"

[Uninstall\{F64306A5-4C32-41bb-B153-53986527FAB4}]
  "DisplayIcon"=",0"

[Uninstall\{F65787F3-B356-45EC-8DD0-0E6758EDBCEE}]
  "InstallSource"="c:\hp\drivers\hpiz423\Setup\WebReg\"
  "DisplayName"="WebReg"

[Uninstall\{F7529650-B9DB-481B-0089-A2AC3C2821C1}]
  "DisplayName"="Les Sims 2 : Nuits de Folie"
  "UninstallString"="C:\Program Files\EA GAMES\Les Sims 2  Nuits de Folie\EAUninstall.exe"
  "DisplayIcon"="C:\Program Files\EA GAMES\Les Sims 2  Nuits de Folie\Sims2EP2.ico"

[Uninstall\{F8C6BABF-0837-4EA0-AD6C-8E5A392A7538}]
  "UninstallString"="RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup \"C:\Program Files\InstallShield Installation Information\{F8C6BABF-0837-4EA0-AD6C-8E5A392A7538}\setup.exe\" -l0x40c UNINSTALL"
  "DisplayName"="ImageMixer VCD2"

[Uninstall\{FA17A726-B229-4116-B793-A2AB1A4EAE2E}]
  "DisplayName"="Adobe Premiere Pro 2.0"

[Uninstall\{FAD9402A-1A9B-4ABE-A410-393A3622FA5A}]
  "UninstallString"="RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup \"C:\Program Files\InstallShield Installation Information\{FAD9402A-1A9B-4ABE-A410-393A3622FA5A}\setup.exe\" -l0x40c "

[Uninstall\{FCE65C4E-B0E8-4FBD-AD16-EDCBE6CD591F}]
  "InstallSource"="C:\WINDOWS\Downloaded Installations\{96AF4745-497A-47DF-8D65-707FC503E1FB}\"
  "UninstallString"=expand:"MsiExec.exe /X{FCE65C4E-B0E8-4FBD-AD16-EDCBE6CD591F}"
  "DisplayName"="Extension HighMAT pour l'Assistant Graver un CD de Microsoft Windows XP"

[Uninstall\{FF26F7EA-BCEE-478C-9A1B-6B4F88717D73}]
  "InstallSource"="c:\hp\drivers\hpiz423\Setup\CueTour\"
  "DisplayName"="CueTour"

[Uninstall\{FF29A7E2-FF40-4D07-B7E4-2093DE59E10A}]
  "InstallSource"="C:\Documents and Settings\HP_Propriétaire\Bureau\Adobe CS3\Illustrator\Adobe CS3\payloads\AdobeColorNA_ExtraSettingsAll\"
  "UninstallString"=expand:"MsiExec.exe /I{FF29A7E2-FF40-4D07-B7E4-2093DE59E10A}"
  "DisplayName"="Adobe Color NA Extra Settings"

-----HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall-----

==========================================
Scan completed in 5,6 minutes
End of report

julienddd · Answer

au fait, depuis qu'on a fait les manips, maintenant dans les noms de mes fichiers, il apparait le type de fichier que c'est. Par exemple pour une photo, il y a marqué " Cousin sur la plage.JPG" ou pour un fichier exel, .xls.

Du coup quand je renomme mes fichiers, je suis obligé de laissé l'extension .JPG ou .xls etc ... COmment on fait pour enlever ça ?

Utilisateur anonyme · Answer

Tu peux faire ce qui est au message <26>.

Pour les extensions attends un peu on a pas terminé, et on en a besoin ;-)

julienddd · Answer

oki je fais tout de suite ce qui est dit au message 26

julienddd · Answer

voila le rapport d'analyse de virustotal pour bacacada_g.dll


Complete scanning result of "bacacada_g.dll", received in VirusTotal at 06.19.2007, 21:22:18 (CET).

Antivirus	Version	Update	Result
AhnLab-V3	2007.6.16.0	06.19.2007	no virus found
AntiVir	7.4.0.34	06.19.2007	no virus found
Authentium	4.93.8	06.18.2007	no virus found
Avast	4.7.997.0	06.19.2007	no virus found
AVG	7.5.0.467	06.19.2007	no virus found
BitDefender	7.2	06.19.2007	no virus found
CAT-QuickHeal	9.00	06.19.2007	no virus found
ClamAV	devel-20070416	06.19.2007	no virus found
DrWeb	4.33	06.19.2007	no virus found
eSafe	7.0.15.0	06.19.2007	no virus found
eTrust-Vet	30.7.3727	06.19.2007	no virus found
Ewido	4.0	06.19.2007	no virus found
FileAdvisor	1	06.19.2007	no virus found
Fortinet	2.91.0.0	06.19.2007	no virus found
F-Prot	4.3.2.48	06.18.2007	no virus found
F-Secure	6.70.13030.0	06.19.2007	no virus found
Ikarus	T3.1.1.8	06.19.2007	no virus found
Kaspersky	4.0.2.24	06.19.2007	no virus found
McAfee	5056	06.19.2007	no virus found
Microsoft	1.2607	06.19.2007	no virus found
NOD32v2	2338	06.19.2007	no virus found
Norman	5.80.02	06.19.2007	no virus found
Panda	9.0.0.4	06.19.2007	no virus found
Prevx1	V2	06.19.2007	no virus found
Sophos	4.18.0	06.12.2007	no virus found
Sunbelt	2.2.907.0	06.09.2007	no virus found
Symantec	10	06.19.2007	no virus found
TheHacker	6.1.6.134	06.18.2007	no virus found
VBA32	3.12.0.2	06.19.2007	no virus found
VirusBuster	4.3.23:9	06.19.2007	no virus found
Webwasher-Gateway	6.0.1	06.19.2007	no virus found

Aditional Information
File size: 5 bytes
MD5: fd3819bac97e979de5a57ecf73aaead5
SHA1: 72b30074013df9c531c4a9c878ce1cf79c29b28f


je t'envoie le reste

julienddd · Answer

voila le rapport de navilog pour EQOTEA :


Clean Navipromo version 2.0.3 commencé le 19/06/2007 à 21:14:56,01

Fix lancé depuis C:\Program Files
avilog1
Mise a jour le 08.06.2007 a 17h00 by IL-MAFIOSO


Mode suppression par méthode manuelle

Nom du fichier saisi : eqotea

*** Recherche, Creation backups et suppression ***

C:\WINDOWS\system32\eqotea_navup.dat absent ! 
C:\WINDOWS\system32\eqotea_navtmp.dat absent ! 
C:\WINDOWS\system32\eqotea_m2s.xml absent ! 

C:\WINDOWS\System32\eqotea.exe trouvé !
Copie C:\WINDOWS\system32\eqotea.exe réalise avec succes !
C:\WINDOWS\system32\eqotea.exe supprimé !

C:\WINDOWS\System32\eqotea.dat trouvé !
Copie C:\WINDOWS\system32\eqotea.dat réalise avec succes !
C:\WINDOWS\system32\eqotea.dat supprimé !

C:\WINDOWS\System32\eqotea_nav.dat trouvé !
Copie C:\WINDOWS\system32\eqotea_nav.dat réalise avec succes !
C:\WINDOWS\system32\eqotea_nav.dat supprimé !

C:\WINDOWS\System32\eqotea_navps.dat trouvé !
Copie C:\WINDOWS\system32\eqotea_navps.dat réalise avec succes !
C:\WINDOWS\system32\eqotea_navps.dat supprimé !

C:\WINDOWS\prefetch\eqotea*.pf trouvé !
Copie C:\WINDOWS\prefetch\eqotea*.pf réalise avec succes !
C:\WINDOWS\prefetch\eqotea*.pf supprimé !


*** Suppression dossiers dans C:\WINDOWS ***


*** Suppression dossiers dans C:\Program Files ***


*** Suppression dossiers dans C:\Documents and Settings\All Users\Application Data ***


*** Suppression dossiers dans C:\Documents and Settings\HP_Propri‚taire\Application Data ***



*** Suppression fichiers ***

C:\WINDOWS\system32
vs2.inf supprimé !

*** Suppression fichiers temporaires ***

Nettoyage contenu C:\WINDOWS\Temp effectué !
Nettoyage contenu C:\Documents and Settings\HP_Propri‚taire\Local Settings\Temp effectué !

 
*** Sauvegarde du registre vers dossier Backupnavi*** 
 
 
sauvegarde du registre réalise avec succes !


*** Nettoyage registre ***


Nettoyage registre Ok

*** Traitement Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche fichiers connus:


2)Recherche et Suppression Heuristique :

* 
** 
*** 
**** 
***** 
****** 
******* 
******** 

3)Contrôle présence clés Rootkit dans le registre :

Aucune autre clés présente dans le registre !

*** Nettoyage termine le 19/06/2007 à 21:18:03,46 ***





Je t'envoie le dernier rapport une fois qu'il sera prêt.

julienddd · Answer

voila le dernier rapport de virustotal pour le fichier "caffbae6_g.ocx:

Complete scanning result of "caffbae6_g.ocx", received in VirusTotal at 06.19.2007, 21:29:33 (CET).

Antivirus	Version	Update	Result
AhnLab-V3	2007.6.16.0	06.19.2007	no virus found
AntiVir	7.4.0.34	06.19.2007	no virus found
Authentium	4.93.8	06.18.2007	no virus found
Avast	4.7.997.0	06.19.2007	no virus found
AVG	7.5.0.467	06.19.2007	no virus found
BitDefender	7.2	06.19.2007	no virus found
CAT-QuickHeal	9.00	06.19.2007	no virus found
ClamAV	devel-20070416	06.19.2007	no virus found
DrWeb	4.33	06.19.2007	no virus found
eSafe	7.0.15.0	06.19.2007	no virus found
eTrust-Vet	30.7.3727	06.19.2007	no virus found
Ewido	4.0	06.19.2007	no virus found
FileAdvisor	1	06.19.2007	no virus found
Fortinet	2.91.0.0	06.19.2007	no virus found
F-Prot	4.3.2.48	06.18.2007	no virus found
F-Secure	6.70.13030.0	06.19.2007	no virus found
Ikarus	T3.1.1.8	06.19.2007	no virus found
Kaspersky	4.0.2.24	06.19.2007	no virus found
McAfee	5056	06.19.2007	no virus found
Microsoft	1.2607	06.19.2007	no virus found
NOD32v2	2339	06.19.2007	no virus found
Norman	5.80.02	06.19.2007	no virus found
Panda	9.0.0.4	06.19.2007	no virus found
Prevx1	V2	06.19.2007	no virus found
Sophos	4.18.0	06.12.2007	no virus found
Sunbelt	2.2.907.0	06.16.2007	no virus found
Symantec	10	06.19.2007	no virus found
TheHacker	6.1.6.134	06.18.2007	no virus found
VBA32	3.12.0.2	06.19.2007	no virus found
VirusBuster	4.3.23:9	06.19.2007	no virus found
Webwasher-Gateway	6.0.1	06.19.2007	no virus found

Aditional Information
File size: 5 bytes
MD5: fd3819bac97e979de5a57ecf73aaead5
SHA1: 72b30074013df9c531c4a9c878ce1cf79c29b28f

voila. Sinon au message <21> tu m'as demandé de supprimer le fichier eqotea.exe  ... Je ne l'ai pas fait. Dois-je le faire ??

Utilisateur anonyme · Answer

Ok, très bien !

Concernant eqotea.exe regarde ton message <32> il devrait être supprimé.

Peux-tu refaire avec Navilog ce qui est au message <26> pour vérifier qu'il est bien supprimé, si c'est le cas tu pourras désinstaller Navilog1 vi aajouter/supprimer des programmes.

N'hésite pas à remettre un rapport hijackthis et de prèciser tes soucis s'il t'en reste ;-)

A++

julienddd · Answer

voila le rapport de nzvilog : (je pense qu'il est supprimé ! 


Clean Navipromo version 2.0.3 commencé le 20/06/2007 à 11:55:24,39

Fix lancé depuis C:\Program Files
avilog1
Mise a jour le 08.06.2007 a 17h00 by IL-MAFIOSO


Mode suppression par méthode manuelle

Nom du fichier saisi : eqotea

*** Recherche, Creation backups et suppression ***

C:\WINDOWS\system32\eqotea.exe absent ! 
C:\WINDOWS\system32\eqotea.dat absent ! 
C:\WINDOWS\system32\eqotea_nav.dat absent ! 
C:\WINDOWS\system32\eqotea_navps.dat absent ! 
C:\WINDOWS\system32\eqotea_navup.dat absent ! 
C:\WINDOWS\system32\eqotea_navtmp.dat absent ! 
C:\WINDOWS\system32\eqotea_m2s.xml absent ! 
C:\WINDOWS\prefetch\eqotea*.pf absent ! 


*** Suppression dossiers dans C:\WINDOWS ***


*** Suppression dossiers dans C:\Program Files ***


*** Suppression dossiers dans C:\Documents and Settings\All Users\Application Data ***


*** Suppression dossiers dans C:\Documents and Settings\HP_Propri‚taire\Application Data ***



*** Suppression fichiers ***


*** Suppression fichiers temporaires ***

Nettoyage contenu C:\WINDOWS\Temp effectué !
Nettoyage contenu C:\Documents and Settings\HP_Propri‚taire\Local Settings\Temp effectué !

 
*** Sauvegarde du registre vers dossier Backupnavi*** 
 
 
sauvegarde du registre réalise avec succes !


*** Nettoyage registre ***


Nettoyage registre Ok

*** Traitement Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche fichiers connus:


2)Recherche et Suppression Heuristique :

* 
** 
*** 
**** 
***** 
****** 
******* 
******** 

3)Contrôle présence clés Rootkit dans le registre :

Aucune autre clés présente dans le registre !

*** Nettoyage termine le 20/06/2007 à 11:58:02,48 ***

Voici un nouveau rapport d'Hijackthis :

Logfile of HijackThis v1.99.1
Scan saved at 12:00:56, on 20/06/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Fichiers communs\Logitech\Bluetooth\LBTSERV.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Logitech\Easy Synchronization\servicestub.exe
C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wwSecure.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\explorer.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\Hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.msn.com/fr-fr?cobrand=hp-desktop.msn.com&ocid=HPDHP&pc=HPDTDF
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost;*.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: {1A03F196-9617-4CA0-842B-A83CEECB022B} -  - (no file)
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: DgnWebIE - {2843DAC1-05EF-11D2-95BA-0060083493D6} - C:\Program Files\Dragon Systems\NaturallySpeaking\Program\web_ie.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe 
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [PCGUARD] C:\WINDOWS\system32\v30wx32.exe
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
O4 - HKLM\..\Run: [LogitechGalleryRepair] C:\Program Files\Logitech\ImageStudio\ISStart.exe
O4 - HKLM\..\Run: [LogitechImageStudioTray] C:\Program Files\Logitech\ImageStudio\LogiTray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [kis] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe"
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [Logitech BT Wizard] LBTWiz.exe -silent
O4 - HKLM\..\Run: [Easy Synchronization] C:\Program Files\Logitech\Easy Synchronization\LogitechEasySync.exe
O4 - HKLM\..\Run: [WA6PV_Check] "C:\Program Files\Fichiers communs\DriveCleaner Free\udcwap.exe"
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: wkcalrem.LNK = C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O4 - Global Startup: Logitech SetPoint.lnk = ?
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm
O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
O8 - Extra context menu item: Ajouter à Kaspersky Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\ie_banner_deny.htm
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: Antivirus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scieplugin.dll
O9 - Extra button: SmartShopper - Compare product prices - {679B2A8D-B2FF-41ed-B3ED-C5CFB8564CB0} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: SmartShopper - Compare travel rates - {9E4DF170-217F-4658-A11F-590664542B73} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} - https://www.fileplanet.com/
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by107w.bay107.mail.live.com/mail/resources/MsnPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} - http://fdl.msn.com/zone/datafiles/heartbeat.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll
O20 - Winlogon Notify: LBTWlgn - c:\program files\fichiers communs\logitech\bluetooth\LBTWlgn.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Kaspersky Internet Security 6.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" -r (file missing)
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: C-DillaCdaC11BA - C-Dilla Ltd - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech Inc. - C:\Program Files\Fichiers communs\Logitech\Bluetooth\LBTSERV.EXE
O23 - Service: Logitech Easy Synchronization - Unknown owner - C:\Program Files\Logitech\Easy Synchronization\servicestub.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: Washer Security Access (wwSecSvc) - Webroot Software, Inc. - C:\WINDOWS\system32\wwSecure.exe



Pour l'instant, le problème des fenêtres qui s'ouvrent a disparu...

J'attends tes prochaines consignes. ( sachant que le nom des extensions des fichiers ( .exe / .xls / .JPG ... ) est toujours présent. )

Utilisateur anonyme · Answer

Ok.

Vas dans ajouter/supprimer des programmes et désinstalle : Navilog1


¤ Pour masquer tous les dossiers et fichiers cachés :

Clic sur "démarrer", "panneau de configuration", "outils" ,"option des dossiers", "affichage"

coche : 
- Masquer les fichiers et dossiers cachés
- Masquer les extensions
- Clic sur "appliquer" puis "ok"
----------------------------------------------------------

¤ Relance HijackThis, choisis "do a scan only" coche la case devant les lignes ci-dessous et clic en bas sur "fix checked"

R3 - URLSearchHook: {1A03F196-9617-4CA0-842B-A83CEECB022B} - - (no file)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup 
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup 
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE 
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe 
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE 
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe 
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe 
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot 
O4 - HKLM\..\Run: [PCGUARD] C:\WINDOWS\system32\v30wx32.exe
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE 
O4 - HKLM\..\Run: [LogitechGalleryRepair] C:\Program Files\Logitech\ImageStudio\ISStart.exe 
O4 - HKLM\..\Run: [LogitechImageStudioTray] C:\Program Files\Logitech\ImageStudio\LogiTray.exe 
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [WA6PV_Check] "C:\Program Files\Fichiers communs\DriveCleaner Free\udcwap.exe" 
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot 
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe 
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background 
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe 
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe 
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O16 - DPF: {39B0684F-D7BF-4743-B050-FDC3F48F7E3B} - https://www.fileplanet.com/ 
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by107w.bay107.mail.live.com/mail/resources/MsnPUpld.cab 
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab 
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab 
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab 
O16 - DPF: {E5D419D6-A846-4514-9FAD-97E826C84822} - http://fdl.msn.com/zone/datafiles/heartbeat.cab



¤ Rends toi sur se site 
http://www.virustotal.com/en/virustotalx.html 


En haut à droite clic sur "choisir" 
Tu vas dans C:, windows, system32 tu cherches le processus ci-dessous et tu clic sur "ouvrir" 

C:\WINDOWS\system32\v30wx32.exe

dès que c'est fait, clic sur "send" 
Tu attends un peu qu'il analyse ton fichier ça peut duré plusieurs minutes et colle le rapport ici une fois qu'il a terminé stp




¤ Clic sur démarrer, rechercher, tous les fichiers et dossiers, cherche et supprime :

- ALCXMNTR.EXE 

**Si un fichier/dossier persiste lors de la suppression fait ceci:
- Redémarre ton PC. Dès l'allumage de celui-ci tapote la touche F8 (ou F5 si F8 ne fonctionne pas), à l'écran qui va apparaître choisis "mode sans echec" attends un peu.. 
Puis va supprimer les fichiers/dossiers, vide ta corbeille et redémarre ton PC normalement.


A++

julienddd · Answer

DSL, je n'ai pas trouvé la ligne O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe .
Sinon, voici le rapport de VIRUSTOTAL :


Complete scanning result of "v30wx32.exe", received in VirusTotal at 06.21.2007, 22:18:40 (CET).

Antivirus	Version	Update	Result
AhnLab-V3	2007.6.21.1	06.21.2007	no virus found
AntiVir	7.4.0.34	06.21.2007	no virus found
Authentium	4.93.8	06.21.2007	no virus found
Avast	4.7.997.0	06.21.2007	no virus found
AVG	7.5.0.467	06.20.2007	no virus found
BitDefender	7.2	06.21.2007	no virus found
CAT-QuickHeal	9.00	06.21.2007	no virus found
ClamAV	devel-20070416	06.21.2007	no virus found
DrWeb	4.33	06.21.2007	no virus found
eSafe	7.0.15.0	06.21.2007	no virus found
eTrust-Vet	30.8.3731	06.21.2007	no virus found
Ewido	4.0	06.21.2007	no virus found
FileAdvisor	1	06.21.2007	no virus found
Fortinet	2.91.0.0	06.21.2007	no virus found
F-Prot	4.3.2.48	06.21.2007	no virus found
F-Secure	6.70.13030.0	06.20.2007	no virus found
Ikarus	T3.1.1.8	06.21.2007	no virus found
Kaspersky	4.0.2.24	06.21.2007	no virus found
McAfee	5058	06.21.2007	no virus found
Microsoft	1.2607	06.21.2007	no virus found
NOD32v2	2343	06.21.2007	no virus found
Norman	5.80.02	06.21.2007	no virus found
Panda	9.0.0.4	06.21.2007	no virus found
Prevx1	V2	06.21.2007	Generic.Malware
Sophos	4.18.0	06.21.2007	no virus found
Sunbelt	2.2.907.0	06.21.2007	no virus found
Symantec	10	06.21.2007	no virus found
TheHacker	6.1.6.136	06.20.2007	no virus found
VBA32	3.12.0.2	06.21.2007	no virus found
VirusBuster	4.3.23:9	06.21.2007	no virus found
Webwasher-Gateway	6.0.1	06.21.2007	Win32.Malware.gen!80 (suspicious)

Aditional Information
File size: 364544 bytes
MD5: 08f005ca7dd12edec7c062424c182fc5
SHA1: 29ee626646f966f7c11888014022cf0c2944f219
Prevx info: http://fileinfo.prevx.com/fileinfo.asp?PX5=021706ED009593049007050D48811A00B131972B

Voila ... j'attends tes prochaines consignes.

Utilisateur anonyme · Answer

Tu peux jeter celui-la :

C:\WINDOWS\system32\v30wx32.exe


Dis moi comment se comporte ton pc

julienddd · Answer

J'ai supprimé :  
C:\WINDOWS\system32\v30wx32.exe.

Pour l'instant,mon PC a l'air de plutôt bien tourner ! Plus de fenêtres intempestives ! 

Vraiment merci pour ton aide.

Si tu connaisais une petite astuce pour éviter d'avoir une prochaine fois ce genre de problème ... je suis prenant!

Sinon, pourrais-tu m'indiquer comment améliorer efficacement la vitesse de mon PC ?

Analyse de mon log Hijackthis svp

39 réponses

Votre réponse

Discussions similaires

Newsletters