Infection bagle besoin d'aide svp........ :'( Résolu/Fermé

Question

Bonjour à tous, j'ai désespèrement besoin d'aide !

Il m'est impossible d'nstaller un antivirus sur mn ordinateur, idem por spybot, et mon wifi ne fonctionne plu non plu !! Je pense etre infecté par Bagle mais je ne c pas comment faire pour m'en débarasser ...

Si quelqu'un pourrai m'aider sa serai trés gentil...

Voila mon hijacthis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:20:49, on 09/09/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
c:\Program Files\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\WINDOWS\system32\lxcrcoms.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
c:\Program Files\Adobe\Adobe Version Cue CS2\data\database\bin\mysqld-nt.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Lavasoft\Ad-Aware 2007\AAWTray.exe
C:\Program Files\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe
C:\Program Files\D-Link\AirPlus G\AirGCFG.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.01net.com/telecharger/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.01net.com/telecharger/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar	oolbar.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [AAWTray] C:\Program Files\Lavasoft\Ad-Aware 2007\AAWTray.exe
O4 - HKLM\..\Run: [Adobe Version Cue CS2] c:\Program Files\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe
O4 - HKLM\..\Run: [D-Link AirPlus G] C:\Program Files\D-Link\AirPlus G\AirGCFG.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [puurmwgfg] c:\windows\system32\puurmwgfg.exe puurmwgfg
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar	oolbar.dll/SEARCH.HTML
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZN
O8 - Extra context menu item: Add to AMV Convert Tool... - C:\Program Files\MP3 Player Utilities 3.79\AMVConverter\grab.html
O8 - Extra context menu item: Convertir en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir la cible du lien en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la cible du lien en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir la sélection en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la sélection en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir les liens sélectionnés en fichier Adobe PDF - res://c:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convertir les liens sélectionnés en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 3.79\MediaManager\grab.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar	oolbar.dll
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar	oolbar.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {029FDBA6-3547-11D7-AA4C-0050BF051A00} (Rawflow ICD Client) - http://s.tf1.fr/mmdia/static/rawflow/clients/5.3.1.0/Rawflow.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.mail.live.com/mail/w1/resources/MSNPUpld.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase8300.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - https://www.pixum.fr/?p_ref=crm_umleitung_photoreflex_1113
O18 - Protocol: bw+0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Version Cue CS2 - Adobe Systems Incorporated - c:\Program Files\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe
O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Alpha Networks Inc. - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: lxcr_device -   - C:\WINDOWS\system32\lxcrcoms.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: MySqlInventime - Unknown owner - c:\mysql\bin\mysqld-max-nt.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation  - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: SmartLinkService (SLService) -   - C:\WINDOWS\SYSTEM32\slserv.exe

philae83 · Answer

bonjour,

 Télécharge ELIBAGLA en bas de cette page
http://www.zonavirus.com/datos/descargas/95/elibagla.asp (clique sur le bouton "Descargar Elibagla") sur ton bureau.
Lance-le, de préférence en mode sans échec si tu en as la possibilité, en mode normal dans le cas contraire. Patiente le temps du scan.
Lorsqu'il a terminé, poste le contenu du fichier infoSat.txt qui se trouve dans Poste de travail > Disque C:\
Et par la même occasion, précise si tu peux à nouveau démarrer en mode sans échec.

Ne pas rebooter en passant par msconfig.

reposte un nouveau rapport hijackthis stp

papyber · Answer

il va falloir installer un antivirus rapidemant, je te conseille antivir
fais ceci
Rends toi sur ce site : 
http://www.zonavirus.com/datos/descargas/95/elibagla.asp 
tout en bas de cette page tu trouveras un outil 
à télécharger,clique sur "escargar Elibagla" (le numéro de version change au fur et à mesure des mises à jour) 
installe ce fichier sur le bureau. 
ensuite double-clic sur Elibagla.exe 
>laisse la case "eliminar ficheros automaticamente" coché 
>clique sur"explorar" 
>laisse-le travailler 
>poste le rapport final qui sera dans c:\infosat.txt 

Si, dans le rapport, tu vois un texte semblable à celui-ci 

Por favor, envienos una muestra del fichero 
C:\Muestras\HLDRRR.EXE.Muestra EliBagle v10.24 
a "virus@satinfo.es". Gracias; 

envoie ce(s) fichier(s) (dans l'exemple C:\Muestras\HLDRRR.EXE.Muestra EliBagle v10.24 ) à l'adresse e-mail indiquée (virus@satinfo.es). 

L'outil a rencontré un fichier qu'il reconnait mais ne sait pas encore éradiquer. Dans 24 heures environ, sur le site, la version de déchargement (v10.24 dans l'exemple) aura changé par rapport à celle actuelle. Tu retéléchargeras l'outil, tu le relanceras et tu posteras le rapport.

puis ceci
avec un nouveau rapport Hijack this 
Clique sur ce lien :
http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe
Clique sur navilog1.zip pour télécharger navilog1
Choisis Enregistrer

et enregistre-le sur ton bureau.

Ensuite double clique sur navilog1.exe pour lancer l'installation.
Une fois l'installation terminée, le fix s'exécutera automatiquement.
(Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau).

Laisse-toi guider. Au menu principal, choisis 1 et valides.
(ne fais pas le choix 2,3 ou 4 sans notre avis/accord)

Patiente jusqu'au message :
*** Analyse Termine le ..... ***
Appuie sur une touche comme demandé, le blocnote va s'ouvrir.
Copie-colle l'intégralité dans une réponse. Referme le blocnote.
Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)

papyber · Answer

oups, en retard
désolé
bon courage à vous deux

Demoizelle en détresse · Answer

Je n'arive pas a démarrer en mode sans échec g donc lancé ELIBAGLA en mode normal voila le rapport :


	  Fri Sep 07 23:09:51 2007
EliBagle v10.51  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Acción Directa):
Por favor, envienos una muestra del fichero
C:\Muestras\HIDR.EXE.Muestra EliBagle v10.51
 a "virus@satinfo.es".  Gracias.
C:\WINDOWS\SYSTEM32\DRIVERS\HIDR.EXE --> Eliminado Bagle

	  Fri Sep 07 23:11:17 2007
EliBagle v10.51  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Exploración):
Explorando Unidad C:\

	  Fri Sep 07 23:19:12 2007
EliBagle v10.51  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Exploración):
Explorando Unidad C:\

	  Fri Sep 07 23:21:00 2007
EliBagle v10.51  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Exploración):
Explorando Unidad C:\

	  Fri Sep 07 23:23:00 2007
EliBagle v10.51  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Acción Directa):

	  Fri Sep 07 23:23:02 2007
EliBagle v10.51  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Exploración):
Explorando Unidad C:\

	  Sun Sep 09 15:28:06 2007
EliBagle v10.51  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Acción Directa):

	  Sun Sep 09 15:28:07 2007
EliBagle v10.51  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Exploración):
Explorando Unidad C:\

	  Sun Sep 09 15:39:20 2007
EliBagle v10.51  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Acción Directa):

	  Sun Sep 09 15:39:21 2007
EliBagle v10.51  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Exploración):
Explorando Unidad C:\


Et le nouveau Hijackthis :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:49:31, on 09/09/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
c:\Program Files\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe
C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\WINDOWS\system32\lxcrcoms.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\AAWTray.exe
C:\Program Files\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe
C:\Program Files\D-Link\AirPlus G\AirGCFG.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
c:\Program Files\Adobe\Adobe Version Cue CS2\data\database\bin\mysqld-nt.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.01net.com/telecharger/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.01net.com/telecharger/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar	oolbar.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [AAWTray] C:\Program Files\Lavasoft\Ad-Aware 2007\AAWTray.exe
O4 - HKLM\..\Run: [Adobe Version Cue CS2] c:\Program Files\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe
O4 - HKLM\..\Run: [D-Link AirPlus G] C:\Program Files\D-Link\AirPlus G\AirGCFG.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [puurmwgfg] c:\windows\system32\puurmwgfg.exe puurmwgfg
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar	oolbar.dll/SEARCH.HTML
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZN
O8 - Extra context menu item: Add to AMV Convert Tool... - C:\Program Files\MP3 Player Utilities 3.79\AMVConverter\grab.html
O8 - Extra context menu item: Convertir en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir la cible du lien en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la cible du lien en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir la sélection en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la sélection en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir les liens sélectionnés en fichier Adobe PDF - res://c:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convertir les liens sélectionnés en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 3.79\MediaManager\grab.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar	oolbar.dll
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar	oolbar.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {029FDBA6-3547-11D7-AA4C-0050BF051A00} (Rawflow ICD Client) - http://s.tf1.fr/mmdia/static/rawflow/clients/5.3.1.0/Rawflow.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.mail.live.com/mail/w1/resources/MSNPUpld.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase8300.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - https://www.pixum.fr/?p_ref=crm_umleitung_photoreflex_1113
O18 - Protocol: bw+0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Version Cue CS2 - Adobe Systems Incorporated - c:\Program Files\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe
O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Alpha Networks Inc. - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: lxcr_device -   - C:\WINDOWS\system32\lxcrcoms.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: MySqlInventime - Unknown owner - c:\mysql\bin\mysqld-max-nt.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation  - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: SmartLinkService (SLService) -   - C:\WINDOWS\SYSTEM32\slserv.exe

Demoizelle en détresse · Answer

navilog1  se s'exécute pa...

philae83 · Answer

re

ok, on reprend ce que papyber a écrit à savoir :

Si, dans le rapport, tu vois un texte semblable à celui-ci

Por favor, envienos una muestra del fichero
C:\Muestras\HLDRRR.EXE.Muestra EliBagle v10.24
a "virus@satinfo.es". Gracias;

envoie ce(s) fichier(s) (dans l'exemple C:\Muestras\HLDRRR.EXE.Muestra EliBagle v10.24 ) à l'adresse e-mail indiquée (virus@satinfo.es).

L'outil a rencontré un fichier qu'il reconnait mais ne sait pas encore éradiquer. Dans 24 heures environ, sur le site, la version de déchargement (v10.24 dans l'exemple) aura changé par rapport à celle actuelle. Tu retéléchargeras l'outil, tu le relanceras et tu posteras le rapport. 


en attendant, on continue
peux tu stp

* Télécharge  Blacklight
https://europe.f-secure.com/exclude/blacklight/index.shtml
 (de F-Secure)
(le premier de la page)

Enregistre le sur ton Bureau.
Double-clique fsbl.exe 
Clique sur "I ACCEPT" .
clique Scan puis Next

Tu verras une liste de fichiers détectés apparaître. Tu verras également un rapport,
sur ton Bureau, nommé fsbl.xxxxxxx.log  (les xxxxxxx sont des chiffres).

Copie et colle le contenu de ce rapport dans ta prochaine réponse.
 NE PAS choisir l'option "Rename" de suite : nous devons analyser le rapport,
 car des fichiers légitimes peuvent être présents,  tel wbemtest.exe

papyber · Answer

suppr

Demoizelle en détresse · Answer

voila le rapport de blacklight

09/09/07 16:09:49 [Info]: BlackLight Engine 1.0.64 initialized
09/09/07 16:09:49 [Info]: OS: 5.1 build 2600 (Service Pack 2)
09/09/07 16:09:49 [Note]: 7019 4
09/09/07 16:09:49 [Note]: 7005 0
09/09/07 16:10:01 [Note]: 7006 0
09/09/07 16:10:01 [Note]: 7011 1588
09/09/07 16:10:01 [Note]: 7026 0
09/09/07 16:10:02 [Note]: 7026 0
09/09/07 16:10:02 [Note]: 7024 3
09/09/07 16:10:02 [Info]: Hidden process: C:\windows\system32\puurmwgfg.exe
09/09/07 16:10:07 [Note]: FSRAW library version 1.7.1022
09/09/07 16:18:29 [Info]: Hidden file: c:\Program Files\Movie Maker\Shared\Empty.txt
09/09/07 16:18:29 [Note]: 10002 3
09/09/07 16:18:29 [Info]: Hidden file: c:\Program Files\Movie Maker\Shared\Filters.xml
09/09/07 16:18:29 [Note]: 10002 3
09/09/07 16:18:29 [Info]: Hidden file: c:\Program Files\Movie Maker\Shared
ews.png
09/09/07 16:18:29 [Note]: 10002 3
09/09/07 16:18:29 [Info]: Hidden file: c:\Program Files\Movie Maker\Shared\paint.png
09/09/07 16:18:29 [Note]: 10002 3
09/09/07 16:18:29 [Info]: Hidden file: c:\Program Files\Movie Maker\Shared\Profiles\Blank.txt
09/09/07 16:18:29 [Note]: 10002 3
09/09/07 16:18:29 [Info]: Hidden file: c:\Program Files\Movie Maker\Shared\Sample1.jpg
09/09/07 16:18:29 [Note]: 10002 3
09/09/07 16:18:29 [Info]: Hidden file: c:\Program Files\Movie Maker\Shared\Sample2.jpg
09/09/07 16:18:29 [Note]: 10002 3
09/09/07 16:18:29 [Note]: 10002 2
09/09/07 16:18:29 [Note]: 10002 2
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\activity_speaker_states.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\border_bot.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\border_bot.rgn
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\border_left.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\border_left.rgn
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\border_right.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\border_right.rgn
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\border_top.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\border_top.rgn
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\button_chevron_down.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\button_chevron_up.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\capbuttons.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\checkbox.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\columnheads.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\combo.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\combo_arrow.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\connect_chunkyanim.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\dark_connect_chunkyanim.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\dialbtn_pad.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\donotdisturb.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\games_close.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\grabbie.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\groupboxedge.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\icons_tbar_hot.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\icons_tbar_normal.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\icons_tbar_disabled.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\indigo.xml
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\itabs.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\menubar.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\menubar_states.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\menuitem.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\menusearchbar.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\menu_bg.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\menu_scroll.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\menu_sep.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\mute_states.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\photoshare_slider.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\photoshare_slider_tray.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\preview_indigo.jpg
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\progressbar.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\pushbuttons.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigoadio.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\scroll_vbg.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\scroll_hhandle.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\scroll_vhandle.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\scroll_buttons.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\scroll_griph.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\scroll_gripv.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\scroll_hbg.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\search_bang.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\silver_bg.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\statusbar.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\statusgrabber.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\sys_menu.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo	abs.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo	abs_standard.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo	ab_border.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo	bar_sep.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo	oolbarbuttons.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo	ool_border_bot.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo	ool_border_bot.rgn
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo	ool_border_left.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo	ool_border_left.rgn
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo	ool_border_right.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo	ool_border_right.rgn
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo	ool_border_top.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo	ool_border_top.rgn
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo	ool_capbuttons.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo	rackbar_thumb_vert.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo	rackbar_thumb_up.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo	rackbar_h.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo	rackbar_thumb_down.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\up_down_h.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\voice_dialpad_11.png
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo	rackbar_thumb_horz.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo	rackbar_thumb_left.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo	rackbar_thumb_right.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo	rackbar_v.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo	riangletray.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\up_down.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\up_down_arrow.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\up_down_h_arrow.bmp
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\voice_dialpad_3.png
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\voice_dialpad_7.png
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\voice_dialpad_4.png
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\voice_dialpad_8.png
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:34 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\voice_dialpad_5.png
09/09/07 16:19:34 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\voice_dialpad_9.png
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\voice_dialpad_2.png
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\voice_dialpad_6.png
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\voice_tbar_hold.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\voice_tbar.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\voice_tbar_incoming.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\voice_ringer.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\voice_callbtn.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\Voice_Circle.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\voice_ctrls.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\voice_dialpad_0.png
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\voice_dialpad_1.png
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\voice_dialpad_10.png
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\voice_lights.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\border_bot.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\border_bot.rgn
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\border_left.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\border_left.rgn
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\border_right.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\border_right.rgn
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\border_top.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\border_top.rgn
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\button_chevron_down.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\button_chevron_up.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\capbuttons.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\checkbox.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\columnheads.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\combo_arrow.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\dialbtn_pad.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\donotdisturb.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\games_close.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\grabbie.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\groupboxedge.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\icons_tbar_disabled.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\icons_tbar_hot.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\icons_tbar_normal.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\maverick.xml
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\menubar.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\menubar_states.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\menuitem.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\menusearchbar.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\menu_bg.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\menu_scroll.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\menu_sep.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\photoshare_slider.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\photoshare_slider_tray.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\preview_mavblue.jpg
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\progressbar.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\pushbuttons.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverickadio.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\scroll_vbg.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\scroll_hhandle.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\scroll_vhandle.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\scroll_buttons.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\scroll_griph.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\scroll_gripv.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\scroll_hbg.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\search_bang.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\silver_bg.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\statusbar.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\statusgrabber.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\sys_menu.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	abs.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	abs_standard.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	ab_border.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	bar_bg.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	bar_sep.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	oolbarbuttons.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	ool_border_bot.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	ool_border_bot.rgn
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	ool_border_left.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	ool_border_left.rgn
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	ool_border_right.rgn
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	ool_border_top.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	ool_border_top.rgn
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	ool_border_right.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	ool_capbuttons.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	rackbar_thumb_vert.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	rackbar_thumb_up.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	rackbar_h.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	rackbar_thumb_down.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	rackbar_thumb_horz.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	rackbar_thumb_left.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	rackbar_thumb_right.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\combo.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\itabs.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	rackbar_v.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\voice_tbar_incoming.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	riangletray.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\up_down.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\up_down_arrow.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\up_down_h.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\up_down_h_arrow.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\voice_dialpad_3.png
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\voice_dialpad_7.png
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\voice_dialpad_4.png
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\voice_dialpad_8.png
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\voice_dialpad_5.png
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\voice_dialpad_9.png
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\voice_dialpad_2.png
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\voice_dialpad_6.png
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\voice_tbar_hold.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\voice_tbar.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\voice_callbtn.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\voice_ctrls.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\voice_dialpad_0.png
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\voice_dialpad_1.png
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\voice_dialpad_10.png
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\voice_dialpad_11.png
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\voice_lights.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\voice_ringer.bmp
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\preview_classic_msgr.jpg
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\YAlertCenter.dll
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\YbSkin2.dll
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\YbSkinSelect.dll
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\YbSkinSelectRes.dll
09/09/07 16:19:35 [Note]: 10002 3
09/09/07 16:19:35 [Note]: 10002 2
09/09/07 16:19:35 [Note]: 10002 2
09/09/07 16:24:40 [Info]: Hidden file: c:\WINDOWS\ime\SHARED\imepaden.hlp
09/09/07 16:24:40 [Note]: 10002 3
09/09/07 16:24:40 [Info]: Hidden file: c:\WINDOWS\ime\SHARED\imepadsm.dll
09/09/07 16:24:40 [Note]: 10002 3
09/09/07 16:24:40 [Info]: Hidden file: c:\WINDOWS\ime\SHARED\imepadsv.exe
09/09/07 16:24:40 [Note]: 10002 3
09/09/07 16:24:40 [Info]: Hidden file: c:\WINDOWS\ime\SHARED\imlang.dll
09/09/07 16:24:40 [Note]: 10002 3
09/09/07 16:24:40 [Info]: Hidden file: c:\WINDOWS\ime\SHARED\RES\PADRS404.DLL
09/09/07 16:24:40 [Note]: 10002 3
09/09/07 16:24:40 [Info]: Hidden file: c:\WINDOWS\ime\SHARED\RES\padrs411.dll
09/09/07 16:24:40 [Note]: 10002 3
09/09/07 16:24:40 [Info]: Hidden file: c:\WINDOWS\ime\SHARED\RES\padrs412.dll
09/09/07 16:24:40 [Note]: 10002 3
09/09/07 16:24:40 [Info]: Hidden file: c:\WINDOWS\ime\SHARED\RES\padrs804.dll
09/09/07 16:24:40 [Note]: 10002 3
09/09/07 16:24:40 [Note]: 10002 2
09/09/07 16:24:41 [Note]: 10002 2
09/09/07 16:25:25 [Note]: 10002 3
09/09/07 16:25:25 [Note]: 10002 3
09/09/07 16:25:25 [Note]: 10002 3
09/09/07 16:25:25 [Note]: 10002 3
09/09/07 16:25:25 [Note]: 10002 3
09/09/07 16:25:25 [Note]: 10002 3
09/09/07 16:25:25 [Note]: 10002 3
09/09/07 16:25:25 [Note]: 10002 3
09/09/07 16:25:25 [Note]: 10002 2
09/09/07 16:25:25 [Note]: 10002 2
09/09/07 16:26:47 [Info]: Hidden file: c:\WINDOWS\system32\puurmwgfg.dat
09/09/07 16:26:47 [Note]: 10002 1
09/09/07 16:26:49 [Info]: Hidden file: C:\windows\system32\puurmwgfg.exe
09/09/07 16:26:49 [Note]: 10002 1
09/09/07 16:26:50 [Info]: Hidden file: c:\WINDOWS\system32\puurmwgfg_nav.dat
09/09/07 16:26:50 [Note]: 10002 1
09/09/07 16:26:51 [Info]: Hidden file: c:\WINDOWS\system32\puurmwgfg_navps.dat
09/09/07 16:26:51 [Note]: 10002 1
09/09/07 16:27:47 [Info]: Hidden file: c:\WINDOWS\system32\drivers\srosa.sys
09/09/07 16:27:47 [Note]: 10002 2
09/09/07 16:31:38 [Note]: 2000 1012

philae83 · Answer

re

* Télécharge combofix.exe (par sUBs) sur ton Bureau
http://download.bleepingcomputer.com/sUBs/ComboFix.exe

* Double clique combofix.exe.

* Tape sur la touche Y (Yes) pour démarrer le scan.

* Lorsque le scan sera complété, un rapport apparaîtra. Copie/colle ce rapport dans ta prochaine réponse

NOTE : Le rapport se trouve également ici : C:\Combofix.txt

Demoizelle en détresse · Answer

Je dois fermer blacklight ou non??

philae83 · Answer

oui tu peux le fermer

Demoizelle en détresse · Answer

voila le rapport ComboFix 07-09-09.4 - "Djoustyle" 2007-09-09 16:48:15.1 - NTFSx86 Microsoft Windows XP dition familiale 5.1.2600.2.1252.33.1036.18.373 [GMT 2:00] * Created a new restore point . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\Autorun.inf C:\DOCUME~1\DJOUST~1\APPLIC~1\DriveCleaner 2006 Free C:\DOCUME~1\DJOUST~1\APPLIC~1\DriveCleaner 2006 Free\Logs\update.log C:\DOCUME~1\DJOUST~1\err.log C:\DOCUME~1\Familia avmonlog C:\WINDOWS\pack.epk C:\WINDOWS\system32\drivers\asc3550.sys C:\WINDOWS\system32\drivers\srosa.sys C:\WINDOWS\system32 vs2.inf C:\WINDOWS\system32\puurmwgfg.dat C:\WINDOWS\system32\puurmwgfg.exe C:\WINDOWS\system32\puurmwgfg_nav.dat C:\WINDOWS\system32\puurmwgfg_navps.dat ((((((((((((((((((((((((((((( Fichiers créés 2007-08-09 to 2007-09-09 )))))))))))))))))))))))))))))))))))) . 2007-09-09 16:47 51,200 --a------ C:\WINDOWS\NirCmd.exe 2007-09-09 15:59 d-------- C:\Program Files\Navilog1 2007-09-08 15:11 d-------- C:\Program Files\MSXML 6.0 2007-09-08 14:22 d-------- C:\WINDOWS\system32\Kaspersky Lab 2007-09-07 23:09 d-------- C:\Muestras 2007-09-07 22:12 21,393 --a------ C:\WINDOWS\system32\drivers\AegisP.sys 2007-09-07 22:12 21,393 --a------ C:\WINDOWS\AegisP.sys 2007-09-07 22:12 d-------- C:\WINDOWS\system32\config\SYSTEM~1\APPLIC~1\Intel 2007-09-07 22:12 d-------- C:\DOCUME~1\NEWLIF~1\APPLIC~1\Intel 2007-09-07 22:12 d-------- C:\DOCUME~1\NETWOR~1\APPLIC~1\Intel 2007-09-07 22:12 d-------- C:\DOCUME~1\LOCALS~1\APPLIC~1\Intel 2007-09-07 22:12 d-------- C:\DOCUME~1\Familia\APPLIC~1\Intel 2007-09-07 22:12 d-------- C:\DOCUME~1\DJOUST~1\APPLIC~1\Intel 2007-09-07 22:12 d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Intel 2007-09-07 22:11 d-------- C:\Program Files\Intel 2007-09-07 21:53 126,976 --a------ C:\WINDOWS\system32\coclassfast.dll 2007-09-07 21:53 d-------- C:\Program Files\SAGEM 2007-09-07 12:18 d-------- C:\WINDOWS\BDOSCAN8 2007-09-06 18:02 d-------- C:\WINDOWS\ClamWin Portable 2007-09-06 17:34 d-------- C:\Program Files\Trend Micro 2007-09-06 15:28 d-------- C:\Program Files\Lavasoft 2007-09-06 15:28 d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft 2007-09-06 15:27 d-------- C:\Program Files\Fichiers communs\Wise Installation Wizard 2007-09-06 01:39 23,152 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys 2007-09-06 01:38 783,224 --a------ C:\WINDOWS\system32\aswBoot.exe 2007-09-05 20:45 d-------- C:\WINDOWS\Google Toolbar 2007-09-05 20:22 d-------- C:\Program Files\a-squared Free 2007-08-22 00:17 d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU 2007-08-22 00:14 d-------- C:\Program Files\Fichiers communs\AVSMedia 2007-08-18 09:45 d--h----- C:\WINDOWS\msdownld.tmp 2007-08-18 09:45 d-------- C:\Program Files\EasyDVDCopyPro 2007-08-18 09:45 d-------- C:\Program Files\ANI 2007-08-18 09:45 d-------- C:\Program Files\AKVIS 2007-08-18 09:45 d-------- C:\Program Files\Abbyy FineReader 6.0 Sprint 2007-08-18 09:45 d-------- C:\DOCUME~1\DJOUST~1\APPLIC~1\Inkscape 2007-08-18 09:44 d--h----- C:\DOCUME~1\TEMP(2)\Application Data(2) 2007-08-18 09:44 d-------- C:\Program Files\Ulead Systems 2007-08-18 09:44 d-------- C:\Program Files\MP3 Player Utilities 3.79 2007-08-18 09:44 d-------- C:\Program Files\Inkscape 2007-08-12 22:17 d-------- C:\Program Files\D-Link . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2007-09-09 15:38 --------- d-------- C:\Program Files\Wanadoo 2007-09-08 14:42 --------- d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy 2007-09-07 23:08 --------- d-------- C:\Program Files\Windows Live Safety Center 2007-09-07 21:53 --------- d--h----- C:\Program Files\InstallShield Installation Information 2007-09-06 15:42 --------- d-------- C:\Program Files\AviSynth 2.5 2007-09-06 11:44 --------- d-------- C:\Program Files\Lexmark 2400 Series 2007-09-05 22:35 --------- d-------- C:\Program Files\Google 2007-09-05 22:21 --------- d-------- C:\Program Files\Macrogaming 2007-09-05 20:51 --------- d-------- C:\Program Files\Nokia 2007-09-05 20:48 --------- d-------- C:\Program Files\Fichiers communs\PCSuite 2007-09-05 20:44 --------- d-------- C:\Program Files\Ricochet Xtreme 2007-09-05 20:36 --------- d-------- C:\Program Files\eMule 2007-08-18 09:46 --------- d-------- C:\Program Files\BulletProofSoft.com 2007-08-18 09:45 --------- d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google 2007-08-18 09:44 --------- d-------- C:\Program Files\SlySoft 2007-08-18 09:44 --------- d-------- C:\Program Files\Catalencoder 2007-08-18 09:44 --------- d-------- C:\DOCUME~1\NEWLIF~1\APPLIC~1\Real 2007-08-18 09:44 --------- d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Yahoo! Companion 2007-08-18 09:42 --------- d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Ulead Systems 2007-08-07 13:58 8320 --a------ C:\WINDOWS\system32\drivers\AWRTRD.sys 2007-08-07 13:56 9344 --a------ C:\WINDOWS\system32\drivers\NSDriver.sys 2007-08-05 23:33 --------- d-------- C:\DOCUME~1\NEWLIF~1\APPLIC~1\FaxCtr 2007-07-31 19:01 --------- d-------- C:\Program Files\Yahoo! 2007-07-30 19:19 92504 --a------ C:\WINDOWS\system32\dllcache\cdm.dll 2007-07-30 19:19 92504 --a------ C:\WINDOWS\system32\cdm.dll 2007-07-30 19:19 549720 --a------ C:\WINDOWS\system32\wuapi.dll 2007-07-30 19:19 549720 --a------ C:\WINDOWS\system32\dllcache\wuapi.dll 2007-07-30 19:19 53080 --a------ C:\WINDOWS\system32\wuauclt.exe 2007-07-30 19:19 53080 --a------ C:\WINDOWS\system32\dllcache\wuauclt.exe 2007-07-30 19:19 43352 --a------ C:\WINDOWS\system32\wups2.dll 2007-07-30 19:19 325976 --a------ C:\WINDOWS\system32\wucltui.dll 2007-07-30 19:19 325976 --a------ C:\WINDOWS\system32\dllcache\wucltui.dll 2007-07-30 19:19 271224 --a------ C:\WINDOWS\system32\mucltui.dll 2007-07-30 19:19 207736 --a------ C:\WINDOWS\system32\muweb.dll 2007-07-30 19:19 203096 --a------ C:\WINDOWS\system32\wuweb.dll 2007-07-30 19:19 203096 --a------ C:\WINDOWS\system32\dllcache\wuweb.dll 2007-07-30 19:19 1712984 --a------ C:\WINDOWS\system32\wuaueng.dll 2007-07-30 19:19 1712984 --a------ C:\WINDOWS\system32\dllcache\wuaueng.dll 2007-07-30 19:18 33624 --a------ C:\WINDOWS\system32\wups.dll 2007-07-30 19:18 33624 --a------ C:\WINDOWS\system32\dllcache\wups.dll 2007-07-30 16:07 --------- d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\MULTI DOES DOWNLOAD VIEW 2007-07-28 20:04 --------- d-------- C:\DOCUME~1\DJOUST~1\APPLIC~1\FaxCtr 2007-07-28 17:39 --------- d-------- C:\Program Files\Lexmark Fax Solutions 2007-07-28 17:39 --------- d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\FaxCtr 2007-07-28 17:38 --------- d-------- C:\Program Files\Lexmark Toolbar 2007-07-28 17:35 --------- d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus! 2007-07-26 23:52 --------- d-------- C:\Program Files\Messenger Plus! Live 2007-07-26 23:52 --------- d-------- C:\Program Files\Adverts 2007-07-26 23:51 --------- d-------- C:\Program Files\Windows Live 2007-07-26 23:51 --------- d-------- C:\Program Files\MSN Messenger 2007-07-23 23:18 359808 --a------ C:\WINDOWS\system32\drivers\TCPIP.SYS 2007-07-23 23:18 359808 --a------ C:\WINDOWS\system32\dllcache\TCPIP.SYS 2007-07-22 14:36 --------- d-------- C:\Program Files\JCA2000 2007-07-19 12:41 --------- d-------- C:\Program Files\CCleaner 2007-07-19 08:58 3583488 --a------ C:\WINDOWS\system32\dllcache\mshtml.dll 2007-07-19 00:06 --------- d-------- C:\Program Files\capb2i 2007-07-18 23:45 --------- d-------- C:\DOCUME~1\DJOUST~1\APPLIC~1\Google 2007-07-18 23:22 --------- d-------- C:\Program Files\AdorageI-GfxDatas 2007-07-16 12:29 --------- d-------- C:\Program Files\Western Digital Technologies 2007-07-13 01:30 765952 --a------ C:\WINDOWS\system32\dllcache\vgx.dll 2007-07-11 14:37 6272 --a------ C:\WINDOWS\system32\drivers\AWRTPD.sys 2007-06-29 11:59 318976 --a------ C:\WINDOWS\system32\dllcache\unregmp2.exe 2007-06-27 15:24 823808 --a------ C:\WINDOWS\system32\dllcache\wininet.dll 2007-06-27 15:24 671232 --a------ C:\WINDOWS\system32\dllcache\mstime.dll 2007-06-27 15:24 477696 --a------ C:\WINDOWS\system32\dllcache\mshtmled.dll 2007-06-27 15:24 232960 --------- C:\WINDOWS\system32\dllcache\webcheck.dll 2007-06-27 15:24 193024 --a------ C:\WINDOWS\system32\dllcache\msrating.dll 2007-06-27 15:24 1152000 --a------ C:\WINDOWS\system32\dllcache\urlmon.dll 2007-06-27 15:24 105984 --------- C:\WINDOWS\system32\dllcache\url.dll 2007-06-27 15:24 102400 --------- C:\WINDOWS\system32\dllcache\occache.dll 2007-06-27 15:23 6058496 --------- C:\WINDOWS\system32\dllcache\ieframe.dll 2007-06-27 15:23 52224 --------- C:\WINDOWS\system32\dllcache\msfeedsbs.dll 2007-06-27 15:23 459264 --------- C:\WINDOWS\system32\dllcache\msfeeds.dll 2007-06-27 15:23 44544 --------- C:\WINDOWS\system32\dllcache\iernonce.dll 2007-06-27 15:23 27648 --a------ C:\WINDOWS\system32\dllcache\jsproxy.dll 2007-06-27 15:23 267776 --------- C:\WINDOWS\system32\dllcache\iertutil.dll 2007-06-27 15:22 384512 --------- C:\WINDOWS\system32\dllcache\iedkcs32.dll 2007-06-27 15:22 383488 --------- C:\WINDOWS\system32\dllcache\ieapfltr.dll 2007-06-27 15:22 230400 --------- C:\WINDOWS\system32\dllcache\ieaksie.dll 2007-06-27 15:22 153088 --------- C:\WINDOWS\system32\dllcache\ieakeng.dll 2007-06-27 15:22 132608 --a------ C:\WINDOWS\system32\dllcache\extmgr.dll 2007-06-27 15:22 124928 --------- C:\WINDOWS\system32\dllcache\advpack.dll 2007-06-27 10:28 625152 --------- C:\WINDOWS\system32\dllcache\iexplore.exe 2007-06-27 10:27 63488 --------- C:\WINDOWS\system32\dllcache\ie4uinit.exe 2007-06-27 10:27 13824 --------- C:\WINDOWS\system32\dllcache\ieudinit.exe 2007-06-27 09:00 161792 --------- C:\WINDOWS\system32\dllcache\ieakui.dll 2007-06-26 08:09 1104896 --a------ C:\WINDOWS\system32\msxml3.dll 2007-06-26 08:09 1104896 --------- C:\WINDOWS\system32\dllcache\msxml3.dll 2007-06-19 15:32 282112 --a------ C:\WINDOWS\system32\gdi32.dll 2007-06-19 15:32 282112 --------- C:\WINDOWS\system32\dllcache\gdi32.dll 2007-06-13 15:22 1037312 --a------ C:\WINDOWS\explorer.exe 2007-06-13 15:22 1037312 --------- C:\WINDOWS\system32\dllcache\explorer.exe 2007-06-11 23:51 10834944 --a------ C:\WINDOWS\system32\dllcache\wmp.dll 2006-10-05 20:32 0 --a------ C:\Program Files\Global.sw 2006-04-14 21:41 894992 --ahs---- C:\Program Files\Thumbs.db 2006-02-27 13:16 278528 --a------ C:\Program Files\Fichiers communs\FDEUnInstaller.exe . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "AAWTray"="C:\Program Files\Lavasoft\Ad-Aware 2007\AAWTray.exe" [2007-08-08 15:53] "Adobe Version Cue CS2"="c:\Program Files\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe" [2005-04-06 17:53] "D-Link AirPlus G"="C:\Program Files\D-Link\AirPlus G\AirGCFG.exe" [2005-11-23 15:04] "WOOWATCH"="C:\PROGRA~1\Wanadoo\Watch.exe" [2004-08-23 14:49] "WOOTASKBARICON"="C:\PROGRA~1\Wanadoo\GestMaj.exe" [2004-10-14 16:55] "IntelZeroConfig"="C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe" [2007-04-16 11:24] "IntelWireless"="C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" [2007-04-16 11:22] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 15:00] "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-20 01:09] "msnmsgr"="C:\Program Files\MSN Messenger\msnmsgr.exe" [2007-01-19 13:55] [color=red]SafeBoot registry key needs repairs. This machine cannot enter Safe Mode.[/color] [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\File system] @="Driver Group" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vgasave.sys] @="Driver" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E967-E325-11CE-BFC1-08002BE10318}] @="DiskDrive" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96A-E325-11CE-BFC1-08002BE10318}] @="Hdc" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96B-E325-11CE-BFC1-08002BE10318}] @="Keyboard" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E96F-E325-11CE-BFC1-08002BE10318}] @="Mouse" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{4D36E97D-E325-11CE-BFC1-08002BE10318}] @="System" [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{71A27CDD-812A-11D0-BEC7-08002BE2092F}] @="Volume" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Lancement rapide d'Adobe Reader.lnk] path=C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\Lancement rapide d'Adobe Reader.lnk backup=C:\WINDOWS\pss\Lancement rapide d'Adobe Reader.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Version Cue CS2] "c:\Program Files\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DataLayer] C:\Program Files\Fichiers communs\PCSuite\DataLayer\DataLayer.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\download view size spam] C:\Documents and Settings\All Users\Application Data\MULTI DOES DOWNLOAD VIEW\Show Mp3.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Flash_Player_Install[1]] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPHmon05] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HPHUPD05] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32 [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Load] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MessengerPlus3] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Mix fork] C:\DOCUME~1\DJOUST~1\APPLIC~1\LESSIN~1\Obj browse.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCMService] "c:\Apps\Powercinema\PCMService.exe" [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -onlytray [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SweetIM] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\updateMgr] C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AdobeUpdateManager.exe AcPro7_0_5 [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|DEFAULT=cnx|PARAM= [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe R0 snapman;Acronis Snapshots Manager;C:\WINDOWS\system32\DRIVERS\snapman.sys R0 timounter;Acronis TrueImage Backup Archive Explorer;C:\WINDOWS\system32\DRIVERS imntr.sys R2 tifsfilter;Acronis TrueImage FS Filter;C:\WINDOWS\system32\DRIVERS ifsfilt.sys R3 fsbl-standalone;F-Secure BlackLight Beta Engine Driver;\??\C:\DOCUME~1\DJOUST~1\LOCALS~1\Temp\F-Secure\BlackLight\fsbldrv.sys S3 A4501A;802.11g Wireless USB Adapter Driver;C:\WINDOWS\system32\DRIVERS\A4501A.sys S3 KS-959;Kingsun KS-959 USB Infrared Adapter;C:\WINDOWS\system32\DRIVERS\KS-959.sys S3 usbscan;Pilote de scanneur USB;C:\WINDOWS\system32\DRIVERS\usbscan.sys S3 USBSTOR;Pilote de stockage de masse USB;C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS S3 WlanUIG;Sagem 802.11g Wireless LAN USB Adapter Driver;C:\WINDOWS\system32\DRIVERS\WlanUIG.sys [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\C] AutoRun\command- Autorun.exe [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d9af6614-8cf7-11da-889b-806d6172696f}] AutoRun\command- Autorun.exe *Newly Created Service* - CATCHME *Newly Created Service* - FSBL-STANDALONE . Contenu du dossier 'Scheduled Tasks/Tâches planifiées' "2007-09-07 23:58:00 C:\WINDOWS\Tasks\HP Usg Daily.job" - C:\Program Files\Hewlett-Packard\{D946675D-1D6C-4dc8-9E0D-B4B8EAA30EAA}\pexpress\hphped05.exe . ************************************************************************** catchme 0.3.1061 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-09-09 16:51:27 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... ************************************************************************** [HKEY_LOCAL_MACHINE\system\ControlSet001\Services\srosa] "ImagePath"="\??\C:\WINDOWS\system32\drivers\srosa.sys" . Completion time: 2007-09-09 16:52:46 C:\ComboFix-quarantined-files.txt ... 2007-09-09 16:52 . --- E O F ---

philae83 · Answer

reposte un rapport F SECURE BLACKLIGHT stp

et un nouveau rapport hijackthis

Demoizelle en détresse · Answer

le blacklight :

09/09/07 16:58:34 [Info]: BlackLight Engine 1.0.64 initialized
09/09/07 16:58:34 [Info]: OS: 5.1 build 2600 (Service Pack 2)
09/09/07 16:58:35 [Note]: 7019 4
09/09/07 16:58:35 [Note]: 7005 0
09/09/07 16:58:38 [Note]: 7006 0
09/09/07 16:58:38 [Note]: 7011 2652
09/09/07 16:58:38 [Note]: 7026 0
09/09/07 16:58:38 [Note]: 7026 0
09/09/07 16:58:41 [Note]: FSRAW library version 1.7.1022
09/09/07 17:04:26 [Info]: Hidden file: c:\Program Files\Movie Maker\Shared\Empty.txt
09/09/07 17:04:26 [Note]: 10002 3
09/09/07 17:04:26 [Info]: Hidden file: c:\Program Files\Movie Maker\Shared\Filters.xml
09/09/07 17:04:26 [Note]: 10002 3
09/09/07 17:04:26 [Info]: Hidden file: c:\Program Files\Movie Maker\Shared
ews.png
09/09/07 17:04:26 [Note]: 10002 3
09/09/07 17:04:26 [Info]: Hidden file: c:\Program Files\Movie Maker\Shared\paint.png
09/09/07 17:04:26 [Note]: 10002 3
09/09/07 17:04:26 [Info]: Hidden file: c:\Program Files\Movie Maker\Shared\Profiles\Blank.txt
09/09/07 17:04:26 [Note]: 10002 3
09/09/07 17:04:26 [Info]: Hidden file: c:\Program Files\Movie Maker\Shared\Sample1.jpg
09/09/07 17:04:26 [Note]: 10002 3
09/09/07 17:04:26 [Info]: Hidden file: c:\Program Files\Movie Maker\Shared\Sample2.jpg
09/09/07 17:04:26 [Note]: 10002 3
09/09/07 17:04:26 [Note]: 10002 2
09/09/07 17:04:26 [Note]: 10002 2
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\activity_speaker_states.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\border_bot.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\border_bot.rgn
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\border_left.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\border_left.rgn
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\border_right.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\border_right.rgn
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\border_top.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\border_top.rgn
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\button_chevron_down.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\button_chevron_up.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\capbuttons.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\checkbox.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\columnheads.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\combo.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\combo_arrow.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\connect_chunkyanim.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\dark_connect_chunkyanim.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\dialbtn_pad.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\donotdisturb.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\games_close.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\grabbie.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\groupboxedge.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\icons_tbar_hot.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\icons_tbar_normal.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\icons_tbar_disabled.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\indigo.xml
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\itabs.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\menubar.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\menubar_states.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\menuitem.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\menusearchbar.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\menu_bg.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\menu_scroll.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\menu_sep.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\mute_states.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\photoshare_slider.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\photoshare_slider_tray.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\preview_indigo.jpg
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\progressbar.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\pushbuttons.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigoadio.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\scroll_vbg.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\scroll_hhandle.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\scroll_vhandle.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\scroll_buttons.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\scroll_griph.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\scroll_gripv.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\scroll_hbg.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\search_bang.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\silver_bg.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\statusbar.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\statusgrabber.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\sys_menu.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo	abs.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo	abs_standard.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo	ab_border.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo	bar_sep.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo	oolbarbuttons.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo	ool_border_bot.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo	ool_border_bot.rgn
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo	ool_border_left.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo	ool_border_left.rgn
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo	ool_border_right.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo	ool_border_right.rgn
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo	ool_border_top.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo	ool_border_top.rgn
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo	ool_capbuttons.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo	rackbar_thumb_vert.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo	rackbar_thumb_up.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo	rackbar_h.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo	rackbar_thumb_down.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\up_down_h.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\voice_dialpad_11.png
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo	rackbar_thumb_horz.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo	rackbar_thumb_left.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo	rackbar_thumb_right.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo	rackbar_v.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo	riangletray.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\up_down.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\up_down_arrow.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\up_down_h_arrow.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\voice_dialpad_3.png
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\voice_dialpad_7.png
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\voice_dialpad_4.png
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\voice_dialpad_8.png
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\voice_dialpad_5.png
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\voice_dialpad_9.png
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\voice_dialpad_2.png
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\voice_dialpad_6.png
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\voice_tbar_hold.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\voice_tbar.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\voice_tbar_incoming.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\voice_ringer.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\voice_callbtn.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\Voice_Circle.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\voice_ctrls.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\voice_dialpad_0.png
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\voice_dialpad_1.png
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\voice_dialpad_10.png
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Indigo\voice_lights.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\border_bot.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\border_bot.rgn
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\border_left.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\border_left.rgn
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\border_right.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\border_right.rgn
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\border_top.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\border_top.rgn
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\button_chevron_down.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\button_chevron_up.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\capbuttons.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\checkbox.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\columnheads.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\combo_arrow.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\dialbtn_pad.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\donotdisturb.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\games_close.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\grabbie.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\groupboxedge.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\icons_tbar_disabled.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\icons_tbar_hot.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\icons_tbar_normal.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\maverick.xml
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\menubar.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\menubar_states.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\menuitem.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\menusearchbar.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\menu_bg.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\menu_scroll.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\menu_sep.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\photoshare_slider.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\photoshare_slider_tray.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\preview_mavblue.jpg
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\progressbar.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\pushbuttons.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverickadio.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\scroll_vbg.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\scroll_hhandle.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\scroll_vhandle.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\scroll_buttons.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\scroll_griph.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\scroll_gripv.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\scroll_hbg.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\search_bang.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\silver_bg.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\statusbar.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\statusgrabber.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\sys_menu.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	abs.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	abs_standard.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	ab_border.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	bar_bg.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	bar_sep.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	oolbarbuttons.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	ool_border_bot.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	ool_border_bot.rgn
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	ool_border_left.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	ool_border_left.rgn
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	ool_border_right.rgn
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	ool_border_top.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	ool_border_top.rgn
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	ool_border_right.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	ool_capbuttons.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	rackbar_thumb_vert.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	rackbar_thumb_up.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	rackbar_h.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	rackbar_thumb_down.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	rackbar_thumb_horz.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	rackbar_thumb_left.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	rackbar_thumb_right.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\combo.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\itabs.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	rackbar_v.bmp
09/09/07 17:05:11 [Note]: 10002 3
09/09/07 17:05:11 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\voice_tbar_incoming.bmp
09/09/07 17:05:12 [Note]: 10002 3
09/09/07 17:05:12 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick	riangletray.bmp
09/09/07 17:05:12 [Note]: 10002 3
09/09/07 17:05:12 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\up_down.bmp
09/09/07 17:05:12 [Note]: 10002 3
09/09/07 17:05:12 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\up_down_arrow.bmp
09/09/07 17:05:12 [Note]: 10002 3
09/09/07 17:05:12 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\up_down_h.bmp
09/09/07 17:05:12 [Note]: 10002 3
09/09/07 17:05:12 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\up_down_h_arrow.bmp
09/09/07 17:05:12 [Note]: 10002 3
09/09/07 17:05:12 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\voice_dialpad_3.png
09/09/07 17:05:12 [Note]: 10002 3
09/09/07 17:05:12 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\voice_dialpad_7.png
09/09/07 17:05:12 [Note]: 10002 3
09/09/07 17:05:12 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\voice_dialpad_4.png
09/09/07 17:05:12 [Note]: 10002 3
09/09/07 17:05:12 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\voice_dialpad_8.png
09/09/07 17:05:12 [Note]: 10002 3
09/09/07 17:05:12 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\voice_dialpad_5.png
09/09/07 17:05:12 [Note]: 10002 3
09/09/07 17:05:12 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\voice_dialpad_9.png
09/09/07 17:05:12 [Note]: 10002 3
09/09/07 17:05:12 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\voice_dialpad_2.png
09/09/07 17:05:12 [Note]: 10002 3
09/09/07 17:05:12 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\voice_dialpad_6.png
09/09/07 17:05:12 [Note]: 10002 3
09/09/07 17:05:12 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\voice_tbar_hold.bmp
09/09/07 17:05:12 [Note]: 10002 3
09/09/07 17:05:12 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\voice_tbar.bmp
09/09/07 17:05:12 [Note]: 10002 3
09/09/07 17:05:12 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\voice_callbtn.bmp
09/09/07 17:05:12 [Note]: 10002 3
09/09/07 17:05:12 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\voice_ctrls.bmp
09/09/07 17:05:12 [Note]: 10002 3
09/09/07 17:05:12 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\voice_dialpad_0.png
09/09/07 17:05:12 [Note]: 10002 3
09/09/07 17:05:12 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\voice_dialpad_1.png
09/09/07 17:05:12 [Note]: 10002 3
09/09/07 17:05:12 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\voice_dialpad_10.png
09/09/07 17:05:12 [Note]: 10002 3
09/09/07 17:05:12 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\voice_dialpad_11.png
09/09/07 17:05:12 [Note]: 10002 3
09/09/07 17:05:12 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\voice_lights.bmp
09/09/07 17:05:12 [Note]: 10002 3
09/09/07 17:05:12 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\Maverick\voice_ringer.bmp
09/09/07 17:05:12 [Note]: 10002 3
09/09/07 17:05:12 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\Graphics\preview_classic_msgr.jpg
09/09/07 17:05:12 [Note]: 10002 3
09/09/07 17:05:12 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\YAlertCenter.dll
09/09/07 17:05:12 [Note]: 10002 3
09/09/07 17:05:12 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\YbSkin2.dll
09/09/07 17:05:12 [Note]: 10002 3
09/09/07 17:05:12 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\YbSkinSelect.dll
09/09/07 17:05:12 [Note]: 10002 3
09/09/07 17:05:12 [Info]: Hidden file: c:\Program Files\Yahoo!\Shared\YbSkinSelectRes.dll
09/09/07 17:05:12 [Note]: 10002 3
09/09/07 17:05:12 [Note]: 10002 2
09/09/07 17:05:12 [Note]: 10002 2
09/09/07 17:08:54 [Info]: Hidden file: c:\WINDOWS\ime\SHARED\imepaden.hlp
09/09/07 17:08:54 [Note]: 10002 3
09/09/07 17:08:54 [Info]: Hidden file: c:\WINDOWS\ime\SHARED\imepadsm.dll
09/09/07 17:08:54 [Note]: 10002 3
09/09/07 17:08:54 [Info]: Hidden file: c:\WINDOWS\ime\SHARED\imepadsv.exe
09/09/07 17:08:54 [Note]: 10002 3
09/09/07 17:08:54 [Info]: Hidden file: c:\WINDOWS\ime\SHARED\imlang.dll
09/09/07 17:08:54 [Note]: 10002 3
09/09/07 17:08:54 [Info]: Hidden file: c:\WINDOWS\ime\SHARED\RES\PADRS404.DLL
09/09/07 17:08:54 [Note]: 10002 3
09/09/07 17:08:54 [Info]: Hidden file: c:\WINDOWS\ime\SHARED\RES\padrs411.dll
09/09/07 17:08:54 [Note]: 10002 3
09/09/07 17:08:54 [Info]: Hidden file: c:\WINDOWS\ime\SHARED\RES\padrs412.dll
09/09/07 17:08:54 [Note]: 10002 3
09/09/07 17:08:54 [Info]: Hidden file: c:\WINDOWS\ime\SHARED\RES\padrs804.dll
09/09/07 17:08:54 [Note]: 10002 3
09/09/07 17:08:54 [Note]: 10002 2
09/09/07 17:08:54 [Note]: 10002 2
09/09/07 17:09:23 [Note]: 10002 3
09/09/07 17:09:23 [Note]: 10002 3
09/09/07 17:09:23 [Note]: 10002 3
09/09/07 17:09:23 [Note]: 10002 3
09/09/07 17:09:23 [Note]: 10002 3
09/09/07 17:09:23 [Note]: 10002 3
09/09/07 17:09:23 [Note]: 10002 3
09/09/07 17:09:23 [Note]: 10002 3
09/09/07 17:09:23 [Note]: 10002 2
09/09/07 17:09:23 [Note]: 10002 2
09/09/07 17:13:32 [Note]: 2000 1012

hijackthis :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:15:25, on 09/09/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
c:\Program Files\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe
C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\WINDOWS\system32\lxcrcoms.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\AAWTray.exe
C:\Program Files\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe
C:\Program Files\D-Link\AirPlus G\AirGCFG.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
c:\Program Files\Adobe\Adobe Version Cue CS2\data\database\bin\mysqld-nt.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\MSN Messenger\usnsvc.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32
otepad.exe
C:\Documents and Settings\Djoustyle\Bureau\fsbl.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.01net.com/telecharger/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.01net.com/telecharger/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar	oolbar.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [AAWTray] C:\Program Files\Lavasoft\Ad-Aware 2007\AAWTray.exe
O4 - HKLM\..\Run: [Adobe Version Cue CS2] c:\Program Files\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe
O4 - HKLM\..\Run: [D-Link AirPlus G] C:\Program Files\D-Link\AirPlus G\AirGCFG.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar	oolbar.dll/SEARCH.HTML
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZN
O8 - Extra context menu item: Add to AMV Convert Tool... - C:\Program Files\MP3 Player Utilities 3.79\AMVConverter\grab.html
O8 - Extra context menu item: Convertir en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir la cible du lien en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la cible du lien en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir la sélection en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la sélection en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir les liens sélectionnés en fichier Adobe PDF - res://c:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convertir les liens sélectionnés en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 3.79\MediaManager\grab.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar	oolbar.dll
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar	oolbar.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {029FDBA6-3547-11D7-AA4C-0050BF051A00} (Rawflow ICD Client) - http://s.tf1.fr/mmdia/static/rawflow/clients/5.3.1.0/Rawflow.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.mail.live.com/mail/w1/resources/MSNPUpld.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase8300.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - https://www.pixum.fr/?p_ref=crm_umleitung_photoreflex_1113
O18 - Protocol: bw+0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Version Cue CS2 - Adobe Systems Incorporated - c:\Program Files\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe
O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Alpha Networks Inc. - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: lxcr_device -   - C:\WINDOWS\system32\lxcrcoms.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: MySqlInventime - Unknown owner - c:\mysql\bin\mysqld-max-nt.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation  - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: SmartLinkService (SLService) -   - C:\WINDOWS\SYSTEM32\slserv.exe

philae83 · Answer

* lance hijackthis puis coche ces ligne s:

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL 
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) 
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZN 
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll 
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file) 
O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {029FDBA6-3547-11D7-AA4C-0050BF051A00} (Rawflow ICD Client) - http://s.tf1.fr/mmdia/static/rawflow/clients/5.3.1.0/Rawflow.cab
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://webscanner.kaspersky.fr/kavwebscan_unicode.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.mail.live.com/mail/w1/resources/MSNPUpld.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase8300.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - http://www.photoreflex.com/tools/ImageUploader/ImageUploader3.cab 
O18 - Protocol: bw+0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {104D7F84-F8C9-4B9D-A729-6614C54ED7AB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 

* ferme toutes les applications ouvertes y compris Internet Explorer et clique sur "fix checked"

peux tu redémarrer en mode sans échec ou non ?

Demoizelle en détresse · Answer

non toujours pas...

philae83 · Answer

peux tu faire un scan antivirus en ligne ?

* Fait un scan antivirus en ligne ICI
https://www.bitdefender.fr/
et copie colle le résultat ici
* En bas, à gauche de la fenêtre, clique sur BitDefender SCAN ONLINE
* Dans la nouvelle fenêtre, clique sur I agree
* La fenêtre change encore, clique sur Click here to scan
* Les signatures se chargent, etc.

tuto en image

http://pageperso.aol.fr/rginformatique/mapage/defender.htm

Demoizelle en détresse · Answer

le scan est en cours, sa a l'air d'etre long...

Demoizelle en detresse · Answer

VOILA LE SCAN EST FINI :


BitDefender Online Scanner
  
  
 
Rapport d'analyse généré à: Sun, Sep 09, 2007 - 19:38:35
 
 
  
  
 
Voie d'analyse: C:\;D:\;
  
  
 
 
  
  
 
Statistiques
 
Temps
 01:43:14
 
Fichiers
 378733
 
Directoires
 9937
 
Secteurs de boot
 3
 
Archives
 8527
 
Paquets programmes
 14326
 
  
  
 
Résultats
 
Virus identifiés
 2
 
Fichiers infectés
 4
 
Fichiers suspects
 0
 
Avertissements
 0
 
Désinfectés
 0
 
Fichiers effacés
 4
 
  
  
 
Info sur les moteurs
 
Définition virus
 800243
 
Version des moteurs
 AVCORE v1.0 (build 2411) (i386) (Jul 9 2007 12:10:22)
 
Analyse des plugins
 14
 
Archive des plugins
 38
 
Unpack des plugins
 7
 
E-mail plugins
 6
 
Système plugins
 1
 
  
  
 
Paramètres d'analyse
 
Première action
 Désinfecté
 
Seconde Action
 Supprimé
 
Heuristique
 Oui
 
Acceptez les avertissements
 Oui
 
Extensions analysées
 *;
 
Excludez les extensions
  
 
Analyse d'emails
 Oui
 
Analyse des Archives
 Oui
 
Analyser paquets programmes
 Oui
 
Analyse des fichiers
 Oui
 
Analyse de boot
 Oui
 
  
  
 
  Fichier analysé
  Statut
 
C:\Muestras\HIDR.EXE.Muestra EliBagle v10.51
 Infecté par: Trojan.Downloader.Bagle.DF
 
C:\Muestras\HIDR.EXE.Muestra EliBagle v10.51
 Supprimé
 
C:\qoobox\Quarantine\C\WINDOWS\system32\drivers\srosa.sys.vir
 Infecté par: Win32.Bagle.IK@mm
 
C:\qoobox\Quarantine\C\WINDOWS\system32\drivers\srosa.sys.vir
 Echec de la désinfection
 
C:\qoobox\Quarantine\C\WINDOWS\system32\drivers\srosa.sys.vir
 Supprimé
 
C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP395\A0110079.exe
 Infecté par: Trojan.Downloader.Bagle.DF
 
C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP395\A0110079.exe
 Supprimé
 
C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP396\A0110775.sys
 Infecté par: Win32.Bagle.IK@mm
 
C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP396\A0110775.sys
 Echec de la désinfection
 
C:\System Volume Information\_restore{751238CC-FEB5-4605-9EA9-B441EBD3D66D}\RP396\A0110775.sys
 Supprimé

Demoizelle en détresse · Answer

BitDefender Online Scanner - Rapport virus en temps réel
  
  
 
Généré à: Sun, Sep 09, 2007 - 19:42:53
 

--------------------------------------------------------------------------------

 
  
  
 
Info d'analyse
  
  
 
Fichiers scannés
 389194
 
Infectés Fichiers
 4
 
  
  
 
 
  
  
 
Virus Détectés
  
  
 
Trojan.Downloader.Bagle.DF
 2
 
Win32.Bagle.IK@mm
 2
 
  
  
 
 
  
  
 
 

--------------------------------------------------------------------------------
  
  
 
Ce sommaire du processus d'analyse sera utilisé par les laboratoires Antivirus BitDefender pour créer des statistiques agréguées sur l'activité des virus dans le monde.

philae83 · Answer

re

bon c'est pas mal tout ça, mais tu me dis que le MSE n'est tjs pas accessible, c'est bien ça ?

reposte un nouveau rapport hijackthis stp

Demoizelle en detresse · Answer

voila: 


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:01:32, on 09/09/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
c:\Program Files\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\WINDOWS\system32\lxcrcoms.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\AAWTray.exe
C:\Program Files\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe
C:\Program Files\D-Link\AirPlus G\AirGCFG.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\WINDOWS\system32\wscntfy.exe
c:\Program Files\Adobe\Adobe Version Cue CS2\data\database\bin\mysqld-nt.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.01net.com/telecharger/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.01net.com/telecharger/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar	oolbar.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [AAWTray] C:\Program Files\Lavasoft\Ad-Aware 2007\AAWTray.exe
O4 - HKLM\..\Run: [Adobe Version Cue CS2] c:\Program Files\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe
O4 - HKLM\..\Run: [D-Link AirPlus G] C:\Program Files\D-Link\AirPlus G\AirGCFG.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar	oolbar.dll/SEARCH.HTML
O8 - Extra context menu item: Add to AMV Convert Tool... - C:\Program Files\MP3 Player Utilities 3.79\AMVConverter\grab.html
O8 - Extra context menu item: Convertir en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir la cible du lien en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la cible du lien en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir la sélection en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la sélection en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir les liens sélectionnés en fichier Adobe PDF - res://c:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convertir les liens sélectionnés en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 3.79\MediaManager\grab.html
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar	oolbar.dll
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar	oolbar.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Version Cue CS2 - Adobe Systems Incorporated - c:\Program Files\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe
O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Alpha Networks Inc. - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: lxcr_device -   - C:\WINDOWS\system32\lxcrcoms.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: MySqlInventime - Unknown owner - c:\mysql\bin\mysqld-max-nt.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation  - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: SmartLinkService (SLService) -   - C:\WINDOWS\SYSTEM32\slserv.exe

philae83 · Answer

J'ai oublié le principal

as tu ré essayé d'installer un antivirus ?

Demoizelle en détresse · Answer

a non vais réessayer !!!

Pour le mode sans échec sa n'est toujours pas possible !!

Demoizelle en détresse · Answer

aparement antivir sinstalle, la il télécharge les mise a jour!!!

pas contre mon acces wifi n'est toujours pas rétabli... :'(

philae83 · Answer

on progresse

pourrais tu repasser elibagla stp

et

    *  Télécharge  clean.zip  de Malekal (merci Malekal).
      http://www.malekal.com/download/clean.zip
    * Dézippe-le sur le bureau.
    * Ouvre le dossier jaune nommé clean sur ton bureau.
    * Double-clique sur clean.cmd
    * Choisis l'option 1  et copie sur le bureau le rapport généré. Il doit normalement aussi se trouver là : c:\rapport_clean.txt
    * Clique sur Q pour quitter le programme.

    * Redémarre en mode sans échec. Pour cela : au démarrage du PC, tapote sur F8 (ou F5). Ton PC démarre, mais sans accès à Internet. fait le en mode normal puisque tu n'as pas accès au MSE
    * Ouvre le dossier jaune nommé clean  sur ton bureau.
    * Double-clique sur clean.cmd
    * Choisis l'option 2 et copie sur le bureau le rapport généré.
    * Si une fenêtre s'ouvre, laisse-la.
    * Clique sur Q pour quitter le programme.
    
--------------------

Demoizelle en détresse · Answer

Option 1 du clean :

09/09/2007 a 21:59:49,89 
 
*** Recherche des fichiers dans C: 
 
*** Recherche des fichiers dans C:\WINDOWS\ 
 
*** Recherche des fichiers dans C:\WINDOWS\system32 
"C:\WINDOWS\Downloaded Program Files\CONFLICT.1" FOUND 
 
*** Recherche des fichiers dans C:\Program Files 
"C:\Program Files\Adverts\" FOUND 
"C:\Program Files\Multi_Media_France\" FOUND 
"C:\Program Files\Viewpoint\" FOUND 
*** Fin du rapport !

Demoizelle en détresse · Answer

Option 2 :

Rapport clean par Malekal_morte - http://www.malekal.com 
Script execute en mode sans echec 09/09/2007 a 22:04:56,37 

Microsoft Windows XP [version 5.1.2600]
 
*** Suppression des fichiers dans C: 
 
*** Suppression des fichiers dans C:\WINDOWS\ 
 
*** Suppression des fichiers dans C:\WINDOWS\system32 
tentative de suppression de "C:\WINDOWS\Downloaded Program Files\CONFLICT.1" 
 
*** Suppression des fichiers dans C:\Program Files 
tentative de suppression de "C:\Program Files\Adverts\" 
tentative de suppression de "C:\Program Files\Multi_Media_France\" 
tentative de suppression de "C:\Program Files\Viewpoint\" 
 
*** Suppression des clefs du registre effectuee.. 
*** Fin du rapport !

Demoizelle en détresse · Answer

Elibagle :


	  Fri Sep 07 23:09:51 2007
EliBagle v10.51  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Acción Directa):
Por favor, envienos una muestra del fichero
C:\Muestras\HIDR.EXE.Muestra EliBagle v10.51
 a "virus@satinfo.es".  Gracias.
C:\WINDOWS\SYSTEM32\DRIVERS\HIDR.EXE --> Eliminado Bagle

	  Fri Sep 07 23:11:17 2007
EliBagle v10.51  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Exploración):
Explorando Unidad C:\

	  Fri Sep 07 23:19:12 2007
EliBagle v10.51  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Exploración):
Explorando Unidad C:\

	  Fri Sep 07 23:21:00 2007
EliBagle v10.51  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Exploración):
Explorando Unidad C:\

	  Fri Sep 07 23:23:00 2007
EliBagle v10.51  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Acción Directa):

	  Fri Sep 07 23:23:02 2007
EliBagle v10.51  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Exploración):
Explorando Unidad C:\

	  Sun Sep 09 15:28:06 2007
EliBagle v10.51  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Acción Directa):

	  Sun Sep 09 15:28:07 2007
EliBagle v10.51  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Exploración):
Explorando Unidad C:\

	  Sun Sep 09 15:39:20 2007
EliBagle v10.51  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Acción Directa):

	  Sun Sep 09 15:39:21 2007
EliBagle v10.51  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Exploración):
Explorando Unidad C:\

	  Sun Sep 09 21:54:23 2007
EliBagle v10.51  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Acción Directa):

	  Sun Sep 09 21:54:25 2007
EliBagle v10.51  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Exploración):
Explorando Unidad C:\

philae83 · Answer

bon on reprend 

supprime tout ce que je t'ai fait télécharger pour faire du ménage. 

ENsuite refait un scan bitdefender et poste le rapport stp

Demoizelle en détresse · Answer

ok

Demoizelle en détresse · Answer

voila le rapport de bit defender :

BitDefender Online Scanner
  
  
 
Rapport d'analyse généré à: Mon, Sep 10, 2007 - 02:59:37
 
 
  
  
 
Voie d'analyse: C:\;D:\;
  
  
 
 
  
  
 
Statistiques
 
Temps
 02:06:28
 
Fichiers
 382589
 
Directoires
 9947
 
Secteurs de boot
 3
 
Archives
 8530
 
Paquets programmes
 14401
 
  
  
 
Résultats
 
Virus identifiés
 0
 
Fichiers infectés
 0
 
Fichiers suspects
 0
 
Avertissements
 0
 
Désinfectés
 0
 
Fichiers effacés
 0
 
  
  
 
Info sur les moteurs
 
Définition virus
 800271
 
Version des moteurs
 AVCORE v1.0 (build 2411) (i386) (Jul 9 2007 12:10:22)
 
Analyse des plugins
 14
 
Archive des plugins
 38
 
Unpack des plugins
 7
 
E-mail plugins
 6
 
Système plugins
 1
 
  
  
 
Paramètres d'analyse
 
Première action
 Désinfecté
 
Seconde Action
 Supprimé
 
Heuristique
 Oui
 
Acceptez les avertissements
 Oui
 
Extensions analysées
 *;
 
Excludez les extensions
  
 
Analyse d'emails
 Oui
 
Analyse des Archives
 Oui
 
Analyser paquets programmes
 Oui
 
Analyse des fichiers
 Oui
 
Analyse de boot
 Oui
 
  
  
 
  Fichier analysé
  Statut
 
Aucun virus trouvé.
  
 
  
 
 
  
  
 
 
  
 Je croi bien kil na rien trouvé...

Demoizelle en détresse · Answer

Excusez moi, es ce que c fini?? 

J'ai pu installer un antivirus mé je ne peux toujours pas démarer en mode sans échec et mon wifi ne marche toujours pa... 

Merci pour tout en tt k je sui plus serreine depui q g un antivirus!!!

philae83 · Answer

bonjour,

normalement tout devrait bien aller, sauf que......il y a encore 2 choses à résoudre, j'avoue que je sèche un peu, mais je vais me faire aider, t'inquiète pas on devrait y arriver

je te tiens au courant dès que possible

Demoizelle en détresse · Answer

ok merci beaucoup c'est vraiment super sympa de ta part !!! Tu as sauvé mon PC !!! Thanks

philae83 · Answer

bonsoir,

2 choses :
pour le wifi, je n'ai pas d'info pour l'intant, mais peut être pourrais tu essayer de désinstaller et réinstaller.

quant au Mode sans échec, visiblement tu y as accès puisque tu a réussi à faire le scan de CLEAN.ZIP en MSE

Rapport clean par Malekal_morte - http://www.malekal.com
Script execute en mode sans echec 09/09/2007 a 22:04:56,37 

alors là je ne comprends plus. 
à te lire

Demoizelle en détresse · Answer

non non le scan de clean.zip je lai fé en mode normal mon mode sans échec ne démarre pas!

philae83 · Answer

OK, je pensais qu'il aurait pu y avoir une confusion. 

merci pour la précision

philae83 · Answer

autre précision tu dis ne pas avoir accès donc au MSE, quel message as tu stp ? je n'ai pas modifié le canned ci dessous, mais fait le en mode normal évidemment puisque tu ne peux le faire autrement ensuite Étape 1: Télécharge eScan Antivirus Toolkit : http://www.spywareinfo.dk/download/mwav.exe Sauvegarde-le sur ton Bureau. Avant de lancer le programme, il faut le mettre à jour tel qu'indiqué à l'étape 2. Étape 2 : Voici comment mettre l'outil à jour : 1.) Double-clique le fichier mwav.exe qui se trouve sur le Bureau ; dézippe les fichiers dans le nouveau dossier suggéré (C:\Kaspersky). Le programme va se lancer, et tu dois le quitter (clique sur "Exit" puis "Exit"). 2.) Double-clique sur le Poste de travail, puis double-clique sur le lecteur principal (habituellement C:\), double-clique sur le dossier Kaspersky ; ensuite, double-clique sur le fichier kavupd.exe . Tu verras maintenant une fenêtre DOS apparaître, et la mise à jour se complètera en quelques minutes. 3.) Lorsque la mise à jour sera complétée, tu verras "Press any key to continue" ; tape sur une clé pour continuer. Deux nouveaux répertoires (dossiers) ont été créés lors de la mise à jour (C:\Bases et C:\Downloads). 4.) Sélectionne/copie tous les fichiers présents dans le dossier C:\ Downloads , puis colle-les dans le dossier C:\ Kaspersky . Accepte à l'invite de remplacer les fichiers existants. Ne pas lancer le scan tout de suite ! Étape 3: Redémarre en mode Sans Échec : 1) Redémarre ton ordi 2) Tapote la touche F8 immédiatement, juste après le "Bip" 3) Tu verras un écran avec options de démarrage apparaître 4) Choisi la première option : Sans Échec, et valide avec "Entrée" " 5) Choisi ton compte régulier, et non Administrateur Étape 4: Du mode Sans Échec, voici comment utiliser le programme : 1.) Pour lancer "eScan Antivirus Toolkit", trouve le fichier mwavscan.com situé dans le dossier C:\ Kaspersky 2.) Double-clique sur mwavscan.com ; l'interface d'eScan va apparaître à l'écran. 3.) Il est très important de bien cocher ces boîtes sous Scan Option : Memory, Registry, Startup Folders, System Folders, Services. 4.) Coche la boîte Drive, ce qui donne accès à une nouvelle boîte Drive (bouton rond) juste dessous ; coche ce bouton "Drive" (très important..), et tu verras une nouvelle boîte de navigation apparaître à la droite. Clique sur la petite flèche de cette boîte and choisi la lettre de ton disque dur, habituellement C:\. 5.) Juste au-dessous, assure-toi que Scan All Files est coché, et non Program Files. 6.) Clique sur Scan Clean et laisse le tool vérifier tout le disque dur (ça peut être long..). Lorsque terminé, tu verras Scan Completed . Ne pas quitter tout de suite ! 7.) Ouvre un nouveau fichier Bloc notes (clique sur "Démarrer" >> "Programmes" >>"Accessoires" >> "Bloc notes"), puis copie/colle tout le contenu de la fenêtre Virus Log Information (la deuxième, au bas) dans le fichier texte, et sauvegarde le. eScan génère également un rapport complet dans le dossier C:\ Kaspersky (nommé mwav.log), mais il est trop lourd pour poster sur le forum. Ferme le programme. Redémarre ton PC en mode Normal. Poste (copie/colle) le rapport que tu as sauvegardé dans ta prochaine réponse.

Demoizelle en détresse · Answer

Je nai pas le temps de lire le message sa redémarre tro vite dsl...

Demoizelle en détresse · Answer

Je n'arive a démarer en mse, es ce que je peux lancer le scan en mode normal????

philae83 · Answer

oui ,
je suis désolée, j'ai pas modifié le canned

Demoizelle en détresse · Answer

c'est en train de scanner merci beaucoup!

philae83 · Answer

ok

Demoizelle en détresse · Answer

Le rapport sauvegardé :

File C:\pointsoft\10000jeux\Solitaire\Pokemon_Solitaire_3D_Game\pokesol.exe infected by "Trojan.Win32.StartPage.oz" Virus. Action Taken: File to be deleted on reboot.


Le log mwav :

Mon Sep 10 22:55:53 2007 => **********************************************************
Mon Sep 10 22:55:53 2007 => eScan AntiVirus Toolkit Utility.
Mon Sep 10 22:55:53 2007 => Copyright © 2003-2004,  MicroWorld Technologies Inc.
Mon Sep 10 22:55:53 2007 => **********************************************************
Mon Sep 10 22:55:53 2007 => Version 4.4.7
Mon Sep 10 22:55:53 2007 => Log File: C:\KASPER~1\mwav.log
Mon Sep 10 22:55:53 2007 => Latest Date of files inside MWAV: 04 Sep 2007  00:11:30.
Mon Sep 10 22:55:57 2007 => AV Library Loaded...
Mon Sep 10 22:55:57 2007 => Scanning File C:\KASPER~1\kavss.exe
Mon Sep 10 22:55:57 2007 => Scanning File C:\KASPER~1\Getvlist.exe
Mon Sep 10 22:55:57 2007 => Scanning File C:\KASPER~1\kavss.dll
Mon Sep 10 22:55:57 2007 => Scanning File C:\KASPER~1\kavssdi.dll
Mon Sep 10 22:55:57 2007 => Scanning File C:\KASPER~1\kavssi.dll
Mon Sep 10 22:55:57 2007 => Scanning File C:\KASPER~1\kavvlg.dll
Mon Sep 10 22:55:57 2007 => Scanning File C:\KASPER~1\msvlclnt.dll
Mon Sep 10 22:55:57 2007 => Scanning File C:\KASPER~1\ipc.dll
Mon Sep 10 22:55:57 2007 => Scanning File C:\KASPER~1\main.avi
Mon Sep 10 22:55:57 2007 => Scanning File C:\KASPER~1\virus.avi
Mon Sep 10 22:55:57 2007 => Virus Database Date: 2007/09/04
Mon Sep 10 22:55:57 2007 => Virus Database Count: 403200
Mon Sep 10 22:56:00 2007 => AV Library Unloaded (3)...

philae83 · Answer

bonjour,

je ne pense pas que le rapport soit complet...???

pourrais tu stp me refaire un scan avec blacklight.

Demoizelle en détresse · Answer

Bonjour, si je pense que le rapport était bien complet du moins il n'y avait qu'une ligne.

Voila le scan de blacklight je croi qu'il n'a rien trouvé :

09/11/07 14:48:36 [Info]: BlackLight Engine 1.0.64 initialized
09/11/07 14:48:36 [Info]: OS: 5.1 build 2600 (Service Pack 2)
09/11/07 14:48:37 [Note]: 7019 4
09/11/07 14:48:37 [Note]: 7005 0
09/11/07 15:06:17 [Note]: 7006 0
09/11/07 15:06:17 [Note]: 7011 2044
09/11/07 15:06:17 [Note]: 7026 0
09/11/07 15:06:18 [Note]: 7026 0
09/11/07 15:06:22 [Note]: FSRAW library version 1.7.1022
09/11/07 15:22:44 [Note]: 7007 0

papyber · Answer

bonjour philae83
voudrais tu venir jeter un oeil ici, et me dire si je me suis trompé quelque part et donner si possible ton avis sur cette désinfection, stp, merci
virus cheval de troie analyse de hijackthis#dernier
j'ai un soucis
merci d'avance
demoizelle en detresse excuse moi d'intervenir sur ce topic

tribun · Answer

bonsoir

un lien , puisque tu pense être infecté par BAGLE
un essai ne côute rien , un de plus

télécharge le fichier





http://www.sophos.fr/support/disinfection/baglea.html

papyber · Answer

escan ne se passe pas en MSE? il n'a plus le MSE!

tribun · Answer

et vois celui là aussi !!!!!!!



http://www.inoculer.com/antivirus.php3

Demoizelle en détresse · Answer

Oui le raport escan était en entier... Et non je ne croi pas que nous ayons essayer bootsafe...

Que doit je faire avec ce fichier http://www.malekal.com/download/SafeBoot.reg  je l'ai executer mé que doit je en faire???

Merci pour tout.

philae83 · Answer

re

désolée, j'ai oublié en route un morceau



Fais un clic droit ici
http://www.malekal.com/download/SafeBoot.reg 
et choisis " enregistrer la cible sous" afin de télécharger SafeBoot.reg sur ton bureau.
Double clique dessus et accepte la fusion avec le registre.

Demoizelle en détresse · Answer

c'est bien se que j'ai fait, que dois je faire à présent??

philae83 · Answer

regarder si le MSE fonctionne ou non

par contre j'ai un doute sur la version d'elibagla que tu as.

SUpprime le
et reprend le ici
en bas de cette page
http://www.zonavirus.com/datos/descargas/95/elibagla.asp

ce devrait être la version  10.51

relance le 
 Patiente le temps du scan.
Lorsqu'il a terminé, poste le contenu du fichier infoSat.txt qui se trouve dans Poste de travail > Disque C:\

Demoizelle en détresse · Answer

sa y est je suis arrivé à démarrer en mode sans échec ouf !! Merci !!! 

Voila le fichier info Sat : 

  Fri Sep 07 23:09:51 2007
EliBagle v10.51  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Acción Directa):
Por favor, envienos una muestra del fichero
C:\Muestras\HIDR.EXE.Muestra EliBagle v10.51
 a "virus@satinfo.es".  Gracias.
C:\WINDOWS\SYSTEM32\DRIVERS\HIDR.EXE --> Eliminado Bagle

	  Fri Sep 07 23:11:17 2007
EliBagle v10.51  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Exploración):
Explorando Unidad C:\

	  Fri Sep 07 23:19:12 2007
EliBagle v10.51  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Exploración):
Explorando Unidad C:\

	  Fri Sep 07 23:21:00 2007
EliBagle v10.51  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Exploración):
Explorando Unidad C:\

	  Fri Sep 07 23:23:00 2007
EliBagle v10.51  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Acción Directa):

	  Fri Sep 07 23:23:02 2007
EliBagle v10.51  (c)2007 S.G.H. / Satinfo S.L.
----------------------------------------------
Lista de Acciones (por Exploración):
Explorando Unidad C:\

philae83 · Answer

bon, voilà une bonne nouvelle

tu avais elibagla dans ton pc, ou tu l'avais téléchargé quand je te l'ai demandé ca m'intéresserait de le savoir.

Peut être viennent ils de le mettre à jour mais je ne savais pas quelle était la dernière version et pas penser à regarder non +

donc normalement tout est réglé pour ton pc ?

Demoizelle en détresse · Answer

oui c'était bien la 10.51 q j'avais ! Oui tout est réglé hoormis le wifi qui ne marche pas mais je peux me brancher donc sa n'est pas bien grave !!! En tout cas merci infiniment tu es géniale!!

philae83 · Answer

ok, ils ont du faire une mise à jour certainement, cela ne s'est pas décoincé tout seul enfin le principal étant que tout soit rentré dans l'ordre par contre pour ton wifi, n'y connaissant strictement rien, je serais incapable de t'aider, essaye de poster dans le forum adéquat, tu auras peut être de l'aide maintenant il faut faire du ménage quand même supprime tout ce dont on a eu besoin de ton pc * démarrer-----------panneau de configuration------------système---------- onglet Restauration système-----------coche la case (Désactiver la restauration système)-------------- redémarre l'ordinateur réactive la ensuite * Pour améliorer la sécurité de ton PC prend quelques instants pour lire CECI * Dénonce ton infection pour faire condamner les auteurs. Crée un message pour faire avancer les choses sur Malware-Complaints, nous devons être les plus nombreux possibles, alors rends compte de ton infection : - Voir les règles du forum : https://malwarecomplaints.info/ - Après t'être enregistré à l'aide du bouton en haut se nommant "Register" Si tu as plus de 13 ans, choisir : "I Agree to these terms and am over or exactly 13 years of age" Si tu as moins, clique sur : "I Agree to these terms and am under 13 years of age" Tu as alors sous forme de liste un sujet par type d'infection (Look2Me, Smitfraud, SpywareQuake etc..). La tienne = ****** ---> https://malwarecomplaints.info/ Si le malware que tu as eu n'apparaît pas dans la liste, ou si tu ne sais pas par quoi tu étais infecté(e), crée un message dans le sujet Autres infections conforme au règle du forum (age, ville, département etc..) Indique aussi le nom du Forum qui t'a aidé, CommentCaMarche et je te souhaite bonne semaine

Demoizelle en détresse · Answer

ok jferai tout sa! Merci encore! Pourrais tu me conseiller un pare feu car j'ai l'impression que le parefeu windows n'est pas terrible ??? Bon semaine a toi aussi!

philae83 · Answer

bonjour,

le parefeu de windows n'est certes pas terrible

dans le lien que je t'ai donné plus haut, tu trouveras des firewall et des liens + tutos 

bonne continuation

Infection bagle besoin d'aide svp........ :'(

61 réponses

Discussions similaires