Log Hijackthis: aide svp

Bonjour,

Ces derniers jours, mon ordinateur présentait des temps d'accès anormalement longs aux pages internet, bien que je dispose d'une connexion ADSL. Soupçonnant un problème avec IE (j'ai essayé Firefox, mais je ne parviens pas à m'y habituer, hélas), j'ai appliqué la méthode préliminaire de désinfection proposée dans les "astuces" de ce site.

Voici, dans l'ordre, les résultats des analyses:

---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

+ Créé à: 17:11:07 17/11/2007

+ Résultat de l'analyse:



C:\System Volume Information\_restore{5864E199-E068-480D-BF55-3BCEB0D80CFD}\RP842\A0078326.dll -> Hijacker.Agent.hz : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{5864E199-E068-480D-BF55-3BCEB0D80CFD}\RP921\A0087432.exe -> Hijacker.Small.kj : Nettoyé et sauvegardé (mise en quarantaine).
C:\System Volume Information\_restore{5864E199-E068-480D-BF55-3BCEB0D80CFD}\RP921\A0087434.exe -> Hijacker.Small.kj : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\willy\Cookies\willy@microsoftwga.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\willy\Cookies\willy@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\willy\Cookies\willy@axa.addcontrol[1].txt -> TrackingCookie.Addcontrol : Nettoyé.
C:\Documents and Settings\willy\Cookies\willy@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\willy\Cookies\willy@bluestreak[2].txt -> TrackingCookie.Bluestreak : Nettoyé.
C:\Documents and Settings\willy\Cookies\willy@doubleclick[2].txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\willy\Cookies\willy@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
C:\Documents and Settings\willy\Cookies\willy@www.etracker[1].txt -> TrackingCookie.Etracker : Nettoyé.
C:\Documents and Settings\willy\Cookies\willy@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyé.
C:\Documents and Settings\willy\Cookies\willy@ads-205.quarterserver[1].txt -> TrackingCookie.Quarterserver : Nettoyé.
C:\Documents and Settings\willy\Cookies\willy@bs.serving-sys[2].txt -> TrackingCookie.Serving-sys : Nettoyé.
C:\Documents and Settings\willy\Cookies\willy@serving-sys[2].txt -> TrackingCookie.Serving-sys : Nettoyé.
C:\Documents and Settings\willy\Cookies\willy@weborama[1].txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\willy\Cookies\willy@m.webtrends[1].txt -> TrackingCookie.Webtrends : Nettoyé.


Fin du rapport

BitDefender Online Scanner



Scan report generated at: Mon, Nov 19, 2007 - 18:50:22





Scan path: C:\;D:\;E:\;F:\;G:\;H:\;I:\;J:\;K:\;







Statistics

Time
01:52:32

Files
379591

Folders
9092

Boot Sectors
3

Archives
24938

Packed Files
20384




Results

Identified Viruses
1

Infected Files
1

Suspect Files
0

Warnings
0

Disinfected
0

Deleted Files
1




Engines Info

Virus Definitions
878270

Engine build
AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)

Scan plugins
14

Archive plugins
38

Unpack plugins
7

E-mail plugins
6

System plugins
1




Scan Settings

First Action
Disinfect

Second Action
Delete

Heuristics
Yes

Enable Warnings
Yes

Scanned Extensions
*;

Exclude Extensions


Scan Emails
Yes

Scan Archives
Yes

Scan Packed
Yes

Scan Files
Yes

Scan Boot
Yes




Scanned File
Status

C:\System Volume Information\_restore{5864E199-E068-480D-BF55-3BCEB0D80CFD}\RP921\A0089077.dll
Infected with: Trojan.Clicker.MMX

C:\System Volume Information\_restore{5864E199-E068-480D-BF55-3BCEB0D80CFD}\RP921\A0089077.dll
Disinfection failed

C:\System Volume Information\_restore{5864E199-E068-480D-BF55-3BCEB0D80CFD}\RP921\A0089077.dll
Deleted


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:23:10, on 19/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
C:\Program Files\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe
c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\system32\hphmon06.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\ALCWZRD.EXE
C:\WINDOWS\ALCMTR.EXE
C:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\NotifyPhoneBook.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Micro Application\Cloneur Expert\TrueImageMonitor.exe
C:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe
C:\WINDOWS\system32\ps2.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Adobe\Photoshop Elements 5.0\apdproxy.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Brother\ControlCenter3\brccMCtl.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Logitech\SetPoint\KEM.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Java\jre1.5.0_08\bin\jucheck.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.be/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\HP\Digital Imaging\bin\HPDTLK02.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_08\bin\jusched.exe"
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HPHUPD06] c:\Program Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374D}\hphupd06.exe
O4 - HKLM\..\Run: [HPHmon06] C:\WINDOWS\system32\hphmon06.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [LSBWatcher] c:\hp\drivers\hplsbwatcher\lsburnwatcher.exe
O4 - HKLM\..\Run: [AME_CSA] rundll32 csa.cpl,RUN_DLL
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Cloneur Expert Monitor] "C:\Program Files\Micro Application\Cloneur Expert\TrueImageMonitor.exe"
O4 - HKLM\..\Run: [Acronis Scheduler2 Service] "C:\Program Files\Fichiers communs\Acronis\Schedule2\schedhlp.exe"
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [UVS10 Preload] C:\Program Files\Ulead Systems\Ulead VideoStudio 10\uvPL.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Elements 5.0\apdproxy.exe"
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [PaperPort PTD] C:\Program Files\ScanSoft\PaperPort\pptd40nt.exe
O4 - HKLM\..\Run: [IndexSearch] C:\Program Files\ScanSoft\PaperPort\IndexSearch.exe
O4 - HKLM\..\Run: [BrMfcWnd] C:\Program Files\Brother\Brmfcmon\BrMfcWnd.exe /AUTORUN
O4 - HKLM\..\Run: [SetDefPrt] C:\Program Files\Brother\Brmfl06a\BrStDvPt.exe
O4 - HKLM\..\Run: [ControlCenter3] C:\Program Files\Brother\ControlCenter3\brctrcen.exe /autorun
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - Startup: RegFreeze.lnk = C:\Program Files\RegFreeze\regfreeze.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_08\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone: https://www.01net.com/
O15 - Trusted Zone: http://www.lipsticksex.net
O15 - Trusted Zone: http://ww5.steelmoon.be
O15 - Trusted Zone: https://www.forums.supertoinette.com/
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://christinedresseuse.spaces.live.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{F0553136-6A32-4063-8B15-9CED01D5064B}: NameServer = 195.238.2.22 195.238.2.21
O18 - Protocol: bw+0 - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bw+0s - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bw-0 - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bw-0s - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bw00 - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bw00s - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bw10 - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bw10s - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bw20 - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bw20s - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bw30 - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bw30s - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bw40 - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bw40s - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bw50 - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bw50s - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bw60 - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bw60s - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bw70 - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bw70s - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bw80 - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bw80s - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bw90 - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bw90s - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwa0 - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwa0s - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwb0 - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwb0s - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwc0 - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwc0s - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwd0 - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwd0s - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwe0 - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwe0s - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwf0 - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwf0s - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwg0 - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwg0s - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwh0 - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwh0s - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwi0 - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwi0s - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwj0 - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwj0s - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwk0 - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwk0s - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwl0 - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwl0s - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwm0 - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwm0s - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwn0 - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwn0s - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwo0 - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwo0s - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwp0 - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwp0s - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwq0 - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwq0s - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwr0 - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwr0s - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bws0 - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bws0s - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwt0 - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwt0s - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwu0 - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwu0s - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwv0 - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwv0s - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bww0 - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bww0s - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwx0 - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwx0s - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwy0 - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwy0s - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwz0 - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: bwz0s - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O18 - Protocol: offline-8876480 - {C61B0872-D2D9-429C-9B8A-006344609D1D} - (no file)
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
O23 - Service: Adobe Active File Monitor V5 (AdobeActiveFileMonitor5.0) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 5.0\PhotoshopElementsFileAgent.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Unknown owner - c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe