Cheval de Troie... Aidez-moi s.v.p!!

Bonjour, dernièrement, j'ai attraper un virus et je ne suis pas capable de le retirer. J'ai tout fait les indications qui sont demandés pour retirer un virus et je vous envoi les rapports finaux. Merci d'avance si vous pouvez m'aider.

Scan avec CCleaner

---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

+ Créé à: 21:31:09 2007-11-25

+ Résultat de l'analyse:

C:\Documents and Settings\Simon\Cookies\simon@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.31:C:\Documents and Settings\Simon\Application Data\Mozilla\Firefox\Profiles\9fajdbj3.default\cookies.txt -> TrackingCookie.Advertising : Aucune action entreprise.
:mozilla.32:C:\Documents and Settings\Simon\Application Data\Mozilla\Firefox\Profiles\9fajdbj3.default\cookies.txt -> TrackingCookie.Advertising : Aucune action entreprise.
:mozilla.35:C:\Documents and Settings\Simon\Application Data\Mozilla\Firefox\Profiles\9fajdbj3.default\cookies.txt -> TrackingCookie.Atdmt : Aucune action entreprise.
C:\Documents and Settings\Simon\Cookies\simon@atdmt[2].txt -> TrackingCookie.Atdmt : Aucune action entreprise.
:mozilla.8:C:\Documents and Settings\Simon\Application Data\Mozilla\Firefox\Profiles\9fajdbj3.default\cookies.txt -> TrackingCookie.Doubleclick : Aucune action entreprise.
:mozilla.19:C:\Documents and Settings\Simon\Application Data\Mozilla\Firefox\Profiles\9fajdbj3.default\cookies.txt -> TrackingCookie.Estat : Aucune action entreprise.
C:\Documents and Settings\Simon\Cookies\simon@estat[1].txt -> TrackingCookie.Estat : Aucune action entreprise.
:mozilla.20:C:\Documents and Settings\Simon\Application Data\Mozilla\Firefox\Profiles\9fajdbj3.default\cookies.txt -> TrackingCookie.Overture : Aucune action entreprise.
C:\Documents and Settings\Simon\Cookies\simon@overture[1].txt -> TrackingCookie.Overture : Aucune action entreprise.

Fin du rapport

Rapport avec BitDefender

BitDefender Online Scanner

Scan report generated at: Sun, Nov 25, 2007 - 22:39:11

Scan path: C:\;D:\;F:\;

Statistics

Time
01:01:25

Files
278965

Folders
4560

Boot Sectors
4

Archives
7433

Packed Files
11089

Results

Identified Viruses
1

Infected Files
4

Suspect Files
0

Warnings
0

Disinfected
0

Deleted Files
4

Engines Info

Virus Definitions
878835

Engine build
AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)

Scan plugins
14

Archive plugins
38

Unpack plugins
7

E-mail plugins
6

System plugins
1

Scan Settings

First Action
Disinfect

Second Action
Delete

Heuristics
Yes

Enable Warnings
Yes

Scanned Extensions
*;

Exclude Extensions

Scan Emails
Yes

Scan Archives
Yes

Scan Packed
Yes

Scan Files
Yes

Scan Boot
Yes

Scanned File
Status

C:\Documents and Settings\Simon\Local Settings\Temp\HIBHBUJCGCOBL
Infected with: Trojan.Fakealert.OZ

C:\Documents and Settings\Simon\Local Settings\Temp\HIBHBUJCGCOBL
Disinfection failed

C:\Documents and Settings\Simon\Local Settings\Temp\HIBHBUJCGCOBL
Deleted

C:\Documents and Settings\Simon\Local Settings\Temp\UJMOCONHUNLJH
Infected with: Trojan.Fakealert.OZ

C:\Documents and Settings\Simon\Local Settings\Temp\UJMOCONHUNLJH
Disinfection failed

C:\Documents and Settings\Simon\Local Settings\Temp\UJMOCONHUNLJH
Deleted

C:\Documents and Settings\Simon\Local Settings\Temporary Internet Files\Content.IE5\YKPQLVME\pic[1].htm
Infected with: Trojan.Fakealert.OZ

C:\Documents and Settings\Simon\Local Settings\Temporary Internet Files\Content.IE5\YKPQLVME\pic[1].htm
Disinfection failed

C:\Documents and Settings\Simon\Local Settings\Temporary Internet Files\Content.IE5\YKPQLVME\pic[1].htm
Deleted

C:\Documents and Settings\Simon\Local Settings\Temporary Internet Files\Content.IE5\XSKVSXQX\pic[1].htm
Infected with: Trojan.Fakealert.OZ

C:\Documents and Settings\Simon\Local Settings\Temporary Internet Files\Content.IE5\XSKVSXQX\pic[1].htm
Disinfection failed

C:\Documents and Settings\Simon\Local Settings\Temporary Internet Files\Content.IE5\XSKVSXQX\pic[1].htm
Deleted

Rapport Hijackthis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:16:36, on 2007-11-26
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\System32\ibmpmsvc.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\Explorer.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINNT\System32\Ati2evxx.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINNT\system32\tp4serv.exe
C:\Program Files\NavNT\defwatch.exe
C:\PROGRA~1\ThinkPad\UTILIT~1\tphkmgr.exe
C:\WINNT\System32\Fast.exe
C:\WINNT\System32\taskswitch.exe
C:\Program Files\NavNT\rtvscan.exe
C:\WINNT\system32\RunDll32.exe
C:\WINNT\AGRSMMSG.exe
C:\Program Files\ThinkPad\Utilities\TpKmapMn.exe
C:\WINNT\system32\dla\tfswctrl.exe
C:\Program Files\VERITAS Software\Update Manager\sgtray.exe
C:\Program Files\NavNT\vptray.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINNT\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINNT\system32\MsgSys.EXE
C:\Program Files\iPod\bin\iPodService.exe
C:\WINNT\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?redirfallthru=http%3a%2f%2fsympatico.msn.ca%2fdefaultf.aspx%3f
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?redirfallthru=http%3a%2f%2fsympatico.msn.ca%2fdefaultf.aspx%3f
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?redirfallthru=http%3a%2f%2fsympatico.msn.ca%2fdefaultf.aspx%3f
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?redirfallthru=http%3a%2f%2fsympatico.msn.ca%2fdefaultf.aspx%3f
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = webcache:8080
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = ourcolgate;mysap.esc.win.colpal.com;*.esc.win.colpal.com;*.win.colpal.com;ourcolgate*;<local>
O1 - Hosts: 100.10.10.2 pcslip
O1 - Hosts: 167.228.1.102 aauspwya ctla
O1 - Hosts: 167.228.1.125 aauspwy0 ctl # SP2 control workstation
O1 - Hosts: 167.228.1.126 aauspwz0 alt # SP2 alt control station ethernet
O1 - Hosts: 167.228.1.177 dauspwy1 tc590 # Payroll test/dev env
O1 - Hosts: 167.228.1.105 dsuspw80 # Europe db server 4000 8 way
O1 - Hosts: 167.228.1.145 dsuspwl0 # SUN US CPPROD
O1 - Hosts: 167.228.43.106 dsusjf40 # BUS
O1 - Hosts: 167.228.1.112 asuspwb0 # desktop Joe S
O1 - Hosts: 167.228.1.114 asuspwz0 sunalt # sun ultra 1
O1 - Hosts: 167.228.1.115 fleissu1 # desktop
O1 - Hosts: 167.228.1.116 asuspwj0 # desktop Tom Brown
O1 - Hosts: 167.228.1.117 asuspws0 # desktop
O1 - Hosts: 167.228.1.118 asuspwt0 # desktop
O1 - Hosts: 167.228.1.121 dsuspwi0 # 3000 for Lightning
O1 - Hosts: 167.228.1.122 asuspw50 # US app server
O1 - Hosts: 167.228.1.127 asuspwe0 # Europe ETS server
O1 - Hosts: 167.228.1.128 dsuspwf0 # Europe backup db server
O1 - Hosts: 167.228.1.130 drec10 # Disaster Recovery Test System
O1 - Hosts: 167.228.1.131 dsuspwb0 # BW Prod Testing
O1 - Hosts: 167.228.43.182 dausjfc0 # New BUS Server
O1 - Hosts: 167.228.14.62 dauspwa0 # New Prod Server
O1 - Hosts: 167.228.1.132 dsuspwc0 # BW Backup DB server
O1 - Hosts: 167.228.1.133 asuspwh0 # Europe app server
O1 - Hosts: 167.228.1.134 drec00 # Disaster Recovery Test System
O1 - Hosts: 167.228.1.136 dsuspwn0 # GIT PRD server
O1 - Hosts: 167.228.1.138 dsuspwr0 # COP database server
O1 - Hosts: 167.228.43.52 dsuspwj0 # US BW Test/Dev server
O1 - Hosts: 167.228.1.140 u2a5000 # Ultra 2 A-5000 test box
O1 - Hosts: 167.228.1.141 dsuspw30 # TPS Sun 3-way
O1 - Hosts: 167.228.1.142 asuspwrb # Reel backup server
O1 - Hosts: 167.228.1.144 dsuspw00 # Europe Production 6000
O1 - Hosts: 167.228.1.145 dsuspw10 sun12way # US PRD backup db server 6000
O1 - Hosts: 167.228.1.146 dsuspw20 sun20way cp20 # US PRD server 6000
O1 - Hosts: 167.228.1.147 asuspw30 sun6way # US app server 6-way
O1 - Hosts: 167.228.1.148 asuspw40 sun6way1 # US app server 6-way
O1 - Hosts: 167.228.1.149 asuspwy0 sunctl # sun sparc5
O1 - Hosts: 167.228.1.150 asuspwx0 # desktop
O1 - Hosts: 167.228.1.179 dsuspwm0 # metaphor box
O1 - Hosts: 167.228.1.185 gabetest # COT/COD 3000 4 way
O1 - Hosts: 167.228.1.187 dsuspw90 # COP 4000 6 way
O1 - Hosts: 167.228.1.190 dsuspwd0 # SAP 4.6 Integration testing
O1 - Hosts: 167.228.1.191 asbwpwd0 # Global BW app server
O1 - Hosts: 167.228.1.192 asbwpwe0 # Global BW app server
O1 - Hosts: 167.228.144.205 asuspww0 # desktop Wally's machine
O1 - Hosts: 167.228.2.93 greene_a # laptop
O1 - Hosts: 167.228.2.58 asuspwr0 nieradka # desktop
O1 - Hosts: 167.228.2.79 psuspwp0 fjob # desktop F. O'Brien's
O1 - Hosts: 167.228.2.91 beowulf # eagjr NT
O1 - Hosts: 167.228.2.99 weekes_d # Deighton's NT laptop
O1 - Hosts: 167.228.2.101 psuspw10 jsuspw10 # nitin ws/old java server
O1 - Hosts: 167.228.2.102 jsuspw10 netraj1 homerun # netra-j server arthur
O1 - Hosts: 167.228.2.108 pwuspw03 modicant # James Modica NT laptop
O1 - Hosts: 167.228.2.111 psuspwa0 # desktop Deighton
O1 - Hosts: 167.228.2.113 psuspwc0 # desktop George
O1 - Hosts: 167.228.2.116 psuspwj0 # desktop
O1 - Hosts: 167.228.2.117 psuspws0 # desktop
O1 - Hosts: 167.228.2.118 psuspwt0 # desktop
O1 - Hosts: 167.228.2.123 psuspwu0 Archie # desktop
O1 - Hosts: 167.228.2.124 rogisun psuspwv0 # desktop
O1 - Hosts: 167.228.2.126 jauspw30 javaws2 # java ws 2
O1 - Hosts: 167.228.2.130 automond # desktop
O1 - Hosts: 167.228.2.134 psuspww0 # desktop
O1 - Hosts: 167.228.2.140 psuspwm0 modicadt # desktop Modica
O1 - Hosts: 167.228.2.141 psuspwn0 # desktop Gabe
O1 - Hosts: 167.228.2.142 furai_g # PC Gabe
O1 - Hosts: 167.228.2.143 psuspwd0 Andre # desktop Andre
O1 - Hosts: 167.228.2.144 psuspwe0 # desktop Prod Control Area
O1 - Hosts: 167.228.2.145 psuspwf0 # desktop Brian Klein
O1 - Hosts: 167.228.2.146 psuspwg0 # desktop Prod Control Area
O1 - Hosts: 167.228.2.148 liud # PC Temp for Donna Liu
O1 - Hosts: 167.228.2.149 schiles # PC Temp for Steve Schile
O1 - Hosts: 167.228.2.150 zulianim # PC Maria Zuliani
O1 - Hosts: 167.228.2.163 pwuspw05 # Brian NT Workstation
O1 - Hosts: 167.228.2.200 coronasv # loaner Ultra-60
O1 - Hosts: 167.228.1.41 dcdns1
O1 - Hosts: 167.228.1.42 dcdns2
O1 - Hosts: 192.132.225.18 dcdns3
O1 - Hosts: 167.228.1.87 awuspw70 # Nielson BWT
O1 - Hosts: 167.228.1.97 dwuspw10 # APO Dev server
O1 - Hosts: 167.228.1.154 awuspwb0 # Europricing server/documentum
O1 - Hosts: 167.228.1.159 dwuspw20 lnusabu1 # NT Bur sales orders
O1 - Hosts: 167.228.1.181 dwuspw40 # NT Sandbox
O1 - Hosts: 167.228.1.182 awuspw80 # TAM Admin station NAD
O1 - Hosts: 167.228.1.183 awuspw90 # TAM Admin station NAT
O1 - Hosts: 167.228.2.84 awuspw10 # Primary Domain Controller
O1 - Hosts: 167.228.2.109 awuspw30 # MDI gateway & Nielson BWD
O1 - Hosts: 167.228.2.112 dwuspw60 # APO PRD Livecache server
O1 - Hosts: 167.228.2.119 lnusalt1 # Laptop Lotus Notes mail server
O1 - Hosts: 167.228.2.125 awuspw60 # APO PRD NPP App server
O1 - Hosts: 167.228.2.136 awuspwa0 # TAM Workbench devel
O1 - Hosts: 167.228.2.155 awuspw40 # InfoDB
O1 - Hosts: 167.228.2.172 awuspw50 # Nielsen BWP
O1 - Hosts: 167.228.2.252 dwuspw80 # APO PRD CI and DB server
O1 - Hosts: 192.132.225.20 lnusaisd # smi server nt (in dmz)
O1 - Hosts: 167.228.2.61 LNUSANY1 # NY-PK Lotus Notes mail server
O1 - Hosts: 167.228.2.100 LNUSANAD # Main WEB Server
O1 - Hosts: 167.228.2.100 cp-online # Main WEB Server
O1 - Hosts: 167.228.2.70 ourcolgate # Main WEB Server
O1 - Hosts: 167.228.2.70 ourcolgate.com # Main WEB Server
O1 - Hosts: 167.228.2.147 dwusjf20 # NPS Sandbox APO 2.0A
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Video On-line - {323301C5-CB6B-490C-B59F-E7FAD4D69C93} - C:\WINNT\system32\PowerVideo.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [TrackPointSrv] tp4serv.exe
O4 - HKLM\..\Run: [tourpath] regedit /s c:\winnt\tour.reg
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [TpHotkey] C:\PROGRA~1\ThinkPad\UTILIT~1\tphkmgr.exe
O4 - HKLM\..\Run: [S3Hotkey] s3hotkey.exe
O4 - HKLM\..\Run: [CoolSwitch] C:\WINNT\System32\taskswitch.exe
O4 - HKLM\..\Run: [FastUser] C:\WINNT\System32\fast.exe
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [BMMGAG] RunDll32 C:\PROGRA~1\ThinkPad\UTILIT~1\pwrmonit.dll,StartPwrMonitor
O4 - HKLM\..\Run: [TP4EX] tp4ex.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [TPKMAPMN] C:\Program Files\ThinkPad\Utilities\TpKmapMn.exe
O4 - HKLM\..\Run: [dla] C:\WINNT\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\VERITAS Software\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [vptray] C:\Program Files\NavNT\vptray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINNT\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [^SetupICWDesktop] C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [^SetupICWDesktop] C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [^SetupICWDesktop] C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [^SetupICWDesktop] C:\Program Files\Internet Explorer\Connection Wizard\icwconn1.exe /desktop (User 'Default user')
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINNT\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINNT\bdoscandel.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINNT\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINNT\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\winnt\system32\nwprovau.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O15 - Trusted Zone: http://mysap.esc.win.colpal.com
O15 - Trusted Zone: http://*.ourcolgate
O15 - Trusted Zone: http://*.ourcolgate.com
O15 - Trusted Zone: http://mysap.esc.win.colpal.com (HKLM)
O15 - Trusted Zone: http://*.ourcolgate (HKLM)
O15 - Trusted Zone: http://*.ourcolgate.com (HKLM)
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a224.g.akamai.net/7/224/52/20010620/qtinstall.info.apple.com/qt502/us/win/QuickTimeInstaller.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{5108997A-DFA2-4820-904D-32C95DCE9332}: Domain = win.colpal.com
O17 - HKLM\System\CCS\Services\Tcpip\..\{96C81DF2-A08D-402F-B465-945B50D9E672}: Domain = win.colpal.com
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINNT\System32\Ati2evxx.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: DefWatch - Symantec Corporation - C:\Program Files\NavNT\defwatch.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: IBM PM Service (IBMPMSVC) - Unknown owner - C:\WINNT\System32\ibmpmsvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Norton AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\Program Files\NavNT\rtvscan.exe

--
End of file - 15770 bytes

Configuration: Windows XP
Firefox 2.0.0.9