C:\windows\system32\spads.dll DLLverify
Résolu
Bluetooth007
Messages postés
6
Statut
Membre
-
jlpjlp Messages postés 52399 Statut Contributeur sécurité -
jlpjlp Messages postés 52399 Statut Contributeur sécurité -
Bonjour,
Je suis nouveau sur ce site est j'ai eu le problème suivant :c:\windows\system32\spads.dll DLLverify.
J'ai vue que je n'étais pas le seul avoir eu ce même problème. J'ai fait le rapport avec DiagHelp et HijackThis. Mais pour l'envois
de upload_moi_.tar (fichiers invalide !) ES TCE QUE C'EST IMPORTANT DE L'ENVOYER ? PARCE QUE SA NE VEUX PAS FAIRE L'ENVOIS.
- Windiws XP Familialle SP2
- Athlon 2400 XP + 1gig Ram
- Spy Sweeper à jours
- Norton Internet Securité 2007 à jours
Je vous remerci d'avance de vouloir m'aider parce que moi c'est la première fois que j'utilise ses logiciels et de voir qu'elle sont les marches a suivre pour remédier à ce problème.
Merci pour le support.
___________________Rapport de DiagHelp_____________________________________
DiagHelp version v1.4 - http://www.malekal.com
excute le 18-01-08 à 9:09:30,21
Liste des derniers fichies modifies/crees dans windir\system32 et prefetch
C:\WINDOWS\prefetch\CHCP.COM-18156052.pf -->18-01-08 09:08:52
C:\WINDOWS\prefetch\NOTEPAD.EXE-336351A9.pf -->18-01-08 09:08:24
C:\WINDOWS\prefetch\CMD.EXE-087B4001.pf -->18-01-08 09:05:26
C:\WINDOWS\prefetch\WMIPRVSE.EXE-28F301A9.pf -->18-01-08 09:03:38
C:\WINDOWS\prefetch\WUAUCLT.EXE-399A8E72.pf -->18-01-08 09:03:11
C:\WINDOWS\prefetch\SETUP_WM.EXE-3135CBD6.pf -->18-01-08 09:03:09
C:\WINDOWS\prefetch\LUCALLBACKPROXY.EXE-19ED7806.pf -->18-01-08 09:02:22
C:\WINDOWS\prefetch\AUPDATE.EXE-2253CB60.pf -->18-01-08 09:02:16
C:\WINDOWS\prefetch\LUCOMS~1.EXE-02DB5950.pf -->18-01-08 09:02:12
C:\WINDOWS\prefetch\SSU.EXE-29C481B4.pf -->18-01-08 09:01:37
C:\WINDOWS\System32\drivers\cdralw2k.sys -->11-12-07 17:34:52
C:\WINDOWS\System32\drivers\PxHelp20.sys -->11-12-07 17:34:50
C:\WINDOWS\System32\drivers\cdr4_xp.sys -->11-12-07 17:34:50
C:\WINDOWS\System32\drivers\SYMEVENT.INF -->05-12-07 08:04:06
C:\WINDOWS\System32\drivers\SYMEVENT.CAT -->05-12-07 08:04:06
C:\WINDOWS\System32\drivers\SYMEVENT.SYS -->05-12-07 08:04:05
C:\WINDOWS\System32\drivers\symlcbrd.sys -->03-12-07 15:04:36
C:\WINDOWS\System32\FFASTLOG.TXT -->17-01-08 23:16:46
C:\WINDOWS\System32\wpa.dbl -->17-01-08 23:04:33
C:\WINDOWS\System32\QuickTime.qtp -->13-01-08 21:40:34
C:\WINDOWS\System32\MRT.exe -->02-01-08 13:21:36
C:\WINDOWS\System32\PerfStringBackup.INI -->17-12-07 09:33:13
C:\WINDOWS\System32\perfh00C.dat -->17-12-07 09:33:13
C:\WINDOWS\System32\perfh009.dat -->17-12-07 09:33:13
C:\WINDOWS\System32\perfc00C.dat -->17-12-07 09:33:13
C:\WINDOWS\System32\perfc009.dat -->17-12-07 09:33:13
C:\WINDOWS\System32\settingsbkup.sfm -->15-12-07 22:34:42
C:\WINDOWS\System32\settings.sfm -->15-12-07 22:34:42
C:\WINDOWS\System32\DVCStateBkp-{00000000-00000000-0000000B-00001102-00000002-80271102}.dat -->15-12-07 22:34:42
C:\WINDOWS\System32\DVCState-{00000000-00000000-0000000B-00001102-00000002-80271102}.dat -->15-12-07 22:34:42
C:\WINDOWS\System32\BMXStateBkp-{00000000-00000000-0000000B-00001102-00000002-80271102}.rfx -->15-12-07 22:34:42
C:\WINDOWS\System32\BMXState-{00000000-00000000-0000000B-00001102-00000002-80271102}.rfx -->15-12-07 22:34:42
C:\WINDOWS\System32\BMXCtrlState-{00000000-00000000-0000000B-00001102-00000002-80271102}.rfx -->15-12-07 22:34:42
C:\WINDOWS\System32\BMXBkpCtrlState-{00000000-00000000-0000000B-00001102-00000002-80271102}.rfx -->15-12-07 22:34:42
C:\WINDOWS\System32\FNTCACHE.DAT -->15-12-07 22:11:07
C:\WINDOWS\System32\nsz1E3.dll -->13-12-07 11:10:00
C:\WINDOWS\System32\TZLog.log -->12-12-07 16:39:32
C:\WINDOWS\System32\dsm_fr.qm -->11-12-07 17:35:02
C:\WINDOWS\System32\divxsm.tlb -->11-12-07 17:35:02
C:\WINDOWS\System32\DivXsm.exe -->11-12-07 17:35:02
C:\WINDOWS\System32\qt-dx331.dll -->11-12-07 17:34:56
C:\WINDOWS\System32\pxmas.dll -->11-12-07 17:34:52
C:\WINDOWS\wmsetup.log -->18-01-08 09:04:36
C:\WINDOWS\WindowsUpdate.log -->18-01-08 09:04:36
C:\WINDOWS\wiadebug.log -->18-01-08 08:36:50
C:\WINDOWS\setupapi.log -->17-01-08 23:23:53
C:\WINDOWS\0.log -->17-01-08 23:12:29
C:\WINDOWS\wiaservc.log -->17-01-08 23:12:24
C:\WINDOWS\bootstat.dat -->17-01-08 23:11:26
C:\WINDOWS\ntbtlog.txt -->17-01-08 23:09:58
C:\WINDOWS\SchedLgU.Txt -->17-01-08 23:02:50
C:\WINDOWS\wmsetup10.log -->16-01-08 00:39:55
C:\WINDOWS\offitems.log -->15-01-08 14:21:20
C:\WINDOWS\setupact.log -->13-01-08 19:59:29
C:\WINDOWS\ntdtcsetup.log -->13-01-08 19:59:21
C:\WINDOWS\iis6.log -->13-01-08 19:59:21
C:\WINDOWS\comsetup.log -->13-01-08 19:59:21
winlogon.exe
Verified: Signed
svchost.exe
Verified: Signed
ws2_32.dll
Verified: Signed
user32.dll
Verified: Signed
tcpip.sys
Verified: Signed
ndis.sys
Verified: Signed
null.sys
Verified: Signed
ListDLLs v2.25 - DLL lister for Win9x/NT
Copyright (C) 1997-2004 Mark Russinovich
Sysinternals - www.sysinternals.com
------------------------------------------------------------------------------
explorer.exe pid: 1688
Command line: C:\WINDOWS\Explorer.EXE
Base Size Version Path
0x44080000 0xcf000 7.00.6000.16574 C:\WINDOWS\system32\WININET.dll
0x00400000 0x9000 6.00.5441.0000 C:\WINDOWS\system32\Normaliz.dll
0x43e00000 0x45000 7.00.6000.16574 C:\WINDOWS\system32\iertutil.dll
0x58b50000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\comctl32.dll
0x76f80000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL
0x77000000 0xd4000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll
0x76ac0000 0x11000 3.05.2284.0000 C:\WINDOWS\system32\ATL.DLL
0x44160000 0x127000 7.00.6000.16574 C:\WINDOWS\system32\urlmon.dll
0x442b0000 0x3c000 7.00.6000.16574 C:\WINDOWS\system32\webcheck.dll
0x44360000 0x5cd000 7.00.6000.16574 C:\WINDOWS\system32\IEFRAME.dll
0x7d200000 0x2be000 3.01.4000.4039 C:\WINDOWS\system32\msi.dll
0x164a0000 0x23000 5.02.5721.5145 C:\WINDOWS\system32\WPDShServiceObj.dll
0x10000000 0x11000 4.00.0001.2500 C:\WINDOWS\system32\btncopy.dll
0x01900000 0x91000 6.83.0074.0009 D:\Nokia\Nokia PC Suite 6\PhoneBrowser.dll
0x019d0000 0xa4000 6.83.0092.0011 D:\Nokia\Nokia PC Suite 6\PCSCM.dll
0x7c3c0000 0x7c000 7.10.6030.0000 C:\WINDOWS\system32\MSVCP71.dll
0x7c360000 0x56000 7.10.6030.0000 C:\WINDOWS\system32\MSVCR71.dll
0x019c0000 0xb000 6.83.0047.0001 D:\Nokia\Nokia PC Suite 6\Lang\PhoneBrowser_fre-ca.nlr
0x01b80000 0x87000 6.83.0015.0001 D:\Nokia\Nokia PC Suite 6\Resource\PhoneBrowser_Nokia.ngr
0x109c0000 0x2c000 5.02.5721.5145 C:\WINDOWS\system32\PortableDeviceTypes.dll
0x10930000 0x49000 5.02.5721.5145 C:\WINDOWS\system32\PortableDeviceApi.dll
0x10100000 0xe000 2.40.0849.0000 C:\Program Files\Logitech\SetPoint\lgscroll.dll
0x6f120000 0x8c000 2007.04.0000.0002 C:\Program Files\Fichiers communs\Symantec Shared\NPC\NSCEXT.dll
0x7c120000 0x19000 7.10.3077.0000 C:\WINDOWS\system32\ATL71.DLL
0x6ae80000 0x85000 106.02.0000.0021 C:\Program Files\Fichiers communs\Symantec Shared\ccL60U.dll
0x00db0000 0xf000 D:\WIDCOMM\Logiciel Bluetooth\btkeyind.dll
0x02000000 0x2e000 D:\WinRAR\rarext.dll
0x02b10000 0x4c000 8.00.0000.0000 C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\PDFShell.FRA
0x02b60000 0x7d000 5.05.0007.0103 D:\Webroot\SPYSWE~1\SSCtxMnu.dll
0x74730000 0x3d000 3.525.1117.0000 C:\WINDOWS\system32\ODBC32.dll
0x03c80000 0x18000 3.525.1117.0000 C:\WINDOWS\system32\odbcint.dll
0x6a090000 0x29000 14.02.0000.0029 D:\NORTON~2\NORTON~1\NavShExt.dll
0x6b790000 0x1f000 106.02.0000.0021 C:\Program Files\Fichiers communs\Symantec Shared\ccVrTrst.dll
0x03a80000 0x4000 D:\NORTON~2\NORTON~1\NavShExt.loc
0x15110000 0x25a000 11.00.5721.5145 C:\WINDOWS\system32\wmvcore.dll
0x11c70000 0x3a000 11.00.5721.5238 C:\WINDOWS\system32\WMASF.DLL
0x03d60000 0x12000 19.00.0001.0008 D:\Norton SystemWorks\Norton Utilities\NDRVEX.DLL
ListDLLs v2.25 - DLL lister for Win9x/NT
Copyright (C) 1997-2004 Mark Russinovich
Sysinternals - www.sysinternals.com
------------------------------------------------------------------------------
winlogon.exe pid: 572
Command line: winlogon.exe
Base Size Version Path
0x01000000 0x81000 \??\C:\WINDOWS\system32\winlogon.exe
0x58b50000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\COMCTL32.dll
0x74730000 0x3d000 3.525.1117.0000 C:\WINDOWS\system32\ODBC32.dll
0x20000000 0x18000 3.525.1117.0000 C:\WINDOWS\system32\odbcint.dll
0x10000000 0x1f000 6.14.0010.4162 C:\WINDOWS\system32\Ati2evxx.dll
0x011d0000 0x3c000 3.05.0006.0091 C:\WINDOWS\system32\WRLogonNTF.dll
0x76ac0000 0x11000 3.05.2284.0000 C:\WINDOWS\system32\ATL.DLL
0x77000000 0xd4000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll
0x76f80000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL
Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est FC21-807C
Répertoire de C:\WINDOWS\system32
05-08-04 07:00 6 144 csrss.exe
1 fichier(s) 6 144 octets
0 Rép(s) 5 375 926 272 octets libres
Contenu de Downloaded Program Files
Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est FC21-807C
Répertoire de C:\WINDOWS\Downloaded Program Files
15-01-08 15:15 <REP> .
15-01-08 15:15 <REP> ..
02-12-07 16:11 65 desktop.ini
16-05-07 08:22 399 gp.inf
08-10-04 16:01 372 736 MsnPUpld.dll
08-10-04 16:13 587 MSNPupld.inf
22-09-04 15:59 110 592 PURen-us.dll
15-10-04 07:59 110 592 PURfr-xx.dll
14-02-07 16:30 144 setup.inf
11-06-07 12:21 5 021 swflash.inf
8 fichier(s) 600 136 octets
Total des fichiers listés :
8 fichier(s) 600 136 octets
2 Rép(s) 5 375 926 272 octets libres
Recherche de rootkit! (Merci S!Ri)
Recherche d'infections connues
Export des clefs sensibles..
Liste des fichiers en exception sur le pare-feu XP SP2
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"="C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe:*:Disabled:Logitech Desktop Messenger"
"D:\\SimpleCenter\\SimpleCenter.exe"="D:\\SimpleCenter\\SimpleCenter.exe:LocalSubNet:Enabled:LaunchAnywhere GUI"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"="C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
Export de la clef SharedTaskScheduler
[SharedTaskScheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Pré-chargeur Browseui"
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Démon de cache des catégories de composant"
exports des policies
REGEDIT4
[system]
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001
Export des clefs sensibles..
Rechercher adresses sensibles dans le fichier HOSTS...
catchme 0.3.1319 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-01-18 09:13:24
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden services & system hive ...
scanning hidden registry entries ...
scanning hidden files ...
scan completed successfully
hidden services: 0
hidden files: 0
KProcCheck Version 0.2-beta1 Proof-of-Concept by SIG^2 (www.security.org.sg)
Process list by traversal of KiWaitListHead
4 - System
540 - csrss.exe
572 - winlogon.exe
620 - services.exe
632 - lsass.exe
836 - svchost.exe
896 - msnmsgr.exe
916 - svchost.exe
988 - svchost.exe
1028 - svchost.exe
1048 - ati2evxx.exe
1060 - hpqtra08.exe
1160 - svchost.exe
1208 - svchost.exe
1268 - WudfHost.exe
1364 - ccSvcHst.exe
1376 - ccSvcHst.exe
1444 - AppSvc32.exe
1552 - NPROTECT.EXE
1688 - explorer.exe
1820 - ccApp.exe
1888 - svchost.exe
2020 - NclBTHandler.ex
2044 - BTSTAC~1.EXE
2144 - SpySweeper.exe
2468 - ServiceLayer.ex
2788 - alg.exe
2832 - svchost.exe
2840 - SpySweeperUI.ex
2856 - ctfmon.exe
3416 - devldr32.exe
3460 - hpqgalry.exe
3576 - bwgo0003c0a3.ex
3596 - MOM.exe
3792 - BTTray.exe
3828 - SimpleCenter.ex
4004 - CCC.exe
4080 - LogiTray.exe
4968 - iexplore.exe
5048 - rundll32.exe
5208 - usnsvc.exe
5892 - cmd.exe
Total number of processes = 42
NOTE: Under WinXP, this will not show all processes.
KProcCheck Version 0.2-beta1 Proof-of-Concept by SIG^2 (www.security.org.sg)
Driver/Module list by traversal of PsLoadedModuleList
804D7000 - \WINDOWS\system32\ntoskrnl.exe
806EC000 - \WINDOWS\system32\hal.dll
F7D2F000 - \WINDOWS\system32\KDCOM.DLL
F7C3F000 - \WINDOWS\system32\BOOTVID.dll
F77DF000 - ACPI.sys
F7D31000 - \WINDOWS\system32\DRIVERS\WMILIB.SYS
F77CE000 - pci.sys
F782F000 - isapnp.sys
F783F000 - ohci1394.sys
F784F000 - \WINDOWS\system32\DRIVERS\1394BUS.SYS
F785F000 - SSHRMD.SYS
F786F000 - SSFS0BB9.SYS
F77A2000 - SSIDRV.SYS
F7775000 - \WINDOWS\SYSTEM32\Drivers\NDIS.SYS
F7AAF000 - \WINDOWS\SYSTEM32\Drivers\TDI.SYS
F7DF7000 - pciide.sys
F7AB7000 - \WINDOWS\system32\DRIVERS\PCIIDEX.SYS
F787F000 - MountMgr.sys
F7756000 - ftdisk.sys
F7ABF000 - PartMgr.sys
F788F000 - VolSnap.sys
F773E000 - atapi.sys
F789F000 - disk.sys
F78AF000 - \WINDOWS\system32\DRIVERS\CLASSPNP.SYS
F771E000 - fltMgr.sys
F770C000 - sr.sys
F78BF000 - PxHelp20.sys
F76F5000 - KSecDD.sys
F76E2000 - WudfPf.sys
F7655000 - Ntfs.sys
F7AC7000 - SISAGPX.sys
F763A000 - Mup.sys
F7A3F000 - \SystemRoot\system32\DRIVERS\amdk7.sys
F6D8C000 - \SystemRoot\system32\DRIVERS\ati2mtag.sys
F67E9000 - \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS
F78FF000 - \SystemRoot\system32\DRIVERS\i8042prt.sys
F7330000 - \SystemRoot\system32\DRIVERS\L8042mou.Sys
F679A000 - \SystemRoot\system32\DRIVERS\LMouKE.Sys
F7B47000 - \SystemRoot\system32\DRIVERS\mouclass.sys
F7D13000 - \SystemRoot\system32\DRIVERS\L8042Kbd.sys
F7320000 - \SystemRoot\System32\Drivers\sskbfd.sys
F7B5F000 - \SystemRoot\system32\DRIVERS\kbdclass.sys
F7B67000 - \SystemRoot\system32\DRIVERS\fdc.sys
F6740000 - \SystemRoot\system32\DRIVERS\serial.sys
F7D27000 - \SystemRoot\system32\DRIVERS\serenum.sys
F672C000 - \SystemRoot\system32\DRIVERS\parport.sys
F7D2B000 - \SystemRoot\system32\DRIVERS\gameenum.sys
F7EA4000 - \SystemRoot\system32\drivers\msmpu401.sys
F6708000 - \SystemRoot\system32\drivers\portcls.sys
F7310000 - \SystemRoot\system32\drivers\drmk.sys
F66E5000 - \SystemRoot\system32\drivers\ks.sys
F7B6F000 - \SystemRoot\system32\DRIVERS\usbohci.sys
F66C2000 - \SystemRoot\system32\DRIVERS\USBPORT.SYS
F7300000 - \SystemRoot\system32\DRIVERS\imapi.sys
F72F0000 - \SystemRoot\system32\DRIVERS\cdrom.sys
F72E0000 - \SystemRoot\system32\DRIVERS\redbook.sys
F7B77000 - \SystemRoot\system32\DRIVERS\sisnic.sys
F667C000 - \SystemRoot\system32\drivers\emu10k1m.sys
F72D0000 - \SystemRoot\system32\drivers\sfmanm.sys
F7D69000 - \SystemRoot\system32\drivers\ctlfacem.sys
F72C0000 - \SystemRoot\system32\DRIVERS\nic1394.sys
F64B6000 - \SystemRoot\system32\DRIVERS\HSFBS2S2.sys
F63B7000 - \SystemRoot\system32\DRIVERS\HSFDPSP2.sys
F630F000 - \SystemRoot\system32\DRIVERS\HSFCXTS2.sys
F7B7F000 - \SystemRoot\System32\Drivers\Modem.SYS
F7B87000 - \SystemRoot\system32\DRIVERS\usbuhci.sys
F7B8F000 - \SystemRoot\system32\DRIVERS\usbehci.sys
F61CB000 - \SystemRoot\system32\DRIVERS\btkrnl.sys
F7EAF000 - \SystemRoot\system32\DRIVERS\audstub.sys
F7D71000 - \SystemRoot\System32\Drivers\RootMdm.sys
F70DB000 - \SystemRoot\system32\DRIVERS\rasl2tp.sys
F7606000 - \SystemRoot\system32\DRIVERS\ndistapi.sys
F617C000 - \SystemRoot\system32\DRIVERS\ndiswan.sys
F70CB000 - \SystemRoot\system32\DRIVERS\raspppoe.sys
F70BB000 - \SystemRoot\system32\DRIVERS\raspptp.sys
F616B000 - \SystemRoot\system32\DRIVERS\psched.sys
F70AB000 - \SystemRoot\system32\DRIVERS\msgpc.sys
F7B17000 - \SystemRoot\system32\DRIVERS\ptilink.sys
F7B1F000 - \SystemRoot\system32\DRIVERS\raspti.sys
F708B000 - \SystemRoot\system32\DRIVERS\termdd.sys
F7D73000 - \SystemRoot\system32\DRIVERS\swenum.sys
F6137000 - \SystemRoot\system32\DRIVERS\update.sys
F7602000 - \SystemRoot\system32\DRIVERS\mssmbios.sys
F707B000 - \SystemRoot\system32\DRIVERS\usbhub.sys
F7D75000 - \SystemRoot\system32\DRIVERS\USBD.SYS
F706B000 - \SystemRoot\System32\Drivers\NDProxy.SYS
F7BBF000 - \SystemRoot\system32\DRIVERS\flpydisk.sys
F7CDF000 - \SystemRoot\system32\drivers\MODEMCSA.sys
BA46B000 - \SystemRoot\System32\Drivers\SRTSP.SYS
F760A000 - \SystemRoot\system32\DRIVERS\hidusb.sys
F79AF000 - \SystemRoot\system32\DRIVERS\HIDCLASS.SYS
F7AEF000 - \SystemRoot\system32\DRIVERS\HIDPARSE.SYS
F79BF000 - \SystemRoot\System32\Drivers\btwusb.sys
F7BDF000 - \SystemRoot\system32\DRIVERS\usbccgp.sys
BA30D000 - \SystemRoot\system32\DRIVERS\CamDrL21.sys
F79DF000 - \SystemRoot\system32\DRIVERS\STREAM.SYS
F7BA7000 - \SystemRoot\system32\DRIVERS\USBCAMD.SYS
BA280000 - \SystemRoot\system32\DRIVERS\lvsvf2.sys
F799F000 - \SystemRoot\system32\drivers\usbaudio.sys
F601D000 - \SystemRoot\System32\Drivers\SRTSPX.SYS
F7DB5000 - \SystemRoot\System32\Drivers\Fs_Rec.SYS
F7E78000 - \SystemRoot\System32\Drivers\Null.SYS
F7DB9000 - \SystemRoot\System32\Drivers\Beep.SYS
F7BAF000 - \SystemRoot\System32\drivers\vga.sys
F7DBB000 - \SystemRoot\System32\Drivers\mnmdd.SYS
F7DBD000 - \SystemRoot\System32\DRIVERS\RDPCDD.sys
F7B27000 - \SystemRoot\System32\Drivers\Msfs.SYS
F7B97000 - \SystemRoot\System32\Drivers\Npfs.SYS
F6117000 - \SystemRoot\system32\DRIVERS\rasacd.sys
BA1EB000 - \SystemRoot\system32\DRIVERS\ipsec.sys
BA193000 - \SystemRoot\system32\DRIVERS\tcpip.sys
BA165000 - \SystemRoot\System32\Drivers\SYMTDI.SYS
BA144000 - \SystemRoot\system32\DRIVERS\ipnat.sys
F600D000 - \SystemRoot\system32\DRIVERS\wanarp.sys
BA11F000 - \??\C:\WINDOWS\system32\Drivers\SYMEVENT.SYS
F5FFD000 - \SystemRoot\system32\DRIVERS\arp1394.sys
F7C0F000 - \SystemRoot\System32\Drivers\SYMREDRV.SYS
F7DC9000 - \SystemRoot\System32\Drivers\SYMDNS.SYS
F7C2F000 - \SystemRoot\System32\Drivers\SYMNDIS.SYS
BA0FD000 - \SystemRoot\System32\Drivers\SYMFW.SYS
F5FED000 - \SystemRoot\System32\Drivers\SYMIDS.SYS
BA0D2000 - \??\C:\PROGRA~1\FICHIE~1\SYMANT~1\SymcData\idsdefs\20080116.003\SymIDSCo.sys
BA0AA000 - \SystemRoot\system32\DRIVERS\netbt.sys
BA088000 - \SystemRoot\System32\drivers\afd.sys
F798F000 - \SystemRoot\system32\DRIVERS\netbios.sys
BA05D000 - \SystemRoot\system32\DRIVERS\rdbss.sys
B9FEE000 - \SystemRoot\system32\DRIVERS\mrxsmb.sys
F79CF000 - \SystemRoot\System32\Drivers\Fips.SYS
B9F6C000 - \??\C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys
F7A5F000 - \SystemRoot\System32\Drivers\Cdfs.SYS
B9F54000 - \SystemRoot\System32\Drivers\dump_atapi.sys
F7DE9000 - \SystemRoot\System32\Drivers\dump_WMILIB.SYS
BF800000 - \SystemRoot\System32\win32k.sys
F675D000 - \SystemRoot\System32\drivers\Dxapi.sys
F7B07000 - \SystemRoot\System32\watchdog.sys
BF000000 - \SystemRoot\System32\drivers\dxg.sys
F7E5D000 - \SystemRoot\System32\drivers\dxgthk.sys
BF012000 - \SystemRoot\System32\ati2dvag.dll
BF057000 - \SystemRoot\System32\ati2cqag.dll
BF0B1000 - \SystemRoot\System32\atikvmag.dll
BF101000 - \SystemRoot\System32\atiok3x2.dll
BF113000 - \SystemRoot\System32\ati3duag.dll
BF3DD000 - \SystemRoot\System32\ativvaxx.dll
BFFA0000 - \SystemRoot\System32\ATMFD.DLL
B7E10000 - \SystemRoot\system32\DRIVERS\ndisuio.sys
B7BF7000 - \SystemRoot\system32\DRIVERS\wudfrd.sys
B7954000 - \SystemRoot\System32\Drivers\Fastfat.SYS
B7827000 - \SystemRoot\system32\drivers\wdmaud.sys
B7B8F000 - \SystemRoot\system32\drivers\sysaudio.sys
B7524000 - \SystemRoot\system32\DRIVERS\mrxdav.sys
F7DB7000 - \SystemRoot\System32\Drivers\ParVdm.SYS
F7C17000 - \??\C:\WINDOWS\system32\drivers\btserial.sys
B74CA000 - \??\C:\WINDOWS\system32\drivers\btslbcsp.sys
B75FD000 - \SystemRoot\system32\DRIVERS\mdmxsdk.sys
B7428000 - \SystemRoot\system32\DRIVERS\srv.sys
F7AE7000 - \??\C:\WINDOWS\system32\drivers\symlcbrd.sys
B713F000 - \??\C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCDrv.sys
B7288000 - \??\C:\WINDOWS\system32\Drivers\NPDRIVER.SYS
B6FBE000 - \SystemRoot\System32\Drivers\HTTP.sys
B5C76000 - \??\C:\PROGRA~1\FICHIE~1\SYMANT~1\VIRUSD~1\20080116.038\NAVEX15.SYS
B5C63000 - \??\C:\PROGRA~1\FICHIE~1\SYMANT~1\VIRUSD~1\20080116.038\NAVENG.SYS
B5BD8000 - \??\C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\eeCtrl.sys
B5BBA000 - \??\C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\EraserUtilDrv10740.sys
B590F000 - \SystemRoot\system32\drivers\kmixer.sys
F7E8C000 - \SystemRoot\System32\DRIVERS\KProcCheck.sys
Total number of drivers = 165
Liste des programmes installes
23_24_2500Tour
2400
2400_2500Help
2400_2500trb
3GP Video Converter 3
Adobe Reader 8.1.1 - Français
Adobe Shockwave Player
Advanced Business Card Maker 3.1
AiO_Scan
AiOSoftware
Apollo DivX to DVD Creator 4.2
AppCore
Archiveur WinRAR
Assistant de connexion Windows Live
ATI Catalyst Control Center
ATI Display Driver
AutoUpdate
AV
BufferChm
Catalyst Control Center Core Implementation
Catalyst Control Center Graphics Full Existing
Catalyst Control Center Graphics Full New
Catalyst Control Center Graphics Light
Catalyst Control Center Graphics Previews Common
Catalyst Control Center Localization French
ccc-core-preinstall
ccc-core-static
ccc-utility
CCC Help French
ccCommon
ccCommon
Click'N Design 3D (V5)
Codeur Windows Media Série 9
Codeur Windows Media Série 9
Connection Keep Alive
Copy
Correctif pour Lecteur Windows Media 11 (KB939683)
Correctif pour Windows XP (KB914440)
Correctif Windows XP - KB873339
Correctif Windows XP - KB885835
Correctif Windows XP - KB885836
Correctif Windows XP - KB886185
Correctif Windows XP - KB887472
Correctif Windows XP - KB888302
Correctif Windows XP - KB890859
Correctif Windows XP - KB891781
CreativeProjects
CreativeProjectsTemplates
CueTour
Destinations
Director
DivX Codec
DivX Content Uploader
DivX Converter
DivX Player
DivX Web Player
DocProc
DocumentViewer
DVD Shrink 3.2
dvdSanta 4.50
Fax
Galerie de photos Windows Live
Giants
Hotfix for Microsoft .NET Framework 3.0 (KB932471)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows XP (KB915865)
Hotfix for Windows XP (KB926239)
HP Diagnostic Assistant
HP Image Zone 4.2
HP PSC & OfficeJet 4.2
HP Software Update
HPSystemDiagnostics
InstantShare
Java(TM) 6 Update 3
Lecteur Windows Media 11
LimeWire 4.14.12
LiveUpdate 3.2 (Symantec Corporation)
LiveUpdate Notice (Symantec Corporation)
Logitech Desktop Messenger
Logitech Print Service
Logitech QuickCam
Logitech SetPoint
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 French Language Pack
Microsoft .NET Framework 1.1 Hotfix (KB928366)
Microsoft .NET Framework 2.0 Language Pack - FRA
Microsoft .NET Framework 2.0 Service Pack 1
Microsoft .NET Framework 3.0 French Language Pack
Microsoft .NET Framework 3.0 Service Pack 1
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office 97 Standard
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft User-Mode Driver Framework Feature Pack 1.5
Microsoft Visual C++ 2005 Redistributable
mIRC
Mise à jour de sécurité pour Lecteur Windows Media (KB911564)
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)
Mise à jour de sécurité pour Lecteur Windows Media 6.4 (KB925398)
Mise à jour de sécurité pour Lecteur Windows Media 9 (KB936782)
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB939653)
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615)
Mise à jour de sécurité pour Windows XP (KB890046)
Mise à jour de sécurité pour Windows XP (KB893756)
Mise à jour de sécurité pour Windows XP (KB896358)
Mise à jour de sécurité pour Windows XP (KB896423)
Mise à jour de sécurité pour Windows XP (KB896428)
Mise à jour de sécurité pour Windows XP (KB899587)
Mise à jour de sécurité pour Windows XP (KB899591)
Mise à jour de sécurité pour Windows XP (KB900725)
Mise à jour de sécurité pour Windows XP (KB901017)
Mise à jour de sécurité pour Windows XP (KB901214)
Mise à jour de sécurité pour Windows XP (KB902400)
Mise à jour de sécurité pour Windows XP (KB904706)
Mise à jour de sécurité pour Windows XP (KB905414)
Mise à jour de sécurité pour Windows XP (KB905749)
Mise à jour de sécurité pour Windows XP (KB908519)
Mise à jour de sécurité pour Windows XP (KB911562)
Mise à jour de sécurité pour Windows XP (KB911927)
Mise à jour de sécurité pour Windows XP (KB913580)
Mise à jour de sécurité pour Windows XP (KB914388)
Mise à jour de sécurité pour Windows XP (KB914389)
Mise à jour de sécurité pour Windows XP (KB917344)
Mise à jour de sécurité pour Windows XP (KB917953)
Mise à jour de sécurité pour Windows XP (KB918118)
Mise à jour de sécurité pour Windows XP (KB918439)
Mise à jour de sécurité pour Windows XP (KB919007)
Mise à jour de sécurité pour Windows XP (KB920213)
Mise à jour de sécurité pour Windows XP (KB920670)
Mise à jour de sécurité pour Windows XP (KB920683)
Mise à jour de sécurité pour Windows XP (KB920685)
Mise à jour de sécurité pour Windows XP (KB921503)
Mise à jour de sécurité pour Windows XP (KB922819)
Mise à jour de sécurité pour Windows XP (KB923191)
Mise à jour de sécurité pour Windows XP (KB923414)
Mise à jour de sécurité pour Windows XP (KB923689)
Mise à jour de sécurité pour Windows XP (KB923789)
Mise à jour de sécurité pour Windows XP (KB923980)
Mise à jour de sécurité pour Windows XP (KB924270)
Mise à jour de sécurité pour Windows XP (KB924496)
Mise à jour de sécurité pour Windows XP (KB924667)
Mise à jour de sécurité pour Windows XP (KB925902)
Mise à jour de sécurité pour Windows XP (KB926255)
Mise à jour de sécurité pour Windows XP (KB926436)
Mise à jour de sécurité pour Windows XP (KB927779)
Mise à jour de sécurité pour Windows XP (KB927802)
Mise à jour de sécurité pour Windows XP (KB928255)
Mise à jour de sécurité pour Windows XP (KB928843)
Mise à jour de sécurité pour Windows XP (KB929123)
Mise à jour de sécurité pour Windows XP (KB930178)
Mise à jour de sécurité pour Windows XP (KB931261)
Mise à jour de sécurité pour Windows XP (KB931784)
Mise à jour de sécurité pour Windows XP (KB932168)
Mise à jour de sécurité pour Windows XP (KB933729)
Mise à jour de sécurité pour Windows XP (KB935839)
Mise à jour de sécurité pour Windows XP (KB935840)
Mise à jour de sécurité pour Windows XP (KB936021)
Mise à jour de sécurité pour Windows XP (KB938127)
Mise à jour de sécurité pour Windows XP (KB938829)
Mise à jour de sécurité pour Windows XP (KB939653)
Mise à jour de sécurité pour Windows XP (KB941202)
Mise à jour de sécurité pour Windows XP (KB941568)
Mise à jour de sécurité pour Windows XP (KB941569)
Mise à jour de sécurité pour Windows XP (KB941644)
Mise à jour de sécurité pour Windows XP (KB943460)
Mise à jour de sécurité pour Windows XP (KB943485)
Mise à jour de sécurité pour Windows XP (KB944653)
Mise à jour pour Windows XP (KB894391)
Mise à jour pour Windows XP (KB898461)
Mise à jour pour Windows XP (KB900485)
Mise à jour pour Windows XP (KB904942)
Mise à jour pour Windows XP (KB908531)
Mise à jour pour Windows XP (KB910437)
Mise à jour pour Windows XP (KB911280)
Mise à jour pour Windows XP (KB916595)
Mise à jour pour Windows XP (KB920342)
Mise à jour pour Windows XP (KB920872)
Mise à jour pour Windows XP (KB922582)
Mise à jour pour Windows XP (KB925720)
Mise à jour pour Windows XP (KB925876)
Mise à jour pour Windows XP (KB927891)
Mise à jour pour Windows XP (KB930916)
Mise à jour pour Windows XP (KB933360)
Mise à jour pour Windows XP (KB938828)
Mise à jour pour Windows XP (KB942763)
Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA
Module de prise en charge linguistique du français de Microsoft .NET Framework 3.0
MSRedist
MSRedist
MSXML 4.0 SP2 (KB936181)
MSXML 6.0 Parser (KB933579)
Nokia Connectivity Cable Driver
Nokia PC Suite
Nokia PC Suite
Norton AntiVirus
Norton Cleanup
Norton Confidential Browser Component
Norton Confidential Web Protection Component
Norton Internet Security
Norton Internet Security
Norton Internet Security
Norton Internet Security
Norton Internet Security (Symantec Corporation)
Norton Protection Center
Norton Protection Center
Norton SystemWorks
Norton SystemWorks 2006 Basic Edition
Norton SystemWorks 2006 Basic Edition (Symantec Corporation)
Norton Utilities
NSW_DRM_COLLECTION
Overland
Package de pilotes Windows - Nokia Modem (11/03/2006 6.82.0.1)
PC Connectivity Solution
PhotoGallery
PowerDVD
PowerProducer
PrintScreen
ProductContext
Programme de gestion Camera de Logitech®
QFolder
QuickProjects
Readme
Scan
SimpleCenter
SiS 900 PCI Fast Ethernet Adapter Driver
Skins
SkinsHP1
Sound Blaster Live! Web 2K/XP
SPBBC 32bit
Spy Sweeper
Symantec Real Time Storage Protection Component
SymNet
Transformers(TM) - Le Jeu Demo
Transformers(TM) - Le Jeu Demo
TrayApp
U.S. Robotics 56K Voice Host Int
Ulead VideoStudio 7 SE Basic
Unload
VisualRoute 2008
WebFldrs XP
WebReg
WIDCOMM Bluetooth Software
Windows Communication Foundation Language Pack - FRA
Windows Driver Package - Nokia (WUDFRd) WPD (03/19/2007 6.83.31.1)
Windows Driver Package - Nokia Modem (02/15/2007 3.1)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Imaging Component
Windows Installer 3.1 (KB893803)
Windows Internet Explorer 7
Windows Live installer
Windows Live Mail
Windows Live Messenger
Windows Media Format 11 runtime
Windows Media Format 11 runtime
Windows Media Format SDK Hotfix - KB891122
Windows Media Player 11
Windows Presentation Foundation
Windows Presentation Foundation Language Pack (FRA)
Windows Workflow Foundation FR Language Pack
XML Paper Specification Shared Components Language Pack 1.0
XML Paper Specification Shared Components Pack 1.0
Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est FC21-807C
Répertoire de C:\Program Files
14-01-08 17:10 <REP> .
14-01-08 17:10 <REP> ..
04-12-07 09:02 <REP> Adobe
03-12-07 11:10 <REP> ATI Technologies
02-12-07 16:09 <REP> ComPlus Applications
02-12-07 16:58 <REP> CONEXANT
02-12-07 19:59 <REP> Creative
03-12-07 13:07 <REP> CyberLink
12-01-08 16:14 <REP> DIFX
03-12-07 14:17 <REP> directx
12-01-08 16:13 <REP> Fichiers communs
03-12-07 13:49 <REP> Hewlett-Packard
03-12-07 13:46 <REP> HP
12-12-07 16:34 <REP> Internet Explorer
07-12-07 00:52 <REP> Java
03-12-07 14:17 <REP> Logitech
02-12-07 17:25 <REP> Messenger
02-12-07 16:12 <REP> microsoft frontpage
04-12-07 07:56 <REP> Microsoft SQL Server Compact Edition
02-12-07 16:09 <REP> Movie Maker
02-12-07 18:49 <REP> MSBuild
02-12-07 16:07 <REP> MSN
02-12-07 16:08 <REP> MSN Gaming Zone
04-12-07 09:26 <REP> MSXML 4.0
02-12-07 19:34 <REP> MSXML 6.0
07-12-07 00:10 <REP> Navilog1
02-12-07 16:10 <REP> NetMeeting
02-12-07 16:08 <REP> Online Services
02-12-07 17:30 <REP> Outlook Express
12-01-08 16:11 <REP> PC Connectivity Solution
14-01-08 17:10 <REP> QuickTime
02-12-07 18:45 <REP> Reference Assemblies
02-12-07 16:10 <REP> Services en ligne
02-12-07 16:26 <REP> SiSLan
05-12-07 08:04 <REP> Symantec
04-12-07 08:38 <REP> Windows Live
03-12-07 13:29 <REP> Windows Media Components
02-12-07 18:04 <REP> Windows Media Connect 2
02-12-07 18:04 <REP> Windows Media Player
03-12-07 13:37 <REP> Windows Messaging
02-12-07 16:08 <REP> Windows NT
02-12-07 16:12 <REP> xerox
0 fichier(s) 0 octets
42 Rép(s) 5 367 910 400 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est FC21-807C
Répertoire de C:\Program Files\fichiers communs
12-01-08 16:13 <REP> .
12-01-08 16:13 <REP> ..
04-12-07 09:03 <REP> Adobe
15-12-07 20:48 <REP> Ahead
03-12-07 14:17 <REP> FotoWire
03-12-07 13:48 <REP> Hewlett-Packard
03-12-07 13:50 <REP> HP
02-12-07 21:08 <REP> InstallShield
07-12-07 00:49 <REP> Java
03-12-07 14:16 <REP> Logitech
04-12-07 07:41 <REP> Microsoft Shared
02-12-07 16:10 <REP> MSSoap
12-01-08 16:13 <REP> Nokia
02-12-07 10:51 <REP> ODBC
12-01-08 16:13 <REP> PCSuite
02-12-07 16:10 <REP> Services
02-12-07 10:51 <REP> SpeechEngines
18-01-08 09:10 <REP> Symantec Shared
02-12-07 17:30 <REP> System
03-12-07 13:29 <REP> Ulead Systems
0 fichier(s) 0 octets
20 Rép(s) 5 367 910 400 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est FC21-807C
Répertoire de C:\Program Files\fichiers communs\Microsoft Shared\Web Folders
02-12-07 16:20 <REP> .
02-12-07 16:20 <REP> ..
18-05-01 15:57 561 209 MSONSEXT.DLL
03-06-99 12:09 122 937 MSOWS409.DLL
07-03-01 07:00 127 033 MSOWS40c.DLL
3 fichier(s) 811 179 octets
2 Rép(s) 5 367 910 400 octets libres
c:\Documents and Settings\All Users\Application Data\Installations\{57A48477-92F0-4C1F-ADF9-4806C4EC3CF2}\Nokia_PC_Suite_683_rel_14_1_fre_ca_web.exe
c:\Documents and Settings\All Users\Application Data\Installations\{57A48477-92F0-4C1F-ADF9-4806C4EC3CF2}\Installations\CommonCustomActions\UninstCCD.exe
c:\Documents and Settings\All Users\Application Data\Installations\{57A48477-92F0-4C1F-ADF9-4806C4EC3CF2}\Installations\CommonCustomActions\UninstPCS.exe
c:\Documents and Settings\All Users\Application Data\Installations\{57A48477-92F0-4C1F-ADF9-4806C4EC3CF2}\Installations\CommonCustomActions\UninstPCSFEMsi.exe
c:\Documents and Settings\Martin Vézina\x.exe
c:\Documents and Settings\Martin Vézina\.SimpleCenter\updates\2.0.3.11.exe
c:\Documents and Settings\Martin Vézina\Application Data\LimeWire\.NetworkShare\LimeWireWin4.16.2.exe
c:\Documents and Settings\Martin Vézina\Application Data\Microsoft\Installer\{457791C5-D702-4143-A7B2-2744BE9573F2}\NewShortcut1_5B69D3033CA54B39B5ECE7D051297E77.exe
c:\Documents and Settings\Martin Vézina\Local Settings\Temp\bwgo0003c0a3.exe
c:\Documents and Settings\Martin Vézina\Local Settings\Temp\bwgo00044785.exe
c:\Documents and Settings\Martin Vézina\Local Settings\Temp\bwgo000495b8.exe
c:\Documents and Settings\Martin Vézina\Local Settings\Temp\bwgo0004ba5f.exe
c:\Documents and Settings\Martin Vézina\Local Settings\Temp\bwgo0004c336.exe
c:\Documents and Settings\Martin Vézina\Local Settings\Temp\bwgo0004cd62.exe
c:\Documents and Settings\Martin Vézina\Local Settings\Temp\bwgo0004d1ba.exe
c:\Documents and Settings\Martin Vézina\Local Settings\Temp\bwgo0004e567.exe
c:\Documents and Settings\Martin Vézina\Local Settings\Temp\bwgo00058aea.exe
c:\Documents and Settings\Martin Vézina\Local Settings\Temp\bwgo000c33c9.exe
c:\Documents and Settings\Martin Vézina\Local Settings\Temp\ins1.tmp\LDMClient.exe
c:\Documents and Settings\Martin Vézina\Local Settings\Temp\ins2.tmp\LDMClient.exe
c:\Documents and Settings\Martin Vézina\Local Settings\Temporary Internet Files\Content.IE5\0O0HPDDZ\Nokia_PC_Suite_683_rel_14_1_fre_ca_web[1].exe
c:\Documents and Settings\All Users\Application Data\Hewlett-Packard\Diagnostic Assistant\data\hprbevdb.dll
c:\Documents and Settings\All Users\Application Data\Microsoft\IdentityCRL\production\ppcrlconfig.dll
c:\Documents and Settings\All Users\Application Data\Nero\DrWeb\Drweb32.dll
c:\Documents and Settings\All Users\Application Data\Symantec\SyKnAppS\patch25.dll
c:\Documents and Settings\All Users\Application Data\Symantec\SyKnAppS\SyKnAppS.dll
c:\Documents and Settings\LocalService\Application Data\Microsoft\UPnP Device Host\upnphost\udhisapi.dll
****** Fin du rapport DiagHelp
Veuillez svp envoyer le fichier C:\upload_moi_ATHLON.tar.gz a l'adresse http://upload.malekal.com
_______________________RApport de HijackThis___________________________________________________________
Logfile of HijackThis v1.99.1
Scan saved at 10:34:15, on 18-01-08
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
C:\Program Files\Fichiers communs\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
D:\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
D:\NORTON~1\NORTON~1\NPROTECT.EXE
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
D:\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
C:\WINDOWS\system32\svchost.exe
D:\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\htpatch.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\WINDOWS\system32\devldr32.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
D:\CyberLink\PowerDVD\PDVDServ.exe
D:\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
D:\Logitech\Video\LogiTray.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\HP\hpcoretech\comp\hptskmgr.exe
C:\WINDOWS\System32\svchost.exe
D:\Webroot\Spy Sweeper\SpySweeperUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\DOCUME~1\MARTIN~1\LOCALS~1\Temp\bwgo0003c0a3.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
D:\WIDCOMM\Logiciel Bluetooth\BTTray.exe
C:\WINDOWS\system32\LVComS.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\PC Connectivity Solution\NclBTHandler.exe
D:\WIDCOMM\LOGICI~1\BTSTAC~1.EXE
D:\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
D:\Microsoft Office\Office\OSA.EXE
D:\SimpleCenter\SimpleCenter.exe
C:\Program Files\Fichiers communs\Logitech\KHAL\KHALMNPR.EXE
D:\HP\Digital Imaging\bin\hpqgalry.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\Rundll32.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
D:\Webroot\Spy Sweeper\SSU.EXE
C:\Program Files\Internet Explorer\iexplore.exe
D:\hijackthis\test.exe.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O1 - Hosts: 204.126.173.61 prodapp2.simpledevices.com
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\1.5\NppBho.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: browser optimizer superiorads - {8E015787-B1E3-404a-95DE-3E71E1FA0305} - C:\WINDOWS\system32\spads.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\1.5\UIBHO.dll
O4 - HKLM\..\Run: [HTpatch] C:\WINDOWS\htpatch.exe
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [RemoteControl] D:\CyberLink\PowerDVD\PDVDServ.exe
O4 - HKLM\..\Run: [LanguageShortcut] D:\CyberLink\PowerDVD\Language\Language.exe
O4 - HKLM\..\Run: [HP Software Update] "D:\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [LogitechVideoRepair] D:\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] D:\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "D:\Norton Internet Security\osCheck.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [UserFaultCheck] C:\WINDOWS\system32\dumprep 0 -u
O4 - HKLM\..\Run: [spa_start] C:\WINDOWS\System32\Rundll32.exe "C:\WINDOWS\system32\spads.dll" DllVerify
O4 - HKLM\..\Run: [PCSuiteTrayApplication] "D:\Nokia\Nokia PC Suite 6\LaunchApplication.exe" -startup
O4 - HKLM\..\Run: [SpySweeper] D:\Webroot\Spy Sweeper\SpySweeperUI.exe /startintray
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LDM] "C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [Norton SystemWorks] "D:\Norton SystemWorks\cfgwiz.exe" /GUID {05858CFD-5CC4-4ceb-AAAF-CF00BF39736A} /MODE CfgWiz
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - Startup: Démarrage d'Office.lnk = D:\Microsoft Office\Office\OSA.EXE
O4 - Startup: Microsoft Recherche accélérée.lnk = D:\Microsoft Office\Office\FINDFAST.EXE
O4 - Startup: SimpleCenter.lnk = D:\SimpleCenter\SimpleCenter.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = D:\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = D:\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger Agent.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: Envoyer à &Bluetooth - D:\WIDCOMM\Logiciel Bluetooth\btsendto_ie_ctx.htm
O9 - Extra button: Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - D:\VisualRoute 2008\vrie.dll
O9 - Extra 'Tools' menuitem: VisualRoute Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - D:\VisualRoute 2008\vrie.dll
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Express Cleanup - {5E638779-1818-4754-A595-EF1C63B87A56} - D:\Norton SystemWorks\Norton Cleanup\WCQuick.lnk
O9 - Extra 'Tools' menuitem: Express Cleanup - {5E638779-1818-4754-A595-EF1C63B87A56} - D:\Norton SystemWorks\Norton Cleanup\WCQuick.lnk
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - D:\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - D:\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by105fd.bay105.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{C142CE0A-4CFA-4FFD-917B-62EB8C7FF09E}: NameServer = 192.168.0.1
O18 - Protocol: bw+0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dl
Je suis nouveau sur ce site est j'ai eu le problème suivant :c:\windows\system32\spads.dll DLLverify.
J'ai vue que je n'étais pas le seul avoir eu ce même problème. J'ai fait le rapport avec DiagHelp et HijackThis. Mais pour l'envois
de upload_moi_.tar (fichiers invalide !) ES TCE QUE C'EST IMPORTANT DE L'ENVOYER ? PARCE QUE SA NE VEUX PAS FAIRE L'ENVOIS.
- Windiws XP Familialle SP2
- Athlon 2400 XP + 1gig Ram
- Spy Sweeper à jours
- Norton Internet Securité 2007 à jours
Je vous remerci d'avance de vouloir m'aider parce que moi c'est la première fois que j'utilise ses logiciels et de voir qu'elle sont les marches a suivre pour remédier à ce problème.
Merci pour le support.
___________________Rapport de DiagHelp_____________________________________
DiagHelp version v1.4 - http://www.malekal.com
excute le 18-01-08 à 9:09:30,21
Liste des derniers fichies modifies/crees dans windir\system32 et prefetch
C:\WINDOWS\prefetch\CHCP.COM-18156052.pf -->18-01-08 09:08:52
C:\WINDOWS\prefetch\NOTEPAD.EXE-336351A9.pf -->18-01-08 09:08:24
C:\WINDOWS\prefetch\CMD.EXE-087B4001.pf -->18-01-08 09:05:26
C:\WINDOWS\prefetch\WMIPRVSE.EXE-28F301A9.pf -->18-01-08 09:03:38
C:\WINDOWS\prefetch\WUAUCLT.EXE-399A8E72.pf -->18-01-08 09:03:11
C:\WINDOWS\prefetch\SETUP_WM.EXE-3135CBD6.pf -->18-01-08 09:03:09
C:\WINDOWS\prefetch\LUCALLBACKPROXY.EXE-19ED7806.pf -->18-01-08 09:02:22
C:\WINDOWS\prefetch\AUPDATE.EXE-2253CB60.pf -->18-01-08 09:02:16
C:\WINDOWS\prefetch\LUCOMS~1.EXE-02DB5950.pf -->18-01-08 09:02:12
C:\WINDOWS\prefetch\SSU.EXE-29C481B4.pf -->18-01-08 09:01:37
C:\WINDOWS\System32\drivers\cdralw2k.sys -->11-12-07 17:34:52
C:\WINDOWS\System32\drivers\PxHelp20.sys -->11-12-07 17:34:50
C:\WINDOWS\System32\drivers\cdr4_xp.sys -->11-12-07 17:34:50
C:\WINDOWS\System32\drivers\SYMEVENT.INF -->05-12-07 08:04:06
C:\WINDOWS\System32\drivers\SYMEVENT.CAT -->05-12-07 08:04:06
C:\WINDOWS\System32\drivers\SYMEVENT.SYS -->05-12-07 08:04:05
C:\WINDOWS\System32\drivers\symlcbrd.sys -->03-12-07 15:04:36
C:\WINDOWS\System32\FFASTLOG.TXT -->17-01-08 23:16:46
C:\WINDOWS\System32\wpa.dbl -->17-01-08 23:04:33
C:\WINDOWS\System32\QuickTime.qtp -->13-01-08 21:40:34
C:\WINDOWS\System32\MRT.exe -->02-01-08 13:21:36
C:\WINDOWS\System32\PerfStringBackup.INI -->17-12-07 09:33:13
C:\WINDOWS\System32\perfh00C.dat -->17-12-07 09:33:13
C:\WINDOWS\System32\perfh009.dat -->17-12-07 09:33:13
C:\WINDOWS\System32\perfc00C.dat -->17-12-07 09:33:13
C:\WINDOWS\System32\perfc009.dat -->17-12-07 09:33:13
C:\WINDOWS\System32\settingsbkup.sfm -->15-12-07 22:34:42
C:\WINDOWS\System32\settings.sfm -->15-12-07 22:34:42
C:\WINDOWS\System32\DVCStateBkp-{00000000-00000000-0000000B-00001102-00000002-80271102}.dat -->15-12-07 22:34:42
C:\WINDOWS\System32\DVCState-{00000000-00000000-0000000B-00001102-00000002-80271102}.dat -->15-12-07 22:34:42
C:\WINDOWS\System32\BMXStateBkp-{00000000-00000000-0000000B-00001102-00000002-80271102}.rfx -->15-12-07 22:34:42
C:\WINDOWS\System32\BMXState-{00000000-00000000-0000000B-00001102-00000002-80271102}.rfx -->15-12-07 22:34:42
C:\WINDOWS\System32\BMXCtrlState-{00000000-00000000-0000000B-00001102-00000002-80271102}.rfx -->15-12-07 22:34:42
C:\WINDOWS\System32\BMXBkpCtrlState-{00000000-00000000-0000000B-00001102-00000002-80271102}.rfx -->15-12-07 22:34:42
C:\WINDOWS\System32\FNTCACHE.DAT -->15-12-07 22:11:07
C:\WINDOWS\System32\nsz1E3.dll -->13-12-07 11:10:00
C:\WINDOWS\System32\TZLog.log -->12-12-07 16:39:32
C:\WINDOWS\System32\dsm_fr.qm -->11-12-07 17:35:02
C:\WINDOWS\System32\divxsm.tlb -->11-12-07 17:35:02
C:\WINDOWS\System32\DivXsm.exe -->11-12-07 17:35:02
C:\WINDOWS\System32\qt-dx331.dll -->11-12-07 17:34:56
C:\WINDOWS\System32\pxmas.dll -->11-12-07 17:34:52
C:\WINDOWS\wmsetup.log -->18-01-08 09:04:36
C:\WINDOWS\WindowsUpdate.log -->18-01-08 09:04:36
C:\WINDOWS\wiadebug.log -->18-01-08 08:36:50
C:\WINDOWS\setupapi.log -->17-01-08 23:23:53
C:\WINDOWS\0.log -->17-01-08 23:12:29
C:\WINDOWS\wiaservc.log -->17-01-08 23:12:24
C:\WINDOWS\bootstat.dat -->17-01-08 23:11:26
C:\WINDOWS\ntbtlog.txt -->17-01-08 23:09:58
C:\WINDOWS\SchedLgU.Txt -->17-01-08 23:02:50
C:\WINDOWS\wmsetup10.log -->16-01-08 00:39:55
C:\WINDOWS\offitems.log -->15-01-08 14:21:20
C:\WINDOWS\setupact.log -->13-01-08 19:59:29
C:\WINDOWS\ntdtcsetup.log -->13-01-08 19:59:21
C:\WINDOWS\iis6.log -->13-01-08 19:59:21
C:\WINDOWS\comsetup.log -->13-01-08 19:59:21
winlogon.exe
Verified: Signed
svchost.exe
Verified: Signed
ws2_32.dll
Verified: Signed
user32.dll
Verified: Signed
tcpip.sys
Verified: Signed
ndis.sys
Verified: Signed
null.sys
Verified: Signed
ListDLLs v2.25 - DLL lister for Win9x/NT
Copyright (C) 1997-2004 Mark Russinovich
Sysinternals - www.sysinternals.com
------------------------------------------------------------------------------
explorer.exe pid: 1688
Command line: C:\WINDOWS\Explorer.EXE
Base Size Version Path
0x44080000 0xcf000 7.00.6000.16574 C:\WINDOWS\system32\WININET.dll
0x00400000 0x9000 6.00.5441.0000 C:\WINDOWS\system32\Normaliz.dll
0x43e00000 0x45000 7.00.6000.16574 C:\WINDOWS\system32\iertutil.dll
0x58b50000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\comctl32.dll
0x76f80000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL
0x77000000 0xd4000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll
0x76ac0000 0x11000 3.05.2284.0000 C:\WINDOWS\system32\ATL.DLL
0x44160000 0x127000 7.00.6000.16574 C:\WINDOWS\system32\urlmon.dll
0x442b0000 0x3c000 7.00.6000.16574 C:\WINDOWS\system32\webcheck.dll
0x44360000 0x5cd000 7.00.6000.16574 C:\WINDOWS\system32\IEFRAME.dll
0x7d200000 0x2be000 3.01.4000.4039 C:\WINDOWS\system32\msi.dll
0x164a0000 0x23000 5.02.5721.5145 C:\WINDOWS\system32\WPDShServiceObj.dll
0x10000000 0x11000 4.00.0001.2500 C:\WINDOWS\system32\btncopy.dll
0x01900000 0x91000 6.83.0074.0009 D:\Nokia\Nokia PC Suite 6\PhoneBrowser.dll
0x019d0000 0xa4000 6.83.0092.0011 D:\Nokia\Nokia PC Suite 6\PCSCM.dll
0x7c3c0000 0x7c000 7.10.6030.0000 C:\WINDOWS\system32\MSVCP71.dll
0x7c360000 0x56000 7.10.6030.0000 C:\WINDOWS\system32\MSVCR71.dll
0x019c0000 0xb000 6.83.0047.0001 D:\Nokia\Nokia PC Suite 6\Lang\PhoneBrowser_fre-ca.nlr
0x01b80000 0x87000 6.83.0015.0001 D:\Nokia\Nokia PC Suite 6\Resource\PhoneBrowser_Nokia.ngr
0x109c0000 0x2c000 5.02.5721.5145 C:\WINDOWS\system32\PortableDeviceTypes.dll
0x10930000 0x49000 5.02.5721.5145 C:\WINDOWS\system32\PortableDeviceApi.dll
0x10100000 0xe000 2.40.0849.0000 C:\Program Files\Logitech\SetPoint\lgscroll.dll
0x6f120000 0x8c000 2007.04.0000.0002 C:\Program Files\Fichiers communs\Symantec Shared\NPC\NSCEXT.dll
0x7c120000 0x19000 7.10.3077.0000 C:\WINDOWS\system32\ATL71.DLL
0x6ae80000 0x85000 106.02.0000.0021 C:\Program Files\Fichiers communs\Symantec Shared\ccL60U.dll
0x00db0000 0xf000 D:\WIDCOMM\Logiciel Bluetooth\btkeyind.dll
0x02000000 0x2e000 D:\WinRAR\rarext.dll
0x02b10000 0x4c000 8.00.0000.0000 C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\PDFShell.FRA
0x02b60000 0x7d000 5.05.0007.0103 D:\Webroot\SPYSWE~1\SSCtxMnu.dll
0x74730000 0x3d000 3.525.1117.0000 C:\WINDOWS\system32\ODBC32.dll
0x03c80000 0x18000 3.525.1117.0000 C:\WINDOWS\system32\odbcint.dll
0x6a090000 0x29000 14.02.0000.0029 D:\NORTON~2\NORTON~1\NavShExt.dll
0x6b790000 0x1f000 106.02.0000.0021 C:\Program Files\Fichiers communs\Symantec Shared\ccVrTrst.dll
0x03a80000 0x4000 D:\NORTON~2\NORTON~1\NavShExt.loc
0x15110000 0x25a000 11.00.5721.5145 C:\WINDOWS\system32\wmvcore.dll
0x11c70000 0x3a000 11.00.5721.5238 C:\WINDOWS\system32\WMASF.DLL
0x03d60000 0x12000 19.00.0001.0008 D:\Norton SystemWorks\Norton Utilities\NDRVEX.DLL
ListDLLs v2.25 - DLL lister for Win9x/NT
Copyright (C) 1997-2004 Mark Russinovich
Sysinternals - www.sysinternals.com
------------------------------------------------------------------------------
winlogon.exe pid: 572
Command line: winlogon.exe
Base Size Version Path
0x01000000 0x81000 \??\C:\WINDOWS\system32\winlogon.exe
0x58b50000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\COMCTL32.dll
0x74730000 0x3d000 3.525.1117.0000 C:\WINDOWS\system32\ODBC32.dll
0x20000000 0x18000 3.525.1117.0000 C:\WINDOWS\system32\odbcint.dll
0x10000000 0x1f000 6.14.0010.4162 C:\WINDOWS\system32\Ati2evxx.dll
0x011d0000 0x3c000 3.05.0006.0091 C:\WINDOWS\system32\WRLogonNTF.dll
0x76ac0000 0x11000 3.05.2284.0000 C:\WINDOWS\system32\ATL.DLL
0x77000000 0xd4000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll
0x76f80000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL
Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est FC21-807C
Répertoire de C:\WINDOWS\system32
05-08-04 07:00 6 144 csrss.exe
1 fichier(s) 6 144 octets
0 Rép(s) 5 375 926 272 octets libres
Contenu de Downloaded Program Files
Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est FC21-807C
Répertoire de C:\WINDOWS\Downloaded Program Files
15-01-08 15:15 <REP> .
15-01-08 15:15 <REP> ..
02-12-07 16:11 65 desktop.ini
16-05-07 08:22 399 gp.inf
08-10-04 16:01 372 736 MsnPUpld.dll
08-10-04 16:13 587 MSNPupld.inf
22-09-04 15:59 110 592 PURen-us.dll
15-10-04 07:59 110 592 PURfr-xx.dll
14-02-07 16:30 144 setup.inf
11-06-07 12:21 5 021 swflash.inf
8 fichier(s) 600 136 octets
Total des fichiers listés :
8 fichier(s) 600 136 octets
2 Rép(s) 5 375 926 272 octets libres
Recherche de rootkit! (Merci S!Ri)
Recherche d'infections connues
Export des clefs sensibles..
Liste des fichiers en exception sur le pare-feu XP SP2
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"="C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe:*:Disabled:Logitech Desktop Messenger"
"D:\\SimpleCenter\\SimpleCenter.exe"="D:\\SimpleCenter\\SimpleCenter.exe:LocalSubNet:Enabled:LaunchAnywhere GUI"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"="C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger"
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"="C:\\Program Files\\Windows Live\\Messenger\\livecall.exe:*:Enabled:Windows Live Messenger (Phone)"
Export de la clef SharedTaskScheduler
[SharedTaskScheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Pré-chargeur Browseui"
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Démon de cache des catégories de composant"
exports des policies
REGEDIT4
[system]
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001
Export des clefs sensibles..
Rechercher adresses sensibles dans le fichier HOSTS...
catchme 0.3.1319 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-01-18 09:13:24
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden services & system hive ...
scanning hidden registry entries ...
scanning hidden files ...
scan completed successfully
hidden services: 0
hidden files: 0
KProcCheck Version 0.2-beta1 Proof-of-Concept by SIG^2 (www.security.org.sg)
Process list by traversal of KiWaitListHead
4 - System
540 - csrss.exe
572 - winlogon.exe
620 - services.exe
632 - lsass.exe
836 - svchost.exe
896 - msnmsgr.exe
916 - svchost.exe
988 - svchost.exe
1028 - svchost.exe
1048 - ati2evxx.exe
1060 - hpqtra08.exe
1160 - svchost.exe
1208 - svchost.exe
1268 - WudfHost.exe
1364 - ccSvcHst.exe
1376 - ccSvcHst.exe
1444 - AppSvc32.exe
1552 - NPROTECT.EXE
1688 - explorer.exe
1820 - ccApp.exe
1888 - svchost.exe
2020 - NclBTHandler.ex
2044 - BTSTAC~1.EXE
2144 - SpySweeper.exe
2468 - ServiceLayer.ex
2788 - alg.exe
2832 - svchost.exe
2840 - SpySweeperUI.ex
2856 - ctfmon.exe
3416 - devldr32.exe
3460 - hpqgalry.exe
3576 - bwgo0003c0a3.ex
3596 - MOM.exe
3792 - BTTray.exe
3828 - SimpleCenter.ex
4004 - CCC.exe
4080 - LogiTray.exe
4968 - iexplore.exe
5048 - rundll32.exe
5208 - usnsvc.exe
5892 - cmd.exe
Total number of processes = 42
NOTE: Under WinXP, this will not show all processes.
KProcCheck Version 0.2-beta1 Proof-of-Concept by SIG^2 (www.security.org.sg)
Driver/Module list by traversal of PsLoadedModuleList
804D7000 - \WINDOWS\system32\ntoskrnl.exe
806EC000 - \WINDOWS\system32\hal.dll
F7D2F000 - \WINDOWS\system32\KDCOM.DLL
F7C3F000 - \WINDOWS\system32\BOOTVID.dll
F77DF000 - ACPI.sys
F7D31000 - \WINDOWS\system32\DRIVERS\WMILIB.SYS
F77CE000 - pci.sys
F782F000 - isapnp.sys
F783F000 - ohci1394.sys
F784F000 - \WINDOWS\system32\DRIVERS\1394BUS.SYS
F785F000 - SSHRMD.SYS
F786F000 - SSFS0BB9.SYS
F77A2000 - SSIDRV.SYS
F7775000 - \WINDOWS\SYSTEM32\Drivers\NDIS.SYS
F7AAF000 - \WINDOWS\SYSTEM32\Drivers\TDI.SYS
F7DF7000 - pciide.sys
F7AB7000 - \WINDOWS\system32\DRIVERS\PCIIDEX.SYS
F787F000 - MountMgr.sys
F7756000 - ftdisk.sys
F7ABF000 - PartMgr.sys
F788F000 - VolSnap.sys
F773E000 - atapi.sys
F789F000 - disk.sys
F78AF000 - \WINDOWS\system32\DRIVERS\CLASSPNP.SYS
F771E000 - fltMgr.sys
F770C000 - sr.sys
F78BF000 - PxHelp20.sys
F76F5000 - KSecDD.sys
F76E2000 - WudfPf.sys
F7655000 - Ntfs.sys
F7AC7000 - SISAGPX.sys
F763A000 - Mup.sys
F7A3F000 - \SystemRoot\system32\DRIVERS\amdk7.sys
F6D8C000 - \SystemRoot\system32\DRIVERS\ati2mtag.sys
F67E9000 - \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS
F78FF000 - \SystemRoot\system32\DRIVERS\i8042prt.sys
F7330000 - \SystemRoot\system32\DRIVERS\L8042mou.Sys
F679A000 - \SystemRoot\system32\DRIVERS\LMouKE.Sys
F7B47000 - \SystemRoot\system32\DRIVERS\mouclass.sys
F7D13000 - \SystemRoot\system32\DRIVERS\L8042Kbd.sys
F7320000 - \SystemRoot\System32\Drivers\sskbfd.sys
F7B5F000 - \SystemRoot\system32\DRIVERS\kbdclass.sys
F7B67000 - \SystemRoot\system32\DRIVERS\fdc.sys
F6740000 - \SystemRoot\system32\DRIVERS\serial.sys
F7D27000 - \SystemRoot\system32\DRIVERS\serenum.sys
F672C000 - \SystemRoot\system32\DRIVERS\parport.sys
F7D2B000 - \SystemRoot\system32\DRIVERS\gameenum.sys
F7EA4000 - \SystemRoot\system32\drivers\msmpu401.sys
F6708000 - \SystemRoot\system32\drivers\portcls.sys
F7310000 - \SystemRoot\system32\drivers\drmk.sys
F66E5000 - \SystemRoot\system32\drivers\ks.sys
F7B6F000 - \SystemRoot\system32\DRIVERS\usbohci.sys
F66C2000 - \SystemRoot\system32\DRIVERS\USBPORT.SYS
F7300000 - \SystemRoot\system32\DRIVERS\imapi.sys
F72F0000 - \SystemRoot\system32\DRIVERS\cdrom.sys
F72E0000 - \SystemRoot\system32\DRIVERS\redbook.sys
F7B77000 - \SystemRoot\system32\DRIVERS\sisnic.sys
F667C000 - \SystemRoot\system32\drivers\emu10k1m.sys
F72D0000 - \SystemRoot\system32\drivers\sfmanm.sys
F7D69000 - \SystemRoot\system32\drivers\ctlfacem.sys
F72C0000 - \SystemRoot\system32\DRIVERS\nic1394.sys
F64B6000 - \SystemRoot\system32\DRIVERS\HSFBS2S2.sys
F63B7000 - \SystemRoot\system32\DRIVERS\HSFDPSP2.sys
F630F000 - \SystemRoot\system32\DRIVERS\HSFCXTS2.sys
F7B7F000 - \SystemRoot\System32\Drivers\Modem.SYS
F7B87000 - \SystemRoot\system32\DRIVERS\usbuhci.sys
F7B8F000 - \SystemRoot\system32\DRIVERS\usbehci.sys
F61CB000 - \SystemRoot\system32\DRIVERS\btkrnl.sys
F7EAF000 - \SystemRoot\system32\DRIVERS\audstub.sys
F7D71000 - \SystemRoot\System32\Drivers\RootMdm.sys
F70DB000 - \SystemRoot\system32\DRIVERS\rasl2tp.sys
F7606000 - \SystemRoot\system32\DRIVERS\ndistapi.sys
F617C000 - \SystemRoot\system32\DRIVERS\ndiswan.sys
F70CB000 - \SystemRoot\system32\DRIVERS\raspppoe.sys
F70BB000 - \SystemRoot\system32\DRIVERS\raspptp.sys
F616B000 - \SystemRoot\system32\DRIVERS\psched.sys
F70AB000 - \SystemRoot\system32\DRIVERS\msgpc.sys
F7B17000 - \SystemRoot\system32\DRIVERS\ptilink.sys
F7B1F000 - \SystemRoot\system32\DRIVERS\raspti.sys
F708B000 - \SystemRoot\system32\DRIVERS\termdd.sys
F7D73000 - \SystemRoot\system32\DRIVERS\swenum.sys
F6137000 - \SystemRoot\system32\DRIVERS\update.sys
F7602000 - \SystemRoot\system32\DRIVERS\mssmbios.sys
F707B000 - \SystemRoot\system32\DRIVERS\usbhub.sys
F7D75000 - \SystemRoot\system32\DRIVERS\USBD.SYS
F706B000 - \SystemRoot\System32\Drivers\NDProxy.SYS
F7BBF000 - \SystemRoot\system32\DRIVERS\flpydisk.sys
F7CDF000 - \SystemRoot\system32\drivers\MODEMCSA.sys
BA46B000 - \SystemRoot\System32\Drivers\SRTSP.SYS
F760A000 - \SystemRoot\system32\DRIVERS\hidusb.sys
F79AF000 - \SystemRoot\system32\DRIVERS\HIDCLASS.SYS
F7AEF000 - \SystemRoot\system32\DRIVERS\HIDPARSE.SYS
F79BF000 - \SystemRoot\System32\Drivers\btwusb.sys
F7BDF000 - \SystemRoot\system32\DRIVERS\usbccgp.sys
BA30D000 - \SystemRoot\system32\DRIVERS\CamDrL21.sys
F79DF000 - \SystemRoot\system32\DRIVERS\STREAM.SYS
F7BA7000 - \SystemRoot\system32\DRIVERS\USBCAMD.SYS
BA280000 - \SystemRoot\system32\DRIVERS\lvsvf2.sys
F799F000 - \SystemRoot\system32\drivers\usbaudio.sys
F601D000 - \SystemRoot\System32\Drivers\SRTSPX.SYS
F7DB5000 - \SystemRoot\System32\Drivers\Fs_Rec.SYS
F7E78000 - \SystemRoot\System32\Drivers\Null.SYS
F7DB9000 - \SystemRoot\System32\Drivers\Beep.SYS
F7BAF000 - \SystemRoot\System32\drivers\vga.sys
F7DBB000 - \SystemRoot\System32\Drivers\mnmdd.SYS
F7DBD000 - \SystemRoot\System32\DRIVERS\RDPCDD.sys
F7B27000 - \SystemRoot\System32\Drivers\Msfs.SYS
F7B97000 - \SystemRoot\System32\Drivers\Npfs.SYS
F6117000 - \SystemRoot\system32\DRIVERS\rasacd.sys
BA1EB000 - \SystemRoot\system32\DRIVERS\ipsec.sys
BA193000 - \SystemRoot\system32\DRIVERS\tcpip.sys
BA165000 - \SystemRoot\System32\Drivers\SYMTDI.SYS
BA144000 - \SystemRoot\system32\DRIVERS\ipnat.sys
F600D000 - \SystemRoot\system32\DRIVERS\wanarp.sys
BA11F000 - \??\C:\WINDOWS\system32\Drivers\SYMEVENT.SYS
F5FFD000 - \SystemRoot\system32\DRIVERS\arp1394.sys
F7C0F000 - \SystemRoot\System32\Drivers\SYMREDRV.SYS
F7DC9000 - \SystemRoot\System32\Drivers\SYMDNS.SYS
F7C2F000 - \SystemRoot\System32\Drivers\SYMNDIS.SYS
BA0FD000 - \SystemRoot\System32\Drivers\SYMFW.SYS
F5FED000 - \SystemRoot\System32\Drivers\SYMIDS.SYS
BA0D2000 - \??\C:\PROGRA~1\FICHIE~1\SYMANT~1\SymcData\idsdefs\20080116.003\SymIDSCo.sys
BA0AA000 - \SystemRoot\system32\DRIVERS\netbt.sys
BA088000 - \SystemRoot\System32\drivers\afd.sys
F798F000 - \SystemRoot\system32\DRIVERS\netbios.sys
BA05D000 - \SystemRoot\system32\DRIVERS\rdbss.sys
B9FEE000 - \SystemRoot\system32\DRIVERS\mrxsmb.sys
F79CF000 - \SystemRoot\System32\Drivers\Fips.SYS
B9F6C000 - \??\C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys
F7A5F000 - \SystemRoot\System32\Drivers\Cdfs.SYS
B9F54000 - \SystemRoot\System32\Drivers\dump_atapi.sys
F7DE9000 - \SystemRoot\System32\Drivers\dump_WMILIB.SYS
BF800000 - \SystemRoot\System32\win32k.sys
F675D000 - \SystemRoot\System32\drivers\Dxapi.sys
F7B07000 - \SystemRoot\System32\watchdog.sys
BF000000 - \SystemRoot\System32\drivers\dxg.sys
F7E5D000 - \SystemRoot\System32\drivers\dxgthk.sys
BF012000 - \SystemRoot\System32\ati2dvag.dll
BF057000 - \SystemRoot\System32\ati2cqag.dll
BF0B1000 - \SystemRoot\System32\atikvmag.dll
BF101000 - \SystemRoot\System32\atiok3x2.dll
BF113000 - \SystemRoot\System32\ati3duag.dll
BF3DD000 - \SystemRoot\System32\ativvaxx.dll
BFFA0000 - \SystemRoot\System32\ATMFD.DLL
B7E10000 - \SystemRoot\system32\DRIVERS\ndisuio.sys
B7BF7000 - \SystemRoot\system32\DRIVERS\wudfrd.sys
B7954000 - \SystemRoot\System32\Drivers\Fastfat.SYS
B7827000 - \SystemRoot\system32\drivers\wdmaud.sys
B7B8F000 - \SystemRoot\system32\drivers\sysaudio.sys
B7524000 - \SystemRoot\system32\DRIVERS\mrxdav.sys
F7DB7000 - \SystemRoot\System32\Drivers\ParVdm.SYS
F7C17000 - \??\C:\WINDOWS\system32\drivers\btserial.sys
B74CA000 - \??\C:\WINDOWS\system32\drivers\btslbcsp.sys
B75FD000 - \SystemRoot\system32\DRIVERS\mdmxsdk.sys
B7428000 - \SystemRoot\system32\DRIVERS\srv.sys
F7AE7000 - \??\C:\WINDOWS\system32\drivers\symlcbrd.sys
B713F000 - \??\C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCDrv.sys
B7288000 - \??\C:\WINDOWS\system32\Drivers\NPDRIVER.SYS
B6FBE000 - \SystemRoot\System32\Drivers\HTTP.sys
B5C76000 - \??\C:\PROGRA~1\FICHIE~1\SYMANT~1\VIRUSD~1\20080116.038\NAVEX15.SYS
B5C63000 - \??\C:\PROGRA~1\FICHIE~1\SYMANT~1\VIRUSD~1\20080116.038\NAVENG.SYS
B5BD8000 - \??\C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\eeCtrl.sys
B5BBA000 - \??\C:\Program Files\Fichiers communs\Symantec Shared\EENGINE\EraserUtilDrv10740.sys
B590F000 - \SystemRoot\system32\drivers\kmixer.sys
F7E8C000 - \SystemRoot\System32\DRIVERS\KProcCheck.sys
Total number of drivers = 165
Liste des programmes installes
23_24_2500Tour
2400
2400_2500Help
2400_2500trb
3GP Video Converter 3
Adobe Reader 8.1.1 - Français
Adobe Shockwave Player
Advanced Business Card Maker 3.1
AiO_Scan
AiOSoftware
Apollo DivX to DVD Creator 4.2
AppCore
Archiveur WinRAR
Assistant de connexion Windows Live
ATI Catalyst Control Center
ATI Display Driver
AutoUpdate
AV
BufferChm
Catalyst Control Center Core Implementation
Catalyst Control Center Graphics Full Existing
Catalyst Control Center Graphics Full New
Catalyst Control Center Graphics Light
Catalyst Control Center Graphics Previews Common
Catalyst Control Center Localization French
ccc-core-preinstall
ccc-core-static
ccc-utility
CCC Help French
ccCommon
ccCommon
Click'N Design 3D (V5)
Codeur Windows Media Série 9
Codeur Windows Media Série 9
Connection Keep Alive
Copy
Correctif pour Lecteur Windows Media 11 (KB939683)
Correctif pour Windows XP (KB914440)
Correctif Windows XP - KB873339
Correctif Windows XP - KB885835
Correctif Windows XP - KB885836
Correctif Windows XP - KB886185
Correctif Windows XP - KB887472
Correctif Windows XP - KB888302
Correctif Windows XP - KB890859
Correctif Windows XP - KB891781
CreativeProjects
CreativeProjectsTemplates
CueTour
Destinations
Director
DivX Codec
DivX Content Uploader
DivX Converter
DivX Player
DivX Web Player
DocProc
DocumentViewer
DVD Shrink 3.2
dvdSanta 4.50
Fax
Galerie de photos Windows Live
Giants
Hotfix for Microsoft .NET Framework 3.0 (KB932471)
Hotfix for Windows Media Format 11 SDK (KB929399)
Hotfix for Windows XP (KB915865)
Hotfix for Windows XP (KB926239)
HP Diagnostic Assistant
HP Image Zone 4.2
HP PSC & OfficeJet 4.2
HP Software Update
HPSystemDiagnostics
InstantShare
Java(TM) 6 Update 3
Lecteur Windows Media 11
LimeWire 4.14.12
LiveUpdate 3.2 (Symantec Corporation)
LiveUpdate Notice (Symantec Corporation)
Logitech Desktop Messenger
Logitech Print Service
Logitech QuickCam
Logitech SetPoint
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 French Language Pack
Microsoft .NET Framework 1.1 Hotfix (KB928366)
Microsoft .NET Framework 2.0 Language Pack - FRA
Microsoft .NET Framework 2.0 Service Pack 1
Microsoft .NET Framework 3.0 French Language Pack
Microsoft .NET Framework 3.0 Service Pack 1
Microsoft Compression Client Pack 1.0 for Windows XP
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office 97 Standard
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft User-Mode Driver Framework Feature Pack 1.5
Microsoft Visual C++ 2005 Redistributable
mIRC
Mise à jour de sécurité pour Lecteur Windows Media (KB911564)
Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)
Mise à jour de sécurité pour Lecteur Windows Media 6.4 (KB925398)
Mise à jour de sécurité pour Lecteur Windows Media 9 (KB936782)
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB939653)
Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615)
Mise à jour de sécurité pour Windows XP (KB890046)
Mise à jour de sécurité pour Windows XP (KB893756)
Mise à jour de sécurité pour Windows XP (KB896358)
Mise à jour de sécurité pour Windows XP (KB896423)
Mise à jour de sécurité pour Windows XP (KB896428)
Mise à jour de sécurité pour Windows XP (KB899587)
Mise à jour de sécurité pour Windows XP (KB899591)
Mise à jour de sécurité pour Windows XP (KB900725)
Mise à jour de sécurité pour Windows XP (KB901017)
Mise à jour de sécurité pour Windows XP (KB901214)
Mise à jour de sécurité pour Windows XP (KB902400)
Mise à jour de sécurité pour Windows XP (KB904706)
Mise à jour de sécurité pour Windows XP (KB905414)
Mise à jour de sécurité pour Windows XP (KB905749)
Mise à jour de sécurité pour Windows XP (KB908519)
Mise à jour de sécurité pour Windows XP (KB911562)
Mise à jour de sécurité pour Windows XP (KB911927)
Mise à jour de sécurité pour Windows XP (KB913580)
Mise à jour de sécurité pour Windows XP (KB914388)
Mise à jour de sécurité pour Windows XP (KB914389)
Mise à jour de sécurité pour Windows XP (KB917344)
Mise à jour de sécurité pour Windows XP (KB917953)
Mise à jour de sécurité pour Windows XP (KB918118)
Mise à jour de sécurité pour Windows XP (KB918439)
Mise à jour de sécurité pour Windows XP (KB919007)
Mise à jour de sécurité pour Windows XP (KB920213)
Mise à jour de sécurité pour Windows XP (KB920670)
Mise à jour de sécurité pour Windows XP (KB920683)
Mise à jour de sécurité pour Windows XP (KB920685)
Mise à jour de sécurité pour Windows XP (KB921503)
Mise à jour de sécurité pour Windows XP (KB922819)
Mise à jour de sécurité pour Windows XP (KB923191)
Mise à jour de sécurité pour Windows XP (KB923414)
Mise à jour de sécurité pour Windows XP (KB923689)
Mise à jour de sécurité pour Windows XP (KB923789)
Mise à jour de sécurité pour Windows XP (KB923980)
Mise à jour de sécurité pour Windows XP (KB924270)
Mise à jour de sécurité pour Windows XP (KB924496)
Mise à jour de sécurité pour Windows XP (KB924667)
Mise à jour de sécurité pour Windows XP (KB925902)
Mise à jour de sécurité pour Windows XP (KB926255)
Mise à jour de sécurité pour Windows XP (KB926436)
Mise à jour de sécurité pour Windows XP (KB927779)
Mise à jour de sécurité pour Windows XP (KB927802)
Mise à jour de sécurité pour Windows XP (KB928255)
Mise à jour de sécurité pour Windows XP (KB928843)
Mise à jour de sécurité pour Windows XP (KB929123)
Mise à jour de sécurité pour Windows XP (KB930178)
Mise à jour de sécurité pour Windows XP (KB931261)
Mise à jour de sécurité pour Windows XP (KB931784)
Mise à jour de sécurité pour Windows XP (KB932168)
Mise à jour de sécurité pour Windows XP (KB933729)
Mise à jour de sécurité pour Windows XP (KB935839)
Mise à jour de sécurité pour Windows XP (KB935840)
Mise à jour de sécurité pour Windows XP (KB936021)
Mise à jour de sécurité pour Windows XP (KB938127)
Mise à jour de sécurité pour Windows XP (KB938829)
Mise à jour de sécurité pour Windows XP (KB939653)
Mise à jour de sécurité pour Windows XP (KB941202)
Mise à jour de sécurité pour Windows XP (KB941568)
Mise à jour de sécurité pour Windows XP (KB941569)
Mise à jour de sécurité pour Windows XP (KB941644)
Mise à jour de sécurité pour Windows XP (KB943460)
Mise à jour de sécurité pour Windows XP (KB943485)
Mise à jour de sécurité pour Windows XP (KB944653)
Mise à jour pour Windows XP (KB894391)
Mise à jour pour Windows XP (KB898461)
Mise à jour pour Windows XP (KB900485)
Mise à jour pour Windows XP (KB904942)
Mise à jour pour Windows XP (KB908531)
Mise à jour pour Windows XP (KB910437)
Mise à jour pour Windows XP (KB911280)
Mise à jour pour Windows XP (KB916595)
Mise à jour pour Windows XP (KB920342)
Mise à jour pour Windows XP (KB920872)
Mise à jour pour Windows XP (KB922582)
Mise à jour pour Windows XP (KB925720)
Mise à jour pour Windows XP (KB925876)
Mise à jour pour Windows XP (KB927891)
Mise à jour pour Windows XP (KB930916)
Mise à jour pour Windows XP (KB933360)
Mise à jour pour Windows XP (KB938828)
Mise à jour pour Windows XP (KB942763)
Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA
Module de prise en charge linguistique du français de Microsoft .NET Framework 3.0
MSRedist
MSRedist
MSXML 4.0 SP2 (KB936181)
MSXML 6.0 Parser (KB933579)
Nokia Connectivity Cable Driver
Nokia PC Suite
Nokia PC Suite
Norton AntiVirus
Norton Cleanup
Norton Confidential Browser Component
Norton Confidential Web Protection Component
Norton Internet Security
Norton Internet Security
Norton Internet Security
Norton Internet Security
Norton Internet Security (Symantec Corporation)
Norton Protection Center
Norton Protection Center
Norton SystemWorks
Norton SystemWorks 2006 Basic Edition
Norton SystemWorks 2006 Basic Edition (Symantec Corporation)
Norton Utilities
NSW_DRM_COLLECTION
Overland
Package de pilotes Windows - Nokia Modem (11/03/2006 6.82.0.1)
PC Connectivity Solution
PhotoGallery
PowerDVD
PowerProducer
PrintScreen
ProductContext
Programme de gestion Camera de Logitech®
QFolder
QuickProjects
Readme
Scan
SimpleCenter
SiS 900 PCI Fast Ethernet Adapter Driver
Skins
SkinsHP1
Sound Blaster Live! Web 2K/XP
SPBBC 32bit
Spy Sweeper
Symantec Real Time Storage Protection Component
SymNet
Transformers(TM) - Le Jeu Demo
Transformers(TM) - Le Jeu Demo
TrayApp
U.S. Robotics 56K Voice Host Int
Ulead VideoStudio 7 SE Basic
Unload
VisualRoute 2008
WebFldrs XP
WebReg
WIDCOMM Bluetooth Software
Windows Communication Foundation Language Pack - FRA
Windows Driver Package - Nokia (WUDFRd) WPD (03/19/2007 6.83.31.1)
Windows Driver Package - Nokia Modem (02/15/2007 3.1)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Genuine Advantage Validation Tool (KB892130)
Windows Imaging Component
Windows Installer 3.1 (KB893803)
Windows Internet Explorer 7
Windows Live installer
Windows Live Mail
Windows Live Messenger
Windows Media Format 11 runtime
Windows Media Format 11 runtime
Windows Media Format SDK Hotfix - KB891122
Windows Media Player 11
Windows Presentation Foundation
Windows Presentation Foundation Language Pack (FRA)
Windows Workflow Foundation FR Language Pack
XML Paper Specification Shared Components Language Pack 1.0
XML Paper Specification Shared Components Pack 1.0
Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est FC21-807C
Répertoire de C:\Program Files
14-01-08 17:10 <REP> .
14-01-08 17:10 <REP> ..
04-12-07 09:02 <REP> Adobe
03-12-07 11:10 <REP> ATI Technologies
02-12-07 16:09 <REP> ComPlus Applications
02-12-07 16:58 <REP> CONEXANT
02-12-07 19:59 <REP> Creative
03-12-07 13:07 <REP> CyberLink
12-01-08 16:14 <REP> DIFX
03-12-07 14:17 <REP> directx
12-01-08 16:13 <REP> Fichiers communs
03-12-07 13:49 <REP> Hewlett-Packard
03-12-07 13:46 <REP> HP
12-12-07 16:34 <REP> Internet Explorer
07-12-07 00:52 <REP> Java
03-12-07 14:17 <REP> Logitech
02-12-07 17:25 <REP> Messenger
02-12-07 16:12 <REP> microsoft frontpage
04-12-07 07:56 <REP> Microsoft SQL Server Compact Edition
02-12-07 16:09 <REP> Movie Maker
02-12-07 18:49 <REP> MSBuild
02-12-07 16:07 <REP> MSN
02-12-07 16:08 <REP> MSN Gaming Zone
04-12-07 09:26 <REP> MSXML 4.0
02-12-07 19:34 <REP> MSXML 6.0
07-12-07 00:10 <REP> Navilog1
02-12-07 16:10 <REP> NetMeeting
02-12-07 16:08 <REP> Online Services
02-12-07 17:30 <REP> Outlook Express
12-01-08 16:11 <REP> PC Connectivity Solution
14-01-08 17:10 <REP> QuickTime
02-12-07 18:45 <REP> Reference Assemblies
02-12-07 16:10 <REP> Services en ligne
02-12-07 16:26 <REP> SiSLan
05-12-07 08:04 <REP> Symantec
04-12-07 08:38 <REP> Windows Live
03-12-07 13:29 <REP> Windows Media Components
02-12-07 18:04 <REP> Windows Media Connect 2
02-12-07 18:04 <REP> Windows Media Player
03-12-07 13:37 <REP> Windows Messaging
02-12-07 16:08 <REP> Windows NT
02-12-07 16:12 <REP> xerox
0 fichier(s) 0 octets
42 Rép(s) 5 367 910 400 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est FC21-807C
Répertoire de C:\Program Files\fichiers communs
12-01-08 16:13 <REP> .
12-01-08 16:13 <REP> ..
04-12-07 09:03 <REP> Adobe
15-12-07 20:48 <REP> Ahead
03-12-07 14:17 <REP> FotoWire
03-12-07 13:48 <REP> Hewlett-Packard
03-12-07 13:50 <REP> HP
02-12-07 21:08 <REP> InstallShield
07-12-07 00:49 <REP> Java
03-12-07 14:16 <REP> Logitech
04-12-07 07:41 <REP> Microsoft Shared
02-12-07 16:10 <REP> MSSoap
12-01-08 16:13 <REP> Nokia
02-12-07 10:51 <REP> ODBC
12-01-08 16:13 <REP> PCSuite
02-12-07 16:10 <REP> Services
02-12-07 10:51 <REP> SpeechEngines
18-01-08 09:10 <REP> Symantec Shared
02-12-07 17:30 <REP> System
03-12-07 13:29 <REP> Ulead Systems
0 fichier(s) 0 octets
20 Rép(s) 5 367 910 400 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est FC21-807C
Répertoire de C:\Program Files\fichiers communs\Microsoft Shared\Web Folders
02-12-07 16:20 <REP> .
02-12-07 16:20 <REP> ..
18-05-01 15:57 561 209 MSONSEXT.DLL
03-06-99 12:09 122 937 MSOWS409.DLL
07-03-01 07:00 127 033 MSOWS40c.DLL
3 fichier(s) 811 179 octets
2 Rép(s) 5 367 910 400 octets libres
c:\Documents and Settings\All Users\Application Data\Installations\{57A48477-92F0-4C1F-ADF9-4806C4EC3CF2}\Nokia_PC_Suite_683_rel_14_1_fre_ca_web.exe
c:\Documents and Settings\All Users\Application Data\Installations\{57A48477-92F0-4C1F-ADF9-4806C4EC3CF2}\Installations\CommonCustomActions\UninstCCD.exe
c:\Documents and Settings\All Users\Application Data\Installations\{57A48477-92F0-4C1F-ADF9-4806C4EC3CF2}\Installations\CommonCustomActions\UninstPCS.exe
c:\Documents and Settings\All Users\Application Data\Installations\{57A48477-92F0-4C1F-ADF9-4806C4EC3CF2}\Installations\CommonCustomActions\UninstPCSFEMsi.exe
c:\Documents and Settings\Martin Vézina\x.exe
c:\Documents and Settings\Martin Vézina\.SimpleCenter\updates\2.0.3.11.exe
c:\Documents and Settings\Martin Vézina\Application Data\LimeWire\.NetworkShare\LimeWireWin4.16.2.exe
c:\Documents and Settings\Martin Vézina\Application Data\Microsoft\Installer\{457791C5-D702-4143-A7B2-2744BE9573F2}\NewShortcut1_5B69D3033CA54B39B5ECE7D051297E77.exe
c:\Documents and Settings\Martin Vézina\Local Settings\Temp\bwgo0003c0a3.exe
c:\Documents and Settings\Martin Vézina\Local Settings\Temp\bwgo00044785.exe
c:\Documents and Settings\Martin Vézina\Local Settings\Temp\bwgo000495b8.exe
c:\Documents and Settings\Martin Vézina\Local Settings\Temp\bwgo0004ba5f.exe
c:\Documents and Settings\Martin Vézina\Local Settings\Temp\bwgo0004c336.exe
c:\Documents and Settings\Martin Vézina\Local Settings\Temp\bwgo0004cd62.exe
c:\Documents and Settings\Martin Vézina\Local Settings\Temp\bwgo0004d1ba.exe
c:\Documents and Settings\Martin Vézina\Local Settings\Temp\bwgo0004e567.exe
c:\Documents and Settings\Martin Vézina\Local Settings\Temp\bwgo00058aea.exe
c:\Documents and Settings\Martin Vézina\Local Settings\Temp\bwgo000c33c9.exe
c:\Documents and Settings\Martin Vézina\Local Settings\Temp\ins1.tmp\LDMClient.exe
c:\Documents and Settings\Martin Vézina\Local Settings\Temp\ins2.tmp\LDMClient.exe
c:\Documents and Settings\Martin Vézina\Local Settings\Temporary Internet Files\Content.IE5\0O0HPDDZ\Nokia_PC_Suite_683_rel_14_1_fre_ca_web[1].exe
c:\Documents and Settings\All Users\Application Data\Hewlett-Packard\Diagnostic Assistant\data\hprbevdb.dll
c:\Documents and Settings\All Users\Application Data\Microsoft\IdentityCRL\production\ppcrlconfig.dll
c:\Documents and Settings\All Users\Application Data\Nero\DrWeb\Drweb32.dll
c:\Documents and Settings\All Users\Application Data\Symantec\SyKnAppS\patch25.dll
c:\Documents and Settings\All Users\Application Data\Symantec\SyKnAppS\SyKnAppS.dll
c:\Documents and Settings\LocalService\Application Data\Microsoft\UPnP Device Host\upnphost\udhisapi.dll
****** Fin du rapport DiagHelp
Veuillez svp envoyer le fichier C:\upload_moi_ATHLON.tar.gz a l'adresse http://upload.malekal.com
_______________________RApport de HijackThis___________________________________________________________
Logfile of HijackThis v1.99.1
Scan saved at 10:34:15, on 18-01-08
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
C:\Program Files\Fichiers communs\Symantec Shared\AppCore\AppSvc32.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
D:\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
D:\NORTON~1\NORTON~1\NPROTECT.EXE
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
D:\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
C:\WINDOWS\system32\svchost.exe
D:\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\htpatch.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\WINDOWS\system32\devldr32.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
D:\CyberLink\PowerDVD\PDVDServ.exe
D:\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
D:\Logitech\Video\LogiTray.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\HP\hpcoretech\comp\hptskmgr.exe
C:\WINDOWS\System32\svchost.exe
D:\Webroot\Spy Sweeper\SpySweeperUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\DOCUME~1\MARTIN~1\LOCALS~1\Temp\bwgo0003c0a3.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
D:\WIDCOMM\Logiciel Bluetooth\BTTray.exe
C:\WINDOWS\system32\LVComS.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\PC Connectivity Solution\NclBTHandler.exe
D:\WIDCOMM\LOGICI~1\BTSTAC~1.EXE
D:\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
D:\Microsoft Office\Office\OSA.EXE
D:\SimpleCenter\SimpleCenter.exe
C:\Program Files\Fichiers communs\Logitech\KHAL\KHALMNPR.EXE
D:\HP\Digital Imaging\bin\hpqgalry.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\Rundll32.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
D:\Webroot\Spy Sweeper\SSU.EXE
C:\Program Files\Internet Explorer\iexplore.exe
D:\hijackthis\test.exe.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O1 - Hosts: 204.126.173.61 prodapp2.simpledevices.com
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\1.5\NppBho.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: browser optimizer superiorads - {8E015787-B1E3-404a-95DE-3E71E1FA0305} - C:\WINDOWS\system32\spads.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\1.5\UIBHO.dll
O4 - HKLM\..\Run: [HTpatch] C:\WINDOWS\htpatch.exe
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [RemoteControl] D:\CyberLink\PowerDVD\PDVDServ.exe
O4 - HKLM\..\Run: [LanguageShortcut] D:\CyberLink\PowerDVD\Language\Language.exe
O4 - HKLM\..\Run: [HP Software Update] "D:\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [LogitechVideoRepair] D:\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] D:\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "D:\Norton Internet Security\osCheck.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [UserFaultCheck] C:\WINDOWS\system32\dumprep 0 -u
O4 - HKLM\..\Run: [spa_start] C:\WINDOWS\System32\Rundll32.exe "C:\WINDOWS\system32\spads.dll" DllVerify
O4 - HKLM\..\Run: [PCSuiteTrayApplication] "D:\Nokia\Nokia PC Suite 6\LaunchApplication.exe" -startup
O4 - HKLM\..\Run: [SpySweeper] D:\Webroot\Spy Sweeper\SpySweeperUI.exe /startintray
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LDM] "C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [Norton SystemWorks] "D:\Norton SystemWorks\cfgwiz.exe" /GUID {05858CFD-5CC4-4ceb-AAAF-CF00BF39736A} /MODE CfgWiz
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - Startup: Démarrage d'Office.lnk = D:\Microsoft Office\Office\OSA.EXE
O4 - Startup: Microsoft Recherche accélérée.lnk = D:\Microsoft Office\Office\FINDFAST.EXE
O4 - Startup: SimpleCenter.lnk = D:\SimpleCenter\SimpleCenter.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = D:\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = D:\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger Agent.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: Envoyer à &Bluetooth - D:\WIDCOMM\Logiciel Bluetooth\btsendto_ie_ctx.htm
O9 - Extra button: Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - D:\VisualRoute 2008\vrie.dll
O9 - Extra 'Tools' menuitem: VisualRoute Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - D:\VisualRoute 2008\vrie.dll
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Express Cleanup - {5E638779-1818-4754-A595-EF1C63B87A56} - D:\Norton SystemWorks\Norton Cleanup\WCQuick.lnk
O9 - Extra 'Tools' menuitem: Express Cleanup - {5E638779-1818-4754-A595-EF1C63B87A56} - D:\Norton SystemWorks\Norton Cleanup\WCQuick.lnk
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - D:\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - D:\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by105fd.bay105.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{C142CE0A-4CFA-4FFD-917B-62EB8C7FF09E}: NameServer = 192.168.0.1
O18 - Protocol: bw+0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dl
11 réponses
slt,
* Télécharger Hoster :
http://www.funkytoad.com/download/HostsXpert.zip
* Dézipper le dossier sur le bureau.
* Lancer Hoster et cliquer sur Restore Microsoft's Hosts File
__________________
Relance HijackThis, choisis "do a scan only" coche la case devant les lignes ci-dessous et clic en bas sur "fix checked".
O1 - Hosts: 204.126.173.61 prodapp2.simpledevices.com
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: browser optimizer superiorads - {8E015787-B1E3-404a-95DE-3E71E1FA0305} - C:\WINDOWS\system32\spads.dll
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [UserFaultCheck] C:\WINDOWS\system32\dumprep 0 -u
O4 - HKLM\..\Run: [spa_start] C:\WINDOWS\System32\Rundll32.exe "C:\WINDOWS\system32\spads.dll" DllVerify
O4 - Startup: Démarrage d'Office.lnk = D:\Microsoft Office\Office\OSA.EXE
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
______________________
télécharge OTMoveIt http://download.bleepingcomputer.com/oldtimer/OTMoveIt.exe (de Old_Timer) sur ton Bureau.
double-clique sur OTMoveIt.exe pour le lancer.
copie la liste qui se trouve en citation ci-dessous,
et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved.
Citation :
C:\WINDOWS\system32\spads.dll
clique sur MoveIt! pour lancer la suppression.
le résultat apparaitra dans le cadre "Results".
clique sur Exit pour fermer.
poste le rapport situé dans C:\_OTMoveIt\MovedFiles.
il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes.
_______________________
AVG antispyware
https://www.01net.com/telecharger/
Tuto :
http://www.kachouri.com/tuto/tuto-161-avg-anti-spyware-75-pour-votre-securite.html
->Relance AVG AS -> "Analyse" ->"Paramètres"
Sous la question "Comment réagir ?" :
-> clique sur "Actions recommandées" et choisis "Quarantaines"
-> Re-clique sur l'onglet "Analyse" puis réalise une "Analyse complète du système"
Si un fichier est infecté en fin d'analyse
->Clique sur "Appliquer toutes les actions "
->Clique sur "Enregistrer le rapport" puis sur "Enregistrer le rapport sous".
->Enregistre ce fichier texte sur ton bureau ensuite colle le rapport ici
_______________________
recolle un rapport hijackhtis complet cette fois pour bien verifier
a plus
* Télécharger Hoster :
http://www.funkytoad.com/download/HostsXpert.zip
* Dézipper le dossier sur le bureau.
* Lancer Hoster et cliquer sur Restore Microsoft's Hosts File
__________________
Relance HijackThis, choisis "do a scan only" coche la case devant les lignes ci-dessous et clic en bas sur "fix checked".
O1 - Hosts: 204.126.173.61 prodapp2.simpledevices.com
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: browser optimizer superiorads - {8E015787-B1E3-404a-95DE-3E71E1FA0305} - C:\WINDOWS\system32\spads.dll
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [UserFaultCheck] C:\WINDOWS\system32\dumprep 0 -u
O4 - HKLM\..\Run: [spa_start] C:\WINDOWS\System32\Rundll32.exe "C:\WINDOWS\system32\spads.dll" DllVerify
O4 - Startup: Démarrage d'Office.lnk = D:\Microsoft Office\Office\OSA.EXE
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
______________________
télécharge OTMoveIt http://download.bleepingcomputer.com/oldtimer/OTMoveIt.exe (de Old_Timer) sur ton Bureau.
double-clique sur OTMoveIt.exe pour le lancer.
copie la liste qui se trouve en citation ci-dessous,
et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved.
Citation :
C:\WINDOWS\system32\spads.dll
clique sur MoveIt! pour lancer la suppression.
le résultat apparaitra dans le cadre "Results".
clique sur Exit pour fermer.
poste le rapport situé dans C:\_OTMoveIt\MovedFiles.
il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes.
_______________________
AVG antispyware
https://www.01net.com/telecharger/
Tuto :
http://www.kachouri.com/tuto/tuto-161-avg-anti-spyware-75-pour-votre-securite.html
->Relance AVG AS -> "Analyse" ->"Paramètres"
Sous la question "Comment réagir ?" :
-> clique sur "Actions recommandées" et choisis "Quarantaines"
-> Re-clique sur l'onglet "Analyse" puis réalise une "Analyse complète du système"
Si un fichier est infecté en fin d'analyse
->Clique sur "Appliquer toutes les actions "
->Clique sur "Enregistrer le rapport" puis sur "Enregistrer le rapport sous".
->Enregistre ce fichier texte sur ton bureau ensuite colle le rapport ici
_______________________
recolle un rapport hijackhtis complet cette fois pour bien verifier
a plus
Bonsoir,
Merci beaucoups de m'avoir répondu et d'avoir prix le temps de faire les démarches a suivre.
Voici le reste des autres rapports:
_____________________________----Rapport de OTMoveIt.----_______________________
C:\WINDOWS\system32\spads.dll unregistered successfully.
C:\WINDOWS\system32\spads.dll moved successfully.
Created on 01-21-2008 19:45:01
_____________________________----Rapport de AVG.----_______________________
---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------
+ Créé à: 21:26:50 21-01-08
+ Résultat de l'analyse:
D:\System Volume Information\_restore{47B7836B-E51E-43E7-95D3-F7673059E1D1}\RP9\A0002874.exe -> Not-A-Virus.Adware.NewWeb : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\system32\spads.dll -> Not-A-Virus.Adware.TrafficSol : Nettoyé et sauvegardé (mise en quarantaine).
D:\System Volume Information\_restore{47B7836B-E51E-43E7-95D3-F7673059E1D1}\RP9\A0002843.exe -> Not-A-Virus.Adware.TrafficSol : Nettoyé et sauvegardé (mise en quarantaine).
D:\_OTMoveIt\MovedFiles\WINDOWS\system32\spads.dll -> Not-A-Virus.Adware.TrafficSol : Nettoyé et sauvegardé (mise en quarantaine).
D:\hijackthis\backups\backup-20080121-194116-395.dll -> Not-A-Virus.Adware.TrafficSol : Nettoyé et sauvegardé (mise en quarantaine).
[5140] C:\WINDOWS\system32\spads.dll -> Not-A-Virus.Adware.TrafficSol : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@partygaming.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@adbrite[2].txt -> TrackingCookie.Adbrite : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@ads.adbrite[2].txt -> TrackingCookie.Adbrite : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@rotator.adjuggler[2].txt -> TrackingCookie.Adjuggler : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@rotator.its.adjuggler[1].txt -> TrackingCookie.Adjuggler : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@adrevolver[1].txt -> TrackingCookie.Adrevolver : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@media.adrevolver[2].txt -> TrackingCookie.Adrevolver : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@advertising[1].txt -> TrackingCookie.Advertising : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@citi.bridgetrack[1].txt -> TrackingCookie.Bridgetrack : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@www.burstbeacon[2].txt -> TrackingCookie.Burstbeacon : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@www.burstnet[1].txt -> TrackingCookie.Burstnet : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@connextra[3].txt -> TrackingCookie.Connextra : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@adopt.euroclick[1].txt -> TrackingCookie.Euroclick : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@fastclick[1].txt -> TrackingCookie.Fastclick : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@ehg-bestbuy.hitbox[2].txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@ehg-nokiafin.hitbox[2].txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@ehg-tigerdirect2.hitbox[2].txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@hitbox[2].txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@sales.liveperson[2].txt -> TrackingCookie.Liveperson : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@questionmarket[1].txt -> TrackingCookie.Questionmarket : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@revsci[2].txt -> TrackingCookie.Revsci : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@login.tracking101[1].txt -> TrackingCookie.Tracking101 : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@tribalfusion[2].txt -> TrackingCookie.Tribalfusion : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@m.webtrends[2].txt -> TrackingCookie.Webtrends : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@zedo[1].txt -> TrackingCookie.Zedo : Nettoyé.
Fin du rapport
_____________________________________-----------Rapport de HijackThis----------__________________________________
Logfile of HijackThis v1.99.1
Scan saved at 22:00:10, on 21-01-08
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Symantec Shared\AppCore\AppSvc32.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
D:\Grisoft\AVG Anti-Spyware 7.5\guard.exe
D:\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
D:\NORTON~1\NORTON~1\NPROTECT.EXE
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
D:\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
C:\WINDOWS\system32\svchost.exe
D:\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\htpatch.exe
C:\WINDOWS\system32\devldr32.exe
C:\WINDOWS\system32\CTHELPER.EXE
D:\CyberLink\PowerDVD\PDVDServ.exe
D:\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
D:\Logitech\Video\LogiTray.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
D:\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
D:\Webroot\Spy Sweeper\SpySweeperUI.exe
D:\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\WINDOWS\System32\svchost.exe
C:\DOCUME~1\MARTIN~1\LOCALS~1\Temp\bwgo0004b0ca.exe
D:\WIDCOMM\Logiciel Bluetooth\BTTray.exe
C:\Program Files\PC Connectivity Solution\NclBTHandler.exe
D:\HP\Digital Imaging\bin\hpqtra08.exe
C:\WINDOWS\system32\LVComS.exe
D:\WIDCOMM\LOGICI~1\BTSTAC~1.EXE
C:\Program Files\Logitech\SetPoint\SetPoint.exe
D:\SimpleCenter\SimpleCenter.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Fichiers communs\Logitech\KHAL\KHALMNPR.EXE
C:\WINDOWS\system32\HPZipm12.exe
D:\HP\Digital Imaging\bin\hpqgalry.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
D:\hijackthis\test.exe.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\1.5\NppBho.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\1.5\UIBHO.dll
O4 - HKLM\..\Run: [HTpatch] C:\WINDOWS\htpatch.exe
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [RemoteControl] D:\CyberLink\PowerDVD\PDVDServ.exe
O4 - HKLM\..\Run: [LanguageShortcut] D:\CyberLink\PowerDVD\Language\Language.exe
O4 - HKLM\..\Run: [HP Software Update] "D:\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [LogitechVideoRepair] D:\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] D:\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "D:\Norton Internet Security\osCheck.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [PCSuiteTrayApplication] "D:\Nokia\Nokia PC Suite 6\LaunchApplication.exe" -startup
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "D:\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [SpySweeper] D:\Webroot\Spy Sweeper\SpySweeperUI.exe /startintray
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LDM] "C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [Norton SystemWorks] "D:\Norton SystemWorks\cfgwiz.exe" /GUID {05858CFD-5CC4-4ceb-AAAF-CF00BF39736A} /MODE CfgWiz
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - Startup: Microsoft Recherche accélérée.lnk = D:\Microsoft Office\Office\FINDFAST.EXE
O4 - Startup: SimpleCenter.lnk = D:\SimpleCenter\SimpleCenter.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = D:\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = D:\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger Agent.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: Envoyer à &Bluetooth - D:\WIDCOMM\Logiciel Bluetooth\btsendto_ie_ctx.htm
O9 - Extra button: Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - D:\VisualRoute 2008\vrie.dll
O9 - Extra 'Tools' menuitem: VisualRoute Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - D:\VisualRoute 2008\vrie.dll
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Express Cleanup - {5E638779-1818-4754-A595-EF1C63B87A56} - D:\Norton SystemWorks\Norton Cleanup\WCQuick.lnk
O9 - Extra 'Tools' menuitem: Express Cleanup - {5E638779-1818-4754-A595-EF1C63B87A56} - D:\Norton SystemWorks\Norton Cleanup\WCQuick.lnk
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - D:\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - D:\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by105fd.bay105.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{C142CE0A-4CFA-4FFD-917B-62EB8C7FF09E}: NameServer = 192.168.0.1
O18 - Protocol: bw+0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - D:\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - D:\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe" /h cltCommon (file missing)
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\VAScanner\comHost.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - D:\Norton Internet Security\isPwdSvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: LiveUpdate Notice Service - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /m "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PifEng.dll (file missing)
O23 - Service: Norton UnErase Protection (NProtectService) - Symantec Corporation - D:\NORTON~1\NORTON~1\NPROTECT.EXE
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Speed Disk service - Symantec Corporation - D:\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\AppCore\AppSvc32.exe
O23 - Service: Moteur Webroot Spy Sweeper (WebrootSpySweeperService) - Webroot Software, Inc. - D:\Webroot\Spy Sweeper\SpySweeper.exe
Merci énormément pour le support et de la rapidité de la réponse.
Merci beaucoups de m'avoir répondu et d'avoir prix le temps de faire les démarches a suivre.
Voici le reste des autres rapports:
_____________________________----Rapport de OTMoveIt.----_______________________
C:\WINDOWS\system32\spads.dll unregistered successfully.
C:\WINDOWS\system32\spads.dll moved successfully.
Created on 01-21-2008 19:45:01
_____________________________----Rapport de AVG.----_______________________
---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------
+ Créé à: 21:26:50 21-01-08
+ Résultat de l'analyse:
D:\System Volume Information\_restore{47B7836B-E51E-43E7-95D3-F7673059E1D1}\RP9\A0002874.exe -> Not-A-Virus.Adware.NewWeb : Nettoyé et sauvegardé (mise en quarantaine).
C:\WINDOWS\system32\spads.dll -> Not-A-Virus.Adware.TrafficSol : Nettoyé et sauvegardé (mise en quarantaine).
D:\System Volume Information\_restore{47B7836B-E51E-43E7-95D3-F7673059E1D1}\RP9\A0002843.exe -> Not-A-Virus.Adware.TrafficSol : Nettoyé et sauvegardé (mise en quarantaine).
D:\_OTMoveIt\MovedFiles\WINDOWS\system32\spads.dll -> Not-A-Virus.Adware.TrafficSol : Nettoyé et sauvegardé (mise en quarantaine).
D:\hijackthis\backups\backup-20080121-194116-395.dll -> Not-A-Virus.Adware.TrafficSol : Nettoyé et sauvegardé (mise en quarantaine).
[5140] C:\WINDOWS\system32\spads.dll -> Not-A-Virus.Adware.TrafficSol : Nettoyé et sauvegardé (mise en quarantaine).
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@partygaming.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@adbrite[2].txt -> TrackingCookie.Adbrite : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@ads.adbrite[2].txt -> TrackingCookie.Adbrite : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@rotator.adjuggler[2].txt -> TrackingCookie.Adjuggler : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@rotator.its.adjuggler[1].txt -> TrackingCookie.Adjuggler : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@adrevolver[1].txt -> TrackingCookie.Adrevolver : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@media.adrevolver[2].txt -> TrackingCookie.Adrevolver : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@advertising[1].txt -> TrackingCookie.Advertising : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@citi.bridgetrack[1].txt -> TrackingCookie.Bridgetrack : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@www.burstbeacon[2].txt -> TrackingCookie.Burstbeacon : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@www.burstnet[1].txt -> TrackingCookie.Burstnet : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@connextra[3].txt -> TrackingCookie.Connextra : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@adopt.euroclick[1].txt -> TrackingCookie.Euroclick : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@fastclick[1].txt -> TrackingCookie.Fastclick : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@ehg-bestbuy.hitbox[2].txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@ehg-nokiafin.hitbox[2].txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@ehg-tigerdirect2.hitbox[2].txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@hitbox[2].txt -> TrackingCookie.Hitbox : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@sales.liveperson[2].txt -> TrackingCookie.Liveperson : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@questionmarket[1].txt -> TrackingCookie.Questionmarket : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@revsci[2].txt -> TrackingCookie.Revsci : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@login.tracking101[1].txt -> TrackingCookie.Tracking101 : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@tribalfusion[2].txt -> TrackingCookie.Tribalfusion : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@m.webtrends[2].txt -> TrackingCookie.Webtrends : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Nettoyé.
C:\Documents and Settings\Martin Vézina\Cookies\martin_vézina@zedo[1].txt -> TrackingCookie.Zedo : Nettoyé.
Fin du rapport
_____________________________________-----------Rapport de HijackThis----------__________________________________
Logfile of HijackThis v1.99.1
Scan saved at 22:00:10, on 21-01-08
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Symantec Shared\AppCore\AppSvc32.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
D:\Grisoft\AVG Anti-Spyware 7.5\guard.exe
D:\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
D:\NORTON~1\NORTON~1\NPROTECT.EXE
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
D:\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
C:\WINDOWS\system32\svchost.exe
D:\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\htpatch.exe
C:\WINDOWS\system32\devldr32.exe
C:\WINDOWS\system32\CTHELPER.EXE
D:\CyberLink\PowerDVD\PDVDServ.exe
D:\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
D:\Logitech\Video\LogiTray.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
D:\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
D:\Webroot\Spy Sweeper\SpySweeperUI.exe
D:\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\WINDOWS\System32\svchost.exe
C:\DOCUME~1\MARTIN~1\LOCALS~1\Temp\bwgo0004b0ca.exe
D:\WIDCOMM\Logiciel Bluetooth\BTTray.exe
C:\Program Files\PC Connectivity Solution\NclBTHandler.exe
D:\HP\Digital Imaging\bin\hpqtra08.exe
C:\WINDOWS\system32\LVComS.exe
D:\WIDCOMM\LOGICI~1\BTSTAC~1.EXE
C:\Program Files\Logitech\SetPoint\SetPoint.exe
D:\SimpleCenter\SimpleCenter.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Fichiers communs\Logitech\KHAL\KHALMNPR.EXE
C:\WINDOWS\system32\HPZipm12.exe
D:\HP\Digital Imaging\bin\hpqgalry.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
D:\hijackthis\test.exe.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\1.5\NppBho.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\1.5\UIBHO.dll
O4 - HKLM\..\Run: [HTpatch] C:\WINDOWS\htpatch.exe
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [RemoteControl] D:\CyberLink\PowerDVD\PDVDServ.exe
O4 - HKLM\..\Run: [LanguageShortcut] D:\CyberLink\PowerDVD\Language\Language.exe
O4 - HKLM\..\Run: [HP Software Update] "D:\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [LogitechVideoRepair] D:\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] D:\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "D:\Norton Internet Security\osCheck.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [PCSuiteTrayApplication] "D:\Nokia\Nokia PC Suite 6\LaunchApplication.exe" -startup
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "D:\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [SpySweeper] D:\Webroot\Spy Sweeper\SpySweeperUI.exe /startintray
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LDM] "C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [Norton SystemWorks] "D:\Norton SystemWorks\cfgwiz.exe" /GUID {05858CFD-5CC4-4ceb-AAAF-CF00BF39736A} /MODE CfgWiz
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - Startup: Microsoft Recherche accélérée.lnk = D:\Microsoft Office\Office\FINDFAST.EXE
O4 - Startup: SimpleCenter.lnk = D:\SimpleCenter\SimpleCenter.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = D:\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = D:\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger Agent.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: Envoyer à &Bluetooth - D:\WIDCOMM\Logiciel Bluetooth\btsendto_ie_ctx.htm
O9 - Extra button: Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - D:\VisualRoute 2008\vrie.dll
O9 - Extra 'Tools' menuitem: VisualRoute Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - D:\VisualRoute 2008\vrie.dll
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Express Cleanup - {5E638779-1818-4754-A595-EF1C63B87A56} - D:\Norton SystemWorks\Norton Cleanup\WCQuick.lnk
O9 - Extra 'Tools' menuitem: Express Cleanup - {5E638779-1818-4754-A595-EF1C63B87A56} - D:\Norton SystemWorks\Norton Cleanup\WCQuick.lnk
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - D:\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - D:\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by105fd.bay105.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{C142CE0A-4CFA-4FFD-917B-62EB8C7FF09E}: NameServer = 192.168.0.1
O18 - Protocol: bw+0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - D:\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - D:\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe" /h cltCommon (file missing)
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\VAScanner\comHost.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - D:\Norton Internet Security\isPwdSvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: LiveUpdate Notice Service - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /m "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PifEng.dll (file missing)
O23 - Service: Norton UnErase Protection (NProtectService) - Symantec Corporation - D:\NORTON~1\NORTON~1\NPROTECT.EXE
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Speed Disk service - Symantec Corporation - D:\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\AppCore\AppSvc32.exe
O23 - Service: Moteur Webroot Spy Sweeper (WebrootSpySweeperService) - Webroot Software, Inc. - D:\Webroot\Spy Sweeper\SpySweeper.exe
Merci énormément pour le support et de la rapidité de la réponse.
Désactive la restauration système pour purger les virus qui seraient dedans
puis redemmarre ton ordi
puis réactive là (dans DEMARRER puis TOUS LES PROGRAMMES puis ACCESSOIRE puis OUTILS SYSTEME puis RESTAURATION SYSTEME puis paramètre)
___
colle un rapport:
bitdefender en ligne :
http://www.bitdefender.fr/scan_fr/scan8/ie.html
secuser en ligne :
http://www.secuser.com/outils/antivirus.htm
scan en ligne firefox
https://www.trendmicro.com/fr_fr/business.html
________
dis tes soucis actuels
puis redemmarre ton ordi
puis réactive là (dans DEMARRER puis TOUS LES PROGRAMMES puis ACCESSOIRE puis OUTILS SYSTEME puis RESTAURATION SYSTEME puis paramètre)
___
colle un rapport:
bitdefender en ligne :
http://www.bitdefender.fr/scan_fr/scan8/ie.html
secuser en ligne :
http://www.secuser.com/outils/antivirus.htm
scan en ligne firefox
https://www.trendmicro.com/fr_fr/business.html
________
dis tes soucis actuels
Pour la Restauration désactivé, reboot et Activé c'est fait
-------------------_______Rapport de BitDefender______----------------
BitDefender Online Scanner
Rapport d'analyse généré à: Tue, Jan 22, 2008 - 15:24:54
Voie d'analyse: A:\;C:\;D:\;E:\;F:\;G:\;H:\;
Statistiques
Temps
01:09:23
Fichiers
166726
Directoires
5908
Secteurs de boot
5
Archives
1804
Paquets programmes
7516
Résultats
Virus identifiés
2
Fichiers infectés
2
Fichiers suspects
0
Avertissements
0
Désinfectés
0
Fichiers effacés
2
Info sur les moteurs
Définition virus
892936
Version des moteurs
AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)
Analyse des plugins
14
Archive des plugins
38
Unpack des plugins
7
E-mail plugins
6
Système plugins
1
Paramètres d'analyse
Première action
Désinfecté
Seconde Action
Supprimé
Heuristique
Oui
Acceptez les avertissements
Oui
Extensions analysées
*;
Excludez les extensions
Analyse d'emails
Oui
Analyse des Archives
Oui
Analyser paquets programmes
Oui
Analyse des fichiers
Oui
Analyse de boot
Oui
Fichier analysé
Statut
D:\Décompressé\Décompressé.rar=>apollo_dvd_setup.exe=>(NSIS o)=>zlib_nsis0002
Infecté par: Packer.Enigma.B
D:\Décompressé\Décompressé.rar=>apollo_dvd_setup.exe=>(NSIS o)=>zlib_nsis0002
Echec de la désinfection
D:\Décompressé\Décompressé.rar=>apollo_dvd_setup.exe=>(NSIS o)=>zlib_nsis0002
Supprimé
D:\Décompressé\Décompressé.rar=>apollo_dvd_setup.exe=>(NSIS o)
Echec de la mise à jour
G:\A Graver\Apollo DIVX to DVD 4.2\Apollo DivX To DVD Creator 4.2 Keygen [Convert DivX To DVD]-Fidus.rar=>apollo_dvd_setup.exe=>(NSIS o)=>zlib_nsis0002
Infecté par: Packer.Enigma.B
G:\A Graver\Apollo DIVX to DVD 4.2\Apollo DivX To DVD Creator 4.2 Keygen [Convert DivX To DVD]-Fidus.rar=>apollo_dvd_setup.exe=>(NSIS o)=>zlib_nsis0002
Echec de la désinfection
G:\A Graver\Apollo DIVX to DVD 4.2\Apollo DivX To DVD Creator 4.2 Keygen [Convert DivX To DVD]-Fidus.rar=>apollo_dvd_setup.exe=>(NSIS o)=>zlib_nsis0002
Supprimé
G:\A Graver\Apollo DIVX to DVD 4.2\Apollo DivX To DVD Creator 4.2 Keygen [Convert DivX To DVD]-Fidus.rar=>apollo_dvd_setup.exe=>(NSIS o)
Echec de la mise à jour
---------____________Rapport de Secuser____-------------------
Scanning and Cleaning Complete
HouseCall did not find any potential threats on your computer. Make sure you run HouseCall once a week to keep your PC clean and malware free.
Merci mille fois d'avoir tout faites les démarches étapes par étapes
Donc, il ne m'apparès plus le message de c:\windows\system32\spads.dll DLLverify avant d'avoir fait c'est étape là.
Cela veut donc dire que tout les derniers rapports que le problème est résoluts en tout cas d'après moi ????
-------------------_______Rapport de BitDefender______----------------
BitDefender Online Scanner
Rapport d'analyse généré à: Tue, Jan 22, 2008 - 15:24:54
Voie d'analyse: A:\;C:\;D:\;E:\;F:\;G:\;H:\;
Statistiques
Temps
01:09:23
Fichiers
166726
Directoires
5908
Secteurs de boot
5
Archives
1804
Paquets programmes
7516
Résultats
Virus identifiés
2
Fichiers infectés
2
Fichiers suspects
0
Avertissements
0
Désinfectés
0
Fichiers effacés
2
Info sur les moteurs
Définition virus
892936
Version des moteurs
AVCORE v1.0 (build 2422) (i386) (Sep 25 2007 08:26:36)
Analyse des plugins
14
Archive des plugins
38
Unpack des plugins
7
E-mail plugins
6
Système plugins
1
Paramètres d'analyse
Première action
Désinfecté
Seconde Action
Supprimé
Heuristique
Oui
Acceptez les avertissements
Oui
Extensions analysées
*;
Excludez les extensions
Analyse d'emails
Oui
Analyse des Archives
Oui
Analyser paquets programmes
Oui
Analyse des fichiers
Oui
Analyse de boot
Oui
Fichier analysé
Statut
D:\Décompressé\Décompressé.rar=>apollo_dvd_setup.exe=>(NSIS o)=>zlib_nsis0002
Infecté par: Packer.Enigma.B
D:\Décompressé\Décompressé.rar=>apollo_dvd_setup.exe=>(NSIS o)=>zlib_nsis0002
Echec de la désinfection
D:\Décompressé\Décompressé.rar=>apollo_dvd_setup.exe=>(NSIS o)=>zlib_nsis0002
Supprimé
D:\Décompressé\Décompressé.rar=>apollo_dvd_setup.exe=>(NSIS o)
Echec de la mise à jour
G:\A Graver\Apollo DIVX to DVD 4.2\Apollo DivX To DVD Creator 4.2 Keygen [Convert DivX To DVD]-Fidus.rar=>apollo_dvd_setup.exe=>(NSIS o)=>zlib_nsis0002
Infecté par: Packer.Enigma.B
G:\A Graver\Apollo DIVX to DVD 4.2\Apollo DivX To DVD Creator 4.2 Keygen [Convert DivX To DVD]-Fidus.rar=>apollo_dvd_setup.exe=>(NSIS o)=>zlib_nsis0002
Echec de la désinfection
G:\A Graver\Apollo DIVX to DVD 4.2\Apollo DivX To DVD Creator 4.2 Keygen [Convert DivX To DVD]-Fidus.rar=>apollo_dvd_setup.exe=>(NSIS o)=>zlib_nsis0002
Supprimé
G:\A Graver\Apollo DIVX to DVD 4.2\Apollo DivX To DVD Creator 4.2 Keygen [Convert DivX To DVD]-Fidus.rar=>apollo_dvd_setup.exe=>(NSIS o)
Echec de la mise à jour
---------____________Rapport de Secuser____-------------------
Scanning and Cleaning Complete
HouseCall did not find any potential threats on your computer. Make sure you run HouseCall once a week to keep your PC clean and malware free.
Merci mille fois d'avoir tout faites les démarches étapes par étapes
Donc, il ne m'apparès plus le message de c:\windows\system32\spads.dll DLLverify avant d'avoir fait c'est étape là.
Cela veut donc dire que tout les derniers rapports que le problème est résoluts en tout cas d'après moi ????
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
vire ces deux fichiers (\Décompressé.rar,Apollo DivX To DVD Creator 4.2 Keygen) si presents en allant dans poste de travail puis...
D:\Décompressé\Décompressé.rar
G:\A Graver\Apollo DIVX to DVD 4.2\Apollo DivX To DVD Creator 4.2 Keygen
______________
recolle un rapport hiajckhtis pour verifier
D:\Décompressé\Décompressé.rar
G:\A Graver\Apollo DIVX to DVD 4.2\Apollo DivX To DVD Creator 4.2 Keygen
______________
recolle un rapport hiajckhtis pour verifier
Bonsoir, voici le rapport
-------------------____________________________-----------
Rapport de Hijachthis
Logfile of HijackThis v1.99.1
Scan saved at 21:25:49, on 22-01-08
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
D:\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Symantec Shared\AppCore\AppSvc32.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
D:\Grisoft\AVG Anti-Spyware 7.5\guard.exe
D:\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
D:\NORTON~1\NORTON~1\NPROTECT.EXE
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
D:\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
C:\WINDOWS\system32\svchost.exe
D:\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\system32\devldr32.exe
C:\WINDOWS\htpatch.exe
C:\WINDOWS\system32\CTHELPER.EXE
D:\CyberLink\PowerDVD\PDVDServ.exe
D:\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
D:\Logitech\Video\LogiTray.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
D:\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
D:\Webroot\Spy Sweeper\SpySweeperUI.exe
D:\Ahead\InCD\InCD.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\PC Connectivity Solution\NclBTHandler.exe
C:\WINDOWS\system32\LVComS.exe
D:\WIDCOMM\LOGICI~1\BTSTAC~1.EXE
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
D:\WIDCOMM\Logiciel Bluetooth\BTTray.exe
C:\DOCUME~1\MARTIN~1\LOCALS~1\Temp\bwgo00055cdf.exe
D:\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
D:\SimpleCenter\SimpleCenter.exe
C:\Program Files\Fichiers communs\Logitech\KHAL\KHALMNPR.EXE
D:\HP\Digital Imaging\bin\hpqgalry.exe
C:\WINDOWS\system32\HPZipm12.exe
D:\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
D:\Webroot\Spy Sweeper\SSU.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
D:\hijackthis\test.exe.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\1.5\NppBho.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\1.5\UIBHO.dll
O4 - HKLM\..\Run: [HTpatch] C:\WINDOWS\htpatch.exe
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [RemoteControl] D:\CyberLink\PowerDVD\PDVDServ.exe
O4 - HKLM\..\Run: [LanguageShortcut] D:\CyberLink\PowerDVD\Language\Language.exe
O4 - HKLM\..\Run: [HP Software Update] "D:\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [LogitechVideoRepair] D:\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] D:\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "D:\Norton Internet Security\osCheck.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [PCSuiteTrayApplication] "D:\Nokia\Nokia PC Suite 6\LaunchApplication.exe" -startup
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "D:\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [InCD] D:\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [SpySweeper] "D:\Webroot\Spy Sweeper\SpySweeperUI.exe" /startintray
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LDM] "C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [Norton SystemWorks] "D:\Norton SystemWorks\cfgwiz.exe" /GUID {05858CFD-5CC4-4ceb-AAAF-CF00BF39736A} /MODE CfgWiz
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - Startup: Microsoft Recherche accélérée.lnk = D:\Microsoft Office\Office\FINDFAST.EXE
O4 - Startup: SimpleCenter.lnk = D:\SimpleCenter\SimpleCenter.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = D:\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = D:\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger Agent.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: Envoyer à &Bluetooth - D:\WIDCOMM\Logiciel Bluetooth\btsendto_ie_ctx.htm
O9 - Extra button: Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - D:\VisualRoute 2008\vrie.dll
O9 - Extra 'Tools' menuitem: VisualRoute Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - D:\VisualRoute 2008\vrie.dll
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Express Cleanup - {5E638779-1818-4754-A595-EF1C63B87A56} - D:\Norton SystemWorks\Norton Cleanup\WCQuick.lnk
O9 - Extra 'Tools' menuitem: Express Cleanup - {5E638779-1818-4754-A595-EF1C63B87A56} - D:\Norton SystemWorks\Norton Cleanup\WCQuick.lnk
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - D:\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - D:\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by105fd.bay105.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{C142CE0A-4CFA-4FFD-917B-62EB8C7FF09E}: NameServer = 192.168.0.1
O18 - Protocol: bw+0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - D:\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - D:\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe" /h cltCommon (file missing)
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\VAScanner\comHost.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - D:\Ahead\InCD\InCDsrv.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - D:\Norton Internet Security\isPwdSvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: LiveUpdate Notice Service - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /m "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PifEng.dll (file missing)
O23 - Service: Norton UnErase Protection (NProtectService) - Symantec Corporation - D:\NORTON~1\NORTON~1\NPROTECT.EXE
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Speed Disk service - Symantec Corporation - D:\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\AppCore\AppSvc32.exe
O23 - Service: Moteur Webroot Spy Sweeper (WebrootSpySweeperService) - Webroot Software, Inc. - D:\Webroot\Spy Sweeper\SpySweeper.exe
Merci pour la vérification
-------------------____________________________-----------
Rapport de Hijachthis
Logfile of HijackThis v1.99.1
Scan saved at 21:25:49, on 22-01-08
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16574)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
D:\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Fichiers communs\Symantec Shared\AppCore\AppSvc32.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
D:\Grisoft\AVG Anti-Spyware 7.5\guard.exe
D:\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
D:\NORTON~1\NORTON~1\NPROTECT.EXE
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
D:\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
C:\WINDOWS\system32\svchost.exe
D:\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINDOWS\system32\devldr32.exe
C:\WINDOWS\htpatch.exe
C:\WINDOWS\system32\CTHELPER.EXE
D:\CyberLink\PowerDVD\PDVDServ.exe
D:\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
D:\Logitech\Video\LogiTray.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
D:\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
D:\Webroot\Spy Sweeper\SpySweeperUI.exe
D:\Ahead\InCD\InCD.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\PC Connectivity Solution\NclBTHandler.exe
C:\WINDOWS\system32\LVComS.exe
D:\WIDCOMM\LOGICI~1\BTSTAC~1.EXE
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
D:\WIDCOMM\Logiciel Bluetooth\BTTray.exe
C:\DOCUME~1\MARTIN~1\LOCALS~1\Temp\bwgo00055cdf.exe
D:\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
D:\SimpleCenter\SimpleCenter.exe
C:\Program Files\Fichiers communs\Logitech\KHAL\KHALMNPR.EXE
D:\HP\Digital Imaging\bin\hpqgalry.exe
C:\WINDOWS\system32\HPZipm12.exe
D:\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
D:\Webroot\Spy Sweeper\SSU.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
D:\hijackthis\test.exe.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {1E8A6170-7264-4D0F-BEAE-D42A53123C75} - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\1.5\NppBho.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Show Norton Toolbar - {90222687-F593-4738-B738-FBEE9C7B26DF} - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\1.5\UIBHO.dll
O4 - HKLM\..\Run: [HTpatch] C:\WINDOWS\htpatch.exe
O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [RemoteControl] D:\CyberLink\PowerDVD\PDVDServ.exe
O4 - HKLM\..\Run: [LanguageShortcut] D:\CyberLink\PowerDVD\Language\Language.exe
O4 - HKLM\..\Run: [HP Software Update] "D:\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [LogitechVideoRepair] D:\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] D:\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "D:\Norton Internet Security\osCheck.exe"
O4 - HKLM\..\Run: [Symantec PIF AlertEng] "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /a /m "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\AlertEng.dll"
O4 - HKLM\..\Run: [PCSuiteTrayApplication] "D:\Nokia\Nokia PC Suite 6\LaunchApplication.exe" -startup
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "D:\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [InCD] D:\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [SpySweeper] "D:\Webroot\Spy Sweeper\SpySweeperUI.exe" /startintray
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LDM] "C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [Norton SystemWorks] "D:\Norton SystemWorks\cfgwiz.exe" /GUID {05858CFD-5CC4-4ceb-AAAF-CF00BF39736A} /MODE CfgWiz
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - Startup: Microsoft Recherche accélérée.lnk = D:\Microsoft Office\Office\FINDFAST.EXE
O4 - Startup: SimpleCenter.lnk = D:\SimpleCenter\SimpleCenter.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = D:\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = D:\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger Agent.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: Envoyer à &Bluetooth - D:\WIDCOMM\Logiciel Bluetooth\btsendto_ie_ctx.htm
O9 - Extra button: Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - D:\VisualRoute 2008\vrie.dll
O9 - Extra 'Tools' menuitem: VisualRoute Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - D:\VisualRoute 2008\vrie.dll
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Express Cleanup - {5E638779-1818-4754-A595-EF1C63B87A56} - D:\Norton SystemWorks\Norton Cleanup\WCQuick.lnk
O9 - Extra 'Tools' menuitem: Express Cleanup - {5E638779-1818-4754-A595-EF1C63B87A56} - D:\Norton SystemWorks\Norton Cleanup\WCQuick.lnk
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - D:\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - D:\WIDCOMM\Logiciel Bluetooth\btsendto_ie.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by105fd.bay105.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{C142CE0A-4CFA-4FFD-917B-62EB8C7FF09E}: NameServer = 192.168.0.1
O18 - Protocol: bw+0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {6CFE4F87-B5F5-403A-AE68-07AD0203AAE2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - D:\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - D:\WIDCOMM\Logiciel Bluetooth\bin\btwdins.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Settings Manager (ccSetMgr) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe" /h cltCommon (file missing)
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\VAScanner\comHost.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - D:\Ahead\InCD\InCDsrv.exe
O23 - Service: Symantec IS Password Validation (ISPwdSvc) - Symantec Corporation - D:\Norton Internet Security\isPwdSvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: LiveUpdate Notice Service - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /m "C:\Program Files\Fichiers communs\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PifEng.dll (file missing)
O23 - Service: Norton UnErase Protection (NProtectService) - Symantec Corporation - D:\NORTON~1\NORTON~1\NPROTECT.EXE
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Speed Disk service - Symantec Corporation - D:\NORTON~1\NORTON~1\SPEEDD~1\NOPDB.EXE
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Symantec AppCore Service (SymAppCore) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\AppCore\AppSvc32.exe
O23 - Service: Moteur Webroot Spy Sweeper (WebrootSpySweeperService) - Webroot Software, Inc. - D:\Webroot\Spy Sweeper\SpySweeper.exe
Merci pour la vérification
Bonjours,
le problème de c:\windows\system32\spads.dll DLLverify est résolu. Mais quand que tu dis: (tu peux enlevé ce que je t'ai fais mettre.) tu parles des logiciels ?
Non pas d'autre problème tout est okééé !!!
Merci encore une fois .
le problème de c:\windows\system32\spads.dll DLLverify est résolu. Mais quand que tu dis: (tu peux enlevé ce que je t'ai fais mettre.) tu parles des logiciels ?
Non pas d'autre problème tout est okééé !!!
Merci encore une fois .