Probléme de page de pub

Bonjour,
j'ai fait un scan avec combofix et hidjack !!lvoila les rapports
ComboFix 08-02-16.2 - JeanPierre 2008-02-16 10:14:22.1 - NTFSx86
Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.581 [GMT 1:00]
Endroit: C:\Documents and Settings\JeanPierre\Bureau\ComboFix.exe
* Création d'un nouveau point de restauration

[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\WINDOWS\System32\mljgf.dll
C:\WINDOWS\system32\fgjlm.ini
C:\WINDOWS\system32\fgjlm.ini2
C:\WINDOWS\system32\likrghwo.ini
C:\WINDOWS\system32\mljgf.dll
C:\WINDOWS\system32\ngeokudb.dll
C:\WINDOWS\system32\niseywjy.ini
C:\WINDOWS\system32\qvemzykp.dllbox
C:\WINDOWS\system32\winsys.exe
C:\WINDOWS\system32\ylmkjsvs.dll
C:\WINDOWS\system32\ynwkrdvw.dll

.
((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-01-16 to 2008-02-16 ))))))))))))))))))))))))))))))))))))
.

2008-02-14 15:49 . 2008-02-14 15:49 <REP> d-------- C:\Program Files\CleanUp!
2008-02-14 15:08 . 2008-02-14 15:08 <REP> d-------- C:\Documents and Settings\JeanPierre\Application Data\vlc
2008-02-14 15:07 . 2008-02-14 15:07 <REP> d-------- C:\Program Files\VideoLAN
2008-02-13 16:10 . 2008-02-13 16:10 <REP> d-------- C:\Documents and Settings\JeanPierre\Application Data\EPSON
2008-02-13 11:23 . 2008-02-13 11:23 <REP> d-------- C:\Documents and Settings\JeanPierre\Application Data\Grisoft
2008-02-13 11:23 . 2007-05-30 13:10 10,872 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2008-02-13 11:22 . 2008-02-13 11:22 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Grisoft
2008-02-12 17:14 . 2008-02-12 17:14 <REP> d-------- C:\viaraid
2008-02-12 17:14 . 2003-08-05 15:51 10,433,024 -ra------ C:\WINDOWS\system32\ALSNDMGR.CPL
2008-02-12 17:14 . 2002-11-21 12:07 765,952 -ra------ C:\WINDOWS\system\crlds3d.dll
2008-02-12 17:14 . 2003-08-05 14:51 460,864 -ra------ C:\WINDOWS\system32\drivers\ALCXWDM.SYS
2008-02-12 17:14 . 2003-08-07 22:15 404,608 -ra------ C:\WINDOWS\system32\drivers\ALCXSENS.SYS
2008-02-12 17:14 . 2002-02-05 10:54 141,016 -ra------ C:\WINDOWS\system32\ALSNDMGR.WAV
2008-02-12 17:14 . 2003-06-12 17:31 75,904 -ra------ C:\WINDOWS\system32\drivers\viasraid.sys
2008-02-12 17:14 . 2003-08-05 13:59 57,344 -ra------ C:\WINDOWS\SOUNDMAN.EXE
2008-02-12 17:14 . 2008-02-12 17:14 864 --a------ C:\WINDOWS\system32\drivers\alcxinit.dat
2008-02-12 17:13 . 2003-07-02 03:42 27,904 -ra------ C:\WINDOWS\system32\drivers\VIAAGP1.SYS
2008-02-12 17:12 . 2008-02-12 17:13 584 --a------ C:\pnpID.dat
2008-02-12 17:12 . 2008-02-12 17:12 39 --a------ C:\CTJINI.INI
2008-02-12 16:41 . 2008-02-12 16:41 <REP> d-------- C:\Documents and Settings\JeanPierre\Application Data\DivX
2008-02-12 16:40 . 2008-02-12 16:41 <REP> d-------- C:\Program Files\DivX
2008-02-12 16:20 . 2007-01-18 13:00 3,968 --a------ C:\WINDOWS\system32\drivers\AvgArCln.sys
2008-02-12 15:43 . 2008-02-12 15:43 259,336 --------- C:\Documents and Settings\JeanPierre\Application Data\setup_en[1].exe
2008-02-12 15:41 . 2008-02-14 14:47 23,392 --a------ C:\WINDOWS\system32\nscompat.tlb
2008-02-12 15:41 . 2008-02-14 14:47 16,832 --a------ C:\WINDOWS\system32\amcompat.tlb
2008-02-12 14:22 . 2008-02-12 14:22 5,376 --a------ C:\WINDOWS\system32\drivers\MS1000.sys
2008-02-12 14:17 . 2008-02-12 15:37 <REP> d-------- C:\Program Files\The Cleaner Free
2008-02-12 11:00 . 2008-02-12 11:00 1,158 --a------ C:\WINDOWS\mozver.dat
2008-02-12 10:55 . 2008-02-12 10:55 0 --a------ C:\WINDOWS\nsreg.dat
2008-02-12 09:23 . 2008-02-12 09:23 <REP> d-------- C:\Documents and Settings\All Users\Application Data\MailFrontier
2008-02-12 09:23 . 2004-04-27 04:40 11,264 --a------ C:\WINDOWS\system32\SpOrder.dll
2008-02-12 09:23 . 2008-02-12 09:26 4,212 ---h----- C:\WINDOWS\system32\zllictbl.dat
2008-02-12 09:22 . 2008-02-12 09:54 <REP> d-------- C:\WINDOWS\system32\ZoneLabs
2008-02-12 09:21 . 2008-02-12 09:54 <REP> d-------- C:\WINDOWS\Internet Logs
2008-02-11 09:29 . 2003-06-23 01:44 1,415,680 --a------ C:\WINDOWS\system32\wmv9vcm.dll
2008-02-11 09:29 . 2003-08-29 00:55 423,424 --a------ C:\WINDOWS\system32\WMAVDS32.ax
2008-02-11 09:29 . 2001-03-26 03:41 245,760 --a------ C:\WINDOWS\system32\mp4sds32.ax
2008-02-11 09:04 . 2006-10-04 15:06 1,197,294 -----c--- C:\WINDOWS\system32\dllcache\sysmain.sdb
2008-02-11 09:04 . 2006-10-04 15:06 764,868 -----c--- C:\WINDOWS\system32\dllcache\apph_sp.sdb
2008-02-11 09:04 . 2006-10-04 15:06 217,118 -----c--- C:\WINDOWS\system32\dllcache\apphelp.sdb
2008-02-11 09:03 . 2008-02-12 15:39 <REP> d-------- C:\Program Files\Windows Media Connect 2
2008-02-11 09:02 . 2008-02-11 09:02 <REP> d-------- C:\WINDOWS\system32\LogFiles
2008-02-11 09:02 . 2008-02-12 15:52 <REP> d-------- C:\WINDOWS\system32\drivers\UMDF
2008-02-11 08:42 . 2007-07-30 19:19 271,224 --a------ C:\WINDOWS\system32\mucltui.dll
2008-02-11 08:42 . 2007-07-30 19:19 207,736 --a------ C:\WINDOWS\system32\muweb.dll
2008-02-11 08:42 . 2007-07-30 19:18 30,072 --a------ C:\WINDOWS\system32\mucltui.dll.mui
2008-02-10 18:32 . 2004-08-20 00:10 16,384 --a------ C:\WINDOWS\system32\ipsink.ax
2008-02-10 18:32 . 2004-08-20 00:10 16,384 --a--c--- C:\WINDOWS\system32\dllcache\ipsink.ax
2008-02-10 18:32 . 2004-08-04 07:10 15,360 --a------ C:\WINDOWS\system32\drivers\StreamIP.sys
2008-02-10 18:32 . 2004-08-04 07:10 15,360 --a--c--- C:\WINDOWS\system32\dllcache\streamip.sys
2008-02-10 18:32 . 2004-08-04 07:10 11,136 --a------ C:\WINDOWS\system32\drivers\SLIP.sys
2008-02-10 18:32 . 2004-08-04 07:10 11,136 --a--c--- C:\WINDOWS\system32\dllcache\slip.sys
2008-02-10 18:32 . 2004-08-04 07:10 10,880 --a------ C:\WINDOWS\system32\drivers\NdisIP.sys
2008-02-10 18:32 . 2004-08-04 07:10 10,880 --a--c--- C:\WINDOWS\system32\dllcache\ndisip.sys
2008-02-10 18:32 . 2004-08-04 06:58 5,504 --a------ C:\WINDOWS\system32\drivers\MSTEE.sys
2008-02-10 18:32 . 2004-08-04 06:58 5,504 --a--c--- C:\WINDOWS\system32\dllcache\mstee.sys
2008-02-10 18:26 . 2008-02-12 15:45 <REP> d-------- C:\Program Files\Fichiers communs\Real
2008-02-10 18:26 . 2008-02-10 18:26 <REP> d-------- C:\Program Files\directx
2008-02-10 18:26 . 2008-02-10 18:26 <REP> d-------- C:\My Music
2008-02-10 18:25 . 2003-09-04 10:47 360,448 --a------ C:\WINDOWS\system32\LVUI2RC.dll
2008-02-10 18:25 . 2003-09-04 10:46 172,032 --a------ C:\WINDOWS\system32\lvcodec2.dll
2008-02-10 18:25 . 2003-09-04 10:38 152,576 --a------ C:\WINDOWS\system32\drivers\LV532AV.SYS
2008-02-10 18:25 . 2003-09-04 10:45 135,214 --a------ C:\WINDOWS\system32\LVComS.exe
2008-02-10 18:25 . 2003-09-04 10:47 122,880 --a------ C:\WINDOWS\system32\LVUI2.dll
2008-02-10 18:25 . 2003-09-04 10:49 86,016 --a------ C:\WINDOWS\system32\lvcoinst.dll
2008-02-10 18:25 . 2003-09-04 10:45 57,344 --a------ C:\WINDOWS\system32\LVComC.dll
2008-02-10 18:25 . 2003-09-04 10:53 49,152 --a------ C:\WINDOWS\system32\vatee.ax
2008-02-10 18:25 . 2003-09-04 10:30 15,387 --a------ C:\WINDOWS\system32\lvcoinst.ini
2008-02-10 18:25 . 2003-09-04 10:40 12,112 --a------ C:\WINDOWS\system32\drivers\LVUSBSta.sys
2008-02-10 18:24 . 2008-02-10 18:25 <REP> d-------- C:\Program Files\Fichiers communs\Logitech
2008-02-10 18:24 . 1998-11-13 13:16 308,224 --a------ C:\WINDOWS\IsUn040c.exe
2008-02-10 18:23 . 2008-02-10 18:24 544 --a------ C:\WINDOWS\_delis32.ini
2008-02-10 18:22 . 2008-02-10 18:22 <REP> d-------- C:\Program Files\Labtec
2008-02-10 17:15 . 2006-11-29 13:06 3,426,072 --a------ C:\WINDOWS\system32\d3dx9_32.dll
2008-02-10 17:14 . 2008-02-11 13:28 <REP> d-------- C:\Documents and Settings\JeanPierre\Contacts
2008-02-10 17:13 . 2008-02-10 17:13 <REP> d-------- C:\Program Files\Microsoft SQL Server Compact Edition
2008-02-10 17:13 . 2008-02-10 17:13 268 --ah----- C:\sqmdata00.sqm
2008-02-10 17:13 . 2008-02-10 17:13 244 --ah----- C:\sqmnoopt00.sqm
2008-02-10 17:12 . 2008-02-10 17:12 <REP> d----c--- C:\WINDOWS\system32\DRVSTORE
2008-02-10 17:04 . 2008-02-14 14:36 <REP> d-------- C:\Program Files\Windows Live
2008-02-10 17:04 . 2008-02-10 17:11 <REP> d--hsc--- C:\Program Files\Fichiers communs\WindowsLiveInstaller
2008-02-10 17:04 . 2008-02-10 17:04 <REP> d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller
2008-02-10 15:39 . 2006-08-21 10:14 128,896 -----c--- C:\WINDOWS\system32\dllcache\fltmgr.sys
2008-02-10 15:39 . 2006-08-21 10:14 23,040 -----c--- C:\WINDOWS\system32\dllcache\fltmc.exe
2008-02-10 15:39 . 2006-08-21 13:26 16,896 -----c--- C:\WINDOWS\system32\dllcache\fltlib.dll
2008-02-10 15:07 . 2004-08-20 00:09 159,232 --a------ C:\WINDOWS\system32\ptpusd.dll
2008-02-10 15:07 . 2001-08-23 17:47 5,632 --a------ C:\WINDOWS\system32\ptpusb.dll
2008-02-10 14:42 . 2004-08-04 07:08 26,496 --a--c--- C:\WINDOWS\system32\dllcache\usbstor.sys
2008-02-10 14:32 . 2007-07-09 14:11 584,192 -----c--- C:\WINDOWS\system32\dllcache\rpcrt4.dll
2008-02-10 12:47 . 2008-02-10 12:47 0 --a------ C:\WINDOWS\msicpl.ini
2008-02-10 12:26 . 2008-02-15 20:11 <REP> d-------- C:\Program Files\eMule
2008-02-10 10:56 . 2008-02-10 10:56 <REP> d-------- C:\Program Files\Avira
2008-02-10 10:56 . 2008-02-10 10:56 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Avira
2008-02-10 10:24 . 2007-03-08 16:37 578,560 --a--c--- C:\WINDOWS\system32\dllcache\user32.dll
2008-02-10 10:22 . 2008-02-10 10:22 <REP> d-------- C:\WINDOWS\ERUNT
2008-02-10 10:14 . 2008-02-11 09:57 <REP> d-------- C:\SDFix
2008-02-10 10:12 . 2008-02-10 10:12 <REP> d-------- C:\Program Files\Trend Micro
2008-02-10 09:56 . 2008-02-15 20:11 <REP> d--hs---- C:\Documents and Settings\JeanPierre\UserData
2008-02-10 09:38 . 2008-02-10 09:38 97,585 --a------ C:\WINDOWS\IE7-WindowsXP-x86-fra.exe
2008-02-10 09:37 . 2008-02-10 09:37 1,635 --a------ C:\WINDOWS\system32\krlcfwl.exe

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-02-10 09:52 --------- d-----w C:\Documents and Settings\All Users\Application Data\BitDefender
2008-02-08 18:08 --------- d-----w C:\Program Files\Kit ADSL
2008-02-07 06:38 --------- d-----w C:\Program Files\Fichiers communs\Softwin
2008-02-07 06:26 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-02-07 06:26 --------- d-----w C:\Program Files\USB Driver-Express
2008-02-07 05:56 --------- d-----w C:\Program Files\Fichiers communs\InstallShield
2008-02-07 05:55 --------- d-----w C:\Program Files\epson
2008-02-07 05:55 --------- d-----w C:\Documents and Settings\All Users\Application Data\UDL
2008-02-07 05:43 --------- d-----w C:\Program Files\microsoft frontpage
2008-02-07 05:41 --------- d-----w C:\Program Files\Services en ligne
2008-01-04 21:58 9,464 ------w C:\WINDOWS\system32\drivers\cdralw2k.sys
2008-01-04 21:58 9,336 ------w C:\WINDOWS\system32\drivers\cdr4_xp.sys
2008-01-04 21:58 43,528 ------w C:\WINDOWS\system32\drivers\PxHelp20.sys
2007-12-18 09:51 179,584 ----a-w C:\WINDOWS\system32\drivers\mrxdav.sys
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-20 00:09 15360]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 11:34 5724184]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="C:\WINDOWS\System32\NvCpl.dll" [2006-06-01 10:22 7618560]
"nwiz"="nwiz.exe" [2006-06-01 10:22 1519616 C:\WINDOWS\system32\nwiz.exe]
"SW20"="C:\WINDOWS\System32\sw20.exe" [2006-09-07 11:13 208896]
"SW24"="C:\WINDOWS\System32\sw24.exe" [2006-09-07 11:14 69632]
"WinSys2"="C:\WINDOWS\System32\winsys2.exe" [2006-10-03 07:37 217088]
"NvMediaCenter"="C:\WINDOWS\System32\NvMcTray.dll" [2006-06-01 10:22 86016]
"avgnt"="C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" [2008-02-10 10:58 249896]
"LVCOMS"="C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE" [2003-09-04 10:45 135214]
"Cmaudio"="cmicnfg.cpl" []
"SoundMan"="SOUNDMAN.EXE" [2003-08-05 13:59 57344 C:\WINDOWS\SOUNDMAN.EXE]
"!AVG Anti-Spyware"="C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" [2007-06-11 10:25 6731312]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2004-08-20 00:09 15360]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"DisableRegistryTools"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\efccyvu]
efccyvu.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\qvemzykp]
qvemzykp.dll

R0 viasraid;viasraid;C:\WINDOWS\system32\DRIVERS\viasraid.sys [2003-06-12 17:31]
R3 PALLADIA;Palladia 300/400 Usb Adsl Modem;C:\WINDOWS\system32\DRIVERS\usbiad.sys [2004-07-14 02:52]
R3 PID_0920;Logitech QuickCam Express(PID_0920);C:\WINDOWS\system32\DRIVERS\LV532AV.SYS [2003-09-04 10:38]
S3 MS1000;MS1000;C:\WINDOWS\system32\DRIVERS\MS1000.sys [2008-02-12 14:22]
S3 SetupNTGLM7X;SetupNTGLM7X;E:\NTGLM7X.sys []

.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-02-16 10:20:31
Windows 5.1.2600 Service Pack 2 NTFS

Balayage processus cach‚s ...

Balayage cach‚ autostart entries ...

Balayage des fichiers cach‚s ...

Scan termin‚ avec succŠs
Les fichiers cach‚s: 0

**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\System32\rundll32.exe
.
**************************************************************************
.
Temps d'accomplissement: 2008-02-16 10:22:57 - machine was rebooted
ComboFix-quarantined-files.txt 2008-02-16 09:22:47
.
2008-02-15 19:36:00 --- E O F ---

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:33:52, on 16/02/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\winsys2.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://neufportail.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://home.neuf.fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SW20] C:\WINDOWS\System32\sw20.exe
O4 - HKLM\..\Run: [SW24] C:\WINDOWS\System32\sw24.exe
O4 - HKLM\..\Run: [WinSys2] C:\WINDOWS\System32\winsys2.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O20 - Winlogon Notify: efccyvu - efccyvu.dll (file missing)
O20 - Winlogon Notify: qvemzykp - qvemzykp.dll (file missing)
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe