AntispywareMaster & Vista Antivirus 2008

Résolu
Bonjour,

Problème de fenêtres intempestives + AntispywareMaster + Vista Antivirus 2008 ...
Comment faire pour m'en débarrasser? J'ai vu que d'autres ont le même problème, mais j'aimerais bien que quelqu'un m'aide pour solutionner le tout de la bonne façon. Merci!
Configuration: Windows XP
Internet Explorer 6.0

16 réponses

Résumé de la discussion

Un problème de fenêtres intempestives et de logiciels anti spyware indésirables sur Windows XP et Internet Explorer 6 nécessite une désinfection efficace, avec la détection de composants comme AntispywareMaster et Vista Antivirus 2008. Plusieurs méthodes recommandées incluent l'utilisation d'outils dédiés comme Malwarebytes pour un scan complet et la suppression des menaces, et des utilitaires spécifiques tels que HijackThis, VundoFix ou RogueRemover selon les infections. Des rapports d'analyse montrent des traces dans le registre et les démarrages, avec des DLL et des services susceptibles d'être bloqués ou modifiés, nécessitant des nettoyages manuels et redémarrages. En cas d'échec, il est recommandé de sauvegarder les logs et de partager les rapports des outils avec une assistance spécialisée pour obtenir une aide ciblée.

Bobot (l’IA à votre service)
  1. bonjour et bienvenu

    fais ca:

    > Télécharge RogueRemover : http://fileforum.betanews.com/download/RogueRemover_FREE/1167150912/1
    - Lis le tuto de Malekal_Morte : http://www.malekal.com/tutorial_RogueRemover.php
    NB : S'il te manque COMCTL32.OCX alors télécharge le ici : https://www.malekal.com/tutorial-aboutbuster/
    - Installe et exécute le programme.
    - Poste le rapport sur le forum stp qui se trouve ici : C:\Program Files\RogueRemover\RRLogxxxx.txt
    1. Bonsoir et merci de vouloir m'aider.
      Je n'ai pas pu lire le tuto ... toujours une erreur de IE + 2 DLL dont l'accès est refusé à l'ouverture!

      Voici le rapport:

      Malwarebytes' RogueRemover
      Malwarebytes ©2007 https://www.malwarebytes.com/
      6290 total fingerprints loaded.

      Loading database ...
      Expanding environmental variables ...

      Scanning files ... [ 100% ].
      Scanning folders ... [ 100% ].
      Scanning registry keys ... [ 100% ].
      Scanning registry values ... [ 100% ].

      RogueRemover has detected rogue antispyware components! Results below...

      Type: File
      Vendor: AntiSpywareMaster
      Location: C:\Documents and Settings\Natalie\Bureau\AntiSpywareMaster.lnk
      Selected for removal: Yes

      Type: Folder
      Vendor: AntiSpywareMaster
      Location: C:\Program Files\AntiSpywareMaster
      Selected for removal: Yes

      Type: Registry Key
      Vendor: AntiSpywareMaster
      Location: HKEY_CURRENT_USER\Software\AntiSpywareMaster
      Selected for removal: Yes

      RogueRemover has found the objects above.
  2. Bonjour,

    Voici:

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 06:41:43, on 2008-07-03
    Platform: Windows XP SP1 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
    C:\PROGRA~1\NORTON~1\navapw32.exe
    C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
    C:\WINDOWS\TmF0YWxpZQ\command.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\WINDOWS\System32\RUNDLL32.EXE
    C:\PROGRA~1\MYWEBS~1\bar\3.bin\mwsoemon.exe
    C:\WINDOWS\mrofinu572.exe
    C:\Program Files\AntiSpywareMaster\asm.exe
    C:\WINDOWS\System32\ctfmon.exe
    C:\Program Files\TRENDnet\TEW-424UB\WlanCU.exe
    C:\Program Files\Norton AntiVirus\navapsvc.exe
    C:\Program Files\Network Monitor\netmon.exe
    C:\WINDOWS\System32\nvsvc32.exe
    C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
    C:\Program Files\hijackthis\HJT.exe
    C:\WINDOWS\System32\wbem\wmiprvse.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.ca/?gws_rd=ssl
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.paintshoppro.com/en/?utm_source=jasc&utm_medium=redirect&utm_term=/privacy.asp&utm_campaign=jasc
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\3.bin\MWSSRCAS.DLL
    O2 - BHO: (no name) - {00A6FAF1-072E-44cf-8957-5838F569A31D} - (no file)
    O2 - BHO: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 8\SnagItBHO.dll
    O2 - BHO: (no name) - {05605089-DE43-47D1-BA45-4AB1EC9AC14F} - C:\WINDOWS\System32\fccyywwx.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: (no name) - {9C28EAFB-FF50-4F42-8D39-A006129CC907} - C:\WINDOWS\System32\tuvUMcaw.dll
    O2 - BHO: {224fa06a-4dba-e518-ff24-407437c4355b} - {b5534c73-4704-42ff-815e-abd4a60af422} - C:\WINDOWS\System32\btareu.dll
    O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 8\SnagItIEAddin.dll
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1\navapw32.exe
    O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
    O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [My Web Search Bar] rundll32 C:\PROGRA~1\MYWEBS~1\bar\3.bin\MWSBAR.DLL,S
    O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\3.bin\mwsoemon.exe
    O4 - HKLM\..\Run: [runner1] C:\WINDOWS\mrofinu572.exe 61A847B5BBF728173599284503996897C881250221C8670836AC4FA7C8833201749139
    O4 - HKLM\..\Run: [AntiSpywareMaster] C:\Program Files\AntiSpywareMaster\asm.exe
    O4 - HKLM\..\Run: [BMc793d560] Rundll32.exe "C:\WINDOWS\System32\opydygfo.dll",s
    O4 - HKLM\..\Run: [c4a0e6fc] rundll32.exe "C:\WINDOWS\System32\umgvrhmx.dll",b
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
    O4 - Global Startup: Wireless Configuration Utility HW.14.lnk = C:\Program Files\TRENDnet\TEW-424UB\WlanCU.exe
    O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZCxdm491YYCA
    O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
    O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
    O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
    O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
    O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei/CursorManiaFWBInitialSetup1.0.0.15-3.cab
    O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.mail.live.com/mail/w1/resources/MSNPUpld.cab
    O16 - DPF: {535AC98D-C942-4C87-9275-09C9C43EF2C1} - ms-its:mhtml:file://c:\\nores.mht!http://adxbnet.net/code/chm/xpre.chm::/xpreload.ocx
    O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-CA/a-UNO1/GAME_UNO1.cab
    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
    O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://www.clubechat.net/controls/MsnChat45.cab
    O16 - DPF: {FA30EC32-668B-4B60-B13C-4C84EB90C3C9} (ActiveID Control) - http://www.meetstream.com/activex/28081/activeid.cab
    O16 - DPF: {FFBB3F3B-0A5A-4106-BE53-DFE1E2340CB1} (Contrôleur de DownloadManager) - http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.1.6.cab
    O20 - Winlogon Notify: tuvUMcaw - C:\WINDOWS\SYSTEM32\tuvUMcaw.dll
    O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
    O23 - Service: Command Service (cmdService) - Unknown owner - C:\WINDOWS\TmF0YWxpZQ\command.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
    O23 - Service: Logitech Process Monitor (LVPrcSrv) - Unknown owner - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe (file missing)
    O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
    O23 - Service: Network Monitor - Unknown owner - C:\Program Files\Network Monitor\netmon.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
    O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exe
    O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
    O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
    1. fais cz:

      telecharge vundofix ici:

      http://www.atribune.org/ccount/click.php?id=4

      mettez-le sur votre bureau
      Après le téléchargement. Cliquez sur VundoFix.exe
      L'outil va s'ouvrir. Cliquez sur Scan for Vundo
      Si une infection est détecté. Cliquez sur Remove Vundo cela va éliminer les fichiers infectés trouvés par l’outil, confirmez la suppression des fichiers.
      Dans certains cas un redémarrage est requis donc acceptez-le.
      Après l'utilisation de VundoFix, un rapport est automatiquement généré. Son emplacement se situe dans la racine de votre Windows C:/ vundofix backups/vundofix
      Ouvrez le fichier texte VundoFix puis copier/coller le rapport sur le forum
      Supprimez le dossier de sauvgarde VundoFix Backups

      puis telecharge malwarebytes mes le a jour puis lance un scan complet et supprime tous se qu'il trouve

      aide:

      https://www.malekal.com/tutoriel-malwarebyte-anti-malware/
      1. Re-bonjour,

        Plutôt bizarre, Vundo donne ceci:

        VundoFix V7.0.6

        Scan started at 07:18:47 2008-07-03

        Listing files found while scanning....

        No infected files were found.

        Je suis en train de faire le scan avec Malwarebytes ...
      2. @Utilisateur anonyme... Scan avec Malwarebytes complété ... j'ai supprimé tout ce qu'il a trouvé, j'ai redémarré ...
        Est-ce que je dois faire autre chose?
        J'affiche ici le log de Malwarebytes:

        Malwarebytes' Anti-Malware 1.19
        Version de la base de données: 918
        Windows 5.1.2600 Service Pack 1

        08:23:54 2008-07-03
        mbam-log-7-3-2008 (08-23-44).txt

        Type de recherche: Examen complet (C:\|E:\|)
        Eléments examinés: 135658
        Temps écoulé: 40 minute(s), 49 second(s)

        Processus mémoire infecté(s): 5
        Module(s) mémoire infecté(s): 4
        Clé(s) du Registre infectée(s): 169
        Valeur(s) du Registre infectée(s): 12
        Elément(s) de données du Registre infecté(s): 2
        Dossier(s) infecté(s): 30
        Fichier(s) infecté(s): 148

        Processus mémoire infecté(s):
        C:\WINDOWS\TmF0YWxpZQ\command.exe (AdWare.CommAd) -> No action taken.
        C:\Program Files\Network Monitor\netmon.exe (Trojan.DNSChanger) -> No action taken.
        C:\Program Files\MyWebSearch\bar\3.bin\MWSOEMON.EXE (Adware.MyWebSearch) -> No action taken.
        C:\WINDOWS\mrofinu572.exe (Trojan.DownLoader) -> No action taken.
        C:\Program Files\AntiSpywareMaster\asm.exe (Rogue.AntiSpyMaster) -> No action taken.

        Module(s) mémoire infecté(s):
        C:\WINDOWS\system32\fccyywwx.dll (Trojan.Vundo) -> No action taken.
        C:\WINDOWS\TmF0YWxpZQ\asappsrv.dll (AdWare.CommAd) -> No action taken.
        C:\Program Files\MyWebSearch\bar\3.bin\MWSOESTB.DLL (Adware.MyWebSearch) -> No action taken.
        C:\WINDOWS\system32\tuvUMcaw.dll (Trojan.Vundo) -> No action taken.

        Clé(s) du Registre infectée(s):
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{387308dc-0dfb-4fc8-8237-b92a7459641d} (Trojan.Vundo) -> No action taken.
        HKEY_CLASSES_ROOT\CLSID\{387308dc-0dfb-4fc8-8237-b92a7459641d} (Trojan.Vundo) -> No action taken.
        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\cmdservice (AdWare.CommAd) -> No action taken.
        HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\cmdservice (AdWare.CommAd) -> No action taken.
        HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cmdservice (AdWare.CommAd) -> No action taken.
        HKEY_CLASSES_ROOT\TypeLib\{07b18ea0-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\CLSID\{07b18ea9-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\CLSID\{07b18eab-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{07b18eab-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\CLSID\{53ced2d0-5e9a-4761-9005-648404e6f7e5} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\AppID\{ff46f4ab-a85f-487e-b399-3f191ac0fe23} (Trojan.BHO) -> No action taken.
        HKEY_CLASSES_ROOT\Interface\{2e4a04a1-a24d-45ae-aca4-949778400813} (Trojan.BHO) -> No action taken.
        HKEY_CLASSES_ROOT\Typelib\{63334394-3da3-4b29-a041-03535909d361} (Trojan.BHO) -> No action taken.
        HKEY_CLASSES_ROOT\testcpv6.bho (Trojan.Agent) -> No action taken.
        HKEY_CLASSES_ROOT\testcpv6.bho.1 (Trojan.Agent) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{a394e835-c8d6-4b4b-884b-d2709059f3be} (Trojan.Network.Monitor) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{3877c2cd-f137-4144-bdb2-0a811492f920} (Trojan.Downloader) -> No action taken.
        HKEY_CLASSES_ROOT\CLSID\{00a6faf6-072e-44cf-8957-5838f569a31d} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\mywebsearchtoolbar.settingsplugin (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\mywebsearchtoolbar.settingsplugin.1 (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\funwebproducts.iecookiesmanager (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\TypeLib\{8ca01f0e-987c-49c3-b852-2f1ac4a7094c} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\CLSID\{0f8ecf4f-3646-4c3a-8881-8e138ffcaf70} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\CLSID\{b813095c-81c0-4e40-aa14-67520372b987} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\CLSID\{c9d7be3e-141a-4c85-8cd6-32461f3df2c7} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\CLSID\{cff4ce82-3aa2-451f-9b77-7165605fb835} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\funwebproducts.iecookiesmanager.1 (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\CLSID\{147a976f-eee1-4377-8ea7-4716e4cdd239} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\CLSID\{1e0de227-5ce4-4ea3-ab0c-8b03e1aa76bc} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\funwebproducts.datacontrol (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\TypeLib\{c8cecde3-1ae1-4c4a-ad82-6d5b00212144} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\CLSID\{25560540-9571-4d7b-9389-0f166788785a} (Adware.MyWebSearch) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{25560540-9571-4d7b-9389-0f166788785a} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\funwebproducts.datacontrol.1 (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\funwebproducts.shellviewcontrol (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\TypeLib\{621feacd-8857-43a6-ae26-451d670d5370} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\CLSID\{2eff3cf7-99c1-4c29-bc2b-68e057e22340} (Adware.MyWebSearch) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{2eff3cf7-99c1-4c29-bc2b-68e057e22340} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\funwebproducts.shellviewcontrol.1 (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\funwebproducts.htmlmenu (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\TypeLib\{e47caee0-deea-464a-9326-3f2801535a4d} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\CLSID\{3dc201fb-e9c9-499c-a11f-23c360d7c3f8} (Adware.MyWebSearch) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3dc201fb-e9c9-499c-a11f-23c360d7c3f8} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\CLSID\{98d9753d-d73b-42d5-8c85-4469cda897ab} (Adware.MyWebSearch) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{98d9753d-d73b-42d5-8c85-4469cda897ab} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\funwebproducts.htmlmenu.2 (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\mywebsearch.htmlpanel (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\TypeLib\{3e720450-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\CLSID\{3e720452-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3e720452-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\mywebsearch.htmlpanel.1 (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\mywebsearchtoolbar.toolbarplugin (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\mywebsearchtoolbar.toolbarplugin.1 (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\funwebproducts.popswattersettingscontrol (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\TypeLib\{8e6f1830-9607-4440-8530-13be7c4b1d14} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\CLSID\{63d0ed2c-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{63d0ed2c-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\CLSID\{8e6f1832-9607-4440-8530-13be7c4b1d14} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\CLSID\{a9571378-68a1-443d-b082-284f960c6d17} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\funwebproducts.popswattersettingscontrol.1 (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\CLSID\{7473d292-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\TypeLib\{7473d290-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\CLSID\{7473d294-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{7473d294-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\CLSID\{7473d296-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\mywebsearch.pseudotransparentplugin (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\mywebsearch.pseudotransparentplugin.1 (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\CLSID\{84da4fdf-a1cf-4195-8688-3e961f505983} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\funwebproducts.popswatterbarbutton (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\funwebproducts.popswatterbarbutton.1 (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\CLSID\{938aa51a-996c-4884-98ce-80dd16a5c9da} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\TypeLib\{29d67d3c-509a-4544-903f-c8c1b8236554} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\CLSID\{9ff05104-b030-46fc-94b8-81276e4e27df} (Adware.MyWebSearch) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9ff05104-b030-46fc-94b8-81276e4e27df} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\funwebproducts.htmlmenu.1 (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\CLSID\{9afb8248-617f-460d-9366-d71cdeda3179} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\screensavercontrol.screensaverinstaller (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\screensavercontrol.screensaverinstaller.1 (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\CLSID\{a4730ebe-43a6-443e-9776-36915d323ad3} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\funwebproducts.browseroverlayembed (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\TypeLib\{98635087-3f5d-418f-990c-b1efe0797a3b} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\CLSID\{a6573479-9075-4a65-98a6-19fd29cf7374} (Adware.MyWebSearch) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{a6573479-9075-4a65-98a6-19fd29cf7374} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\CLSID\{d778513b-1c40-4819-b0c5-49e40b39afd0} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\funwebproducts.browseroverlayembed.1 (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\mywebsearch.outlookaddin (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\CLSID\{adb01e81-3c79-4272-a0f1-7b2be7a782dc} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\mywebsearch.outlookaddin.1 (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\funwebproducts.killerobjmanager (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\funwebproducts.killerobjmanager.1 (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\funwebproducts.historykillerscheduler (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\funwebproducts.historykillerscheduler.1 (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\funwebproducts.historyswattercontrolbar (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\funwebproducts.historyswattercontrolbar.1 (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\funwebproducts.browseroverlaybarbutton (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\funwebproducts.browseroverlaybarbutton.1 (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\CLSID\{d9fffb27-d62a-4d64-8cec-1ff006528805} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\TypeLib\{0d26bc71-a633-4e71-ad31-eadc3a1b6a3a} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\mywebsearch.chatsessionplugin (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\TypeLib\{e79dfbc0-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\CLSID\{e79dfbca-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{e79dfbca-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\mywebsearch.chatsessionplugin.1 (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\Interface\{07b18eaa-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\Interface\{07b18eac-a523-4961-b6bb-170de4475cca} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\Interface\{f87d7fb5-9dc5-4c8c-b998-d8dfe02e2978} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\Interface\{e342af55-b78a-4cd0-a2bb-da7f52d9d25e} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\Interface\{e342af55-b78a-4cd0-a2bb-da7f52d9d25f} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\Interface\{1093995a-ba37-41d2-836e-091067c4ad17} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\Interface\{120927bf-1700-43bc-810f-fab92549b390} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\Interface\{17de5e5e-bfe3-4e83-8e1f-8755795359ec} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\Interface\{1f52a5fa-a705-4415-b975-88503b291728} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\Interface\{247a115f-06c2-4fb3-967d-2d62d3cf4f0a} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\Interface\{2763e333-b168-41a0-a112-d35f96f410c0} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\Interface\{2e3537fc-cf2f-4f56-af54-5a6a3dd375cc} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\Interface\{2e9937fc-cf2f-4f56-af54-5a6a3dd375cc} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\Interface\{38a7c9da-8db7-4d0f-a7b1-c4b1a305bddb} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\Interface\{3e1656ed-f60e-4597-b6aa-b6a58e171495} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\Interface\{3e53e2cb-86db-4a4a-8bd9-ffeb7a64df82} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\Interface\{3e720451-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\Interface\{3e720453-b472-4954-b7aa-33069eb53906} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\Interface\{63d0ed2b-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\Interface\{63d0ed2d-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\Interface\{6e74766c-4d93-4cc0-96d1-47b8e07ff9ca} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\Interface\{72ee7f04-15bd-4845-a005-d6711144d86a} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\Interface\{741de825-a6f0-4497-9aa6-8023cf9b0fff} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\Interface\{7473d291-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\Interface\{7473d293-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\Interface\{7473d295-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\Interface\{7473d297-b7bb-4f24-ae82-7e2ce94bb6a9} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\Interface\{90449521-d834-4703-bb4e-d3aa44042ff8} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\Interface\{991aac62-b100-47ce-8b75-253965244f69} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\Interface\{bbabdc90-f3d5-4801-863a-ee6ae529862d} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\Interface\{d6ff3684-ad3b-48eb-bbb4-b9e6c5a355c1} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\Interface\{eb9e5c1c-b1f9-4c2b-be8a-27d6446fdaf8} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\Interface\{8d292ec0-6792-4a38-82ed-73a087e41ba6} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\Interface\{a626cdbd-3d13-4f78-b819-440a28d7e8fc} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\Interface\{de38c398-b328-4f4c-a3ad-1b5e4ed93477} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\Interface\{e79dfbc9-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\Interface\{e79dfbcb-5697-4fbd-94e5-5b2a9c7c1612} (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\Typelib\{f42228fb-e84e-479e-b922-fbbd096e792c} (Adware.MyWebSearch) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00a6faf1-072e-44cf-8957-5838f569a31d} (Adware.MyWebSearch) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Adware.MyWebSearch) -> No action taken.
        HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256a51-b582-467e-b8d4-7786eda79ae0} (Adware.MyWebSearch) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{1d4db7d2-6ec9-47a3-bd87-1e41684e07bb} (Adware.MyWebSearch) -> No action taken.
        HKEY_CURRENT_USER\SOFTWARE\AntiSpywareMaster (Rogue.AntiSpywareMaster) -> No action taken.
        HKEY_CLASSES_ROOT\AppID\testCPV6.DLL (Trojan.BHO) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\xpre (Trojan.Downloader) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\aoprndtws (Malware.Trace) -> No action taken.
        HKEY_CLASSES_ROOT\WR (Malware.Trace) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MS Juan (Malware.Trace) -> No action taken.
        HKEY_CLASSES_ROOT\CLSID\{9c28eafb-ff50-4f42-8d39-a006129cc907} (Trojan.Vundo) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9c28eafb-ff50-4f42-8d39-a006129cc907} (Trojan.Vundo) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\tuvumcaw (Trojan.Vundo) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Outerinfo (Adware.PurityScan) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage\c:/windows/downloaded program files/xpreload.ocx (Heuristics.Malware) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\MyWebSearch (Adware.MyWebSearch) -> No action taken.
        HKEY_CLASSES_ROOT\MIME\Database\Content Type\application/x-f3embed (Adware.MyWebSearch) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyWebSearch bar Uninstall (Adware.MyWebSearch) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Outlook\Addins\MyWebSearch.OutlookAddin (Adware.MyWebSearch) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Word\Addins\MyWebSearch.OutlookAddin (Adware.MyWebSearch) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\FunWebProducts (Adware.MyWebSearch) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products (Adware.MyWebSearch) -> No action taken.
        HKEY_CURRENT_USER\SOFTWARE\MyWebSearch (Adware.MyWebSearch) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\FocusInteractive (Adware.MyWebSearch) -> No action taken.
        HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Network Monitor (Trojan.Service) -> No action taken.

        Valeur(s) du Registre infectée(s):
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\c4a0e6fc (Trojan.Vundo) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\MyWebSearch Email Plugin (Adware.MyWebSearch) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\runner1 (Trojan.DownLoader) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\AntiSpywareMaster (Rogue.AntiSpyMaster) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\My Web Search Bar (Adware.MyWebSearch) -> No action taken.
        HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\{00a6faf6-072e-44cf-8957-5838f569a31d} (Adware.MyWebSearch) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\BMc793d560 (Trojan.Agent) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{9c28eafb-ff50-4f42-8d39-a006129cc907} (Trojan.Vundo) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs\C:\WINDOWS\Downloaded Program Files\xpreload.ocx (Heuristics.Malware) -> No action taken.
        HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\MenuExt\&Search\ (Adware.Hotbar) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media\WMSDK\Sources\f3PopularScreensavers (Adware.MyWebSearch) -> No action taken.
        HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform\FunWebProducts (Adware.MyWebSearch) -> No action taken.

        Elément(s) de données du Registre infecté(s):
        HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Security Packages (Trojan.Vundo) -> Data: c:\windows\system32\fccyywwx -> No action taken.
        HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\Authentication Packages (Trojan.Vundo) -> Data: c:\windows\system32\fccyywwx -> No action taken.

        Dossier(s) infecté(s):
        C:\Program Files\Outerinfo (Adware.Outerinfo) -> No action taken.
        C:\Program Files\Outerinfo\FF (Adware.Outerinfo) -> No action taken.
        C:\Program Files\Outerinfo\FF\components (Adware.Outerinfo) -> No action taken.
        C:\Program Files\Network Monitor (Trojan.DNSChanger) -> No action taken.
        C:\Program Files\InetGet2 (Trojan.Downloader) -> No action taken.
        C:\Program Files\MyWebSearch (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\3.bin (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\Avatar (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\Cache (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\Game (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\History (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\icons (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\Message (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\Notifier (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\Settings (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\SrchAstt (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\SrchAstt\3.bin (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\FunWebProducts (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\FunWebProducts\ScreenSaver (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\FunWebProducts\ScreenSaver\Cache (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\FunWebProducts\ScreenSaver\Images (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\FunWebProducts\ScreenSaver\Images\101x135 (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\FunWebProducts\Shared (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\FunWebProducts\Shared\Cache (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\Temporary (Trojan.Agent) -> No action taken.
        C:\Program Files\AntiSpywareMaster (Rogue.AntiSpywareMaster) -> No action taken.
        C:\Program Files\Spcron (Trojan.Agent) -> No action taken.
        C:\Program Files\Sakora (Trojan.Agent) -> No action taken.
        C:\Documents and Settings\LocalService\Application Data\NetMon (Trojan.NetMon) -> No action taken.

        Fichier(s) infecté(s):
        C:\WINDOWS\system32\fccyywwx.dll (Trojan.Vundo) -> No action taken.
        C:\WINDOWS\system32\xwwyyccf.ini (Trojan.Vundo) -> No action taken.
        C:\WINDOWS\system32\xwwyyccf.ini2 (Trojan.Vundo) -> No action taken.
        C:\WINDOWS\system32\umgvrhmx.dll (Trojan.Vundo) -> No action taken.
        C:\WINDOWS\system32\xmhrvgmu.ini (Trojan.Vundo) -> No action taken.
        C:\WINDOWS\TmF0YWxpZQ\asappsrv.dll (AdWare.CommAd) -> No action taken.
        C:\Program Files\MyWebSearch\bar\3.bin\MWSOESTB.DLL (Adware.MyWebSearch) -> No action taken.
        C:\WINDOWS\TmF0YWxpZQ\command.exe (AdWare.CommAd) -> No action taken.
        C:\Program Files\Network Monitor\netmon.exe (Trojan.DNSChanger) -> No action taken.
        C:\Program Files\MyWebSearch\bar\3.bin\MWSOEMON.EXE (Adware.MyWebSearch) -> No action taken.
        C:\WINDOWS\mrofinu572.exe (Trojan.DownLoader) -> No action taken.
        C:\Program Files\AntiSpywareMaster\asm.exe (Rogue.AntiSpyMaster) -> No action taken.
        C:\Program Files\MyWebSearch\bar\3.bin\MWSBAR.DLL (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\Spcron\Spc.dll (Trojan.BHO) -> No action taken.
        C:\Program Files\MyWebSearch\SrchAstt\3.bin\MWSSRCAS.DLL (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\3.bin\F3HISTSW.DLL (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\3.bin\F3DTACTL.DLL (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\3.bin\F3SHLLVW.DLL (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\3.bin\F3HTMLMU.DLL (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\3.bin\M3HTML.DLL (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\3.bin\F3POPSWT.DLL (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\3.bin\M3SKIN.DLL (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\3.bin\F3CJPEG.DLL (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\3.bin\F3SCRCTR.DLL (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\3.bin\F3BROVLY.DLL (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\3.bin\M3OUTLCN.DLL (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\3.bin\F3HTTPCT.DLL (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\3.bin\M3MSG.DLL (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\3.bin\MWSOEPLG.DLL (Adware.MyWebSearch) -> No action taken.
        C:\Documents and Settings\Vanessa\Application Data\Microsoft\Windows\ukqec.exe (Trojan.Vundo) -> No action taken.
        C:\Documents and Settings\Vanessa\Application Data\SpeedRunner\SpeedRunner.exe (Adware.SpeedRunner) -> No action taken.
        C:\Documents and Settings\Vanessa\Application Data\SpeedRunner\SRUninstall.exe (Adware.SurfAccuracy) -> No action taken.
        C:\Documents and Settings\William\Local Settings\Temp\qkqmbmot.dll (Trojan.Vundo) -> No action taken.
        C:\Documents and Settings\William\Local Settings\Temporary Internet Files\Content.IE5\PW614V1V\kb456456[1] (Trojan.Vundo) -> No action taken.
        C:\Program Files\Fichiers communs\Yazzle1281OinAdmin.exe (Adware.PurityScan) -> No action taken.
        C:\Program Files\Fichiers communs\Yazzle1281OinUninstaller.exe (Adware.PurityScan) -> No action taken.
        C:\Program Files\Internet Explorer\msimg32.dll (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MSN Messenger\riched20.dll (Adware.MyWeb.FunWeb) -> No action taken.
        C:\Program Files\MyWebSearch\bar\3.bin\F3IMSTUB.DLL (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\3.bin\F3PSSAVR.SCR (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\3.bin\F3REPROX.DLL (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\3.bin\F3RESTUB.DLL (Adware.MyWeb.FunWeb) -> No action taken.
        C:\Program Files\MyWebSearch\bar\3.bin\F3SCHMON.EXE (Adware.MyWeb.FunWeb) -> No action taken.
        C:\Program Files\MyWebSearch\bar\3.bin\F3WPHOOK.DLL (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\3.bin\M3IDLE.DLL (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\3.bin\M3IMPIPE.EXE (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\3.bin\M3PLUGIN.DLL (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\3.bin\M3SKPLAY.EXE (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\3.bin\M3SLSRCH.EXE (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\3.bin\M3SRCHMN.EXE (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\3.bin\NPMYWEBS.DLL (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\Sakora\Sakora.exe (Trojan.Agent) -> No action taken.
        C:\WINDOWS\b104.exe (Trojan.Downloader) -> No action taken.
        C:\WINDOWS\b155.exe (Trojan.BHO) -> No action taken.
        C:\WINDOWS\b156.exe (Trojan.Dropper) -> No action taken.
        C:\WINDOWS\b157.exe (Trojan.Dropper) -> No action taken.
        C:\WINDOWS\mrofinu572.exe.tmp (Trojan.DownLoader) -> No action taken.
        C:\WINDOWS\system32\f3PSSavr.scr (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\Outerinfo\FF\chrome.manifest (Adware.Outerinfo) -> No action taken.
        C:\Program Files\Outerinfo\FF\install.rdf (Adware.Outerinfo) -> No action taken.
        C:\Program Files\Outerinfo\FF\components\OuterinfoAds.xpt (Adware.Outerinfo) -> No action taken.
        C:\Program Files\MyWebSearch\bar\3.bin\F3BKGERR.JPG (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\3.bin\F3SPACER.WMV (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\3.bin\F3WALLPP.DAT (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\3.bin\M3FFXTBR.JAR (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\3.bin\M3FFXTBR.MANIFEST (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\3.bin\M3NTSTBR.JAR (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\3.bin\M3NTSTBR.MANIFEST (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\Avatar\COMMON.F3S (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\Cache\0002E70A (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\Cache\00145080.bin (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\Cache\0014517A.bin (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\Cache\001474C1.bin (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\Cache\001475EA.bin (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\Cache\001476A5.bin (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\Cache\00149B25 (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\Cache\00157420.bin (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\Cache\00157FF7.bin (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\Cache\00158D36.bin (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\Cache\00159A46.bin (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\Cache\0547CDB4.bin (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\Cache\0547D006.bin (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\Cache\0547D239.bin (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\Cache\0547D2C5 (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\Cache\files.ini (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\Game\CHECKERS.F3S (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\Game\CHESS.F3S (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\Game\REVERSI.F3S (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\History\search2 (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\icons\CM.ICO (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\icons\MFC.ICO (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\icons\PSS.ICO (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\icons\SMILEY.ICO (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\icons\WB.ICO (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\icons\ZWINKY.ICO (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\Message\COMMON.F3S (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\Notifier\COMMON.F3S (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\Notifier\DOG.F3S (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\Notifier\FISH.F3S (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\Notifier\KUNGFU.F3S (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\Notifier\LIFEGARD.F3S (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\Notifier\MAID.F3S (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\Notifier\MAILBOX.F3S (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\Notifier\OPERA.F3S (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\Notifier\ROBOT.F3S (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\Notifier\SEDUCT.F3S (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\Notifier\SURFER.F3S (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\Settings\prevcfg2.htm (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\Settings\setting2.htm (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\Settings\setting2.htm.bak (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\Settings\settings.dat (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\Settings\settings.dat.bak (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\MyWebSearch\bar\Settings\s_pid.dat (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\FunWebProducts\ScreenSaver\Cache\004DFD35.swf (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\FunWebProducts\ScreenSaver\Cache\0050BC94 (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\FunWebProducts\ScreenSaver\Cache\files.ini (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\FunWebProducts\ScreenSaver\Images\0033A7B1.urr (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\FunWebProducts\ScreenSaver\Images\004DF94D.urr (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\FunWebProducts\ScreenSaver\Images\004E02A4.dat (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\FunWebProducts\ScreenSaver\Images\0050E6FF.dat (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\FunWebProducts\ScreenSaver\Images\0051B9E0.dat (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\FunWebProducts\ScreenSaver\Images\005235A7.dat (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\FunWebProducts\ScreenSaver\Images\0052BD75.dat (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\FunWebProducts\ScreenSaver\Images\005413AE.dat (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\FunWebProducts\ScreenSaver\Images\wrkparam.lst (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\FunWebProducts\Shared\002F49B6.dat (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\FunWebProducts\Shared\Cache\AvatarSmallBtn.html (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\FunWebProducts\Shared\Cache\CursorManiaBtn.html (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\FunWebProducts\Shared\Cache\FunBuddyIconBtn.html (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\FunWebProducts\Shared\Cache\MailStampBtn.html (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\FunWebProducts\Shared\Cache\MyFunCardsIMBtn.html (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\FunWebProducts\Shared\Cache\MyStationeryBtn.html (Adware.MyWebSearch) -> No action taken.
        C:\Program Files\FunWebProducts\Shared\Cache\SmileyCentralBtn.html (Adware.MyWebSearch) -> No action taken.
        C:\Documents and Settings\LocalService\Application Data\NetMon\domains.txt (Trojan.NetMon) -> No action taken.
        C:\Documents and Settings\LocalService\Application Data\NetMon\log.txt (Trojan.NetMon) -> No action taken.
        C:\Documents and Settings\Natalie\Application Data\Microsoft\Internet Explorer\Quick Launch\AntiSpywareMaster.lnk (Rogue.Antispyware) -> No action taken.
        C:\WINDOWS\cookies.ini (Malware.Trace) -> No action taken.
        C:\WINDOWS\system32\opydygfo.dll (Trojan.Agent) -> No action taken.
        C:\WINDOWS\system32\pac.txt (Malware.Trace) -> No action taken.
        C:\WINDOWS\system32\atmtd.dll (Trojan.Vundo) -> No action taken.
        C:\WINDOWS\system32\atmtd.dll._ (Trojan.Agent) -> No action taken.
        C:\WINDOWS\system32\tuvUMcaw.dll (Trojan.Vundo) -> No action taken.
        C:\WINDOWS\system32\wvUKefcB.dll (Trojan.Vundo) -> No action taken.
        C:\WINDOWS\Downloaded Program Files\xpreload.ocx (Heuristics.Malware) -> No action taken.
        C:\WINDOWS\uninstall_nmon.vbs (Malware.Trace) -> No action taken.
        C:\Documents and Settings\William\Bureau\AntiSpywareMaster.lnk (Rogue.Antispyware) -> No action taken.
        C:\Documents and Settings\Natalie\Bureau\AntiSpywareMaster.lnk (Rogue.Antispyware) -> No action taken.
        C:\Documents and Settings\William\Application Data\Microsoft\Internet Explorer\Quick Launch\AntiSpywareMaster.lnk (Rogue.Antispyware) -> No action taken.
    2. reposte un nouveau log hijackthis
      1. Voici :

        Logfile of Trend Micro HijackThis v2.0.2
        Scan saved at 12:37:28, on 2008-07-03
        Platform: Windows XP SP1 (WinNT 5.01.2600)
        MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
        Boot mode: Normal

        Running processes:
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\csrss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\system32\spoolsv.exe
        C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
        C:\WINDOWS\TmF0YWxpZQ\command.exe
        C:\Program Files\Norton AntiVirus\navapsvc.exe
        C:\WINDOWS\System32\nvsvc32.exe
        C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\Explorer.EXE
        C:\PROGRA~1\NORTON~1\navapw32.exe
        C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
        C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
        C:\Program Files\QuickTime\qttask.exe
        C:\WINDOWS\System32\RUNDLL32.EXE
        C:\WINDOWS\System32\ctfmon.exe
        C:\Program Files\TRENDnet\TEW-424UB\WlanCU.exe
        C:\Program Files\Internet Explorer\iexplore.exe
        C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
        C:\Program Files\MSN Messenger\msnmsgr.exe
        C:\Program Files\MSN Messenger\usnsvc.exe
        C:\Program Files\Internet Explorer\iexplore.exe
        C:\Program Files\TechSmith\SnagIt 8\SnagIt32.exe
        C:\Program Files\TechSmith\SnagIt 8\TSCHelp.exe
        C:\Program Files\TechSmith\SnagIt 8\SnagPriv.exe
        C:\Program Files\hijackthis\HJT.exe
        C:\WINDOWS\System32\wbem\wmiprvse.exe

        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.ca/?gws_rd=ssl
        R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.paintshoppro.com/en/?utm_source=jasc&utm_medium=redirect&utm_term=/privacy.asp&utm_campaign=jasc
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
        O2 - BHO: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 8\SnagItBHO.dll
        O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
        O2 - BHO: {224fa06a-4dba-e518-ff24-407437c4355b} - {b5534c73-4704-42ff-815e-abd4a60af422} - C:\WINDOWS\System32\btareu.dll
        O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
        O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
        O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
        O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
        O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 8\SnagItIEAddin.dll
        O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
        O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
        O4 - HKLM\..\Run: [NAV Agent] C:\PROGRA~1\NORTON~1\navapw32.exe
        O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
        O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
        O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
        O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
        O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
        O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
        O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
        O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
        O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
        O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
        O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
        O4 - Global Startup: Wireless Configuration Utility HW.14.lnk = C:\Program Files\TRENDnet\TEW-424UB\WlanCU.exe
        O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
        O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
        O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
        O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
        O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
        O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
        O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.mail.live.com/mail/w1/resources/MSNPUpld.cab
        O16 - DPF: {535AC98D-C942-4C87-9275-09C9C43EF2C1} - ms-its:mhtml:file://c:\\nores.mht!http://adxbnet.net/code/chm/xpre.chm::/xpreload.ocx
        O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-CA/a-UNO1/GAME_UNO1.cab
        O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
        O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://www.clubechat.net/controls/MsnChat45.cab
        O16 - DPF: {FA30EC32-668B-4B60-B13C-4C84EB90C3C9} (ActiveID Control) - http://www.meetstream.com/activex/28081/activeid.cab
        O16 - DPF: {FFBB3F3B-0A5A-4106-BE53-DFE1E2340CB1} (Contrôleur de DownloadManager) - http://dlm.tools.akamai.com/dlmanager/versions/activex/dlm-activex-2.2.1.6.cab
        O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
        O23 - Service: Command Service (cmdService) - Unknown owner - C:\WINDOWS\TmF0YWxpZQ\command.exe
        O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
        O23 - Service: Logitech Process Monitor (LVPrcSrv) - Unknown owner - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe (file missing)
        O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
        O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
        O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exe
        O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
        O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
    3. ... Peut-être plus propre, mais là les fenêtres intempestives viennent de recommencer!

      Je suis en train de faire l'analyse avec AVG Anti-Spyware, est-ce que je dois afficher un rapport pour lui aussi?

      Merci!
      1. oui
        1. Voici le rapport avec AVG:

          ---------------------------------------------------------
          AVG Anti-Spyware - Rapport d'analyse
          ---------------------------------------------------------

          + Créé à: 15:09:14 2008-07-03

          + Résultat de l'analyse:

          C:\Documents and Settings\Natalie\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.45543 -> Adware.CommAd : Aucune action entreprise.
          C:\Documents and Settings\Natalie\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.75107 -> Adware.CommAd : Aucune action entreprise.
          C:\WINDOWS\TmF0YWxpZQ\asappsrv.dll -> Adware.CommAd : Aucune action entreprise.
          C:\WINDOWS\TmF0YWxpZQ\command.exe -> Adware.CommAd : Aucune action entreprise.
          [1084] C:\WINDOWS\TmF0YWxpZQ\asappsrv.dll -> Adware.CommAd : Aucune action entreprise.
          [1236] C:\WINDOWS\TmF0YWxpZQ\asappsrv.dll -> Adware.CommAd : Aucune action entreprise.
          [1612] C:\WINDOWS\TmF0YWxpZQ\command.exe -> Adware.CommAd : Aucune action entreprise.
          [1832] C:\WINDOWS\TmF0YWxpZQ\asappsrv.dll -> Adware.CommAd : Aucune action entreprise.
          [288] C:\WINDOWS\TmF0YWxpZQ\asappsrv.dll -> Adware.CommAd : Aucune action entreprise.
          [2948] C:\WINDOWS\TmF0YWxpZQ\asappsrv.dll -> Adware.CommAd : Aucune action entreprise.
          [296] C:\WINDOWS\TmF0YWxpZQ\asappsrv.dll -> Adware.CommAd : Aucune action entreprise.
          [3060] C:\WINDOWS\TmF0YWxpZQ\asappsrv.dll -> Adware.CommAd : Aucune action entreprise.
          [3088] C:\WINDOWS\TmF0YWxpZQ\asappsrv.dll -> Adware.CommAd : Aucune action entreprise.
          [308] C:\WINDOWS\TmF0YWxpZQ\asappsrv.dll -> Adware.CommAd : Aucune action entreprise.
          [316] C:\WINDOWS\TmF0YWxpZQ\asappsrv.dll -> Adware.CommAd : Aucune action entreprise.
          [324] C:\WINDOWS\TmF0YWxpZQ\asappsrv.dll -> Adware.CommAd : Aucune action entreprise.
          [336] C:\WINDOWS\TmF0YWxpZQ\asappsrv.dll -> Adware.CommAd : Aucune action entreprise.
          [348] C:\WINDOWS\TmF0YWxpZQ\asappsrv.dll -> Adware.CommAd : Aucune action entreprise.
          [368] C:\WINDOWS\TmF0YWxpZQ\asappsrv.dll -> Adware.CommAd : Aucune action entreprise.
          HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Adware.Generic : Aucune action entreprise.
          HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Adware.Generic : Aucune action entreprise.
          HKU\S-1-5-18\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Adware.Generic : Aucune action entreprise.
          HKU\S-1-5-21-1659004503-448539723-682003330-1003\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Adware.Generic : Aucune action entreprise.
          C:\Documents and Settings\William\Local Settings\Temporary Internet Files\Content.IE5\A5DMKVCA\a537119c47192bc08952189ae8782f08[1].zip/b152.exe -> Downloader.Agent.tkz : Aucune action entreprise.
          C:\Documents and Settings\Natalie\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.16513 -> Not-A-Virus.Adware.PurityScan : Aucune action entreprise.
          C:\Documents and Settings\LocalService\Cookies\system@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
          C:\Documents and Settings\William\Cookies\william@himedia.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
          C:\Documents and Settings\William\Cookies\william@adtech[1].txt -> TrackingCookie.Adtech : Aucune action entreprise.
          C:\Documents and Settings\William\Cookies\william@advertising[1].txt -> TrackingCookie.Advertising : Aucune action entreprise.
          :mozilla.10:E:\2 IEM DISQUES\Documents and Settings\Vanessa.NLOOF-ET2FHZ2XD\Application Data\Mozilla\Firefox\Profiles\rxmh4oxf.default\cookies.txt -> TrackingCookie.Atdmt : Aucune action entreprise.
          C:\Documents and Settings\LocalService\Cookies\system@atdmt[1].txt -> TrackingCookie.Atdmt : Aucune action entreprise.
          C:\Documents and Settings\William\Cookies\william@atdmt[2].txt -> TrackingCookie.Atdmt : Aucune action entreprise.
          :mozilla.11:E:\2 IEM DISQUES\Documents and Settings\Vanessa.NLOOF-ET2FHZ2XD\Application Data\Mozilla\Firefox\Profiles\rxmh4oxf.default\cookies.txt -> TrackingCookie.Bluestreak : Aucune action entreprise.
          C:\Documents and Settings\William\Cookies\william@bluestreak[2].txt -> TrackingCookie.Bluestreak : Aucune action entreprise.
          C:\Documents and Settings\William\Cookies\william@fl01.ct2.comclick[1].txt -> TrackingCookie.Comclick : Aucune action entreprise.
          C:\Documents and Settings\LocalService\Cookies\system@doubleclick[1].txt -> TrackingCookie.Doubleclick : Aucune action entreprise.
          C:\Documents and Settings\William\Cookies\william@doubleclick[1].txt -> TrackingCookie.Doubleclick : Aucune action entreprise.
          C:\Documents and Settings\William\Cookies\william@e-2dj6wfmyugcpshp.stats.esomniture[1].txt -> TrackingCookie.Esomniture : Aucune action entreprise.
          C:\Documents and Settings\William\Cookies\william@adopt.euroclick[2].txt -> TrackingCookie.Euroclick : Aucune action entreprise.
          :mozilla.21:E:\2 IEM DISQUES\Documents and Settings\Vanessa.NLOOF-ET2FHZ2XD\Application Data\Mozilla\Firefox\Profiles\rxmh4oxf.default\cookies.txt -> TrackingCookie.Falkag : Aucune action entreprise.
          :mozilla.22:E:\2 IEM DISQUES\Documents and Settings\Vanessa.NLOOF-ET2FHZ2XD\Application Data\Mozilla\Firefox\Profiles\rxmh4oxf.default\cookies.txt -> TrackingCookie.Falkag : Aucune action entreprise.
          :mozilla.23:E:\2 IEM DISQUES\Documents and Settings\Vanessa.NLOOF-ET2FHZ2XD\Application Data\Mozilla\Firefox\Profiles\rxmh4oxf.default\cookies.txt -> TrackingCookie.Falkag : Aucune action entreprise.
          :mozilla.24:E:\2 IEM DISQUES\Documents and Settings\Vanessa.NLOOF-ET2FHZ2XD\Application Data\Mozilla\Firefox\Profiles\rxmh4oxf.default\cookies.txt -> TrackingCookie.Falkag : Aucune action entreprise.
          :mozilla.25:E:\2 IEM DISQUES\Documents and Settings\Vanessa.NLOOF-ET2FHZ2XD\Application Data\Mozilla\Firefox\Profiles\rxmh4oxf.default\cookies.txt -> TrackingCookie.Falkag : Aucune action entreprise.
          C:\Documents and Settings\LocalService\Cookies\system@findwhat[1].txt -> TrackingCookie.Findwhat : Aucune action entreprise.
          C:\Documents and Settings\William\Cookies\william@overture[1].txt -> TrackingCookie.Overture : Aucune action entreprise.
          C:\Documents and Settings\William\Cookies\william@ads.pointroll[1].txt -> TrackingCookie.Pointroll : Aucune action entreprise.
          :mozilla.9:E:\2 IEM DISQUES\Documents and Settings\Vanessa.NLOOF-ET2FHZ2XD\Application Data\Mozilla\Firefox\Profiles\rxmh4oxf.default\cookies.txt -> TrackingCookie.Questionmarket : Aucune action entreprise.
          :mozilla.17:E:\2 IEM DISQUES\Documents and Settings\Vanessa.NLOOF-ET2FHZ2XD\Application Data\Mozilla\Firefox\Profiles\rxmh4oxf.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
          :mozilla.18:E:\2 IEM DISQUES\Documents and Settings\Vanessa.NLOOF-ET2FHZ2XD\Application Data\Mozilla\Firefox\Profiles\rxmh4oxf.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
          :mozilla.19:E:\2 IEM DISQUES\Documents and Settings\Vanessa.NLOOF-ET2FHZ2XD\Application Data\Mozilla\Firefox\Profiles\rxmh4oxf.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
          :mozilla.20:E:\2 IEM DISQUES\Documents and Settings\Vanessa.NLOOF-ET2FHZ2XD\Application Data\Mozilla\Firefox\Profiles\rxmh4oxf.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
          C:\Documents and Settings\Natalie\Cookies\natalie@bs.serving-sys[2].txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
          C:\Documents and Settings\Natalie\Cookies\natalie@serving-sys[1].txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
          C:\Documents and Settings\William\Cookies\william@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
          C:\Documents and Settings\William\Cookies\william@serving-sys[2].txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
          C:\Documents and Settings\William\Cookies\william@smartadserver[2].txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
          C:\Documents and Settings\William\Cookies\william@tribalfusion[2].txt -> TrackingCookie.Tribalfusion : Aucune action entreprise.
          C:\Documents and Settings\LocalService\Cookies\system@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
          C:\Documents and Settings\LocalService\Cookies\system@zedo[2].txt -> TrackingCookie.Zedo : Aucune action entreprise.
          C:\Documents and Settings\Natalie\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Quarantine\QUAR1.55209 -> Trojan.Scapur.k : Aucune action entreprise.
          C:\WINDOWS\TmF0YWxpZQ\nAIXsqUDtk.vbs -> Trojan.Small : Aucune action entreprise.

          Fin du rapport
      2. Bonjour,

        Ça va de mal en pis ... ce matin, des mots de passe sont requis pour ouvrir une session sur XP pour les 3 usagers de mon PC. Je n'avais pas de mot de passe pour moi, l'usager #2 avait retiré le sien et le #3 a un mot de passe que nous ignorons.

        De toute façon, dès qu'on essaie quoique ce soit voici le message d'erreur que le système nous donne:
        " Message d'ouverture de session
        Le système n'a pas pu ouvrir de session car le domaine NATALIE-xxx n'est pas disponible."

        Présentement je vous écris à partir d'un autre PC!

        Alors maintenant, avant de faire quoique ce soit d'autre ... je dois pouvoir ouvrir une session sur mon PC!!!

        Une idée, une solution à me proposer???

        Merci encore ...
        1. non le formatage
          1. Yeurk ... finalement pas le choix!
            Je quitte pour le week-end, je verrai ça lundi à mon retour et je viendrai vous en donner des nouvelles!

            Merci encore pour l'aide!!!
        2. Pas besoin de formatage

          Problème de fenêtres intempestives + AntispywareMaster + Vista Antivirus 2008 ...
          Surtout pour des pubs

          es fix que tu as passé n'ont pas fonctionné, comment veux tu avancer....

          Ton PC n'est pas à jour

          ***************************************************
          Télécharge Toolbar-S&D (Team IDN) sur ton Bureau.
          https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2

          * Lance l'installation du programme en exécutant le fichier téléchargé.
          * Double-clique maintenant sur le raccourci de Toolbar-S&D.
          * Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
          * Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
          * Poste le rapport généré. (C:\TB.txt)

          1. non c'est pas ca le prob il arrive pu demmarer une session
            1. JE lis ce qu'il y a écrit dans son message initial

              Problème de fenêtres intempestives + AntispywareMaster + Vista Antivirus 2008 ...
              Comment faire pour m'en débarrasser? J'ai vu que d'autres ont le même problème, mais j'aimerais bien que quelqu'un m'aide pour solutionner le tout de la bonne façon. Merci!


              C'est par là qu' il faut commencer.
              Les fix passés non pas fonctionné.
              !!!!!!!!!

          2. Bonjour
            J'ai le même blème. Voici le rapport, vous me direz qe faire

            Logfile of Trend Micro HijackThis v2.0.2
            Scan saved at 07:41:44, on 05/08/2008
            Platform: Windows XP SP2 (WinNT 5.01.2600)
            MSIE: Internet Explorer v7.00 (7.00.6000.16674)
            Boot mode: Normal

            Running processes:
            C:\WINDOWS\System32\smss.exe
            C:\WINDOWS\system32\winlogon.exe
            C:\WINDOWS\system32\services.exe
            C:\WINDOWS\system32\lsass.exe
            C:\WINDOWS\system32\Ati2evxx.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\System32\svchost.exe
            C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
            C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
            C:\WINDOWS\system32\Ati2evxx.exe
            C:\Program Files\Alwil Software\Avast4\ashServ.exe
            C:\WINDOWS\Explorer.EXE
            C:\WINDOWS\system32\spoolsv.exe
            c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
            H:\AVG Anti-Spyware\guard.exe
            C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
            C:\WINDOWS\System32\FTRTSVC.exe
            C:\Program Files\VIAudioi\SBADeck\ADeck.exe
            C:\WINDOWS\system32\LVCOMSX.EXE
            C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
            H:\AVG Anti-Spyware\avgas.exe
            C:\WINDOWS\system32\rundll32.exe
            C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
            C:\WINDOWS\system32\ctfmon.exe
            C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
            C:\WINDOWS\System32\svchost.exe
            C:\Program Files\Inventel\Gateway\wlancfg.exe
            C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
            C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
            C:\WINDOWS\system32\wscntfy.exe
            C:\WINDOWS\System32\svchost.exe
            C:\Program Files\IncrediMail\bin\IncMail.exe
            C:\Program Files\IncrediMail\bin\IMApp.exe
            C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
            C:\Program Files\Internet Explorer\IEXPLORE.EXE
            C:\Program Files\VIRUS FANFANMIMI\HijackThis.exe

            R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
            R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
            R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
            R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
            O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
            O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
            O3 - Toolbar: fdkowvbp - {F486C881-8E8F-4C25-B89F-36E1268FACD2} - C:\WINDOWS\fdkowvbp.dll
            O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
            O4 - HKLM\..\Run: [AudioDeck] C:\Program Files\VIAudioi\SBADeck\ADeck.exe 1
            O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
            O4 - HKLM\..\Run: [!AVG Anti-Spyware] "H:\AVG Anti-Spyware\avgas.exe" /minimized
            O4 - HKLM\..\Run: [3c5e40b7] rundll32.exe "C:\WINDOWS\system32\qfnoihkl.dll",b
            O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
            O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
            O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
            O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
            O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
            O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
            O8 - Extra context menu item: &Search - ?p=ZNxpt233YYFR
            O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\fanfanmimi\Menu Démarrer\Programmes\IMVU\Run IMVU.lnk
            O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
            O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
            O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dll
            O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
            O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
            O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
            O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
            O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
            O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
            O16 - DPF: {7DA181BB-EF8D-4A7E-8C53-7BFC718EF71D} (Upload Class) - http://photoservice.photos.orange.fr/migrationorange/index.cfm
            O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
            O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
            O18 - Protocol: bw+0 - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw+0s - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw-0 - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw-0s - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw00 - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw00s - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw10 - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw10s - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw20 - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw20s - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw30 - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw30s - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw40 - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw40s - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw50 - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw50s - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw60 - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw60s - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw70 - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw70s - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw80 - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw80s - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw90 - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw90s - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwa0 - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwa0s - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwb0 - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwb0s - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwc0 - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwc0s - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwd0 - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwd0s - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwe0 - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwe0s - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwf0 - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwf0s - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
            O18 - Protocol: bwg0 - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwg0s - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwh0 - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwh0s - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwi0 - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwi0s - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwj0 - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwj0s - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwk0 - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwk0s - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwl0 - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwl0s - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwm0 - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwm0s - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwn0 - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwn0s - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwo0 - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwo0s - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwp0 - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwp0s - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwq0 - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwq0s - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwr0 - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwr0s - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bws0 - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bws0s - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwt0 - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwt0s - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwu0 - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwu0s - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwv0 - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwv0s - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bww0 - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bww0s - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwx0 - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwx0s - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwy0 - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwy0s - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwz0 - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwz0s - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: offline-8876480 - {36F47B5F-8B80-47EF-B8D5-5A2F638F87E3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O20 - AppInit_DLLs: tkyobd.dll fdtwfq.dll txqzot.dll
            O21 - SSODL: wnslvxtf - {8227F26B-7BDE-4C8A-9E1C-0C5849B1B879} - C:\WINDOWS\wnslvxtf.dll (file missing)
            O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
            O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
            O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
            O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
            O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
            O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
            O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
            O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - H:\AVG Anti-Spyware\guard.exe
            O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
            O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
            O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
            O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
            O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
            O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
            O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
            O23 - Service: Service de lancement de WlanCfg (Wlancfg) - Inventel - C:\Program Files\Inventel\Gateway\wlancfg.exe
            1. Bonjour,

              CREER SON PROPRE TOPIK

              Il serait préférable que tu crées ton propre « topik » message personnel. Cela rendra le poste (ici) plus compréhensible, et nous pourrons traiter ton soucis avec plus d’efficacité.
              Donc
              Fais ce qui suit, SVP
              http://perso.orange.fr/rginformatique/section%20virus/demofairesontmessage.htm
              Merci
              A++
              http://perso.orange.fr/rginformatique/section%20virus/demofairesontmessage.htm

              A++