Analyse Sdfix Fermé

Question

Bonjour,


Je viens d'effectuer une analyse sdfix en mode sans echec, et lors de l'analyse plusieurs lignes sont apparues indiquant : "locate error : allocating memory !"

Qu'est ce que cela signifie ?

Cette analyse semble avoir par ailleurs résolu quelques problèmes que j'avais.

par avance merci de votre avis
argan5

gil le fantom · Answer

bonjour

le mieux , c'est que tu pose un hijackthis stp

tu poste un rapport hijackthis http://www.commentcamarche.net/telecharger/telecharger 159 hijackthis
important,tu vas démarrer\poste de travail\C:\ program files\Trend Micro\HijackThis\HijackThis.exe ,tu clic droit sur hijackthis.exe,tu vas à renommer,tu note "test.exe" par exemple.
si problème voir l'aide
http://perso.orange.fr/rginformatique/section%20virus/demohijack.htm

tu Clic sur Do a system scan and save the log
tu me colle le rapport sur ta réponse

argan5 · Answer

Bonjour Gil le fantom,

Ci-après le rapport highjack this  + rapport sdfix

Ce qu'il y a de bizard quand j'ai fait l'analyse sdfix :
j'ai lancé l'analyse en mode sans echec : j'ai eu ce message de "Locate error : allocating memory" indiqué plus haut
le rapport était incomplet , çà c'est juste arrêté à "Restoring Windows Registry Values
Restoring Windows Default Hosts File"
Ensuite redemarrage en mode normale et là l'analyse s'est terminée (dans une fenêtre bleue avec le message "finishing..." . J'ai ensuite copié et collé la partie de l'analyse effectué en mode normal dans le rapport sdfix qui avait été sauvegardé en mode sans échec.

Depuis cette analyse, mon ordinateur est plus rapide et tout semble fonctionner correctement

RAPPORT HIGHJACKTHIS :
Logfile of HijackThis v1.99.1
Scan saved at 09:20:40, on 15/08/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
C:\WINDOWS\system32
vsvc32.exe
C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe
C:\WINDOWS\system32\IoctlSvc.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\Roxio\Digital Home 9\RoxioUPnPRenderer9.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.iwin.com/home?NMR=1
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = https://support.microsoft.com/en-US/topic/internet-explorer-downloads-d49e1f0d-571c-9a7b-d97e-be248806ca70
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Download Manager Browser Helper Object - {19C8E43B-07B3-49CB-BFFC-6777B593E6F8} - C:\PROGRA~1\FICHIE~1\fluxDVD\DOWNLO~1\XEBDLH~1.DLL
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla	fswshx.dll
O2 - BHO: Absolutist Games Toolbar - {631ac2d4-57b3-42b0-a148-da33b462c1a3} - C:\Program Files\Absolutist_Games	bAbs1.dll
O2 - BHO: BrwIEConnector Class - {908A31E8-2A6E-4736-8E8A-AAF00C4AE38F} - C:\Program Files\Browster\Browster.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: GamesBarBHO Class - {CB0D163C-E9F4-4236-9496-0597E24B23A5} - C:\Program Files\GamesBar\oberontb.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: Absolutist Games Toolbar - {631ac2d4-57b3-42b0-a148-da33b462c1a3} - C:\Program Files\Absolutist_Games	bAbs1.dll
O3 - Toolbar: (no name) - {6F282B65-56BF-4BD1-A8B2-A4449A05863D} - (no file)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: (no name) - {1A93C934-025B-4c3a-B38E-9654A7003239} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: GamesBar - {1A93C934-025B-4c3a-B38E-9654A7003239} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Statistiques d’Anti-Virus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\SCIEPlgn.dll
O9 - Extra button: (no name) - {2A465934-E5F0-11D2-91B5-00104B9C4765} - C:\Program Files\Copernic 2000 Pro\Copernic.exe
O9 - Extra 'Tools' menuitem: Lancer Copernic - {2A465934-E5F0-11D2-91B5-00104B9C4765} - C:\Program Files\Copernic 2000 Pro\Copernic.exe
O9 - Extra button: Copernic - {2A465936-E5F0-11D2-91B5-00104B9C4765} - C:\Program Files\Copernic 2000 Pro\Copernic.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Traduire - {99EFB53C-C965-43CF-9F45-52242D134187} - file://C:\Program Files\Copernic 2000 Pro\Translate.htm
O9 - Extra 'Tools' menuitem: &Traduire avec Gist-In-Time - {99EFB53C-C965-43CF-9F45-52242D134187} - file://C:\Program Files\Copernic 2000 Pro\Translate.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe (file missing)
O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe (file missing)
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll
O11 - Options group: [INTERNATIONAL] International*
O15 - Trusted Zone: *.canalplay.com
O15 - Trusted Zone: *.canalplusactive.com
O15 - Trusted Zone: *.canalplay.com (HKLM)
O15 - Trusted Zone: *.canalplusactive.com (HKLM)
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://www.adobe.com/products/acrobat/nos/gp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{DED55562-0C11-4296-B0EA-75CF6418CF11}: NameServer = 192.168.0.1
O18 - Protocol: bw+0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Kaspersky Anti-Virus 7.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe" -r (file missing)
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Photoshop Elements Device Connect (PhotoshopElementsDeviceConnect) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Roxio UPnP Renderer 9 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 9\RoxioUPnPRenderer9.exe
O23 - Service: Roxio Upnp Server 9 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 9\RoxioUpnpService9.exe
O23 - Service: Service CANALPLAY - Canal+ Distribution - C:\Program Files\Lecteur CANALPLAY\CanalPlayService.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Fichiers communs\SureThing Shared\stllssvr.exe
_________________________
RAPPORT SDFIX :
SDFix: Version 1.101

Run by YVETTE on 14/08/2008 at 18:16

Microsoft Windows XP [version 5.1.2600]

Running From: C:\SDFix

Safe Mode:
Checking Services: 


Restoring Windows Registry Values
Restoring Windows Default Hosts File


Rebooting...


Normal Mode:
Checking Files: 

No Trojan Files Found




Removing Temp Files...

ADS Check:

C:\WINDOWS
No streams found. 

C:\WINDOWS\system32
No streams found. 

C:\WINDOWS\system32\svchost.exe
No streams found.
 
C:\WINDOWS\system32
toskrnl.exe
No streams found.
 


                                 Final Check:

Remaining Services:
------------------



Authorized Application Key Export:

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4gui.exe"="C:\Program Files\Sunbelt Software\Personal Firewall 4\kpf4gui.exe:*:Enabled:Sunbelt Kerio Personal Firewall 4 - GUI"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Lecteur CANALPLAY\CanalPlayer.exe"="C:\Program Files\Lecteur CANALPLAY\CanalPlayer.exe:*:Enabled:Lecteur CANALPLAY"
"C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe"="C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe:*:Enabled:Yahoo! Messenger"
"C:\Program Files\Yahoo!\Messenger\YServer.exe"="C:\Program Files\Yahoo!\Messenger\YServer.exe:*:Enabled:Yahoo! FT Server"
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Disabled:Logitech Desktop Messenger"
"C:\Program Files\Reactors\Reactors.exe"="C:\Program Files\Reactors\Reactors.exe:*:Enabled:Reactors"
"C:\Program Files\Oneworld\Spelvin\Spelvin.exe"="C:\Program Files\Oneworld\Spelvin\Spelvin.exe:*:Enabled:Macromedia Projector"
"C:\Program Files\Roxio\Digital Home 9\RoxioUPnPRenderer9.exe"="C:\Program Files\Roxio\Digital Home 9\RoxioUPnPRenderer9.exe:*:Enabled:RoxioUPnPRenderer9"
"C:\Program Files\Roxio\Audio Master 9\RxAudioConvert9.exe"="C:\Program Files\Roxio\Audio Master 9\RxAudioConvert9.exe:*:Enabled:Roxio Audio Converter"
"C:\Program Files\Roger Wilco\roger.exe"="C:\Program Files\Roger Wilco\roger.exe:*:Enabled:roger"
"C:\Program Files\GameSpy Arcade\Aphex.exe"="C:\Program Files\GameSpy Arcade\Aphex.exe:*:Enabled:GameSpy Arcade"
"C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe"="C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe:*:Enabled:Kaspersky Anti-Virus"
"C:\WINDOWS\system32\dpnsvr.exe"="C:\WINDOWS\system32\dpnsvr.exe:*:Disabled:Microsoft DirectPlay8 Server"
"C:\Program Files\Puzzle Quest\Puzzle Quest.exe"="C:\Program Files\Puzzle Quest\Puzzle Quest.exe:*:Enabled:Puzzle Quest"
"C:\Program Files\Phantom EFX\OnlineCasino\Bin\Prelauncher.exe"="C:\Program Files\Phantom EFX\OnlineCasino\Bin\Prelauncher.exe:*:Enabled:Prelauncher"
"C:\Program Files\Phantom EFX\OnlineCasino\Launcher\OLCLauncher.exe"="C:\Program Files\Phantom EFX\OnlineCasino\Launcher\OLCLauncher.exe:*:Enabled:OLCLauncher"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe"="C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"
"C:\Program Files\Roxio\Digital Home 9\RoxioUPnPRenderer9.exe"="C:\Program Files\Roxio\Digital Home 9\RoxioUPnPRenderer9.exe:*:Enabled:RoxioUPnPRenderer9"

Remaining Files:
---------------


Files with Hidden Attributes:

C:\Program Files\eRightSoft\SUPER\cygwin1.dll
C:\Program Files\eRightSoft\SUPER\cygz.dll
C:\Program Files\eRightSoft\SUPER\_Setup.dll
C:\Program Files\eRightSoft\SUPER\mencoder\14_43260.dll
C:\Program Files\eRightSoft\SUPER\mencoder\28_83260.dll
C:\Program Files\eRightSoft\SUPER\mencoder\atrc3260.dll
C:\Program Files\eRightSoft\SUPER\mencoder\cook3260.dll
C:\Program Files\eRightSoft\SUPER\mencoder\ddnt3260.dll
C:\Program Files\eRightSoft\SUPER\mencoder\dnet3260.dll
C:\Program Files\eRightSoft\SUPER\mencoder\drv13260.dll
C:\Program Files\eRightSoft\SUPER\mencoder\drv23260.dll
C:\Program Files\eRightSoft\SUPER\mencoder\drv33260.dll
C:\Program Files\eRightSoft\SUPER\mencoder\drv43260.dll
C:\Program Files\eRightSoft\SUPER\mencoder\dspr3260.dll
C:\Program Files\eRightSoft\SUPER\mencoder\ivvideo.dll
C:\Program Files\eRightSoft\SUPER\mencoder\qtmlClient.dll
C:\Program Files\eRightSoft\SUPER\mencoderaac.dll
C:\Program Files\eRightSoft\SUPER\mencodernco3260.dll
C:\Program Files\eRightSoft\SUPER\mencodernlt3260.dll
C:\Program Files\eRightSoft\SUPER\mencoderv103260.dll
C:\Program Files\eRightSoft\SUPER\mencoderv203260.dll
C:\Program Files\eRightSoft\SUPER\mencoderv303260.dll
C:\Program Files\eRightSoft\SUPER\mencoderv403260.dll
C:\Program Files\eRightSoft\SUPER\mencoder\sipr3260.dll
C:\Program Files\eRightSoft\SUPER\mencoder	okr3260.dll
C:\WINDOWS\system32\flvDX.dll
C:\WINDOWS\system32\msfDX.dll
C:\Program Files\10 Days Under The Sea\10DaysUnderTheSea.exe
C:\Program Files\10 Talismans\10 Talismans.exe
C:\Program Files\5 Realms of Cards\Realms.exe
C:\Program Files\5 Spots\5 Spots.exe
C:\Program Files\7 Artifacts\game.exe
C:\Program Files\7 Lands\7Lands.exe
C:\Program Files\7 Wonders II\7WondersII.exe
C:\Program Files\A Pirate's Legend\A Pirate's Legend.exe
C:\Program Files\A Series of Unfortunate Events\A Series of Unfortunate Events.exe
C:\Program Files\A-B-O-O\Aboo_Game.exe
C:\Program Files\Abra Academy - Returning Cast\AbraAcademy2.exe
C:\Program Files\Action Ball 2\actionball.exe
C:\Program Files\Aerial Mahjong\Aerial MahJong.exe
C:\Program Files\Agatha Christie - Death on the Nile\deathonthenile.exe
C:\Program Files\Agatha Christie - Murder on the Orient Express\motoe.exe
C:\Program Files\Agatha Christie - Murder on the Orient Express Strategy Guide\StrategyGuide.exe
C:\Program Files\Age of Emerald\AgeOfEmerald.exe
C:\Program Files\Age of Japan\Age of Japan.exe
C:\Program Files\Alawar\HollyAChristmasTale\Holly.wrp.exe
C:\Program Files\Alawar\UNOUndercover\UNO Undercover.wrp.exe
C:\Program Files\Alawar\ZodiacTower\Zodiac Tower.wrp.exe
C:\Program Files\All-Time Sudoku\All-Time Sudoku.exe
C:\Program Files\Amazing Adventures - The Lost Tomb\AmazingAdventures.exe
C:\Program Files\Amazon Quest\Amazon Quest.exe
C:\Program Files\Amazonia\Amazonia.exe
C:\Program Files\American History Lux\American History Lux.exe
C:\Program Files\Ancient Quest of Saqqarah\Saqqarah.exe
C:\Program Files\Ancient Wonderland\Ancient Wonderland.exe
C:\Program Files\Aquitania\Aquitania.exe
C:\Program Files\Arabesque\Arabesque.exe
C:\Program Files\Arabica\Arabica.exe
C:\Program Files\Around the World in 80 Days\Around the World in 80 Days.exe
C:\Program Files\Ashley Jones and the Heart of Egypt\HeartOfEgypt.exe
C:\Program Files\Astral Masters\Astral Masters.exe
C:\Program Files\Astro Avenger 2\AstroAvenger2.exe
C:\Program Files\Atlantis Quest\Atlantis Quest.exe
C:\Program Files\Axle-B\BRICKS_OF_LORE.exe
C:\Program Files\Azada\Azada.exe
C:\Program Files\Azada Strategy Guide\StrategyGuide.exe
C:\Program Files\Aztec Bricks\Aztec Bricks.exe
C:\Program Files\Azteca\Azteca.exe
C:\Program Files\Ballhalla\Ballhalla.exe
C:\Program Files\Battleship - Fleet Command\BattleshipSA.exe
C:\Program Files\Beauty Factory\game.exe
C:\Program Files\Bee Party\BeeParty.exe
C:\Program Files\Beetle Bomp\Beetle Bomp.exe
C:\Program Files\Big City Adventure - San Francisco\Big City Adventure - San Francisco.exe
C:\Program Files\Big City Adventure - Sydney Australia\BigCityAdventureSyd.exe
C:\Program Files\Big Kahuna Words\Big Kahuna Words.exe
C:\Program Files\Bird Pirates\Bird Pirates.exe
C:\Program Files\Blokus World Tour\Blokus.exe
C:\Program Files\Blood Ties\BloodTies.exe
C:\Program Files\Bluerows\Bluerows.exe
C:\Program Files\Bonampak\Bonampack.exe
C:\Program Files\Bookstories\Bookstories.exe
C:\Program Files\Bookworm Adventures\BookwormAdventures.exe
C:\Program Files\Bookworm Deluxe\Bookworm.exe
C:\Program Files\Boorp's Balls\Boorp's Balls.exe
C:\Program Files\Brain Challenge\BrainChallengeWin.exe
C:\Program Files\Brainiversity\Brainiversity.exe
C:\Program Files\Bricks of Atlantis\Bricks of Atlantis.exe
C:\Program Files\Bubble Bay\bubblebay.exe
C:\Program Files\Buku Dominoes\Buku Dominoes.exe
C:\Program Files\Burger Island\bi.exe
C:\Program Files\Burger Shop\BurgerShop.exe
C:\Program Files\Butterfly Escape\Butterfly Escape.exe
C:\Program Files\Cafe Mahjongg\cafe mahjongg.exe
C:\Program Files\Cake Mania 2\CakeMania2.exe
C:\Program Files\Camelia's Locket\pirates.exe
C:\Program Files\Can You See What I See\CanYouSee.exe
C:\Program Files\Card Tricks\CardTricks.exe
C:\Program Files\Caribbean Hideaway\CaribbeanHideaway.exe
C:\Program Files\Caribbean Pirate Quest\CaribbeanPirateQuest.exe
C:\Program Files\Caribbean Riddle\caribbean.exe
C:\Program Files\Caribbean Treasures\Caribbean Treasures.exe
C:\Program Files\Charlotte's Web - Word Rescue\Charlotte's Web - Word Rescue.exe
C:\Program Files\Chessmaster Challenge\Chessmaster Challenge.exe
C:\Program Files\Chicken Chase\Chicken Chase.exe
C:\Program Files\Chocolatier\Chocolatier.exe
C:\Program Files\Chocolatier 2 - Secret Ingredients\chocotwo.exe
C:\Program Files\Christmasville\Christmasville.exe
C:\Program Files\Cinema Empire\Cinema Empire.exe
C:\Program Files\Circus Empire\Circus.exe
C:\Program Files\Clayside\Clayside.exe
C:\Program Files\Click-O-Pack\Click-O-Pack.exe
C:\Program Files\Coffee House Chaos\CoffeeHouseChaos.exe
C:\Program Files\Color Trail\Colortrail.exe
C:\Program Files\Concentration\Concentration.exe
C:\Program Files\Constellations\Constellations.exe
C:\Program Files\Cooking Academy\CookingAcademy.exe
C:\Program Files\Cooking Quest\Cook.exe
C:\Program Files\Cosmo Lines\Cosmo Lines.exe
C:\Program Files\Cradle of Persia\CradleOfPersia.exe
C:\Program Files\Cradle of Rome\CradleOfRome.exe
C:\Program Files\Cryptex of Time\CryptexofTime.exe
C:\Program Files\Curse of the Pharaoh - The Quest for Nefertiti\Pharaoh.exe
C:\Program Files\Darwin the Monkey\Darwin.exe
C:\Program Files\Deep Voyage\dv.exe
C:\Program Files\Defender of the Crown\dotc.exe
C:\Program Files\Destiny Architect\blocks.exe
C:\Program Files\Diamond Drop 2\Game.exe
C:\Program Files\Diner Dash Hometown Hero\Diner Dash - Hometown Hero.exe
C:\Program Files\Dirty Dancing\DirtyDancing.exe
C:\Program Files\Discovering Nature\DiscoveringNature.exe
C:\Program Files\Discovery - A Seek and Find Adventure\Discovery.exe
C:\Program Files\Downbeat\Downbeat.exe
C:\Program Files\Dragon\Dragon.exe
C:\Program Files\Dragons Abode\DA.exe
C:\Program Files\DragonStone\DragonStone.exe
C:\Program Files\Dream Chronicles\dream.exe
C:\Program Files\Dream Chronicles 2 - The Eternal Maze\dream2.exe
C:\Program Files\Dream Day Honeymoon\DreamDayHoneymoon.exe
C:\Program Files\Dream Day Wedding\Dream Day Wedding.exe
C:\Program Files\Druids - Battle of Magic\Druids - Battle of Magic.exe
C:\Program Files\Dynasty\Dynasty.exe
C:\Program Files\Egyptian Ball\Egyptian Ball.exe
C:\Program Files\El Dorado Quest\ElDoradoQuest.exe
C:\Program Files\Elements\elements.exe
C:\Program Files\Elf Bowling 7 1-7 - The Last Insult\ElfBowling.exe
C:\Program Files\Elven Mists\Game.exe
C:\Program Files\Emerald Tale\Emerald Tale.exe
C:\Program Files\Empire of the Gods\Empire of the Gods.exe
C:\Program Files\Enchanted Cavern\EnchantedCavern.exe
C:\Program Files\Enchanted Gardens\Enchanted Gardens.exe
C:\Program Files\Enigma\enigma.exe
C:\Program Files\eRightSoft\SUPER\Setup.exe
C:\Program Files\Escape the Museum\Museum.exe
C:\Program Files\Etch-a-Sketch - Knobbys Quest\EtchASketch.exe
C:\Program Files\Eye for Design\EyeForDesign.exe
C:\Program Files\Fairway Solitaire\FairwaySolitaire.exe
C:\Program Files\Fairy Jewels 2\Game.exe
C:\Program Files\Family Feud\Family Feud.exe
C:\Program Files\Family Restaurant\Family Restaurant.exe
C:\Program Files\Fashion Fits!\FashionFits.exe
C:\Program Files\Fashion Rush\FashionRush.exe
C:\Program Files\Fashion Solitaire\Fashion.exe
C:\Program Files\Fatal Hearts\Fatal Hearts BFG.exe
C:\Program Files\Feeding Frenzy\Feeding Frenzy.exe
C:\Program Files\Feeding Frenzy 2 Shipwreck Showdown\FeedingFrenzy2.exe
C:\Program Files\Feng Shui Mahjong\feng shui mahjong.exe
C:\Program Files\Feyruna - Fairy Forest\Feyruna.exe
C:\Program Files\Finders Keepers\Finders Keepers.exe
C:\Program Files\Fire Flower\Fire Flower.exe
C:\Program Files\Fireworks Extravaganza\Fireworks Extravaganza.exe
C:\Program Files\Fishdom\Fishdom.exe
C:\Program Files\Flowers Story - Fairy Quest\flowers.exe
C:\Program Files\Forgotten Riddles - The Mayan Princess\ForgottenRiddles_v113.exe
C:\Program Files\Forgotten Riddles - The Moonlight Sonatas\Forgotten Riddles - The Moonlight Sonatas.exe
C:\Program Files\Fury Race\FuryRace.exe
C:\Program Files\G2 - Geeks Unleashed\GeeksPC.exe
C:\Program Files\Gallop for Gold\Gallop4Gold.exe
C:\Program Files\Garden Defense\GardenDefense.exe
C:\Program Files\Gem Ball Ancient Legends\Gem Ball Ancient Legends.exe
C:\Program Files\Gem Shop\Gem Shop.exe
C:\Program Files\Gems Legend\gemslegend.exe
C:\Program Files\Gemsweeper\Gemsweeper.exe
C:\Program Files\Glyph\Glyph.exe
C:\Program Files\Glyph 2\Glyph2.exe
C:\Program Files\Go-Go Gourmet\Go Go Gourmet.exe
C:\Program Files\Governor of Poker\GovernorofPoker_BigFish.exe
C:\Program Files\Great Secrets - Da Vinci\davinci.exe
C:\Program Files\Great Wall of Words\Great Wall of Words.exe
C:\Program Files\Greek Goddesses of Solitaire\GreekGoddessesofSolitaire.exe
C:\Program Files\Gunslinger Solitaire\Gunslinger Solitaire LowRes.exe
C:\Program Files\Haiku Journey\Haiku Journey.exe
C:\Program Files\Haunted Hotel\HauntedHotel.exe
C:\Program Files\Hawaiian Explorer - Pearl Harbor\Hawaiian Explorer Pearl Harbor.exe
C:\Program Files\Heroes of Hellas\game.exe
C:\Program Files\Hexcite\Hexcite.exe
C:\Program Files\Hidden Expedition - Amazon\Hidden Expedition Amazon.exe
C:\Program Files\Hidden Expedition - Everest\Hidden Expedition Everest.exe
C:\Program Files\Hidden Expedition Titanic\Hidden Expedition Titanic.exe
C:\Program Files\Hidden Relics\Hidden Relics.exe
C:\Program Files\Hidden Secrets - The Nightmare\Nightmare_1_0_3.exe
C:\Program Files\Hidden Secrets - The Nightmare Strategy Guide\StrategyGuide.exe
C:\Program Files\Hidden Wonders of the Depths\HWD.exe
C:\Program Files\Hide & Secret\Hide-and-Secret.exe
C:\Program Files\High Seas - The Family Fortune\highseas.exe
C:\Program Files\Holiday Gift\Holiday Gift.exe
C:\Program Files\Hot Dish\hotdish.exe
C:\Program Files\Hoyle Enchanted Puzzles\Hoyle Enchanted Puzzles.exe
C:\Program Files\Hyperballoid 2\Hyperballoid2.exe
C:\Program Files\Hyperballoid Golden Pack\Hyperballoid.exe
C:\Program Files\Ice Princess\start.exe
C:\Program Files\In Living Colors!\chainz.exe
C:\Program Files\Ingenious\Ingenious.exe
C:\Program Files\Inspector Parker\Inspector Parker.exe
C:\Program Files\Interpol - The Trail of Dr. Chaos\Interpol.exe
C:\Program Files\Invadazoid\Invadazoid.exe
C:\Program Files\IQ - Identity Quest\IQ - Identity Quest.exe
C:\Program Files\James Patterson's Women's Murder Club - Death in Scarlet\WMC.exe
C:\Program Files\Jewel Craft\JewelCraft.exe
C:\Program Files\Jewel Match\Jewel Match.exe
C:\Program Files\Jewel Match - Winter Wonderland\Jewel Match - Winter Wonderland.exe
C:\Program Files\Jewel Match 2\JewelMatch2.exe
C:\Program Files\Jewel Quest II\JewelQuest2.exe
C:\Program Files\Jewel Quest Solitaire II\JQSolitaire2.exe
C:\Program Files\Jig Art Quest\Jig Art Quest.exe
C:\Program Files\Jigs@w Puzzle 2\jp2v.exe
C:\Program Files\Jigsaw365\Jigsaw365.exe
C:\Program Files\Jojo's Fashion Show\JojosFashionShow.exe
C:\Program Files\Journey to the Center of the Earth\game.exe
C:\Program Files\Journey to the Center of the Earth Strategy Guide\StrategyGuide.exe
C:\Program Files\Kasuko\Game.exe
C:\Program Files\Key Words\Key Words.exe
C:\Program Files\Kudos\Kudos.exe
C:\Program Files\Kudos Rock Legend\KudosRockLegend.exe
C:\Program Files\Land of Runes\LandOfRunes.exe
C:\Program Files\Laura Jones and the Gates of Good and Evil\Detective.exe
C:\Program Files\Law & Order Criminal Intent 2 - Dark Obsession\game.exe
C:\Program Files\Legend of Ali Baba\LegendOfAliBaba.exe
C:\Program Files\Letter Lab\Letter_Lab.exe
C:\Program Files\Linkit - A Christmas Carol\Linkit.exe
C:\Program Files\Liong - The Dragon Dance\liong.exe
C:\Program Files\Lost Treasures of El Dorado\eldorado.exe
C:\Program Files\Lottso! Deluxe\Lottso2.exe
C:\Program Files\Luck Charm Deluxe\Luck Charm Deluxe.exe
C:\Program Files\Luckys Rainbow\lucky2.exe
C:\Program Files\Luxor 3\Luxor3.exe
C:\Program Files\Magic Academy\Magic Academy.exe
C:\Program Files\Magic Ball 3\Magic Ball 3.exe
C:\Program Files\Magic Shop\game.exe
C:\Program Files\Magic Tea\MagicTea.exe
C:\Program Files\Magic Vines\Magic Vines.exe
C:\Program Files\Mah Jong Quest\Mah Jong Quest.exe
C:\Program Files\Mah Jong Quest II\MahjongQuest2.exe
C:\Program Files\Mah Jong Quest III - Balance of Life\MahjongQuest3.exe
C:\Program Files\MahJong Adventures\MahJong Adventures.exe
C:\Program Files\Mahjong Escape Ancient China\Mahjong Escape Ancient China.exe
C:\Program Files\Mahjong Escape Ancient Japan\Mahjong Escape Ancient Japan.exe
C:\Program Files\Mahjong Holidays 2006\Mahjong Holidays 2006.exe
C:\Program Files\Mahjong Journey of Enlightenment\Mahjong Journey of Enlightenment.exe
C:\Program Files\Mahjong Mania\Mahjong Mania.exe
C:\Program Files\Mahjong Match\Mahjong Match.exe
C:\Program Files\Mahjong Roadshow\MahjongRoadshow.exe
C:\Program Files\Mahjong Tales - Ancient Wisdom\Mahjong Tales - Ancient Wisdom.exe
C:\Program Files\Mahjong Towers Eternity\Mahjong Towers Eternity.exe
C:\Program Files\Mahjong World\Mahjong World.exe
C:\Program Files\Mahjongg - Ancient Mayas\MahJongg.exe
C:\Program Files\Mahjongg Artifacts\Mahjongg Artifacts.exe
C:\Program Files\Mahjongg Artifacts - Chapter 2\mahjong_artifacts2.exe
C:\Program Files\Mahjongg Investigation - Under Suspicion\MahjonggInvestigations.exe
C:\Program Files\Marblez\Marblez.exe
C:\Program Files\Merriam Webster's Spell-Jam\SPELL-JAM.exe
C:\Program Files\Merry-Go-Round Dreams\MerryGoRoundDreams.exe
C:\Program Files\Merv Griffin's Crosswords\MervGriffinCrosswords.exe
C:\Program Files\Meteor\Meteor.exe
C:\Program Files\Midnight Pool 3D\MidnightPool3DDX9.exe
C:\Program Files\Mirror Mixup\MirrorMixup.exe
C:\Program Files\Miss Teri Tale\MissTeriTale.exe
C:\Program Files\Monarch - The Butterfly King\Monarch - The Butterfly King.exe
C:\Program Files\Money Tree\moneytree.exe
C:\Program Files\Mosaic Tomb of Mystery\Mosaic Tomb of Mystery.exe
C:\Program Files\My Exotic Farm\My Exotic Farm.exe
C:\Program Files\Mystery Case Files - Huntsville\Mystery Case Files - Huntsville.exe
C:\Program Files\Mystery Case Files - Madame Fate\Madame Fate.exe
C:\Program Files\Mystery Case Files - Prime Suspects\Mystery Case Files - Prime Suspects.exe
C:\Program Files\Mystery Case Files - Ravenhearst\Mystery Case Files - Ravenhearst.exe
C:\Program Files\Mystery Case Files Madame Fate Strategy Guide\StrategyGuide.exe
C:\Program Files\Mystery Case Files Ravenhearst - Puzzle Door Strategy Guide\StrategyGuide.exe
C:\Program Files\Mystery Cookbook\mystery_cookbook.exe
C:\Program Files\Mystery in London\MysteryInLondon.exe
C:\Program Files\Mystery of Shark Island\Mystery of Shark Island.exe
C:\Program Files\Mystery of Unicorn Castle\castle.exe
C:\Program Files\Mystery P.I. - The Lottery Ticket\MysteryPI.exe
C:\Program Files\Mystery Stories - Island of Hope\Islandofhope.exe
C:\Program Files\Mythic Mahjong\mahjong.exe
C:\Program Files\Mythic Marbles\mythicmarbles.exe
C:\Program Files\Nab-n-Grab\Nab-n-Grab.exe
C:\Program Files\Nancy Drew - Ghost Dogs of Moon Lake\Game.exe
C:\Program Files\Nancy Drew - Ghost Dogs of Moon Lake Strategy Guide\StrategyGuide.exe
C:\Program Files\Nancy Drew - The Haunted Carousel\Game.exe
C:\Program Files\Nancy Drew - The Haunted Carousel Strategy Guide\StrategyGuide.exe
C:\Program Files\Nancy Drew - The White Wolf of Icicle Creek\Game.exe
C:\Program Files\Nancy Drew - The White Wolf of Icicle Creek Strategy Guide\StrategyGuide.exe
C:\Program Files\Nanda's Island\NandasIsland.exe
C:\Program Files\Natalie Brooks - Secrets of Treasure House\NatalieBrooksSTH.exe
C:\Program Files\Nertz Solitaire\Nertz.exe
C:\Program Files\Out of Your Mind\Out of Your Mind.exe
C:\Program Files\Pantheon\Pantheon.exe
C:\Program Files\Paparazzi\Paparazzi.exe
C:\Program Files\Pat Sajaks Lucky Letters - TV Guide Edition\Lucky_Letters_TVG.exe
C:\Program Files\Pathstorm\Pathstorm.exe
C:\Program Files\Peggle Deluxe\Peggle Deluxe.exe
C:\Program Files\Penguins` Journey\Penguins.exe
C:\Program Files\Penny Puzzle\Penny Puzzle.exe
C:\Program Files\Perfect Sudoku\Perfect Sudoku.exe
C:\Program Files\Pet Pals Animal Doctor\PetPals.exe
C:\Program Files\Pharaoh`s Mystery\Pharaoh's Mystery.exe
C:\Program Files\Picasa2\setup.exe
C:\Program Files\PictoWords\PictoWords.exe
C:\Program Files\Pile & Pop\PilePop.exe
C:\Program Files\Pirate Island\pirateisland.exe
C:\Program Files\Pirate Poppers\Pirate Poppers.exe
C:\Program Files\Pirate Stories - Kit and Ellis\KitandEllis.exe
C:\Program Files\Pirates of the Atlantic\Pirates of the Atlantic.exe
C:\Program Files\Pirateville\Legends of pirates.exe
C:\Program Files\Pizza Chef\PizzaChef.exe
C:\Program Files\Plant Tycoon\Plant Tycoon.exe
C:\Program Files\Plumeboom - The First Chapter\FirstChapter.exe
C:\Program Files\Poker Superstars II\Poker Superstars II.exe
C:\Program Files\Polly Pride - Pet Detective\PollyPride.exe
C:\Program Files\Pop-a-Tronic\Pop-a-Tronic.exe
C:\Program Files\Prism\Prism.exe
C:\Program Files\Protector\Protector.exe
C:\Program Files\Purrfect Pet Shop\ps.exe
C:\Program Files\Puzzle City\pc.exe
C:\Program Files\Puzzle Hero\PuzzleHero.exe
C:\Program Files\Puzzle Mania\Puzzle Mania.exe
C:\Program Files\Puzzle Quest\Puzzle Quest.exe
C:\Program Files\Rain Talisman\Rain Talisman.exe
C:\Program Files\Rainbow Mystery\Rainbow Mystery.exe
C:\Program Files\Rainbow Ruffle\Rainbow Ruffle.exe
C:\Program Files\Rainbow Web II\RainbowWeb2.exe
C:\Program Files\Recyclorama\Recyclorama.exe
C:\Program Files\Remedy\Remedy.exe
C:\Program Files\Restaurant Empiree.exe
C:\Program Files\Retro Records\RetroRecords.exe
C:\Program Files\Ricochet Lost Worlds\Ricochet Lost Worlds.exe
C:\Program Files\Ricochet Recharged\Ricochet Recharged.exe
C:\Program Files\Ride!\EquestrianApp.exe
C:\Program Files\Risk\RiskSA.exe
C:\Program Files\Robboxobbox.exe
C:\Program Files\Rock Tour\Rock Tour.exe
C:\Program Files\Roller Rush\Roller Rush.exe
C:\Program Files\Rome - The Curse of the Necklace\Travelogue360.exe
C:\Program Files\Rooms - The Main Building\Rooms.exe
C:\Program Files\Rubber Dubber\Rubber Dubber.exe
C:\Program Files\Runes of Avalon\Runes of Avalon.exe
C:\Program Files\Runes of Avalon 2\Runes of Avalon 2.exe
C:\Program Files\Safecracker\Safecracker.exe
C:\Program Files\Safecracker Strategy Guide\StrategyGuide.exe
C:\Program Files\Santas Super Friends\Santas Super Friends.exe
C:\Program Files\Scavenger\Scavenger.exe
C:\Program Files\Scepter of Ra\Scepter of Ra.exe
C:\Program Files\Sea Bounty\Sea Bounty.exe
C:\Program Files\Season Match\_SeasonMatch.exe
C:\Program Files\Secrets of Olympus\Olympus.exe
C:\Program Files\Sherlock Holmes - The Mystery of the Mummy Strategy Guide\StrategyGuide.exe
C:\Program Files\Shopping Marathon\Shopping Marathon.exe
C:\Program Files\Slingo Quest Hawaii\SlingoQuest2.exe
C:\Program Files\Slotwords\Slotwords.exe
C:\Program Files\Smiley Commandos\Smiley COMMANDOS.exe
C:\Program Files\Snakylines\Snakylines.exe
C:\Program Files\Snow Queen Mahjong\snowqueen.exe
C:\Program Files\Solitaire Cruise\Solitaire Cruise.exe
C:\Program Files\Space Journey\SpaceJourney.exe
C:\Program Files\Spandex Force\Spandex Force.exe
C:\Program Files\Sparkle\Sparkle.exe
C:\Program Files\Spherical\Spherical.exe
C:\Program Files\Spiderz\Spiderz.exe
C:\Program Files\Spinword\Spinword.exe
C:\Program Files\SpongeBob SquarePants Obstacle Odyssey 2\SBTT.exe
C:\Program Files\Sprill\Sprill.exe
C:\Program Files\Spyde Solitaire\spyde.exe
C:\Program Files\Stand O`Food\Stand O'Food.exe
C:\Program Files\Star Charms\Star Charms.exe
C:\Program Files\Stardrone\stardrone.exe
C:\Program Files\Stoneloops! of Jurassica\StoneLoops.exe
C:\Program Files\Sudoku Adventure\Sudoku.exe
C:\Program Files\Supercow\supercow.exe
C:\Program Files\TeKKOut\TeKKOut.exe
C:\Program Files\Temple of Jewels\Temple of Jewels.exe
C:\Program Files\Temple of Tangram\Temple of Tangram.exe
C:\Program Files\The Amazing Brain Train\BrainTrain.exe
C:\Program Files\The Count of Monte Cristo\MONTECRISTO.exe
C:\Program Files\The Da Vinci Code\The Da Vinci Code.exe
C:\Program Files\The Golden Path of Plumeboom\GoldenPath_Full.exe
C:\Program Files\The Great Tree\GreatTree.exe
C:\Program Files\The Hidden Object Show\THOS.exe
C:\Program Files\The History Channel Lost Worlds\LostWorlds.exe
C:\Program Files\The Honeymooners Bowling\TheHoneymoonersBowling.exe
C:\Program Files\The I Love Lucy Game - Episode 1\ILoveLucyEP1.exe
C:\Program Files\The Lost Treasures of Alexandria\TheLostTreasuresOfAlexandria.exe
C:\Program Files\The Magicians Handbook - Cursed Valley\The Magicians Handbook Cursed Valley.exe
C:\Program Files\The Nightshift Code
ightshiftcode.exe
C:\Program Files\The Price is Right\The Price Is Right.exe
C:\Program Files\The Rise of Atlantis\The Rise of Atlantis.exe
C:\Program Files\The Secret of Margrave Manor\Margrave Manor.exe
C:\Program Files\The Stone of Destiny\StoneOfDestiny.exe
C:\Program Files\The Sultan's Labyrinth\SOP_RC5.exe
C:\Program Files\The Treasures Of Montezuma\The Treasures Of Montezuma.exe
C:\Program Files\The Wonderful Wizard of Oz\The Wonderful Wizard of Oz.exe
C:\Program Files\Thwart Poker\Thwart Poker.exe
C:\Program Files\Tic-A-Tac Royale\TicATac_Royale.exe
C:\Program Files\Tiki Boom Boom\Tiki Boom Boom.exe
C:\Program Files\Time Quest\TimeQuest.exe
C:\Program Files\TiQal	iqal.exe
C:\Program Files\Totem Quest\TotemQuest.exe
C:\Program Files\Totem Treasure 2\Totem Treasure 2.exe
C:\Program Files\Tradewinds Caravans\TradewindsCaravans.exe
C:\Program Files\Travelogue 360 Paris\Travelogue 360 Paris.exe
C:\Program Files\Treasure Pyramid\Treasure Pyramid.exe
C:\Program Files\Treasures of the Ancient Cavern\Game.exe
C:\Program Files\Tri-Peaks 2 - Quest for the Ruby Ring\Tri-Peaks 2.exe
C:\Program Files\Trivia Machine\Trivia Machine.exe
C:\Program Files\Tropicabana\Tropicabana.exe
C:\Program Files\Tropical Puzzle\Tropical Puzzle.exe
C:\Program Files\Tropico Jong - Butterfly Expedition\TropicoJong.exe
C:\Program Files\Tumblebugs 2\Tumblebugs2.exe
C:\Program Files\Turbo Pizza\TurboPizza.exe
C:\Program Files\Turbo Subs\TurboSubs.exe
C:\Program Files\Ultimate Dominoes\Ultimate Dominoes.exe
C:\Program Files\Upwords Deluxe\Upwords Deluxe.exe
C:\Program Files\Val`Gor\start.exe
C:\Program Files\Venice Deluxe\Venice.exe
C:\Program Files\Venice Mystery\VeniceMystery.exe
C:\Program Files\Virus 3\Virus 3.exe
C:\Program Files\Vogue Tales\VogueTales.exe
C:\Program Files\Voyage\Moon.exe
C:\Program Files\Voyage Strategy Guide\StrategyGuide.exe
C:\Program Files\Water Bugs\Water Bugs.exe
C:\Program Files\Waterscape Solitaire - American Falls\WaterscapeSolitaire.exe
C:\Program Files\Westward II - Heroes of the Frontier\Westward_II.exe
C:\Program Files\Word Cross\Word Cross.exe
C:\Program Files\Word Search Deluxe\Word Search Deluxe.exe
C:\Program Files\Word Travels\Word Travels.exe
C:\Program Files\Word Web Deluxe\Word Web Deluxe.exe
C:\Program Files\Word Wizard Deluxe\Word Wizard Deluxe.exe
C:\Program Files\Word Zen\Word Zen.exe
C:\Program Files\WordJong\WordJong.exe
C:\Program Files\Words Kingdom\wordsKingdom.exe
C:\Program Files\Wordy Vu\Wordy Vu.exe
C:\Program Files\World Mosaics\WorldMosaics.exe
C:\Program Files\Wriggle Words\WriggleMain.exe
C:\Program Files\X-Avenger\X-Avenger.exe
C:\Program Files\Xango Tango\Xango Tango.exe
C:\Program Files\Yard Sale Hidden Treasures - Sunnyville\yardsale.exe
C:\Program Files\Yumsters! 2\Yumsters2.exe
C:\Program Files\Zen Fashion\Zen Fashion.exe
C:\Program Files\Zen Games\Zen Games.exe
C:\Program Files\Zenerchi\Zenerchi.exe
C:\Program Files\Zoo Empire\ze.exe
C:\Program Files\Zoom Book - The Temple of the Sun\zoombook.exe
C:\Program Files\Zuma Deluxe\Zuma Deluxe.exe
C:\WINDOWS\NabnGrab\Nab-n-Grab.exe
C:\Documents and Settings\All Users\DRM\Cache\Indiv01.tmp
C:\Documents and Settings\YVETTE\Application Data\Roxio\Dragon\3.x\DiscInfoCache\HL-DT-ST_CD-RW_GCE-8487B_F109_000_DICV018_DRGV9010034.TMP
C:\WINDOWS\SoftwareDistribution\Download\092b67e95d8c6c43f86e1684e91623fb\BIT1.tmp
C:\WINDOWS\SoftwareDistribution\Download\5baf71a4c6efd997c652202f7860ba2f\BIT9.tmp
C:\WINDOWS\SoftwareDistribution\Download\695b737fb775f5f3594dffe6327b6afd\BIT5.tmp
C:\WINDOWS\SoftwareDistribution\Download\6d3285ea07e02e844a1e46dffef593cf\BIT2.tmp
C:\WINDOWS\SoftwareDistribution\Download\71fa8e4b1f1c72b0e3a5d30a0a049f55\BIT1.tmp
C:\WINDOWS\SoftwareDistribution\Download\81dc535772318aa88ffd56fbd14ef66d\BIT8.tmp
C:\WINDOWS\SoftwareDistribution\Download\90278c5c0a95b94f1b4a73dda9853808\BIT6.tmp
C:\WINDOWS\SoftwareDistribution\Download\b1a8b3cdfafbdfd49b7b2caaf1d5b4e2\BIT4.tmp
C:\WINDOWS\SoftwareDistribution\Download\b89a055e6729cf78633e4fdc9d0621f9\BIT7.tmp
C:\WINDOWS\SoftwareDistribution\Download\c1b2d7e025e5f5650be345c4007fc2f3\BIT3.tmp
C:\WINDOWS\SoftwareDistribution\Download\f7db876e78b88fd8276fd7d29cb7e4eb\BIT3.tmp

                                 Finished 

Par avance merci de ton aide
cordialement
argan5

gil le fantom · Answer

bonjour

Télécharge Toolbar-S&D (Team IDN) sur ton Bureau. 
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2 

* Lance l'installation du programme en exécutant le fichier téléchargé. 
* Double-clique maintenant sur le raccourci de Toolbar-S&D. 
* Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée. 
* Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche. 
* Poste le rapport généré. (C:\TB.txt)

argan5 · Answer

bonjour,

j'ai lancé tool bar s&d, et le rapport est le suivant :
--------\  ToolBar S&D 1.0.9   XP/Vista

   [ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
   [ USER : YVETTE ] [ "C:\Toolbar SD" ] [ Selection : 1 ]
   [ 15/08/2008 | 14:54:28,64 ] [ PC : HERMINIA-AAFC1D ]
   [ MAJ : 13-08-2008 | 14:08 ]

   -----------\  Recherche de Fichiers / Dossiers ...

   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\07-11-30-22-11-05
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\07-11-30-22-11-05.xm_
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\07-12-29-16-04-15
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\07-12-29-16-04-15.xm_
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-01-20-12-43-04
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-01-20-12-43-04.xm_
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-09-36-56
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-09-36-56.xm_
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\about.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\action.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\allTimefavorite.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\arcade.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\blockbuster.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\Boulder_Dash_ME2_cell16x16.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\buy.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\candy_factory16x16.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\cards.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\chocolatier216x16.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\cradle_of_persia16x16.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\deals.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\download.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\dream_day_first_home16x16.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\familyFun.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\farm_frenzy16x16.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\feedback.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\Fish_Tycoon_cell16x16.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\go_go_gourmet16x16.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\help.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\Hexic_cell16x16.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\highlight.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\mahjong.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\mahjong_quest_cell16x16.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\merv_griffins_crosswords16x16.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\mobile.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\monkey_business16x16.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\multiplayer.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\mygames.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\My_Dog_cell16x16.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar
ewGames.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\oberonconfig.xm_
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\obSearchHistory.dat
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\onload
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\partner.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\peril_at_end_house16x16.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\popup_off.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\popup_on.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\puzzle.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\Puzzled_Sheep_cell16x16.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\search.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\searchAndFind.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\search_goog.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\sendafriend.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\solitaire_cruise16x16.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\SuperBomberman_cell16x16.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar	rial.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\Turbo_Subs16x16.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\uninstall.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\update.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\webgame.gif
   C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\word.gif
   C:\Program Files\GamesBar
   C:\Program Files\GamesBar\Localization-English.ini
   C:\Program Files\GamesBar\Localization-French.ini
   C:\Program Files\GamesBar\Localization2-English.ini
   C:\Program Files\GamesBar\oberontb.dll
   C:\Program Files\GamesBar\OBGet.exe
   C:\Program Files\GamesBar\uninst.exe
   C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\GamesBar
   \...\{635abd67-4fe9-1b23-4f01-e679fa7484c1} - (ytoolbar)

   -----------\  Extensions

   (YVETTE) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar


   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Local Page"="C:\WINDOWS\system32\blank.htm"
   "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Start Page"="https://www.msn.com/fr-fr/"
   "Default_Page_URL"="https://www.google.com/?gws_rd=ssl"
   "First Home Page"="https://support.microsoft.com/en-US/topic/internet-explorer-downloads-d49e1f0d-571c-9a7b-d97e-be248806ca70"
   "Url"="http://www.microsoft.com/athome/community/rss.xml"
   "Url"="http://rss.msn.com/en-us/?feedoutput=rss&ocid=iehrs&unsub=true"
   "Url"="http://www.microsoft.com/atwork/community/rss.xml"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Default_Page_URL"="https://www.google.com/?gws_rd=ssl"
   "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Search Page"="https://www.msn.com/fr-fr/"
   "Start Page"="https://www.google.com/?gws_rd=ssl"


   --------------------\  Recherche d'autres infections

   --------------------\  Cracks & Keygens ..

   C:\DOCUME~1\ALLUSE~1\Documents\Scrapbooking\Scrapbooking\SCRAP\fonts\LF_CRACKMAN.TTF


   -----------\  Fin du rapport a 14:57:04,51

par avance merci
argan5

gil le fantom · Answer

Relance Toolbar-S&D en double-cliquant sur le raccourci. Tape sur "2" puis valide en appuyant sur "Entrée". 
! Ne ferme pas la fenêtre lors de la suppression ! 
Un rapport sera généré, poste son contenu ici. 

NOTE : Si ton Bureau ne réapparait pas, appuie simultanément sur Ctrl+Alt+Suppr pour ouvrir le Gestionnaire des tâches. 
Rends-toi sur l'onglet "Processus". Clique en haut à gauche sur Fichier et choisis "Exécuter..." 
Tape explorer puis valide.

argan5 · Answer

Bonjour,

Voila le rapport demandé.
Toolbar s&D est-il un logiciel de désinfection ?

Merci pour ton aide !
cordialement argan5

-----------\  ToolBar S&D 1.0.9   XP/Vista

   [ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
   [ USER : YVETTE ] [ "C:\Toolbar SD" ] [ Selection : 2 ]
   [ 16/08/2008 | 10:18:47,62 ] [ PC : HERMINIA-AAFC1D ]
   [ MAJ : 13-08-2008 | 14:08 ]

   -----------\ SUPPRESSION

   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\07-11-30-22-11-05
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\07-11-30-22-11-05.xm_
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\07-12-29-16-04-15
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\07-12-29-16-04-15.xm_
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-01-20-12-43-04
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-01-20-12-43-04.xm_
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-09-36-56
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-03-02-09-36-56.xm_
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\about.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\action.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\allTimefavorite.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\arcade.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\blockbuster.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\Boulder_Dash_ME2_cell16x16.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\buy.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\candy_factory16x16.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\cards.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\chocolatier216x16.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\cradle_of_persia16x16.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\deals.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\download.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\dream_day_first_home16x16.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\familyFun.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\farm_frenzy16x16.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\feedback.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\Fish_Tycoon_cell16x16.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\go_go_gourmet16x16.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\help.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\Hexic_cell16x16.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\highlight.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\mahjong.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\mahjong_quest_cell16x16.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\merv_griffins_crosswords16x16.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\mobile.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\monkey_business16x16.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\multiplayer.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\mygames.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\My_Dog_cell16x16.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar
ewGames.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\oberonconfig.xm_
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\obSearchHistory.dat
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\onload
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\partner.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\peril_at_end_house16x16.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\popup_off.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\popup_on.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\puzzle.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\Puzzled_Sheep_cell16x16.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\search.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\searchAndFind.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\search_goog.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\sendafriend.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\solitaire_cruise16x16.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\SuperBomberman_cell16x16.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar	rial.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\Turbo_Subs16x16.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\uninstall.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\update.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\webgame.gif
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\word.gif
   Supprime! - C:\Program Files\GamesBar\Localization-English.ini
   Supprime! - C:\Program Files\GamesBar\Localization-French.ini
   Supprime! - C:\Program Files\GamesBar\Localization2-English.ini
   Supprime! - C:\Program Files\GamesBar\oberontb.dll
   Supprime! - C:\Program Files\GamesBar\OBGet.exe
   Supprime! - C:\Program Files\GamesBar\uninst.exe
   Supprime! - C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\GamesBar
   Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar
   Supprime! - C:\Program Files\GamesBar
   Supprime! - C:\DOCUME~1\YVETTE\APPLIC~1\Mozilla\Firefox\Profiles\9938VF~1.DEF\EXTENS~1\{635abd67-4fe9-1b23-4f01-e679fa7484c1}

   -----------\  Recherche de Fichiers / Dossiers ...


   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Local Page"="C:\WINDOWS\system32\blank.htm"
   "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Start Page"="https://www.msn.com/fr-fr/"
   "Default_Page_URL"="https://www.google.com/?gws_rd=ssl"
   "First Home Page"="https://support.microsoft.com/en-US/topic/internet-explorer-downloads-d49e1f0d-571c-9a7b-d97e-be248806ca70"
   "Url"="http://www.microsoft.com/athome/community/rss.xml"
   "Url"="http://rss.msn.com/en-us/?feedoutput=rss&ocid=iehrs&unsub=true"
   "Url"="http://www.microsoft.com/atwork/community/rss.xml"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Default_Page_URL"="https://www.google.com/?gws_rd=ssl"
   "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
   "Search Page"="https://www.msn.com/fr-fr/"
   "Start Page"="https://www.google.com/?gws_rd=ssl"


   --------------------\  Recherche d'autres infections

   --------------------\  Cracks & Keygens ..

   C:\DOCUME~1\ALLUSE~1\Documents\Scrapbooking\Scrapbooking\SCRAP\fonts\LF_CRACKMAN.TTF


   -----------\  Fin du rapport a 10:32:24,43

gil le fantom · Answer

bonjour

tu me poste un nouveau rapport hijackthis stp

argan5 · Answer

Voici le nouveau rapport hijackthis

Logfile of HijackThis v1.99.1
Scan saved at 14:24:10, on 16/08/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
C:\WINDOWS\system32
vsvc32.exe
C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe
C:\WINDOWS\system32\IoctlSvc.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\Roxio\Digital Home 9\RoxioUPnPRenderer9.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = https://support.microsoft.com/en-US/topic/internet-explorer-downloads-d49e1f0d-571c-9a7b-d97e-be248806ca70
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Download Manager Browser Helper Object - {19C8E43B-07B3-49CB-BFFC-6777B593E6F8} - C:\PROGRA~1\FICHIE~1\fluxDVD\DOWNLO~1\XEBDLH~1.DLL
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla	fswshx.dll
O2 - BHO: Absolutist Games Toolbar - {631ac2d4-57b3-42b0-a148-da33b462c1a3} - C:\Program Files\Absolutist_Games	bAbs1.dll
O2 - BHO: BrwIEConnector Class - {908A31E8-2A6E-4736-8E8A-AAF00C4AE38F} - C:\Program Files\Browster\Browster.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: GamesBarBHO Class - {CB0D163C-E9F4-4236-9496-0597E24B23A5} - C:\Program Files\GamesBar\oberontb.dll (file missing)
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: Absolutist Games Toolbar - {631ac2d4-57b3-42b0-a148-da33b462c1a3} - C:\Program Files\Absolutist_Games	bAbs1.dll
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O9 - Extra button: Statistiques d’Anti-Virus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\SCIEPlgn.dll
O9 - Extra button: (no name) - {2A465934-E5F0-11D2-91B5-00104B9C4765} - C:\Program Files\Copernic 2000 Pro\Copernic.exe
O9 - Extra 'Tools' menuitem: Lancer Copernic - {2A465934-E5F0-11D2-91B5-00104B9C4765} - C:\Program Files\Copernic 2000 Pro\Copernic.exe
O9 - Extra button: Copernic - {2A465936-E5F0-11D2-91B5-00104B9C4765} - C:\Program Files\Copernic 2000 Pro\Copernic.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Traduire - {99EFB53C-C965-43CF-9F45-52242D134187} - file://C:\Program Files\Copernic 2000 Pro\Translate.htm
O9 - Extra 'Tools' menuitem: &Traduire avec Gist-In-Time - {99EFB53C-C965-43CF-9F45-52242D134187} - file://C:\Program Files\Copernic 2000 Pro\Translate.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe (file missing)
O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe (file missing)
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll
O11 - Options group: [INTERNATIONAL] International*
O15 - Trusted Zone: *.canalplay.com
O15 - Trusted Zone: *.canalplusactive.com
O15 - Trusted Zone: *.canalplay.com (HKLM)
O15 - Trusted Zone: *.canalplusactive.com (HKLM)
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://www.adobe.com/products/acrobat/nos/gp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{DED55562-0C11-4296-B0EA-75CF6418CF11}: NameServer = 192.168.0.1
O18 - Protocol: bw+0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Kaspersky Anti-Virus 7.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe" -r (file missing)
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Photoshop Elements Device Connect (PhotoshopElementsDeviceConnect) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Roxio UPnP Renderer 9 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 9\RoxioUPnPRenderer9.exe
O23 - Service: Roxio Upnp Server 9 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 9\RoxioUpnpService9.exe
O23 - Service: Service CANALPLAY - Canal+ Distribution - C:\Program Files\Lecteur CANALPLAY\CanalPlayService.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Fichiers communs\SureThing Shared\stllssvr.exe

Argan5

gil le fantom · Answer

relance hijackthis
selectionne   do a system scan only
 et coches les lignes suivantes:

O2 - BHO: GamesBarBHO Class - {CB0D163C-E9F4-4236-9496-0597E24B23A5} - C:\Program Files\GamesBar\oberontb.dll (file missing)
O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe (file missing)
O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe (file missing)
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)

puis clic sur le bouton "Fix Checked" 
puis tu me repost un rapport hijackthis.

tu fais un nettoyage avec Ccleaner et tu me dis si tu as encore des problémes

argan5 · Answer

Voilà, j'ai fait ce que tu as dit et voila le nouveau rapport highjackthis
Logfile of HijackThis v1.99.1
Scan saved at 16:35:31, on 16/08/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\System32\FTRTSVC.exe
C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
C:\WINDOWS\system32
vsvc32.exe
C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe
C:\WINDOWS\system32\IoctlSvc.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\Roxio\Digital Home 9\RoxioUPnPRenderer9.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = https://support.microsoft.com/en-US/topic/internet-explorer-downloads-d49e1f0d-571c-9a7b-d97e-be248806ca70
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Download Manager Browser Helper Object - {19C8E43B-07B3-49CB-BFFC-6777B593E6F8} - C:\PROGRA~1\FICHIE~1\fluxDVD\DOWNLO~1\XEBDLH~1.DLL
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla	fswshx.dll
O2 - BHO: Absolutist Games Toolbar - {631ac2d4-57b3-42b0-a148-da33b462c1a3} - C:\Program Files\Absolutist_Games	bAbs1.dll
O2 - BHO: BrwIEConnector Class - {908A31E8-2A6E-4736-8E8A-AAF00C4AE38F} - C:\Program Files\Browster\Browster.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: Absolutist Games Toolbar - {631ac2d4-57b3-42b0-a148-da33b462c1a3} - C:\Program Files\Absolutist_Games	bAbs1.dll
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe"
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: ERUNT AutoBackup.lnk = C:\Program Files\ERUNT\AUTOBACK.EXE
O9 - Extra button: Statistiques d’Anti-Virus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\SCIEPlgn.dll
O9 - Extra button: (no name) - {2A465934-E5F0-11D2-91B5-00104B9C4765} - C:\Program Files\Copernic 2000 Pro\Copernic.exe
O9 - Extra 'Tools' menuitem: Lancer Copernic - {2A465934-E5F0-11D2-91B5-00104B9C4765} - C:\Program Files\Copernic 2000 Pro\Copernic.exe
O9 - Extra button: Copernic - {2A465936-E5F0-11D2-91B5-00104B9C4765} - C:\Program Files\Copernic 2000 Pro\Copernic.exe
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Traduire - {99EFB53C-C965-43CF-9F45-52242D134187} - file://C:\Program Files\Copernic 2000 Pro\Translate.htm
O9 - Extra 'Tools' menuitem: &Traduire avec Gist-In-Time - {99EFB53C-C965-43CF-9F45-52242D134187} - file://C:\Program Files\Copernic 2000 Pro\Translate.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll
O11 - Options group: [INTERNATIONAL] International*
O15 - Trusted Zone: *.canalplay.com
O15 - Trusted Zone: *.canalplusactive.com
O15 - Trusted Zone: *.canalplay.com (HKLM)
O15 - Trusted Zone: *.canalplusactive.com (HKLM)
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://www.adobe.com/products/acrobat/nos/gp.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{DED55562-0C11-4296-B0EA-75CF6418CF11}: NameServer = 192.168.0.1
O18 - Protocol: bw+0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {D4D847F5-8F1F-4318-A0DB-2A94EF30FC82} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Fichiers communs\Acronis\Schedule2\schedul2.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Kaspersky Anti-Virus 7.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe" -r (file missing)
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Photoshop Elements Device Connect (PhotoshopElementsDeviceConnect) - Unknown owner - C:\Program Files\Adobe\Photoshop Elements 3.0\PhotoshopElementsDeviceConnect.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Roxio UPnP Renderer 9 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 9\RoxioUPnPRenderer9.exe
O23 - Service: Roxio Upnp Server 9 - Sonic Solutions - C:\Program Files\Roxio\Digital Home 9\RoxioUpnpService9.exe
O23 - Service: Service CANALPLAY - Canal+ Distribution - C:\Program Files\Lecteur CANALPLAY\CanalPlayService.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Fichiers communs\SureThing Shared\stllssvr.exe

Je n'ai pas de problème pour l'instant. je vais refaire un rapport sdfix pour voir si çà bloque encore

argan5

bootf12 · Answer

Salut
o Prendre connaissance du contenu du lien suivant: http://www.f-secure.com/products/license-terms/eult_fra.pdf
o Vous avez donc pris connaissance et accepté les conditions d'utilisations du programme blacklight qui est inclus dans le dossier compressé navilog1.zip que vous allez télécharger.
o Faire un clic droit sur ce lien : http://perso.orange.fr/il.mafioso/Navifix/Navilog1.zip
o Enregistrez la cible (du lien) sous... et enregistrez-le sur le bureau.
o Faire un clic droit sur navilog1.zip et choisir "tout extraire"
o Double-cliquez sur navilog1.bat
o Arriver au menu principal, choisir l'option 1 et valider.
o Patientez jusqu'au message : Analyse Termine le ...
o Le rapport sera en outre sauvegardé à la racine du disque (fixnavi.txt), psote le stp

++

gil le fantom · Answer

Supprime SDfix, tu n'as plus l'utilité.
Attention,tu télécharge pas mal de crack,n'est ce pas.

supprime déja celui là:
C:\DOCUME~1\ALLUSE~1\Documents\Scrapbooking\Scrapbooking\SCRAP\fonts\LF_CRACKMAN.TTF

si tu veut un très bon antimalware à conserver et faire utiliser régulièrement. 
tu télécharge Malwarebytes' Anti-Malware (MBAM) et enregistre le sur ton Bureau à partir de ce lien : 

http://www.commentcamarche.net/telecharger/telechargement 34055379 malwarebyte s anti malware

tu clique sur l'icône Download_mbam-setup.exe sur ton bureau pour démarrer le programme d'installation. 

tu suis les indications et tu n'apporte aucune modication aux réglages par défaut et en fin d'installation,vérifie que les options Update Malwarebytes' Anti-Malware et Launch Malwarebytes' Anti-Malware sont cochées. 

tu fais "Exécuter un examen complet"

Si des malwares ont été détectés, leur liste s'affiche. 
tu clique sur Suppression (?) , MBAM va détruire les fichiers et clés de registre et en mettre une copie dans la quarantaine. 

MBAM va ouvrir le Bloc-notes et y copier le rapport d'analyse. Ferme le Bloc-notes. (Le rapport peut être retrouvé sous l'onglet Rapports/logs) 

tu me poste le rapport

gil le fantom · Answer

c'était pas la peine de faire navilog,tu n'as pas d'infection NaviPromo

tu fais MBAM

argan5 · Answer

Bonsoir,

Cela a pris un peu de temps mais voici le MBAM

Argan5

Malwarebytes' Anti-Malware 1.24
Version de la base de données: 1058
Windows 5.1.2600 Service Pack 2

23:03:43 16/08/2008
mbam-log-8-16-2008 (23-03-43).txt

Type de recherche: Examen complet (C:\|)
Eléments examinés: 857832
Temps écoulé: 3 hour(s), 54 minute(s), 40 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 7
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 2
Fichier(s) infecté(s): 17

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\bfgtoolbar.bfgtoolbartoggle button (Adware.OneToolBar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{4e7bd74f-2b8d-469e-86bd-fd60bb9aae3b} (Adware.OneToolBar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\bfgtoolbar.bfgtoolbarmenu button (Adware.OneToolBar) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{4e7bd74f-2b8d-469e-86bd-fd60bb9aae3c} (Adware.OneToolBar) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Trymedia Systems (Adware.Trymedia) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\bfgtoolbar (Adware.OneToolBar) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\bfgtoolbar (Adware.OneToolBar) -> Quarantined and deleted successfully.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
C:\Program Files\bfgtoolbar (Adware.OneToolBar) -> Quarantined and deleted successfully.
C:\Program Files\bfgtoolbar\Cache (Adware.OneToolBar) -> Quarantined and deleted successfully.

Fichier(s) infecté(s):
C:\Program Files\Oberon Media\Ranch Rush\ijl15.dll (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Program Files\bfgtoolbar\install.ico (Adware.OneToolBar) -> Quarantined and deleted successfully.
C:\Program Files\bfgtoolbar\Thumbs.db (Adware.OneToolBar) -> Quarantined and deleted successfully.
C:\Program Files\bfgtoolbar	oolbar.ini (Adware.OneToolBar) -> Quarantined and deleted successfully.
C:\Program Files\bfgtoolbar\uninstall.exe (Adware.OneToolBar) -> Quarantined and deleted successfully.
C:\Program Files\bfgtoolbar\Cache\20off.bmp (Adware.OneToolBar) -> Quarantined and deleted successfully.
C:\Program Files\bfgtoolbar\Cache\logo.bmp (Adware.OneToolBar) -> Quarantined and deleted successfully.
C:\Program Files\bfgtoolbar\Cache\mygames.bmp (Adware.OneToolBar) -> Quarantined and deleted successfully.
C:\Program Files\bfgtoolbar\Cache
ewgames.bmp (Adware.OneToolBar) -> Quarantined and deleted successfully.
C:\Program Files\bfgtoolbar\Cache
ewgames3.bmp (Adware.OneToolBar) -> Quarantined and deleted successfully.
C:\Program Files\bfgtoolbar\Cache\search.bmp (Adware.OneToolBar) -> Quarantined and deleted successfully.
C:\Program Files\bfgtoolbar\Cache	opten.bmp (Adware.OneToolBar) -> Quarantined and deleted successfully.
C:\Program Files\bfgtoolbar\Cache	opten2.bmp (Adware.OneToolBar) -> Quarantined and deleted successfully.
C:\Program Files\bfgtoolbar\Cache	opten3.bmp (Adware.OneToolBar) -> Quarantined and deleted successfully.
C:\Program Files\bfgtoolbar\Cache	opten4.bmp (Adware.OneToolBar) -> Quarantined and deleted successfully.
C:\Program Files\bfgtoolbar\Cache	opten5.bmp (Adware.OneToolBar) -> Quarantined and deleted successfully.
C:\Program Files\bfgtoolbar\Cache\webgames.bmp (Adware.OneToolBar) -> Quarantined and deleted successfully.

Analyse Sdfix

14 réponses

Discussions similaires

Newsletters