C:/windows/system32/netsh.exe

Bonjour,
au courant de cette semaine au demarage de mon pc je remarque une page comme celle de MS dos intétulé "c:/windows/system32/netsh.exe". (invite de demande de raiseau). je pense qu'elle ralenté le bon deroulement de mon pc j'ai analysé tout les disque alaide d'un antivirus avast professionnel 4.8 il me détecte un logiciel malaillant c'est "rootkik-gen".j'ai scané mon pc avec COMBOFIX le virus (ou logiciel) a disparu mais cette page a resté toujour elle apparé avant le démarage.
est ce que ce n'est pas grave? quelle est la solution pour faire désparetre cette page?
Jé'ai scané mon pc avec combofix dont voici le resultat:

ComboFix 08-08-27.05 - Administrateur 2008-08-29 14:10:53.3 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.2.1252.1.1036.18.40 [GMT 2:00]
Endroit: C:\Documents and Settings\Administrateur\Bureau\ComboFix.exe

[color=red][b]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/b][/color]
.

((((((((((((((((((((((((((((( Fichiers créés 2008-07-28 to 2008-08-29 ))))))))))))))))))))))))))))))))))))
.

2008-08-29 00:14 . 2008-08-29 00:14 <REP> d-------- C:\Documents and Settings\Administrateur\.NumericalChameleon
2008-08-28 21:52 . 2008-08-28 23:43 <REP> d-------- C:\Program Files\Google
2008-08-28 14:31 . 2008-08-28 20:13 <REP> d--h----- C:\WINDOWS\$hf_mig$
2008-08-27 22:14 . 2008-08-27 22:14 <REP> d-------- C:\Program Files\Trend Micro
2008-08-27 22:11 . 2008-08-27 22:29 6,656 --a------ C:\WINDOWS\system32\drivers\RKPavProc.sys
2008-08-27 19:13 . 2008-08-27 19:13 <REP> d-------- C:\Program Files\Sophos
2008-08-25 13:13 . 2008-08-25 13:13 <REP> d-------- C:\Program Files\Alwil Software
2008-08-24 14:57 . 2008-08-19 18:30 1,435,272 --a------ C:\WINDOWS\system32\Flash8.ocx
2008-08-21 16:29 . 2008-08-21 16:29 35,237,185 --a------ C:\WINDOWS\pcls_trial15.exe
2008-08-18 21:29 . 2005-05-26 15:34 2,297,552 --a------ C:\WINDOWS\system32\d3dx9_26.dll
2008-08-16 13:15 . 2008-08-16 13:15 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\dvdcss
2008-08-12 18:21 . 2008-08-29 14:08 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2008-08-12 18:21 . 2008-08-12 18:21 1,409 --a------ C:\WINDOWS\QTFont.for
2008-08-12 14:19 . 2008-08-12 14:19 <REP> d-------- C:\Program Files\iTunes
2008-08-12 14:19 . 2008-08-12 14:19 <REP> d-------- C:\Program Files\iPod
2008-08-11 18:09 . 2008-02-28 13:26 1,414,440 --a------ C:\WINDOWS\system32\ShellManager310E2D762.dll
2008-08-11 18:09 . 2008-02-28 13:01 774,144 --a------ C:\WINDOWS\system32\NEROINSTAEC43759.DB
2008-08-11 12:45 . 2004-08-04 00:45 14,848 --a------ C:\WINDOWS\system32\drivers\kbdhid.sys
2008-08-11 12:45 . 2004-08-04 00:45 14,848 --a--c--- C:\WINDOWS\system32\dllcache\kbdhid.sys
2008-08-11 12:45 . 2001-08-23 17:04 12,288 --a------ C:\WINDOWS\system32\drivers\mouhid.sys
2008-08-11 12:45 . 2001-08-23 17:04 12,288 --a--c--- C:\WINDOWS\system32\dllcache\mouhid.sys
2008-08-09 22:33 . 2008-08-11 18:10 <REP> d-------- C:\Program Files\NeroInstall.bak
2008-08-09 22:31 . 2008-08-09 22:31 <REP> d-------- C:\Documents and Settings\Administrateur\Application Data\Nero
2008-08-09 22:28 . 2008-08-09 22:30 <REP> d-------- C:\Program Files\Fichiers communs\Nero
2008-08-09 22:28 . 2008-08-09 22:28 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Nero
2008-08-09 22:23 . 2008-08-12 18:29 <REP> d-------- C:\Program Files\AskTBar
2008-08-09 19:02 . 2008-08-12 14:19 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Apple Computer
2008-08-06 17:08 . 2008-08-06 17:08 361 --a------ C:\WINDOWS\Flash.ini
2008-08-05 17:16 . 2008-08-05 17:16 84 --a------ C:\WINDOWS\winamp.ini

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-08-28 20:02 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
2008-08-28 18:44 88,576 ----a-w C:\WINDOWS\system32\netsh.exe
2008-08-13 17:34 --------- d-----w C:\Program Files\TotalAudioConverter
2008-08-10 17:59 --------- d-----w C:\Program Files\Nero
2008-08-09 20:02 --------- d-----w C:\Program Files\Fichiers communs\Ahead
2008-08-09 17:03 --------- d-----w C:\Program Files\MpcStar
2008-07-31 13:13 2,864 ----a-w C:\WINDOWS\system32\winsock.dll
2008-07-27 18:04 --------- d-----w C:\Program Files\Yahoo!
2008-07-27 16:40 --------- d-----w C:\Program Files\Foreignword
2008-07-27 15:55 --------- d-----w C:\Program Files\Fichiers communs\AVSMedia
2008-07-27 15:54 --------- d-----w C:\Program Files\AVSMedia
2008-07-25 19:10 --------- d-----w C:\Program Files\AviSynth 2.5
2008-07-23 19:28 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\Ahead
2008-07-23 16:08 --------- d-----w C:\Documents and Settings\All Users\Application Data\NCH Swift Sound
2008-07-23 16:04 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\NCH Swift Sound
2008-07-23 16:00 --------- d-----w C:\Documents and Settings\All Users\Application Data\NCH Software
2008-07-23 15:59 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\NCH Software
2008-07-22 13:17 --------- d-----w C:\Program Files\Bonjour
2008-07-22 12:59 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\DivX
2008-07-22 12:57 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\Yahoo!
2008-07-21 17:50 --------- d-----w C:\Documents and Settings\All Users\Application Data\AVS4YOU
2008-07-21 17:50 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\AVS4YOU
2008-07-20 12:13 --------- d-----w C:\Program Files\WMA-MP3.com
2008-07-20 11:49 --------- d-----w C:\Documents and Settings\Administrateur\Application Data\Softplicity
2008-06-18 17:52 161,096 ----a-w C:\WINDOWS\system32\DivXCodecVersionChecker.exe
2008-06-12 23:00 225,280 ----a-w C:\WINDOWS\system32\TubeFinder.exe
2008-06-04 16:42 9,728 ----a-w C:\WINDOWS\system32\PCCLPFR.DLL
2008-06-04 16:42 32,768 ----a-w C:\WINDOWS\system32\CMDLGFR.DLL
2008-06-04 16:42 141,312 ----a-w C:\WINDOWS\system32\MSCMCFR.DLL
2008-06-04 16:42 119,568 ----a-w C:\WINDOWS\system32\VB6FR.DLL
2008-06-04 16:42 101,888 ----a-w C:\WINDOWS\system32\VB6STKIT.DLL
.

((((((((((((((((((((((((((((( snapshot@2008-08-28_14.22.23.34 )))))))))))))))))))))))))))))))))))))))))
.
- 2004-08-04 04:54:22 244,736 ----a-w C:\WINDOWS\AppPatch\AcSpecfc.dll
+ 2004-09-24 02:12:56 245,248 ----a-w C:\WINDOWS\AppPatch\acspecfc.dll
- 2004-08-04 04:54:22 244,736 -c--a-w C:\WINDOWS\system32\dllcache\acspecfc.dll
+ 2004-09-24 02:12:56 245,248 -c--a-w C:\WINDOWS\system32\dllcache\acspecfc.dll
- 2004-08-04 04:54:36 1,236,480 -c--a-w C:\WINDOWS\system32\dllcache\msxml3.dll
+ 2006-09-13 05:03:06 1,084,416 -c--a-w C:\WINDOWS\system32\dllcache\msxml3.dll
- 2004-08-04 04:55:00 88,576 -c--a-w C:\WINDOWS\system32\dllcache\netsh.exe
+ 2008-08-28 18:44:37 88,576 -c--a-w C:\WINDOWS\system32\dllcache\netsh.exe
- 2004-08-04 04:54:36 1,236,480 ----a-w C:\WINDOWS\system32\msxml3.dll
+ 2006-09-13 05:03:06 1,084,416 ----a-w C:\WINDOWS\system32\msxml3.dll
- 2008-08-18 19:28:08 58,732 ----a-w C:\WINDOWS\system32\perfc009.dat
+ 2008-08-28 19:52:02 58,732 ----a-w C:\WINDOWS\system32\perfc009.dat
- 2008-08-18 19:28:08 71,488 ----a-w C:\WINDOWS\system32\perfc00C.dat
+ 2008-08-28 19:52:02 71,488 ----a-w C:\WINDOWS\system32\perfc00C.dat
- 2008-08-18 19:28:08 392,432 ----a-w C:\WINDOWS\system32\perfh009.dat
+ 2008-08-28 19:52:02 392,432 ----a-w C:\WINDOWS\system32\perfh009.dat
- 2008-08-18 19:28:08 458,648 ----a-w C:\WINDOWS\system32\perfh00C.dat
+ 2008-08-28 19:52:02 458,648 ----a-w C:\WINDOWS\system32\perfh00C.dat
+ 2008-08-28 21:42:55 142,300 ----a-w C:\WINDOWS\system32\Restore\rstrlog.dat
- 2005-05-03 10:58:22 14,560 ------w C:\WINDOWS\system32\spmsg.dll
+ 2005-10-12 23:15:23 15,072 ------w C:\WINDOWS\system32\spmsg.dll
+ 2008-08-29 12:08:23 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_484.dat
.
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{9CB65206-89C4-402c-BA80-02D8C59F9B1D}"= "C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL" [2008-08-09 22:23 57344]

[HKEY_CLASSES_ROOT\clsid\{9cb65206-89c4-402c-ba80-02d8c59f9b1d}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 06:54 15360]
"Shell de comandos de red"="C:\Windows\System32\netsh.exe" [2008-08-28 20:44 88576]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="C:\WINDOWS\system32\igfxtray.exe" [2004-11-02 03:03 155648]
"HotKeysCmds"="C:\WINDOWS\system32\hkcmd.exe" [2004-11-02 02:59 126976]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11 132496]
"NeroFilterCheck"="C:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe" [2008-02-28 09:59 570664]
"NBKeyScan"="C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe" [2008-02-18 16:29 2221352]
"iTunesHelper"="C:\Program Files\iTunes\iTunesHelper.exe" [2008-02-04 14:18 267048]
"QuickTime Task"="C:\Program Files\MpcStar\Codecs\QuickTime\QTTask.exe" [2008-01-31 23:13 385024]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2008-05-16 01:19 79224]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-04 06:54 15360]

C:\Documents and Settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
BlueSoleil.lnk - C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe [2008-05-16 17:04:53 1183744]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system]
"NoFolderOptions"= 0 (0x0)

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"C:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"=
"C:\\Program Files\\iTunes\\iTunes.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"86:TCP"= 86:TCP:BroadCam Web Server

R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-05-16 01:20]
R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-05-16 01:16]
S3 MEMSWEEP2;MEMSWEEP2;C:\WINDOWS\system32\2.tmp []

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{462f42c1-1fdd-11dd-93cc-0019661fe210}]
\Shell\AutoRun\command - H:\2.cmd
\Shell\explore\Command - H:\2.cmd
\Shell\open\Command - H:\2.cmd
.
Contenu du dossier 'Scheduled Tasks/Tâches planifiées'

2008-05-14 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2007-08-29 14:57]
.
.
------- Supplementary Scan -------
.
R0 -: HKCU-Main,Start Page = hxxp://www.google.fr/
R1 -: HKCU-Internet Connection Wizard,ShellNext = hxxp://p48.50webs.com/index.htm
R1 -: HKCU-Internet Settings,ProxyOverride = *.local
O8 -: E&xporter vers Microsoft Excel - C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
.

**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-08-29 14:12:34
Windows 5.1.2600 Service Pack 2 NTFS

Balayage processus cachés ...

Balayage caché autostart entries ...

Balayage des fichiers cachés ...

Scan terminé avec succès
Les fichiers cachés: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\MEMSWEEP2]
"ImagePath"="\??\C:\WINDOWS\system32\2.tmp"

[HKEY_LOCAL_MACHINE\system\ControlSet001\Services\vsdatant]
"ImagePath"="a"
.
Temps d'accomplissement: 2008-08-29 14:15:40
ComboFix-quarantined-files.txt 2008-08-29 12:15:34
ComboFix2.txt 2008-08-28 14:00:49
ComboFix3.txt 2008-08-28 12:22:55

Pre-Run: 22,684,352,512 octets libres
Post-Run: 22,676,357,120 octets libres

175
puis avec hijackthis voici les resulta:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:27:43, on 29/08/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\system32\IoctlSvc.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\NOTEPAD.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://p48.50webs.com/index.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {9CB65206-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Ask Search Assistant BHO - {9CB65201-89C4-402c-BA80-02D8C59F9B1D} - C:\Program Files\AskTBar\SrchAstt\1.bin\A5SRCHAS.DLL
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O2 - BHO: Ask Toolbar BHO - {FE063DB1-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: Ask Toolbar - {FE063DB9-4EC0-403e-8DD8-394C54984B2C} - C:\Program Files\AskTBar\bar\1.bin\ASKTBAR.DLL
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\MpcStar\Codecs\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Shell de comandos de red] C:\Windows\System32\netsh.exe firewall set opmode disable
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: BlueSoleil.lnk = ?
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe