Rappor hijackthis

Résolu
Bonjour,
voici un rapport généré par hijackthis ms c du charabia pr moi ! que dois-je faire maintenant ?
merci pr votre aide.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 16:17:12, on 24/12/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\RtHDVCpl.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\Hotkey Management\FuncKey.exe
C:\Program Files\Power Manager\PM.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Windows\WindowsMobile\wmdc.exe
C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam\Quickcam.exe
C:\Program Files\Apoint2K\ApMsgFwd.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Live\MessengerSearchAddon\msgrsrch.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Users\Kari75\AppData\Local\kqwow.exe
C:\Program Files\RALINK\Common\RaUI.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
C:\Users\Kari75\AppData\Roaming\Microsoft\Live Search\Notification-LiveSearch.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WksCal.exe
C:\Program Files\Apoint2K\Apntex.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
C:\Users\Kari75\AppData\Roaming\Microsoft\Live Search\Mise-a-jour-LiveSearch.exe
C:\Program Files\Common Files\Microsoft Shared\Works Shared\WksCal.exe
C:\Program Files\Internet Explorer\ieuser.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\taskeng.exe
C:\Users\Kari75\Desktop\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://home.sweetim.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll (file missing)
F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe
O1 - Hosts: ::1 localhost
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SWEETIE - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - C:\PROGRA~1\MACROG~1\SWEETI~1\toolbar.dll (file missing)
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Click-to-Call BHO - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:\Program Files\Windows Live\Messenger\wlchtc.dll
O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Beta - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll (file missing)
O3 - Toolbar: Show Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\CoIEPlg.dll
O3 - Toolbar: &Windows Live Toolbar Beta - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [FuncKey] "C:\Program Files\Hotkey Management\FuncKey.exe"
O4 - HKLM\..\Run: [PowerManager] C:\Program Files\Power Manager\PM.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton 360\osCheck.exe"
O4 - HKLM\..\Run: [Windows Mobile Device Center] %windir%\WindowsMobile\wmdc.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [SalaatTime] C:\Program Files\Salaat Time\SalaatTime.exe
O4 - HKCU\..\Run: [msnlivesearch] C:\Program Files\Windows Live\MessengerSearchAddon\msgrsrch.exe /Run
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [kqwow] "c:\users\kari75\appdata\local\kqwow.exe" kqwow
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Startup: Outil de notification Live Search.lnk = C:\Users\Kari75\AppData\Roaming\Microsoft\Live Search\Notification-LiveSearch.exe
O4 - Global Startup: Ralink Wireless Utility.lnk = C:\Program Files\RALINK\Common\RaUI.exe
O4 - Global Startup: Rappels du Calendrier Microsoft Works.lnk = ?
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: {04CB5B64-5915-4629-B869-8945CEBADD21} (Module de délivrance de certificat MINEFI) - https://static.impots.gouv.fr/abos/static/securite/certdgi1.cab
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/funwebproducts/ei-3/SmileyCentralFWBInitialSetup1.0.1.0.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/VistaMSNPUpldfr-fr.cab
O16 - DPF: {88764F69-3831-4EC1-B40B-FF21D8381345} (AdVerifierADPCtrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerVistaADP-1.1.cab
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
O23 - Service: Windows Live Contrôle parental (fsssvc) - Unknown owner - C:\Program Files\Windows Live\Family Safety\fsssvc.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: lxct_device - - C:\Windows\system32\lxctcoms.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Ralink Registry Writer (RalinkRegistryWriter) - Ralink Technology, Corp. - C:\Program Files\RALINK\Common\RalinkRegistryWriter.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
O23 - Service: Fujitsu Siemens Computers Diagnostic Testhandler (TestHandler) - Fujitsu Siemens Computers - C:\firststeps\OnlineDiagnostic\TestManager\TestHandler.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

--
End of file - 12381 bytes
Configuration: Windows Vista
Internet Explorer 7.0

42 réponses

Résumé de la discussion

Un rapport HijackThis et des symptômes d’intrusion guident une demande d’aide pour nettoyer un PC Windows et identifier des barres d’outils ou des composants indésirables. Plusieurs éléments du log signalent des composants potentiellement indésirables tels que SweetIM, des barres d’outils et des services associés à Norton ou Google Updater, accompagnés d’une longue liste de processus en exécution. La meilleure réponse proposée décrit une procédure de nettoyage incluant la désinstallation d’AD-Remover, l’utilisation de Random’s System Information Tool (RSIT), puis l’analyse avec HijackThis mis à jour et la suppression sécurisée des fichiers et clés indésirables. D’autres échanges évoquent des outils complémentaires et des redémarrages, notamment pour supprimer des résidus avec OTMoveIt3 et vérifier les chemins d’accès des services critiques.

Bobot (l’IA à votre service)
  1. Modérateur
    "1. Démarrez Internet Explorer 7.
    2. Dans le menu Outils, cliquez sur Options Internet.
    3. Sous l'onglet Avancés, cliquez sur Réinitialiser.
    4. Dans la boîte de dialogue Réinitialiser les paramètres d'Internet Explorer, cliquez sur Réinitialiser pour confirmer votre choix."
    1. voila le nouveau rapport

      -----------\\ ToolBar S&D 1.2.8 XP/Vista

      Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 2
      X86-based PC ( Multiprocessor Free : Processeur Intel Pentium III )
      BIOS : BIOS Date: 07/29/08 17:03:29 Ver: 08.00.12
      USER : Anthony ( Administrator )
      BOOT : Normal boot
      Antivirus : avast! antivirus 4.8.1296 [VPS 081222-0] 4.8.1296 (Activated)
      A:\ (USB)
      C:\ (Local Disk) - NTFS - Total:57 Go (Free:46 Go)
      H:\ (CD or DVD)
      I:\ (CD or DVD)
      J:\ (Local Disk) - FAT32 - Total:465 Go (Free:436 Go)

      "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
      Option : [2] ( 25/12/2008|20:22 )

      -----------\\ SUPPRESSION

      Supprime! - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
      Supprime! - C:\Program Files\DAEMON Tools Toolbar\Resources
      Supprime! - C:\Program Files\DAEMON Tools Toolbar\uninst.exe
      Supprime! - C:\DOCUME~1\Anthony\LOCALS~1\Temp\ICD1.tmp
      Supprime! - C:\Program Files\DAEMON Tools Toolbar

      -----------\\ Recherche de Fichiers / Dossiers ...

      -----------\\ [..\Internet Explorer\Main]

      [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
      "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
      "Start Page"="https://www.google.fr/?gws_rd=ssl"
      "Search Page"="https://www.google.com/?gws_rd=ssl"
      "Search Bar"="http://www.google.com/toolbar/ie8/sidebar.html"
      "SearchMigratedDefaultURL"="https://www.google.com/webhp?gws_rd=ssl{searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"

      [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
      "Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
      "Default_Search_URL"="http://www.google.com/toolbar/ie8/sidebar.html"
      "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
      "Start Page"="https://www.msn.com/fr-fr/"

      --------------------\\ Recherche d'autres infections

      Aucune autre infection trouvée !

      1 - "C:\ToolBar SD\TB_1.txt" - 25/12/2008|20:11 - Option : [1]
      2 - "C:\ToolBar SD\TB_2.txt" - 25/12/2008|20:23 - Option : [2]

      -----------\\ Fin du rapport a 20:23:00,26
      1. Modérateur
        ---> Désinstalle DAEMON Tools Toolbar.

        ---> Relance ToolBar S&D, fais l'option 2 et poste le rapport.
        1. enfaite ça me met internet a rencotnré une erreur nou nou excuson machin enfin la fenetre d'erreur habituel avec ne pas envoyer ..
          le rapport d'erreur c'est :
          AppName: iexplore.exe AppVer: 6.0.2900.2180 ModName: mshtml.dll
          ModVer: 6.0.2900.3492 Offset: 0012a999

          et le rapport de toolbar que tu ma demandé est :

          -----------\\ ToolBar S&D 1.2.8 XP/Vista

          "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
          Option : [1] ( 25/12/2008|20:11 )

          -----------\\ Recherche de Fichiers / Dossiers ...

          C:\Program Files\DAEMON Tools Toolbar
          C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll
          C:\Program Files\DAEMON Tools Toolbar\Resources
          C:\Program Files\DAEMON Tools Toolbar\uninst.exe
          C:\Program Files\DAEMON Tools Toolbar\_DTLite.xml
          C:\Program Files\DAEMON Tools Toolbar\Resources\about.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\AboutWindow.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\as.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\as.png
          C:\Program Files\DAEMON Tools Toolbar\Resources\astro.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\b1.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\b1.png
          C:\Program Files\DAEMON Tools Toolbar\Resources\BurnImage.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\buy.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond000.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond001.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond003.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond004.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond005.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond006.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond007.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond008.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond009.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond010.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond011.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond019.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond020.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond021.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond022.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond023.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond024.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond025.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond026.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond037.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond038.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond039.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond040.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond041.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond046.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond048.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond050.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond051.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond052.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond053.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond054.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond055.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond056.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond057.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond058.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond059.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond060.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond061.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond062.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond063.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond064.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond065.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond066.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond067.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond068.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond069.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond075.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond076.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond077.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond078.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond079.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond080.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond084.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond085.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond086.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond087.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond088.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond089.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond090.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond091.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond092.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond093.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond094.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond095.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond108.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond109.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond110.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond111.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond112.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond113.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond120.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond121.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond122.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond126.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond127.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond128.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond129.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond130.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond131.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond132.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond133.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond134.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond135.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond136.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond137.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond138.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond140.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond141.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond142.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond143.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond148.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond149.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond152.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond154.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond155.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond156.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\cond157.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\Config.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\d.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\d2.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\daemon.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\ds.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\dsearch.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\dt.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\DTPro.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\Dwnl.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\emulation.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\features.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\gd.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\genre.xml
          C:\Program Files\DAEMON Tools Toolbar\Resources\globe.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\GrabImage.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\hb.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\hb.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\help.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\ip.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\lang.xml
          C:\Program Files\DAEMON Tools Toolbar\Resources\lingvo.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\m.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\mail.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\mailc.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_disable.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_down.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_m.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\mailc_under.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\mail_disable.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\mail_down.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\mail_m.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\mail_under.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\MenuRadioConfig.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\MenuRadioStation.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\MenuTr.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\next.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\next_down.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\next_m.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\next_under.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\none.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\none_m.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\noW.gif
          C:\Program Files\DAEMON Tools Toolbar\Resources\op.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\play.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\play.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\play_down.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\play_m.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\play_under.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\pragma.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\prev.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\prev_down.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\prev_m.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\prev_under.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\prod.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\Radio.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\RadioBg.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\RadioBgMask.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDisp.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDisp_m.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDown.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDown.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDown_down.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDown_m.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\RadioDown_under.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\RadioError.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\RadioError_m.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\RadioSmallDisp.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\RadioSmallDisp_m.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\RadioVolume.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\RadioVolume_down.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\RadioVolume_m.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\RadioVolume_under.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\RadioWait.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\RadioWait_m.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\refresh.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_down.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_m.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\refresh_under.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\Rss.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\Rss1.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\rssClose.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\rssL.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\rssOpen.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\size.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\size_m.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\skins.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\spt.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\stop.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\stop.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\stop_down.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\stop_m.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\stop_under.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\SupportRequest.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\time.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\TitleIcon.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\toolbar.xml
          C:\Program Files\DAEMON Tools Toolbar\Resources\trans.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\Trash.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_disable.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_down.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_m.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\Trash_under.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\u.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\vol.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\vol.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\vol_back.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\vol_dott.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\vol_dott_m.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\vol_down.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\vol_m.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\vol_under.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\wb.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_down.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_m.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\wBtClose_under.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_down.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_m.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\wBtText_under.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\Weather_m42.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\Weather_m43.bmp
          C:\Program Files\DAEMON Tools Toolbar\Resources\wi.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\wi0.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\wi1.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\wi10.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\wi11.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\wi12.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\wi13.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\wi2.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\wi3.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\wi4.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\wi5.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\wi6.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\wi7.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\wi8.ico
          C:\Program Files\DAEMON Tools Toolbar\Resources\wi9.ico
          C:\DOCUME~1\Anthony\LOCALS~1\Temp\ICD1.tmp

          -----------\\ [..\Internet Explorer\Main]

          [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
          "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
          "Start Page"="https://www.google.fr/?gws_rd=ssl"
          "Search Page"="https://www.google.com/?gws_rd=ssl"
          "Search Bar"="http://www.google.com/toolbar/ie8/sidebar.html"
          "SearchMigratedDefaultURL"="https://www.google.com/webhp?gws_rd=ssl{searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"

          [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
          "Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
          "Default_Search_URL"="http://www.google.com/toolbar/ie8/sidebar.html"
          "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
          "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home"

          --------------------\\ Recherche d'autres infections

          Aucune autre infection trouvée !

          1 - "C:\ToolBar SD\TB_1.txt" - 25/12/2008|20:11 - Option : [1]

          -----------\\ Fin du rapport a 20:11:49,17

          helpp pleaze
          1. ok merci pr ta patience en tout k, mon pc a l'air d'aller mieux ;-)
            bonne journée
            1. Modérateur
              Ah ?

              En tout cas, je ne sais pourquoi il s'affiche.

              Je m'absente, désolé.
              1. c clair ms pr ça il faut que je redémarre mon pc :S
                allez zou, c parti pr un redémarrage...
                1. si, je pense que oui ! c juste que je ne comprends ps ce que c :D
                  1. bonjour,
                    voilà mon rapport du jour !
                    Logfile of Trend Micro HijackThis v2.0.2
                    Scan saved at 10:26:10, on 25/12/2008
                    Platform: Windows Vista SP1 (WinNT 6.00.1905)
                    MSIE: Internet Explorer v7.00 (7.00.6001.18000)
                    Boot mode: Normal

                    Running processes:
                    C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
                    C:\Windows\system32\taskeng.exe
                    C:\Windows\system32\Dwm.exe
                    C:\Windows\Explorer.EXE
                    C:\Windows\RtHDVCpl.exe
                    C:\Program Files\Apoint2K\Apoint.exe
                    C:\Program Files\Hotkey Management\FuncKey.exe
                    C:\Program Files\Power Manager\PM.exe
                    C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
                    C:\Windows\WindowsMobile\wmdc.exe
                    C:\Program Files\Common Files\Real\Update_OB\realsched.exe
                    C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
                    C:\Program Files\Logitech\QuickCam\Quickcam.exe
                    C:\Program Files\Java\jre6\bin\jusched.exe
                    C:\Program Files\Apoint2K\ApMsgFwd.exe
                    C:\Windows\ehome\ehtray.exe
                    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                    C:\Program Files\Windows Sidebar\sidebar.exe
                    C:\Program Files\Salaat Time\SalaatTime.exe
                    C:\Program Files\Windows Live\MessengerSearchAddon\msgrsrch.exe
                    C:\Program Files\Windows Media Player\wmpnscfg.exe
                    C:\Windows\ehome\ehmsas.exe
                    C:\Program Files\RALINK\Common\RaUI.exe
                    C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
                    C:\Users\Kari75\AppData\Roaming\Microsoft\Live Search\Notification-LiveSearch.exe
                    C:\Windows\System32\rundll32.exe
                    C:\Users\Kari75\AppData\Roaming\Microsoft\Live Search\Mise-a-jour-LiveSearch.exe
                    C:\Program Files\Apoint2K\Apntex.exe
                    C:\Program Files\Windows Sidebar\sidebar.exe
                    C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
                    C:\Program Files\Internet Explorer\iexplore.exe
                    C:\Program Files\Windows Live\Toolbar\wltuser.exe
                    C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
                    C:\Windows\system32\SearchFilterHost.exe
                    C:\Users\Kari75\Desktop\HiJackThis.exe

                    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
                    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
                    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
                    R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
                    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
                    F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe
                    O1 - Hosts: ::1 localhost
                    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
                    O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
                    O2 - BHO: Click-to-Call BHO - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:\Program Files\Windows Live\Messenger\wlchtc.dll
                    O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\coIEPlg.dll
                    O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll
                    O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
                    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
                    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
                    O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
                    O2 - BHO: Windows Live Toolbar Beta - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
                    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
                    O3 - Toolbar: Show Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\CoIEPlg.dll
                    O3 - Toolbar: &Windows Live Toolbar Beta - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
                    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                    O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
                    O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
                    O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
                    O4 - HKLM\..\Run: [FuncKey] "C:\Program Files\Hotkey Management\FuncKey.exe"
                    O4 - HKLM\..\Run: [PowerManager] C:\Program Files\Power Manager\PM.exe
                    O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
                    O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
                    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
                    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
                    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
                    O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton 360\osCheck.exe"
                    O4 - HKLM\..\Run: [Windows Mobile Device Center] %windir%\WindowsMobile\wmdc.exe
                    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
                    O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
                    O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
                    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
                    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
                    O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
                    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
                    O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
                    O4 - HKCU\..\Run: [SalaatTime] C:\Program Files\Salaat Time\SalaatTime.exe
                    O4 - HKCU\..\Run: [msnlivesearch] C:\Program Files\Windows Live\MessengerSearchAddon\msgrsrch.exe /Run
                    O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
                    O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
                    O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
                    O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
                    O4 - Startup: Outil de notification Live Search.lnk = C:\Users\Kari75\AppData\Roaming\Microsoft\Live Search\Notification-LiveSearch.exe
                    O4 - Global Startup: Ralink Wireless Utility.lnk = C:\Program Files\RALINK\Common\RaUI.exe
                    O4 - Global Startup: Rappels du Calendrier Microsoft Works.lnk = ?
                    O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
                    O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
                    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
                    O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                    O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                    O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
                    O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
                    O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
                    O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
                    O13 - Gopher Prefix:
                    O16 - DPF: {04CB5B64-5915-4629-B869-8945CEBADD21} (Module de délivrance de certificat MINEFI) - https://static.impots.gouv.fr/abos/static/securite/certdgi1.cab
                    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/VistaMSNPUpldfr-fr.cab
                    O16 - DPF: {88764F69-3831-4EC1-B40B-FF21D8381345} (AdVerifierADPCtrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerVistaADP-1.1.cab
                    O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
                    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
                    O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
                    O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
                    O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
                    O23 - Service: Windows Live Contrôle parental (fsssvc) - Unknown owner - C:\Program Files\Windows Live\Family Safety\fsssvc.exe (file missing)
                    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                    O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
                    O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
                    O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
                    O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
                    O23 - Service: lxct_device - - C:\Windows\system32\lxctcoms.exe
                    O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
                    O23 - Service: Ralink Registry Writer (RalinkRegistryWriter) - Ralink Technology, Corp. - C:\Program Files\RALINK\Common\RalinkRegistryWriter.exe
                    O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
                    O23 - Service: Fujitsu Siemens Computers Diagnostic Testhandler (TestHandler) - Fujitsu Siemens Computers - C:\firststeps\OnlineDiagnostic\TestManager\TestHandler.exe
                    O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe
                    1. Modérateur
                      ---> Clique droit sur le raccourci d'HijackThis et choisis Exécuter en tant qu'administrateur.

                      ---> Choisis Do a system scan only.

                      ---> Coche les cases qui sont devant les lignes suivantes :

                      R3 - URLSearchHook: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll (file missing)

                      O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll (file missing)

                      ---> Clique en bas sur Fix checked. Mets oui si HijackThis te demande quelque chose.

                      ---> Redémarre ton PC et poste un nouveau rapport HijackThis.
                      1. Logfile of random's system information tool 1.05 (written by random/random)
                        Run by Kari75 at 2008-12-24 21:02:23
                        Microsoft® Windows Vista™ Édition Familiale Premium Service Pack 1
                        System drive C: has 36 GB (32%) free of 111 GB
                        Total RAM: 2046 MB (51% free)

                        Logfile of Trend Micro HijackThis v2.0.2
                        Scan saved at 21:03:02, on 24/12/2008
                        Platform: Windows Vista SP1 (WinNT 6.00.1905)
                        MSIE: Internet Explorer v7.00 (7.00.6001.18000)
                        Boot mode: Normal

                        Running processes:
                        C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
                        C:\Windows\system32\Dwm.exe
                        C:\Windows\Explorer.EXE
                        C:\Windows\system32\taskeng.exe
                        C:\Windows\RtHDVCpl.exe
                        C:\Program Files\Apoint2K\Apoint.exe
                        C:\Program Files\Hotkey Management\FuncKey.exe
                        C:\Program Files\Power Manager\PM.exe
                        C:\Program Files\Apoint2K\ApMsgFwd.exe
                        C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
                        C:\Windows\WindowsMobile\wmdc.exe
                        C:\Program Files\Common Files\Real\Update_OB\realsched.exe
                        C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
                        C:\Program Files\Logitech\QuickCam\Quickcam.exe
                        C:\Windows\ehome\ehtray.exe
                        C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                        C:\Windows\System32\rundll32.exe
                        C:\Program Files\Windows Sidebar\sidebar.exe
                        C:\Program Files\Salaat Time\SalaatTime.exe
                        C:\Program Files\Windows Live\MessengerSearchAddon\msgrsrch.exe
                        C:\Program Files\Windows Media Player\wmpnscfg.exe
                        C:\Program Files\RALINK\Common\RaUI.exe
                        C:\Program Files\Common Files\Microsoft Shared\Works Shared\wkcalrem.exe
                        C:\Users\Kari75\AppData\Roaming\Microsoft\Live Search\Notification-LiveSearch.exe
                        C:\Windows\ehome\ehmsas.exe
                        C:\Program Files\Apoint2K\Apntex.exe
                        C:\Program Files\Windows Sidebar\sidebar.exe
                        C:\Users\Kari75\AppData\Roaming\Microsoft\Live Search\Mise-a-jour-LiveSearch.exe
                        C:\Program Files\Common Files\Logishrd\LQCVFX\COCIManager.exe
                        C:\Windows\System32\mobsync.exe
                        C:\Program Files\Windows Media Player\wmplayer.exe
                        C:\Program Files\Internet Explorer\iexplore.exe
                        C:\Program Files\Windows Live\Toolbar\wltuser.exe
                        C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
                        C:\Users\Kari75\Desktop\RSIT.exe
                        C:\Users\Kari75\Desktop\Kari75.exe
                        C:\Windows\system32\SearchFilterHost.exe

                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                        R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
                        R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
                        R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
                        R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
                        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
                        R3 - URLSearchHook: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll (file missing)
                        F2 - REG:system.ini: UserInit=C:\Windows\system32\userinit.exe
                        O1 - Hosts: ::1 localhost
                        O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
                        O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
                        O2 - BHO: Click-to-Call BHO - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:\Program Files\Windows Live\Messenger\wlchtc.dll
                        O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\coIEPlg.dll
                        O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\COMMON~1\SYMANT~1\IDS\IPSBHO.dll
                        O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
                        O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
                        O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                        O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                        O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
                        O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                        O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
                        O2 - BHO: Windows Live Toolbar Beta - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
                        O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
                        O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll (file missing)
                        O3 - Toolbar: Show Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Common Files\Symantec Shared\coShared\Browser\2.6\CoIEPlg.dll
                        O3 - Toolbar: &Windows Live Toolbar Beta - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
                        O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                        O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
                        O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
                        O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
                        O4 - HKLM\..\Run: [FuncKey] "C:\Program Files\Hotkey Management\FuncKey.exe"
                        O4 - HKLM\..\Run: [PowerManager] C:\Program Files\Power Manager\PM.exe
                        O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
                        O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
                        O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
                        O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
                        O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
                        O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton 360\osCheck.exe"
                        O4 - HKLM\..\Run: [Windows Mobile Device Center] %windir%\WindowsMobile\wmdc.exe
                        O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
                        O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe"
                        O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
                        O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
                        O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
                        O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
                        O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
                        O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
                        O4 - HKCU\..\Run: [SalaatTime] C:\Program Files\Salaat Time\SalaatTime.exe
                        O4 - HKCU\..\Run: [msnlivesearch] C:\Program Files\Windows Live\MessengerSearchAddon\msgrsrch.exe /Run
                        O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
                        O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
                        O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
                        O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
                        O4 - Startup: Outil de notification Live Search.lnk = C:\Users\Kari75\AppData\Roaming\Microsoft\Live Search\Notification-LiveSearch.exe
                        O4 - Global Startup: Ralink Wireless Utility.lnk = C:\Program Files\RALINK\Common\RaUI.exe
                        O4 - Global Startup: Rappels du Calendrier Microsoft Works.lnk = ?
                        O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
                        O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
                        O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
                        O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                        O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                        O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
                        O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
                        O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll
                        O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
                        O13 - Gopher Prefix:
                        O16 - DPF: {04CB5B64-5915-4629-B869-8945CEBADD21} (Module de délivrance de certificat MINEFI) - https://static.impots.gouv.fr/abos/static/securite/certdgi1.cab
                        O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/VistaMSNPUpldfr-fr.cab
                        O16 - DPF: {88764F69-3831-4EC1-B40B-FF21D8381345} (AdVerifierADPCtrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerVistaADP-1.1.cab
                        O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
                        O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
                        O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
                        O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
                        O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\VAScanner\comHost.exe
                        O23 - Service: Windows Live Contrôle parental (fsssvc) - Unknown owner - C:\Program Files\Windows Live\Family Safety\fsssvc.exe (file missing)
                        O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                        O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
                        O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe
                        O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exe
                        O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
                        O23 - Service: lxct_device - - C:\Windows\system32\lxctcoms.exe
                        O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
                        O23 - Service: Ralink Registry Writer (RalinkRegistryWriter) - Ralink Technology, Corp. - C:\Program Files\RALINK\Common\RalinkRegistryWriter.exe
                        O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\COMMON~1\SYMANT~1\CCPD-LC\symlcsvc.exe
                        O23 - Service: Fujitsu Siemens Computers Diagnostic Testhandler (TestHandler) - Fujitsu Siemens Computers - C:\firststeps\OnlineDiagnostic\TestManager\TestHandler.exe
                        O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe
                        • 1
                        • 2
                        • 3