Rapport HijackThis

Utilisateur anonyme -  
Bonjour,

je pose un rapport hijacthis parce que mon pc delire un peut en ce moment.

merci d'avence

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:02:00, on 01/08/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.21073)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\WINDOWS\Explorer.EXE
C:\Documents and Settings\Administrateur\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe
C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Pando Networks\Media Booster\PMB.exe
C:\documents and settings\administrateur\local settings\application data\mqwoacw.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\netdde.exe
C:\WINDOWS\system32\clipsrv.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\BearShare Applications\BearShare\BearShare.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\60A4B5M0\HiJackThis[1].exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://y.lo.st
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: UrlHelper Class - {74322BF9-DF26-493f-B0DA-6D2FC5E6429E} - C:\Program Files\BearShare Applications\BearShare\BearShareIEHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll
O2 - BHO: EoBHO - {C7B76B90-3455-4AE6-A752-EAC4D19689E5} - C:\Program Files\EoRezo\EoAdv\EoRezoBHO.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O3 - Toolbar: BearShare MediaBar - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - C:\Program Files\BearShare Applications\BearShare MediaBar\BearShareMediaBar.dll
O4 - HKLM\..\Run: [SoftwareHelper] C:\Documents and Settings\Administrateur\Application Data\eoRezo\SoftwareUpdate\SoftwareUpdateHP.exe
O4 - HKLM\..\Run: [Gpl Log Sixth Intra] C:\Documents and Settings\All Users\Application Data\bolt grey gpl log\way boob.exe
O4 - HKCU\..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Pando Media Booster] "C:\Program Files\Pando Networks\Media Booster\PMB.exe
O4 - HKCU\..\Run: [mqwoacw] "c:\documents and settings\administrateur\local settings\application data\mqwoacw.exe" mqwoacw
O4 - HKCU\..\Run: [showdent] C:\DOCUME~1\ADMINI~1\APPLIC~1\FASTDO~1\ford once.exe
O4 - HKCU\..\RunOnce: [Shockwave Updater] C:\WINDOWS\system32\Adobe\Shockwave 11\SwHelper_1150596.exe -Update -1150596 -"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB6; .NET CLR 1.1.4322; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729; .NET CLR 2.0.50727)" -"http://www.ezupa.com/simwork/simwork.html"
O4 - HKUS\S-1-5-19\..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O14 - IERESET.INF: START_PAGE_URL=https://www.google.fr/?gws_rd=ssl
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/resources/MSNPUpld.cab
O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} (MUCatalogWebControl Class) - http://www.catalog.update.microsoft.com/ClientControl/en/x86/MuCatalogWebControl.cab?1243160015000
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {80B626D6-BC34-4BCF-B5A1-7149E4FD9CFA} (UnoCtrl Class) - http://zone.msn.com/bingame/zpagames/GAME_UNO1.cab60096.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/ZPAFramework.cab102118.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = chevalier
O17 - HKLM\Software\..\Telephony: DomainName = chevalier
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = chevalier
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = chevalier
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Google Update (gupdate1c9db15a95b9194) (gupdate1c9db15a95b9194) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)
O23 - Service: Services TCP/IP simplifiés (SimpTcp) - Unknown owner - C:\WINDOWS\system32\tcpsvcs.exe (file missing)

--
End of file - 9338 bytes
Configuration: Windows XP Internet Explorer 7.0

42 réponses

Résumé de la discussion

Problème rapporté : un PC Windows XP affiche des signes de comportement suspect et un rapport HijackThis est partagé pour identifier les éléments malveillants présents potentiels. Plusieurs outils et analyses proposés dans les réponses visent à nettoyer le système, notamment Lop S&D et Malwarebytes, avec suggestion de lancer des scans en mode sans échec et d'examiner les résultats. D'autres messages évoquent des rapports de sécurité plus approfondis et des éléments détectés dans le registre et les fichiers temporaires, tandis que l'échange montre des hésitations sur les outils à privilégier. En cas de suite, des détails sur les tâches planifiées et les entrées Run apparaissent, révélant une présence potentiellement persistante de programmes indésirables à surveiller.

Bobot (l’IA à votre service)
  1. E..T Contributeur
    Bonsoir,
    Peux tu envoyer un rapport hijack this et quand je peux je te réponds.
    A bientôt toto :-)
    @++
    2. E..T Contributeur
      Salut badawan76,
      Un ptit passage vite faite pour te dire que quelqu'un va prendre le relai pour finir ce qu'on a commencé ensemble ;)
      Entre le bébé le boulot et ma femme c'est compliqué de passer du temps sur CCM.
      Voili voilou, peut être à bientôt sur CCM.
      @++
      3. Utilisateur anonyme
        Logfile of Trend Micro HijackThis v2.0.2
        Scan saved at 00:46:37, on 16/08/2009
        Platform: Windows XP SP3 (WinNT 5.01.2600)
        MSIE: Internet Explorer v7.00 (7.00.6000.21073)
        Boot mode: Normal

        Running processes:
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\system32\spoolsv.exe
        C:\Program Files\Avira\AntiVir Desktop\sched.exe
        C:\WINDOWS\system32\netdde.exe
        C:\Program Files\Avira\AntiVir Desktop\avguard.exe
        C:\WINDOWS\system32\clipsrv.exe
        C:\WINDOWS\system32\inetsrv\inetinfo.exe
        C:\Program Files\Java\jre6\bin\jqs.exe
        C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
        C:\WINDOWS\System32\snmp.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\system32\wbem\wmiapsrv.exe
        C:\WINDOWS\system32\WgaTray.exe
        C:\WINDOWS\Explorer.EXE
        C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
        C:\Program Files\Logitech\QuickCam\Quickcam.exe
        C:\WINDOWS\taskmgr.exe
        C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe
        C:\WINDOWS\system32\ctfmon.exe
        C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
        C:\Program Files\DNA\btdna.exe
        C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
        C:\Program Files\Windows Live\Messenger\msnmsgr.exe
        C:\Program Files\Windows Live\Contacts\wlcomm.exe
        C:\Program Files\Internet Explorer\IEXPLORE.EXE
        C:\Program Files\Internet Explorer\IEXPLORE.EXE
        C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\GBI6OHNK\HiJackThis[1].exe

        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
        R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
        R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
        R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
        R3 - URLSearchHook: Eazel-FR Toolbar - {a8f9752d-e2b8-4e7a-86b5-499f4330e2fe} - C:\Program Files\Eazel-FR\tbEaze.dll
        O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
        O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
        O2 - BHO: UrlHelper Class - {74322BF9-DF26-493f-B0DA-6D2FC5E6429E} - C:\Program Files\BearShare Applications\BearShare\BearShareIEHelper.dll
        O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
        O2 - BHO: Eazel-FR Toolbar - {a8f9752d-e2b8-4e7a-86b5-499f4330e2fe} - C:\Program Files\Eazel-FR\tbEaze.dll
        O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
        O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll
        O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
        O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
        O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
        O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
        O3 - Toolbar: BearShare MediaBar - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - C:\Program Files\BearShare Applications\BearShare MediaBar\BearShareMediaBar.dll
        O3 - Toolbar: Eazel-FR Toolbar - {a8f9752d-e2b8-4e7a-86b5-499f4330e2fe} - C:\Program Files\Eazel-FR\tbEaze.dll
        O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
        O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
        O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
        O4 - HKLM\..\Run: [Windows Services] taskmgr.exe
        O4 - HKLM\..\RunOnce: [WIAWizardMenu] RUNDLL32.EXE C:\WINDOWS\system32\sti_ci.dll,WiaCreateWizardMenu
        O4 - HKCU\..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe
        O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
        O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
        O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
        O4 - HKCU\..\Run: [showdent] C:\DOCUME~1\ADMINI~1\APPLIC~1\FASTDO~1\ford once.exe
        O4 - HKUS\S-1-5-19\..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe (User 'SERVICE LOCAL')
        O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SERVICE LOCAL')
        O4 - HKUS\S-1-5-20\..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe (User 'SERVICE RÉSEAU')
        O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SERVICE RÉSEAU')
        O4 - HKUS\S-1-5-18\..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe (User 'SYSTEM')
        O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
        O4 - HKUS\.DEFAULT\..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe (User 'Default user')
        O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
        O4 - S-1-5-18 Startup: Logitech . Enregistrement du produit.lnk = C:\Program Files\Logitech\QuickCam\eReg.exe (User 'SYSTEM')
        O4 - .DEFAULT Startup: Logitech . Enregistrement du produit.lnk = C:\Program Files\Logitech\QuickCam\eReg.exe (User 'Default user')
        O4 - Startup: Logitech . Enregistrement du produit.lnk = C:\Program Files\Logitech\QuickCam\eReg.exe
        O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
        O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
        O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
        O14 - IERESET.INF: START_PAGE_URL=https://www.google.fr/?gws_rd=ssl
        O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/resources/MSNPUpld.cab
        O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} (MUCatalogWebControl Class) - http://www.catalog.update.microsoft.com/ClientControl/en/x86/MuCatalogWebControl.cab?1243160015000
        O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
        O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
        O16 - DPF: {80B626D6-BC34-4BCF-B5A1-7149E4FD9CFA} (UnoCtrl Class) - http://zone.msn.com/bingame/zpagames/GAME_UNO1.cab60096.cab
        O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/ZPAFramework.cab102118.cab
        O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
        O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = chevalier
        O17 - HKLM\Software\..\Telephony: DomainName = chevalier
        O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = chevalier
        O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = chevalier
        O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
        O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
        O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
        O23 - Service: Service Google Update (gupdate1c9db15a95b9194) (gupdate1c9db15a95b9194) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
        O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
        O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
        O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
        O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
        O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)
        O23 - Service: Services TCP/IP simplifiés (SimpTcp) - Unknown owner - C:\WINDOWS\system32\tcpsvcs.exe (file missing)
        1. Utilisateur anonyme
          Logfile of Trend Micro HijackThis v2.0.2
          Scan saved at 00:46:37, on 16/08/2009
          Platform: Windows XP SP3 (WinNT 5.01.2600)
          MSIE: Internet Explorer v7.00 (7.00.6000.21073)
          Boot mode: Normal

          Running processes:
          C:\WINDOWS\System32\smss.exe
          C:\WINDOWS\system32\winlogon.exe
          C:\WINDOWS\system32\services.exe
          C:\WINDOWS\system32\lsass.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\system32\spoolsv.exe
          C:\Program Files\Avira\AntiVir Desktop\sched.exe
          C:\WINDOWS\system32\netdde.exe
          C:\Program Files\Avira\AntiVir Desktop\avguard.exe
          C:\WINDOWS\system32\clipsrv.exe
          C:\WINDOWS\system32\inetsrv\inetinfo.exe
          C:\Program Files\Java\jre6\bin\jqs.exe
          C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
          C:\WINDOWS\System32\snmp.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\system32\wbem\wmiapsrv.exe
          C:\WINDOWS\system32\WgaTray.exe
          C:\WINDOWS\Explorer.EXE
          C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
          C:\Program Files\Logitech\QuickCam\Quickcam.exe
          C:\WINDOWS\taskmgr.exe
          C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe
          C:\WINDOWS\system32\ctfmon.exe
          C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
          C:\Program Files\DNA\btdna.exe
          C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
          C:\Program Files\Windows Live\Messenger\msnmsgr.exe
          C:\Program Files\Windows Live\Contacts\wlcomm.exe
          C:\Program Files\Internet Explorer\IEXPLORE.EXE
          C:\Program Files\Internet Explorer\IEXPLORE.EXE
          C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\GBI6OHNK\HiJackThis[1].exe

          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
          R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
          R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
          R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
          R3 - URLSearchHook: Eazel-FR Toolbar - {a8f9752d-e2b8-4e7a-86b5-499f4330e2fe} - C:\Program Files\Eazel-FR\tbEaze.dll
          O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
          O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
          O2 - BHO: UrlHelper Class - {74322BF9-DF26-493f-B0DA-6D2FC5E6429E} - C:\Program Files\BearShare Applications\BearShare\BearShareIEHelper.dll
          O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
          O2 - BHO: Eazel-FR Toolbar - {a8f9752d-e2b8-4e7a-86b5-499f4330e2fe} - C:\Program Files\Eazel-FR\tbEaze.dll
          O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
          O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll
          O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
          O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
          O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
          O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
          O3 - Toolbar: BearShare MediaBar - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - C:\Program Files\BearShare Applications\BearShare MediaBar\BearShareMediaBar.dll
          O3 - Toolbar: Eazel-FR Toolbar - {a8f9752d-e2b8-4e7a-86b5-499f4330e2fe} - C:\Program Files\Eazel-FR\tbEaze.dll
          O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
          O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
          O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
          O4 - HKLM\..\Run: [Windows Services] taskmgr.exe
          O4 - HKLM\..\RunOnce: [WIAWizardMenu] RUNDLL32.EXE C:\WINDOWS\system32\sti_ci.dll,WiaCreateWizardMenu
          O4 - HKCU\..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe
          O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
          O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
          O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
          O4 - HKCU\..\Run: [showdent] C:\DOCUME~1\ADMINI~1\APPLIC~1\FASTDO~1\ford once.exe
          O4 - HKUS\S-1-5-19\..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe (User 'SERVICE LOCAL')
          O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SERVICE LOCAL')
          O4 - HKUS\S-1-5-20\..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe (User 'SERVICE RÉSEAU')
          O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SERVICE RÉSEAU')
          O4 - HKUS\S-1-5-18\..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe (User 'SYSTEM')
          O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
          O4 - HKUS\.DEFAULT\..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe (User 'Default user')
          O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
          O4 - S-1-5-18 Startup: Logitech . Enregistrement du produit.lnk = C:\Program Files\Logitech\QuickCam\eReg.exe (User 'SYSTEM')
          O4 - .DEFAULT Startup: Logitech . Enregistrement du produit.lnk = C:\Program Files\Logitech\QuickCam\eReg.exe (User 'Default user')
          O4 - Startup: Logitech . Enregistrement du produit.lnk = C:\Program Files\Logitech\QuickCam\eReg.exe
          O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
          O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
          O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
          O14 - IERESET.INF: START_PAGE_URL=https://www.google.fr/?gws_rd=ssl
          O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/resources/MSNPUpld.cab
          O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} (MUCatalogWebControl Class) - http://www.catalog.update.microsoft.com/ClientControl/en/x86/MuCatalogWebControl.cab?1243160015000
          O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
          O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
          O16 - DPF: {80B626D6-BC34-4BCF-B5A1-7149E4FD9CFA} (UnoCtrl Class) - http://zone.msn.com/bingame/zpagames/GAME_UNO1.cab60096.cab
          O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/ZPAFramework.cab102118.cab
          O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
          O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = chevalier
          O17 - HKLM\Software\..\Telephony: DomainName = chevalier
          O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = chevalier
          O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = chevalier
          O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
          O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
          O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
          O23 - Service: Service Google Update (gupdate1c9db15a95b9194) (gupdate1c9db15a95b9194) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
          O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
          O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
          O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
          O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
          O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)
          O23 - Service: Services TCP/IP simplifiés (SimpTcp) - Unknown owner - C:\WINDOWS\system32\tcpsvcs.exe (file missing)
          1. Utilisateur anonyme
            Logfile of Trend Micro HijackThis v2.0.2
            Scan saved at 00:46:37, on 16/08/2009
            Platform: Windows XP SP3 (WinNT 5.01.2600)
            MSIE: Internet Explorer v7.00 (7.00.6000.21073)
            Boot mode: Normal

            Running processes:
            C:\WINDOWS\System32\smss.exe
            C:\WINDOWS\system32\winlogon.exe
            C:\WINDOWS\system32\services.exe
            C:\WINDOWS\system32\lsass.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\System32\svchost.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\system32\spoolsv.exe
            C:\Program Files\Avira\AntiVir Desktop\sched.exe
            C:\WINDOWS\system32\netdde.exe
            C:\Program Files\Avira\AntiVir Desktop\avguard.exe
            C:\WINDOWS\system32\clipsrv.exe
            C:\WINDOWS\system32\inetsrv\inetinfo.exe
            C:\Program Files\Java\jre6\bin\jqs.exe
            C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
            C:\WINDOWS\System32\snmp.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\system32\wbem\wmiapsrv.exe
            C:\WINDOWS\system32\WgaTray.exe
            C:\WINDOWS\Explorer.EXE
            C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
            C:\Program Files\Logitech\QuickCam\Quickcam.exe
            C:\WINDOWS\taskmgr.exe
            C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe
            C:\WINDOWS\system32\ctfmon.exe
            C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
            C:\Program Files\DNA\btdna.exe
            C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
            C:\Program Files\Windows Live\Messenger\msnmsgr.exe
            C:\Program Files\Windows Live\Contacts\wlcomm.exe
            C:\Program Files\Internet Explorer\IEXPLORE.EXE
            C:\Program Files\Internet Explorer\IEXPLORE.EXE
            C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\GBI6OHNK\HiJackThis[1].exe

            R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
            R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
            R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
            R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
            R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
            R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
            R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
            R3 - URLSearchHook: Eazel-FR Toolbar - {a8f9752d-e2b8-4e7a-86b5-499f4330e2fe} - C:\Program Files\Eazel-FR\tbEaze.dll
            O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
            O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
            O2 - BHO: UrlHelper Class - {74322BF9-DF26-493f-B0DA-6D2FC5E6429E} - C:\Program Files\BearShare Applications\BearShare\BearShareIEHelper.dll
            O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
            O2 - BHO: Eazel-FR Toolbar - {a8f9752d-e2b8-4e7a-86b5-499f4330e2fe} - C:\Program Files\Eazel-FR\tbEaze.dll
            O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
            O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll
            O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
            O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
            O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
            O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
            O3 - Toolbar: BearShare MediaBar - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - C:\Program Files\BearShare Applications\BearShare MediaBar\BearShareMediaBar.dll
            O3 - Toolbar: Eazel-FR Toolbar - {a8f9752d-e2b8-4e7a-86b5-499f4330e2fe} - C:\Program Files\Eazel-FR\tbEaze.dll
            O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
            O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
            O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
            O4 - HKLM\..\Run: [Windows Services] taskmgr.exe
            O4 - HKLM\..\RunOnce: [WIAWizardMenu] RUNDLL32.EXE C:\WINDOWS\system32\sti_ci.dll,WiaCreateWizardMenu
            O4 - HKCU\..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe
            O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
            O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
            O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
            O4 - HKCU\..\Run: [showdent] C:\DOCUME~1\ADMINI~1\APPLIC~1\FASTDO~1\ford once.exe
            O4 - HKUS\S-1-5-19\..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe (User 'SERVICE LOCAL')
            O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SERVICE LOCAL')
            O4 - HKUS\S-1-5-20\..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe (User 'SERVICE RÉSEAU')
            O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SERVICE RÉSEAU')
            O4 - HKUS\S-1-5-18\..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe (User 'SYSTEM')
            O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
            O4 - HKUS\.DEFAULT\..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe (User 'Default user')
            O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
            O4 - S-1-5-18 Startup: Logitech . Enregistrement du produit.lnk = C:\Program Files\Logitech\QuickCam\eReg.exe (User 'SYSTEM')
            O4 - .DEFAULT Startup: Logitech . Enregistrement du produit.lnk = C:\Program Files\Logitech\QuickCam\eReg.exe (User 'Default user')
            O4 - Startup: Logitech . Enregistrement du produit.lnk = C:\Program Files\Logitech\QuickCam\eReg.exe
            O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
            O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
            O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
            O14 - IERESET.INF: START_PAGE_URL=https://www.google.fr/?gws_rd=ssl
            O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/resources/MSNPUpld.cab
            O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} (MUCatalogWebControl Class) - http://www.catalog.update.microsoft.com/ClientControl/en/x86/MuCatalogWebControl.cab?1243160015000
            O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
            O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
            O16 - DPF: {80B626D6-BC34-4BCF-B5A1-7149E4FD9CFA} (UnoCtrl Class) - http://zone.msn.com/bingame/zpagames/GAME_UNO1.cab60096.cab
            O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/ZPAFramework.cab102118.cab
            O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
            O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = chevalier
            O17 - HKLM\Software\..\Telephony: DomainName = chevalier
            O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = chevalier
            O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = chevalier
            O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
            O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
            O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
            O23 - Service: Service Google Update (gupdate1c9db15a95b9194) (gupdate1c9db15a95b9194) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
            O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
            O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
            O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
            O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
            O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)
            O23 - Service: Services TCP/IP simplifiés (SimpTcp) - Unknown owner - C:\WINDOWS\system32\tcpsvcs.exe (file missing)
            1. E..T Contributeur
              Hello ;-)
              A mon avis tu as oublié le rapport hijack this ? Non ?
              Bon tiens moi au courant.
              @++
              1. Utilisateur anonyme
                oui j'ai supprimer comme tu ma dis mais je les enregistré des que j'ai vue licone.

                je t'envoi un rapport hijacthis
                1. E..T Contributeur
                  Salut,
                  Tu n'as rien supprimer à la fin du scan.
                  Va tout supprimer.
                  Puis envoi un rapport hijack this, et dis moi comment va le pc.
                  ++
                  1. Utilisateur anonyme
                    voici Mr =)

                    Malwarebytes' Anti-Malware 1.40
                    Version de la base de données: 2593
                    Windows 5.1.2600 Service Pack 3 (Safe Mode)

                    10/08/2009 23:11:01
                    mbam-log-2009-08-10 (23-10-54).txt

                    Type de recherche: Examen complet (A:\|C:\|D:\|)
                    Eléments examinés: 117282
                    Temps écoulé: 22 minute(s), 20 second(s)

                    Processus mémoire infecté(s): 0
                    Module(s) mémoire infecté(s): 0
                    Clé(s) du Registre infectée(s): 3
                    Valeur(s) du Registre infectée(s): 3
                    Elément(s) de données du Registre infecté(s): 2
                    Dossier(s) infecté(s): 0
                    Fichier(s) infecté(s): 13

                    Processus mémoire infecté(s):
                    (Aucun élément nuisible détecté)

                    Module(s) mémoire infecté(s):
                    (Aucun élément nuisible détecté)

                    Clé(s) du Registre infectée(s):
                    HKEY_CURRENT_USER\SOFTWARE\fcn (Rogue.Residue) -> No action taken.
                    HKEY_LOCAL_MACHINE\SOFTWARE\EoRezo (Rogue.Eorezo) -> No action taken.
                    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Live-Player (Malware.Trace) -> No action taken.

                    Valeur(s) du Registre infectée(s):
                    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\qcufrcnq (Trojan.Agent.H) -> No action taken.
                    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\softwarehelper (Adware.EoRezo) -> No action taken.
                    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Windows Services (Backdoor.Bot) -> No action taken.

                    Elément(s) de données du Registre infecté(s):
                    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.
                    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSMHelp (Hijack.Help) -> Bad: (1) Good: (0) -> No action taken.

                    Dossier(s) infecté(s):
                    (Aucun élément nuisible détecté)

                    Fichier(s) infecté(s):
                    c:\documents and settings\administrateur\local settings\application data\qcufrcnq.exe (Trojan.Agent.H) -> No action taken.
                    C:\Documents and Settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\SoftwareUpdateHP.exe (Adware.EoRezo) -> No action taken.
                    C:\Documents and Settings\Administrateur\Application Data\EoRezo\SoftwareUpdate\SoftwareUpdate.exe (Adware.EoRezo) -> No action taken.
                    C:\System Volume Information\_restore{58883CB0-2EFC-4113-9DE6-B50A89B79D30}\RP190\A0026929.dll (Malware.Packer.T) -> No action taken.
                    C:\System Volume Information\_restore{58883CB0-2EFC-4113-9DE6-B50A89B79D30}\RP195\A0028106.exe (Adware.EoRezo) -> No action taken.
                    C:\System Volume Information\_restore{58883CB0-2EFC-4113-9DE6-B50A89B79D30}\RP195\A0028126.dll (Adware.EoRezo) -> No action taken.
                    C:\System Volume Information\_restore{58883CB0-2EFC-4113-9DE6-B50A89B79D30}\RP195\A0028133.dll (Adware.EoRezo) -> No action taken.
                    C:\System Volume Information\_restore{58883CB0-2EFC-4113-9DE6-B50A89B79D30}\RP245\A0039711.dll (Malware.Packer.T) -> No action taken.
                    C:\Documents and Settings\Administrateur\Local Settings\Application Data\qcufrcnq_nav.dat (Adware.NaviPromo) -> No action taken.
                    C:\Documents and Settings\Administrateur\Local Settings\Application Data\qcufrcnq_navps.dat (Adware.NaviPromo) -> No action taken.
                    C:\Documents and Settings\Administrateur\results.txt (Malware.Trace) -> No action taken.
                    C:\WINDOWS\taskmgr.exe (Worm.Saphira) -> No action taken.
                    C:\WINDOWS\system32\taskmgr.exe (Backdoor.Bot) -> No action taken.
                    1. E..T Contributeur
                      Salut,
                      Bon ton rapport est plus propre ;-)
                      Comment va le pc ?

                      Fais ce qui suit :
                      //!!\\ Le scan peut durer longtemps //!!\\

                      * Télécharge MalwareByte's Anti-Malware (by RubbeR DuckY) :
                      *https://www.commentcamarche.net/telecharger/securite/14361-malwarebytes-anti-malware/
                      * Installe le programme sur le bureau :
                      S'il te manque "COMCTL32.OCX" lors de l'installation, alors télécharges le ici : https://www.malekal.com/tutorial-aboutbuster/

                      * Fais les mises à jour (clic sur Mises à jour puis Recherche de mises à jour)

                      * Démarre en mode sans échec
                      Comment faire >> https://www.micro-astuce.com/depannage/demarrer-mode-sans-echec.php
                      Redémarres l’ordinateur
                      Dès le chargement du BIOS, commences à appuyer sur la touche F8 de ton clavier,i jusqu'au ou le menu des options avancées de Windows apparait.
                      Sélectionne "Mode sans échec" dans le menu puis appuyez sur Entrée.

                      * Lance MalwareByte's Anti-Malware, clique sur Exécuter un examen complet puis Rechercher et sélectionnez tous tes disques durs

                      * // !! \\ Une fois le scan terminé, Si des éléments on été trouvés > cliques sur supprimer la sélection. (si un message te demande de redémarrer le PC, accepte.)

                      * Un rapport sera généré, poste le ici.

                      @++
                      1. Utilisateur anonyme
                        et le rapport hijacthis

                        Logfile of Trend Micro HijackThis v2.0.2
                        Scan saved at 14:20:15, on 07/08/2009
                        Platform: Windows XP SP3 (WinNT 5.01.2600)
                        MSIE: Internet Explorer v7.00 (7.00.6000.21073)
                        Boot mode: Normal

                        Running processes:
                        C:\WINDOWS\System32\smss.exe
                        C:\WINDOWS\system32\winlogon.exe
                        C:\WINDOWS\system32\services.exe
                        C:\WINDOWS\system32\lsass.exe
                        C:\WINDOWS\system32\svchost.exe
                        C:\WINDOWS\System32\svchost.exe
                        C:\WINDOWS\system32\svchost.exe
                        C:\WINDOWS\system32\spoolsv.exe
                        C:\Program Files\Avira\AntiVir Desktop\sched.exe
                        C:\WINDOWS\system32\netdde.exe
                        C:\Program Files\Avira\AntiVir Desktop\avguard.exe
                        C:\WINDOWS\system32\clipsrv.exe
                        C:\WINDOWS\system32\inetsrv\inetinfo.exe
                        C:\Program Files\Java\jre6\bin\jqs.exe
                        C:\WINDOWS\System32\snmp.exe
                        C:\WINDOWS\system32\svchost.exe
                        C:\WINDOWS\system32\wbem\wmiapsrv.exe
                        C:\WINDOWS\Explorer.EXE
                        C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
                        C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe
                        C:\WINDOWS\system32\ctfmon.exe
                        C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                        C:\Program Files\Pando Networks\Media Booster\PMB.exe
                        C:\Program Files\DNA\btdna.exe
                        C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                        C:\Program Files\Windows Live\Contacts\wlcomm.exe
                        C:\WINDOWS\system32\wuauclt.exe
                        C:\Program Files\Internet Explorer\IEXPLORE.EXE
                        C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

                        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
                        R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
                        R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
                        R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
                        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                        R3 - URLSearchHook: Eazel-FR Toolbar - {a8f9752d-e2b8-4e7a-86b5-499f4330e2fe} - C:\Program Files\Eazel-FR\tbEaze.dll
                        O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
                        O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
                        O2 - BHO: UrlHelper Class - {74322BF9-DF26-493f-B0DA-6D2FC5E6429E} - C:\Program Files\BearShare Applications\BearShare\BearShareIEHelper.dll
                        O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                        O2 - BHO: Eazel-FR Toolbar - {a8f9752d-e2b8-4e7a-86b5-499f4330e2fe} - C:\Program Files\Eazel-FR\tbEaze.dll
                        O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
                        O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll
                        O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
                        O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
                        O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
                        O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
                        O3 - Toolbar: BearShare MediaBar - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - C:\Program Files\BearShare Applications\BearShare MediaBar\BearShareMediaBar.dll
                        O3 - Toolbar: Eazel-FR Toolbar - {a8f9752d-e2b8-4e7a-86b5-499f4330e2fe} - C:\Program Files\Eazel-FR\tbEaze.dll
                        O4 - HKLM\..\Run: [Windows Services] taskmgr.exe
                        O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
                        O4 - HKCU\..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe
                        O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                        O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                        O4 - HKCU\..\Run: [Pando Media Booster] "C:\Program Files\Pando Networks\Media Booster\PMB.exe
                        O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
                        O4 - HKCU\..\Run: [showdent] C:\DOCUME~1\ADMINI~1\APPLIC~1\FASTDO~1\ford once.exe
                        O4 - HKUS\S-1-5-19\..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe (User 'SERVICE LOCAL')
                        O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SERVICE LOCAL')
                        O4 - HKUS\S-1-5-20\..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe (User 'SERVICE RÉSEAU')
                        O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SERVICE RÉSEAU')
                        O4 - HKUS\S-1-5-18\..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe (User 'SYSTEM')
                        O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
                        O4 - HKUS\.DEFAULT\..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe (User 'Default user')
                        O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
                        O4 - Startup: Anti-Pub.lnk = C:\Program Files\Antipub\antipub.exe
                        O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                        O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                        O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
                        O14 - IERESET.INF: START_PAGE_URL=https://www.google.fr/?gws_rd=ssl
                        O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/resources/MSNPUpld.cab
                        O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} (MUCatalogWebControl Class) - http://www.catalog.update.microsoft.com/ClientControl/en/x86/MuCatalogWebControl.cab?1243160015000
                        O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
                        O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
                        O16 - DPF: {80B626D6-BC34-4BCF-B5A1-7149E4FD9CFA} (UnoCtrl Class) - http://zone.msn.com/bingame/zpagames/GAME_UNO1.cab60096.cab
                        O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/ZPAFramework.cab102118.cab
                        O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
                        O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = chevalier
                        O17 - HKLM\Software\..\Telephony: DomainName = chevalier
                        O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = chevalier
                        O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = chevalier
                        O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
                        O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
                        O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
                        O23 - Service: Service Google Update (gupdate1c9db15a95b9194) (gupdate1c9db15a95b9194) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
                        O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                        O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
                        O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
                        O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)
                        O23 - Service: Services TCP/IP simplifiés (SimpTcp) - Unknown owner - C:\WINDOWS\system32\tcpsvcs.exe (file missing)
                        1. Utilisateur anonyme
                          --------------------\\ Lop S&D 4.2.5-0 XP/Vista

                          Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
                          X86-based PC ( Multiprocessor Free : Processeur Intel Pentium III Xeon )
                          BIOS : Default System BIOS
                          USER : Administrateur ( Administrator )
                          BOOT : Normal boot
                          Antivirus : AntiVir Desktop 9.0.1.30 (Not Activated)
                          A:\ (USB)
                          C:\ (Local Disk) - NTFS - Total:298 Go (Free:244 Go)
                          D:\ (CD or DVD)

                          "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
                          Option : [2] ( 07/08/2009|14:17 )

                          \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION

                          Supprime! - C:\DOCUME~1\ADMINI~1\Cookies\administrateur@advertising[2].txt
                          -
                          [ Fichier Hosts ] .. Restaure!

                          \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\

                          --------------------\\ Listing des dossiers dans APPLIC~1

                          [18/05/2009|13:29] C:\DOCUME~1\ADMINI~1\APPLIC~1\Adobe
                          [17/05/2009|20:42] C:\DOCUME~1\ADMINI~1\APPLIC~1\Auslogics
                          [30/05/2009|10:54] C:\DOCUME~1\ADMINI~1\APPLIC~1\AVS4YOU
                          [22/05/2009|22:23] C:\DOCUME~1\ADMINI~1\APPLIC~1\CyberLink
                          [22/05/2009|22:08] C:\DOCUME~1\ADMINI~1\APPLIC~1\DivX
                          [08/07/2009|18:23] C:\DOCUME~1\ADMINI~1\APPLIC~1\D-Jix Media
                          [07/08/2009|14:11] C:\DOCUME~1\ADMINI~1\APPLIC~1\DNA
                          [02/08/2009|22:50] C:\DOCUME~1\ADMINI~1\APPLIC~1\Fast download body
                          [22/05/2009|22:21] C:\DOCUME~1\ADMINI~1\APPLIC~1\Google
                          [16/05/2009|16:18] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
                          [16/05/2009|19:33] C:\DOCUME~1\ADMINI~1\APPLIC~1\Lavasoft
                          [17/05/2009|00:59] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia
                          [04/08/2009|15:44] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
                          [17/05/2009|22:04] C:\DOCUME~1\ADMINI~1\APPLIC~1\Mozilla
                          [22/05/2009|22:09] C:\DOCUME~1\ADMINI~1\APPLIC~1\Nero
                          [01/08/2009|02:12] C:\DOCUME~1\ADMINI~1\APPLIC~1\OpenOffice.org2
                          [17/05/2009|18:53] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sun
                          [17/05/2009|00:47] C:\DOCUME~1\ADMINI~1\APPLIC~1\Talkback
                          [17/05/2009|12:56] C:\DOCUME~1\ADMINI~1\APPLIC~1\Thunderbird
                          [17/05/2009|18:53] C:\DOCUME~1\ADMINI~1\APPLIC~1\WinRAR

                          [18/05/2009|16:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
                          [17/05/2009|18:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
                          [06/08/2009|15:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
                          [30/05/2009|10:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU
                          [03/08/2009|16:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\bolt grey gpl log
                          [22/05/2009|22:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
                          [22/05/2009|22:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
                          [01/08/2009|11:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
                          [17/06/2009|16:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
                          [16/05/2009|16:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
                          [04/08/2009|21:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NexonEU
                          [14/07/2009|00:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NexonUS
                          [13/07/2009|23:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PMB Files
                          [22/05/2009|22:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Temp
                          [17/05/2009|19:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage

                          [05/05/2008|23:24] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

                          [16/05/2009|16:17] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
                          [22/05/2009|22:23] C:\DOCUME~1\LOCALS~1\APPLIC~1\PeerNetworking

                          [16/05/2009|16:17] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

                          --------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

                          [07/08/2009 13:41][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
                          [07/08/2009 12:10][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
                          [05/08/2009 21:16][--a------] C:\WINDOWS\tasks\Norton Security Scan for Administrateur.job
                          [07/08/2009 12:10][--ah-----] C:\WINDOWS\tasks\SA.DAT
                          [24/08/2008 01:53][-r-h-----] C:\WINDOWS\tasks\desktop.ini

                          --------------------\\ Listing des dossiers dans C:\Program Files

                          [02/06/2008|17:32] C:\Program Files\Ad-Aware
                          [18/05/2009|16:35] C:\Program Files\Adobe
                          [06/08/2009|00:25] C:\Program Files\Ad-remover
                          [17/05/2009|01:01] C:\Program Files\Alwil Software
                          [04/08/2009|19:28] C:\Program Files\America's Army Server Manager
                          [05/05/2008|23:09] C:\Program Files\AusLogics Disk Defrag
                          [05/05/2008|23:09] C:\Program Files\AusLogics Registry Defrag
                          [12/05/2008|03:36] C:\Program Files\AusLogics System Information
                          [06/08/2009|15:28] C:\Program Files\Avira
                          [30/05/2009|10:57] C:\Program Files\AVS4YOU
                          [06/07/2009|20:40] C:\Program Files\BearShare Applications
                          [05/05/2008|23:16] C:\Program Files\CCleaner
                          [04/08/2009|17:47] C:\Program Files\Circle Developeent
                          [07/06/2009|11:38] C:\Program Files\Common Files
                          [16/05/2009|16:06] C:\Program Files\ComPlus Applications
                          [02/08/2009|18:46] C:\Program Files\Conduit
                          [24/08/2008|14:22] C:\Program Files\Cpu-z
                          [21/06/2009|10:55] C:\Program Files\DivX
                          [08/07/2009|18:00] C:\Program Files\D-Jix
                          [07/08/2009|12:10] C:\Program Files\DNA
                          [06/04/2008|17:01] C:\Program Files\EasyRecovery
                          [02/08/2009|18:46] C:\Program Files\Eazel-FR
                          [05/06/2009|10:21] C:\Program Files\Everest
                          [31/07/2009|22:40] C:\Program Files\Fast download body
                          [06/06/2009|14:23] C:\Program Files\Fichiers communs
                          [05/04/2008|22:10] C:\Program Files\Foxit Reader
                          [16/05/2009|19:08] C:\Program Files\Free
                          [03/08/2009|22:12] C:\Program Files\GamersFirst
                          [22/05/2009|22:21] C:\Program Files\Google
                          [07/06/2009|11:27] C:\Program Files\gPotato.eu
                          [25/07/2009|19:58] C:\Program Files\Hacker Evolution
                          [30/05/2009|11:00] C:\Program Files\inKline Global
                          [03/08/2009|18:56] C:\Program Files\InstallShield Installation Information
                          [16/05/2009|17:10] C:\Program Files\Intel
                          [30/07/2009|01:26] C:\Program Files\Internet Explorer
                          [30/05/2009|11:48] C:\Program Files\Jasc Software Inc
                          [04/06/2009|13:08] C:\Program Files\Java
                          [31/07/2009|22:40] C:\Program Files\Messenger Plus! Live
                          [30/06/2009|14:07] C:\Program Files\Micro Application
                          [17/05/2009|19:52] C:\Program Files\Microsoft
                          [17/05/2009|19:52] C:\Program Files\Microsoft SQL Server Compact Edition
                          [17/05/2009|22:04] C:\Program Files\Mozilla Firefox
                          [17/05/2009|22:04] C:\Program Files\Mozilla Thunderbird
                          [17/05/2009|19:37] C:\Program Files\MSBuild
                          [31/05/2009|10:58] C:\Program Files\MSI
                          [06/08/2009|13:00] C:\Program Files\Navilog1
                          [16/05/2009|16:12] C:\Program Files\Nero
                          [17/05/2009|22:01] C:\Program Files\NetMeter
                          [05/08/2009|18:00] C:\Program Files\Norton Security Scan
                          [12/07/2009|16:24] C:\Program Files\NovaLogic
                          [05/05/2008|23:06] C:\Program Files\Occtpt
                          [12/07/2009|18:01] C:\Program Files\OpenAL
                          [19/05/2009|13:02] C:\Program Files\OpenOffice.org 2.0
                          [16/05/2009|16:07] C:\Program Files\Outlook Express
                          [02/06/2008|17:24] C:\Program Files\Paint.NET
                          [13/07/2009|23:39] C:\Program Files\Pando Networks
                          [04/08/2009|15:44] C:\Program Files\Pcsx2
                          [22/06/2009|10:38] C:\Program Files\PhotoFiltre Studio
                          [30/05/2009|11:04] C:\Program Files\QUAD Utilities
                          [17/05/2009|18:52] C:\Program Files\Realtek
                          [05/05/2008|23:13] C:\Program Files\Recuva
                          [17/05/2009|19:37] C:\Program Files\Reference Assemblies
                          [07/06/2009|10:48] C:\Program Files\Sony Ericsson
                          [02/08/2009|14:15] C:\Program Files\Subagames
                          [16/05/2009|16:11] C:\Program Files\TaskSwitchXP
                          [16/05/2009|16:18] C:\Program Files\Uninstall Information
                          [17/05/2009|19:53] C:\Program Files\Windows Live
                          [01/08/2009|19:42] C:\Program Files\Windows Live Safety Center
                          [17/05/2009|19:51] C:\Program Files\Windows Live SkyDrive
                          [16/05/2009|16:05] C:\Program Files\Windows Media Connect 2
                          [08/06/2009|11:15] C:\Program Files\Windows Media Player
                          [16/05/2009|16:07] C:\Program Files\WindowsUpdate
                          [16/05/2009|16:12] C:\Program Files\WinRAR
                          [02/08/2009|00:20] C:\Program Files\Wolfenstein - Enemy Territory

                          --------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

                          [18/05/2009|16:35] C:\Program Files\Fichiers communs\Adobe
                          [30/05/2009|10:57] C:\Program Files\Fichiers communs\AVSMedia
                          [22/05/2009|22:21] C:\Program Files\Fichiers communs\CyberLink
                          [22/05/2009|21:48] C:\Program Files\Fichiers communs\DivX Shared
                          [17/05/2009|21:08] C:\Program Files\Fichiers communs\InstallShield
                          [17/05/2009|11:44] C:\Program Files\Fichiers communs\Java
                          [30/06/2009|14:11] C:\Program Files\Fichiers communs\Microsoft Shared
                          [16/05/2009|16:07] C:\Program Files\Fichiers communs\MSSoap
                          [16/05/2009|16:12] C:\Program Files\Fichiers communs\Nero
                          [16/05/2009|18:02] C:\Program Files\Fichiers communs\ODBC
                          [16/05/2009|16:07] C:\Program Files\Fichiers communs\Services
                          [05/08/2009|18:01] C:\Program Files\Fichiers communs\Symantec Shared
                          [16/05/2009|16:07] C:\Program Files\Fichiers communs\System
                          [17/05/2009|19:47] C:\Program Files\Fichiers communs\Windows Live

                          --------------------\\ Process

                          ( 38 Processes )

                          ... OK !

                          --------------------\\ Recherche avec S_Lop

                          Aucun fichier / dossier Lop trouvé !

                          --------------------\\ Recherche de Fichiers / Dossiers Lop

                          C:\DOCUME~1\ADMINI~1\Cookies\administrateur@advertstream[2].txt

                          --------------------\\ Verification du Registre

                          ..... OK !

                          --------------------\\ Verification du fichier Hosts

                          Fichier Hosts PROPRE

                          --------------------\\ Recherche de fichiers avec Catchme

                          catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
                          Rootkit scan 2009-08-07 14:17:30
                          Windows 5.1.2600 Service Pack 3 NTFS
                          scanning hidden processes ...
                          scanning hidden files ...
                          scan completed successfully
                          hidden processes: 0
                          hidden files: 0

                          --------------------\\ Recherche d'autres infections

                          Aucune autre infection trouvée !

                          [F:77][D:4]-> C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp
                          [F:128][D:0]-> C:\DOCUME~1\ADMINI~1\Cookies
                          [F:3398][D:8]-> C:\DOCUME~1\ADMINI~1\LOCALS~1\TEMPOR~1\content.IE5

                          1 - "C:\Lop SD\LopR_1.txt" - 07/08/2009| 1:34 - Option : [1]
                          2 - "C:\Lop SD\LopR_2.txt" - 07/08/2009|14:18 - Option : [2]

                          --------------------\\ Fin du rapport a 14:18:02
                          1. E..T Contributeur
                            Salut,

                            Refais la même chose mais la tu choisis le choix 2
                            Laisse travailler le pc
                            Une fois le nettoyage fini ,une recherche sera relancée et un rapport
                            s'ouvrira automatiquement dans le Bloc-Notes.
                            Copies-colles le contenu de ce rapport sur le forum.

                            Puis met un nouveau rapport hijack this.
                            @+
                            1. Utilisateur anonyme
                              hey enfaite j'ai du mal a dormir. ^pourquoi me faire passer de logiciel en logiciel alors qu'il fon la meme chose ?
                              1. Utilisateur anonyme
                                --------------------\\ Lop S&D 4.2.5-0 XP/Vista

                                Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
                                X86-based PC ( Multiprocessor Free : Processeur Intel Pentium III Xeon )
                                BIOS : Default System BIOS
                                USER : Administrateur ( Administrator )
                                BOOT : Normal boot
                                Antivirus : AntiVir Desktop 9.0.1.30 (Not Activated)
                                A:\ (USB)
                                C:\ (Local Disk) - NTFS - Total:298 Go (Free:244 Go)
                                D:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)

                                "C:\Lop SD" ( MAJ : 19-12-2008|23:40 )
                                Option : [1] ( 07/08/2009| 1:33 )

                                --------------------\\ Listing des dossiers dans APPLIC~1

                                [18/05/2009|13:29] C:\DOCUME~1\ADMINI~1\APPLIC~1\Adobe
                                [17/05/2009|20:42] C:\DOCUME~1\ADMINI~1\APPLIC~1\Auslogics
                                [30/05/2009|10:54] C:\DOCUME~1\ADMINI~1\APPLIC~1\AVS4YOU
                                [22/05/2009|22:23] C:\DOCUME~1\ADMINI~1\APPLIC~1\CyberLink
                                [22/05/2009|22:08] C:\DOCUME~1\ADMINI~1\APPLIC~1\DivX
                                [08/07/2009|18:23] C:\DOCUME~1\ADMINI~1\APPLIC~1\D-Jix Media
                                [07/08/2009|01:32] C:\DOCUME~1\ADMINI~1\APPLIC~1\DNA
                                [02/08/2009|22:50] C:\DOCUME~1\ADMINI~1\APPLIC~1\Fast download body
                                [22/05/2009|22:21] C:\DOCUME~1\ADMINI~1\APPLIC~1\Google
                                [16/05/2009|16:18] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
                                [16/05/2009|19:33] C:\DOCUME~1\ADMINI~1\APPLIC~1\Lavasoft
                                [17/05/2009|00:59] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia
                                [04/08/2009|15:44] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft
                                [17/05/2009|22:04] C:\DOCUME~1\ADMINI~1\APPLIC~1\Mozilla
                                [22/05/2009|22:09] C:\DOCUME~1\ADMINI~1\APPLIC~1\Nero
                                [01/08/2009|02:12] C:\DOCUME~1\ADMINI~1\APPLIC~1\OpenOffice.org2
                                [17/05/2009|18:53] C:\DOCUME~1\ADMINI~1\APPLIC~1\Sun
                                [17/05/2009|00:47] C:\DOCUME~1\ADMINI~1\APPLIC~1\Talkback
                                [17/05/2009|12:56] C:\DOCUME~1\ADMINI~1\APPLIC~1\Thunderbird
                                [17/05/2009|18:53] C:\DOCUME~1\ADMINI~1\APPLIC~1\WinRAR

                                [18/05/2009|16:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
                                [17/05/2009|18:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
                                [06/08/2009|15:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Avira
                                [30/05/2009|10:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\AVS4YOU
                                [03/08/2009|16:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\bolt grey gpl log
                                [22/05/2009|22:23] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
                                [22/05/2009|22:21] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
                                [01/08/2009|11:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Messenger Plus!
                                [17/06/2009|16:51] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
                                [16/05/2009|16:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Nero
                                [04/08/2009|21:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NexonEU
                                [14/07/2009|00:06] C:\DOCUME~1\ALLUSE~1\APPLIC~1\NexonUS
                                [13/07/2009|23:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\PMB Files
                                [22/05/2009|22:19] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Temp
                                [17/05/2009|19:09] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage

                                [05/05/2008|23:24] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

                                [16/05/2009|16:17] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft
                                [22/05/2009|22:23] C:\DOCUME~1\LOCALS~1\APPLIC~1\PeerNetworking

                                [16/05/2009|16:17] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

                                --------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

                                [07/08/2009 00:41][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
                                [06/08/2009 21:41][--a------] C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
                                [05/08/2009 21:16][--a------] C:\WINDOWS\tasks\Norton Security Scan for Administrateur.job
                                [06/08/2009 13:00][--ah-----] C:\WINDOWS\tasks\SA.DAT
                                [24/08/2008 01:53][-r-h-----] C:\WINDOWS\tasks\desktop.ini

                                --------------------\\ Listing des dossiers dans C:\Program Files

                                [02/06/2008|17:32] C:\Program Files\Ad-Aware
                                [18/05/2009|16:35] C:\Program Files\Adobe
                                [06/08/2009|00:25] C:\Program Files\Ad-remover
                                [17/05/2009|01:01] C:\Program Files\Alwil Software
                                [04/08/2009|19:28] C:\Program Files\America's Army Server Manager
                                [05/05/2008|23:09] C:\Program Files\AusLogics Disk Defrag
                                [05/05/2008|23:09] C:\Program Files\AusLogics Registry Defrag
                                [12/05/2008|03:36] C:\Program Files\AusLogics System Information
                                [06/08/2009|15:28] C:\Program Files\Avira
                                [30/05/2009|10:57] C:\Program Files\AVS4YOU
                                [06/07/2009|20:40] C:\Program Files\BearShare Applications
                                [05/05/2008|23:16] C:\Program Files\CCleaner
                                [04/08/2009|17:47] C:\Program Files\Circle Developeent
                                [07/06/2009|11:38] C:\Program Files\Common Files
                                [16/05/2009|16:06] C:\Program Files\ComPlus Applications
                                [02/08/2009|18:46] C:\Program Files\Conduit
                                [24/08/2008|14:22] C:\Program Files\Cpu-z
                                [21/06/2009|10:55] C:\Program Files\DivX
                                [08/07/2009|18:00] C:\Program Files\D-Jix
                                [06/08/2009|13:00] C:\Program Files\DNA
                                [06/04/2008|17:01] C:\Program Files\EasyRecovery
                                [02/08/2009|18:46] C:\Program Files\Eazel-FR
                                [05/06/2009|10:21] C:\Program Files\Everest
                                [31/07/2009|22:40] C:\Program Files\Fast download body
                                [06/06/2009|14:23] C:\Program Files\Fichiers communs
                                [05/04/2008|22:10] C:\Program Files\Foxit Reader
                                [16/05/2009|19:08] C:\Program Files\Free
                                [03/08/2009|22:12] C:\Program Files\GamersFirst
                                [22/05/2009|22:21] C:\Program Files\Google
                                [07/06/2009|11:27] C:\Program Files\gPotato.eu
                                [25/07/2009|19:58] C:\Program Files\Hacker Evolution
                                [30/05/2009|11:00] C:\Program Files\inKline Global
                                [03/08/2009|18:56] C:\Program Files\InstallShield Installation Information
                                [16/05/2009|17:10] C:\Program Files\Intel
                                [30/07/2009|01:26] C:\Program Files\Internet Explorer
                                [30/05/2009|11:48] C:\Program Files\Jasc Software Inc
                                [04/06/2009|13:08] C:\Program Files\Java
                                [31/07/2009|22:40] C:\Program Files\Messenger Plus! Live
                                [30/06/2009|14:07] C:\Program Files\Micro Application
                                [17/05/2009|19:52] C:\Program Files\Microsoft
                                [17/05/2009|19:52] C:\Program Files\Microsoft SQL Server Compact Edition
                                [17/05/2009|22:04] C:\Program Files\Mozilla Firefox
                                [17/05/2009|22:04] C:\Program Files\Mozilla Thunderbird
                                [17/05/2009|19:37] C:\Program Files\MSBuild
                                [31/05/2009|10:58] C:\Program Files\MSI
                                [06/08/2009|13:00] C:\Program Files\Navilog1
                                [16/05/2009|16:12] C:\Program Files\Nero
                                [17/05/2009|22:01] C:\Program Files\NetMeter
                                [05/08/2009|18:00] C:\Program Files\Norton Security Scan
                                [12/07/2009|16:24] C:\Program Files\NovaLogic
                                [05/05/2008|23:06] C:\Program Files\Occtpt
                                [12/07/2009|18:01] C:\Program Files\OpenAL
                                [19/05/2009|13:02] C:\Program Files\OpenOffice.org 2.0
                                [16/05/2009|16:07] C:\Program Files\Outlook Express
                                [02/06/2008|17:24] C:\Program Files\Paint.NET
                                [13/07/2009|23:39] C:\Program Files\Pando Networks
                                [04/08/2009|15:44] C:\Program Files\Pcsx2
                                [22/06/2009|10:38] C:\Program Files\PhotoFiltre Studio
                                [30/05/2009|11:04] C:\Program Files\QUAD Utilities
                                [17/05/2009|18:52] C:\Program Files\Realtek
                                [05/05/2008|23:13] C:\Program Files\Recuva
                                [17/05/2009|19:37] C:\Program Files\Reference Assemblies
                                [07/06/2009|10:48] C:\Program Files\Sony Ericsson
                                [02/08/2009|14:15] C:\Program Files\Subagames
                                [16/05/2009|16:11] C:\Program Files\TaskSwitchXP
                                [16/05/2009|16:18] C:\Program Files\Uninstall Information
                                [17/05/2009|19:53] C:\Program Files\Windows Live
                                [01/08/2009|19:42] C:\Program Files\Windows Live Safety Center
                                [17/05/2009|19:51] C:\Program Files\Windows Live SkyDrive
                                [16/05/2009|16:05] C:\Program Files\Windows Media Connect 2
                                [08/06/2009|11:15] C:\Program Files\Windows Media Player
                                [16/05/2009|16:07] C:\Program Files\WindowsUpdate
                                [16/05/2009|16:12] C:\Program Files\WinRAR
                                [02/08/2009|00:20] C:\Program Files\Wolfenstein - Enemy Territory

                                --------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

                                [18/05/2009|16:35] C:\Program Files\Fichiers communs\Adobe
                                [30/05/2009|10:57] C:\Program Files\Fichiers communs\AVSMedia
                                [22/05/2009|22:21] C:\Program Files\Fichiers communs\CyberLink
                                [22/05/2009|21:48] C:\Program Files\Fichiers communs\DivX Shared
                                [17/05/2009|21:08] C:\Program Files\Fichiers communs\InstallShield
                                [17/05/2009|11:44] C:\Program Files\Fichiers communs\Java
                                [30/06/2009|14:11] C:\Program Files\Fichiers communs\Microsoft Shared
                                [16/05/2009|16:07] C:\Program Files\Fichiers communs\MSSoap
                                [16/05/2009|16:12] C:\Program Files\Fichiers communs\Nero
                                [16/05/2009|18:02] C:\Program Files\Fichiers communs\ODBC
                                [16/05/2009|16:07] C:\Program Files\Fichiers communs\Services
                                [05/08/2009|18:01] C:\Program Files\Fichiers communs\Symantec Shared
                                [16/05/2009|16:07] C:\Program Files\Fichiers communs\System
                                [17/05/2009|19:47] C:\Program Files\Fichiers communs\Windows Live

                                --------------------\\ Process

                                ( 46 Processes )

                                IEXPLORE.EXE ~ [PID:3552]
                                IEXPLORE.EXE ~ [PID:3476]
                                IEXPLORE.EXE ~ [PID:2184]
                                IEXPLORE.EXE ~ [PID:3748]
                                IEXPLORE.EXE ~ [PID:2316]
                                IEXPLORE.EXE ~ [PID:3580]
                                IEXPLORE.EXE ~ [PID:436]
                                IEXPLORE.EXE ~ [PID:2884]
                                IEXPLORE.EXE ~ [PID:2176]

                                --------------------\\ Recherche avec S_Lop

                                Aucun fichier / dossier Lop trouvé !

                                --------------------\\ Recherche de Fichiers / Dossiers Lop

                                C:\DOCUME~1\ADMINI~1\Cookies\administrateur@advertising[2].txt

                                --------------------\\ Verification du Registre

                                ..... OK !

                                --------------------\\ Verification du fichier Hosts

                                Fichier Hosts PROPRE

                                --------------------\\ Recherche de fichiers avec Catchme

                                catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
                                Rootkit scan 2009-08-07 01:34:00
                                Windows 5.1.2600 Service Pack 3 NTFS
                                scanning hidden processes ...
                                scanning hidden files ...
                                scan completed successfully
                                hidden processes: 0
                                hidden files: 0

                                --------------------\\ Recherche d'autres infections

                                Aucune autre infection trouvée !

                                [F:70][D:2]-> C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp
                                [F:69][D:0]-> C:\DOCUME~1\ADMINI~1\Cookies
                                [F:2833][D:4]-> C:\DOCUME~1\ADMINI~1\LOCALS~1\TEMPOR~1\content.IE5

                                1 - "C:\Lop SD\LopR_1.txt" - 07/08/2009| 1:34 - Option : [1]

                                --------------------\\ Fin du rapport a 1:34:31
                                1. E..T Contributeur
                                  Bonsoir,
                                  Waouh trois fois le rapport ;)

                                  Télécharge Lop S&D.exe sur ton Bureau.

                                  https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2

                                  * Double-clique dessus pour lancer l'installation
                                  * Puis double-clique sur le raccourci Lop S&D présent sur ton Bureau
                                  * Séléctionne la langue souhaitée, puis choisis l'option 1 (Recherche)
                                  * Patiente jusqu'à la fin du scan
                                  * Poste le rapport généré (C:\lopR.txt)

                                  A+
                                  1. Utilisateur anonyme
                                    voici

                                    Logfile of Trend Micro HijackThis v2.0.2
                                    Scan saved at 17:33:24, on 06/08/2009
                                    Platform: Windows XP SP3 (WinNT 5.01.2600)
                                    MSIE: Internet Explorer v7.00 (7.00.6000.21073)
                                    Boot mode: Normal

                                    Running processes:
                                    C:\WINDOWS\System32\smss.exe
                                    C:\WINDOWS\system32\winlogon.exe
                                    C:\WINDOWS\system32\services.exe
                                    C:\WINDOWS\system32\lsass.exe
                                    C:\WINDOWS\system32\svchost.exe
                                    C:\WINDOWS\System32\svchost.exe
                                    C:\WINDOWS\system32\svchost.exe
                                    C:\WINDOWS\system32\spoolsv.exe
                                    C:\WINDOWS\system32\netdde.exe
                                    C:\WINDOWS\system32\clipsrv.exe
                                    C:\WINDOWS\system32\inetsrv\inetinfo.exe
                                    C:\Program Files\Java\jre6\bin\jqs.exe
                                    C:\WINDOWS\System32\snmp.exe
                                    C:\WINDOWS\Explorer.EXE
                                    C:\WINDOWS\system32\svchost.exe
                                    C:\WINDOWS\system32\wbem\wmiapsrv.exe
                                    C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe
                                    C:\WINDOWS\system32\ctfmon.exe
                                    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                                    C:\Program Files\Pando Networks\Media Booster\PMB.exe
                                    C:\Program Files\DNA\btdna.exe
                                    C:\Program Files\Internet Explorer\IEXPLORE.EXE
                                    C:\Program Files\Internet Explorer\IEXPLORE.EXE
                                    C:\Program Files\Internet Explorer\IEXPLORE.EXE
                                    C:\Program Files\Internet Explorer\IEXPLORE.EXE
                                    C:\Program Files\Avira\AntiVir Desktop\avguard.exe
                                    C:\Program Files\Avira\AntiVir Desktop\sched.exe
                                    C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
                                    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                                    C:\Program Files\Windows Live\Contacts\wlcomm.exe
                                    C:\Program Files\Internet Explorer\IEXPLORE.EXE
                                    C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\1U03KPC4\HiJackThis[1].exe

                                    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                                    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                                    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
                                    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
                                    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
                                    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
                                    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                                    R3 - URLSearchHook: Eazel-FR Toolbar - {a8f9752d-e2b8-4e7a-86b5-499f4330e2fe} - C:\Program Files\Eazel-FR\tbEaze.dll
                                    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
                                    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
                                    O2 - BHO: UrlHelper Class - {74322BF9-DF26-493f-B0DA-6D2FC5E6429E} - C:\Program Files\BearShare Applications\BearShare\BearShareIEHelper.dll
                                    O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                                    O2 - BHO: Eazel-FR Toolbar - {a8f9752d-e2b8-4e7a-86b5-499f4330e2fe} - C:\Program Files\Eazel-FR\tbEaze.dll
                                    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
                                    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll
                                    O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
                                    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
                                    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
                                    O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
                                    O3 - Toolbar: BearShare MediaBar - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - C:\Program Files\BearShare Applications\BearShare MediaBar\BearShareMediaBar.dll
                                    O3 - Toolbar: Eazel-FR Toolbar - {a8f9752d-e2b8-4e7a-86b5-499f4330e2fe} - C:\Program Files\Eazel-FR\tbEaze.dll
                                    O4 - HKLM\..\Run: [Windows Services] taskmgr.exe
                                    O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
                                    O4 - HKCU\..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe
                                    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                                    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                                    O4 - HKCU\..\Run: [Pando Media Booster] "C:\Program Files\Pando Networks\Media Booster\PMB.exe
                                    O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
                                    O4 - HKCU\..\Run: [showdent] C:\DOCUME~1\ADMINI~1\APPLIC~1\FASTDO~1\ford once.exe
                                    O4 - HKUS\S-1-5-19\..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe (User 'SERVICE LOCAL')
                                    O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SERVICE LOCAL')
                                    O4 - HKUS\S-1-5-20\..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe (User 'SERVICE RÉSEAU')
                                    O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SERVICE RÉSEAU')
                                    O4 - HKUS\S-1-5-18\..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe (User 'SYSTEM')
                                    O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
                                    O4 - HKUS\.DEFAULT\..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe (User 'Default user')
                                    O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
                                    O4 - Startup: Anti-Pub.lnk = C:\Program Files\Antipub\antipub.exe
                                    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                                    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                                    O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
                                    O14 - IERESET.INF: START_PAGE_URL=https://www.google.fr/?gws_rd=ssl
                                    O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/resources/MSNPUpld.cab
                                    O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} (MUCatalogWebControl Class) - http://www.catalog.update.microsoft.com/ClientControl/en/x86/MuCatalogWebControl.cab?1243160015000
                                    O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
                                    O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
                                    O16 - DPF: {80B626D6-BC34-4BCF-B5A1-7149E4FD9CFA} (UnoCtrl Class) - http://zone.msn.com/bingame/zpagames/GAME_UNO1.cab60096.cab
                                    O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/ZPAFramework.cab102118.cab
                                    O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
                                    O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = chevalier
                                    O17 - HKLM\Software\..\Telephony: DomainName = chevalier
                                    O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = chevalier
                                    O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = chevalier
                                    O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
                                    O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
                                    O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
                                    O23 - Service: Service Google Update (gupdate1c9db15a95b9194) (gupdate1c9db15a95b9194) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
                                    O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                                    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
                                    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
                                    O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)
                                    O23 - Service: Services TCP/IP simplifiés (SimpTcp) - Unknown owner - C:\WINDOWS\system32\tcpsvcs.exe (file missing)
                                    1. Utilisateur anonyme
                                      voici

                                      Logfile of Trend Micro HijackThis v2.0.2
                                      Scan saved at 17:33:24, on 06/08/2009
                                      Platform: Windows XP SP3 (WinNT 5.01.2600)
                                      MSIE: Internet Explorer v7.00 (7.00.6000.21073)
                                      Boot mode: Normal

                                      Running processes:
                                      C:\WINDOWS\System32\smss.exe
                                      C:\WINDOWS\system32\winlogon.exe
                                      C:\WINDOWS\system32\services.exe
                                      C:\WINDOWS\system32\lsass.exe
                                      C:\WINDOWS\system32\svchost.exe
                                      C:\WINDOWS\System32\svchost.exe
                                      C:\WINDOWS\system32\svchost.exe
                                      C:\WINDOWS\system32\spoolsv.exe
                                      C:\WINDOWS\system32\netdde.exe
                                      C:\WINDOWS\system32\clipsrv.exe
                                      C:\WINDOWS\system32\inetsrv\inetinfo.exe
                                      C:\Program Files\Java\jre6\bin\jqs.exe
                                      C:\WINDOWS\System32\snmp.exe
                                      C:\WINDOWS\Explorer.EXE
                                      C:\WINDOWS\system32\svchost.exe
                                      C:\WINDOWS\system32\wbem\wmiapsrv.exe
                                      C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe
                                      C:\WINDOWS\system32\ctfmon.exe
                                      C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                                      C:\Program Files\Pando Networks\Media Booster\PMB.exe
                                      C:\Program Files\DNA\btdna.exe
                                      C:\Program Files\Internet Explorer\IEXPLORE.EXE
                                      C:\Program Files\Internet Explorer\IEXPLORE.EXE
                                      C:\Program Files\Internet Explorer\IEXPLORE.EXE
                                      C:\Program Files\Internet Explorer\IEXPLORE.EXE
                                      C:\Program Files\Avira\AntiVir Desktop\avguard.exe
                                      C:\Program Files\Avira\AntiVir Desktop\sched.exe
                                      C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
                                      C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                                      C:\Program Files\Windows Live\Contacts\wlcomm.exe
                                      C:\Program Files\Internet Explorer\IEXPLORE.EXE
                                      C:\Documents and Settings\Administrateur\Local Settings\Temporary Internet Files\Content.IE5\1U03KPC4\HiJackThis[1].exe

                                      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                                      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                                      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
                                      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr
                                      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
                                      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
                                      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                                      R3 - URLSearchHook: Eazel-FR Toolbar - {a8f9752d-e2b8-4e7a-86b5-499f4330e2fe} - C:\Program Files\Eazel-FR\tbEaze.dll
                                      O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
                                      O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
                                      O2 - BHO: UrlHelper Class - {74322BF9-DF26-493f-B0DA-6D2FC5E6429E} - C:\Program Files\BearShare Applications\BearShare\BearShareIEHelper.dll
                                      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                                      O2 - BHO: Eazel-FR Toolbar - {a8f9752d-e2b8-4e7a-86b5-499f4330e2fe} - C:\Program Files\Eazel-FR\tbEaze.dll
                                      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
                                      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll
                                      O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
                                      O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
                                      O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
                                      O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
                                      O3 - Toolbar: BearShare MediaBar - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - C:\Program Files\BearShare Applications\BearShare MediaBar\BearShareMediaBar.dll
                                      O3 - Toolbar: Eazel-FR Toolbar - {a8f9752d-e2b8-4e7a-86b5-499f4330e2fe} - C:\Program Files\Eazel-FR\tbEaze.dll
                                      O4 - HKLM\..\Run: [Windows Services] taskmgr.exe
                                      O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
                                      O4 - HKCU\..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe
                                      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                                      O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                                      O4 - HKCU\..\Run: [Pando Media Booster] "C:\Program Files\Pando Networks\Media Booster\PMB.exe
                                      O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
                                      O4 - HKCU\..\Run: [showdent] C:\DOCUME~1\ADMINI~1\APPLIC~1\FASTDO~1\ford once.exe
                                      O4 - HKUS\S-1-5-19\..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe (User 'SERVICE LOCAL')
                                      O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SERVICE LOCAL')
                                      O4 - HKUS\S-1-5-20\..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe (User 'SERVICE RÉSEAU')
                                      O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SERVICE RÉSEAU')
                                      O4 - HKUS\S-1-5-18\..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe (User 'SYSTEM')
                                      O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
                                      O4 - HKUS\.DEFAULT\..\Run: [TaskSwitchXP] C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe (User 'Default user')
                                      O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
                                      O4 - Startup: Anti-Pub.lnk = C:\Program Files\Antipub\antipub.exe
                                      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                                      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                                      O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
                                      O14 - IERESET.INF: START_PAGE_URL=https://www.google.fr/?gws_rd=ssl
                                      O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/resources/MSNPUpld.cab
                                      O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} (MUCatalogWebControl Class) - http://www.catalog.update.microsoft.com/ClientControl/en/x86/MuCatalogWebControl.cab?1243160015000
                                      O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
                                      O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
                                      O16 - DPF: {80B626D6-BC34-4BCF-B5A1-7149E4FD9CFA} (UnoCtrl Class) - http://zone.msn.com/bingame/zpagames/GAME_UNO1.cab60096.cab
                                      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://cdn2.zone.msn.com/binFramework/v10/ZPAFramework.cab102118.cab
                                      O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
                                      O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = chevalier
                                      O17 - HKLM\Software\..\Telephony: DomainName = chevalier
                                      O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = chevalier
                                      O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = chevalier
                                      O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
                                      O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
                                      O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
                                      O23 - Service: Service Google Update (gupdate1c9db15a95b9194) (gupdate1c9db15a95b9194) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
                                      O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                                      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
                                      O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
                                      O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)
                                      O23 - Service: Services TCP/IP simplifiés (SimpTcp) - Unknown owner - C:\WINDOWS\system32\tcpsvcs.exe (file missing)
                                      • 1
                                      • 2
                                      • 3

                                      Discussions similaires

                                      Impossible d'afficher le rapport de tableau croisé dynamique sur un rapport
                                      Utilisateur anonyme

                                      13 réponses
                                      rapport de visite commercial
                                      antcho

                                      3 réponses
                                      impossible d'afficher le tableau dynamique sur un rapport existant
                                      Pierre

                                      3 réponses
                                      Rapport audit parc informatique
                                      It administrateur

                                      9 réponses
                                      Theme de rapport de stage option comptabilité
                                      sana saydou

                                      2 réponses