[Virus] Infections par de multiple pub

Non tous à l'air de bien fonctionner, j'ai pu installer IE7 (pas de commentaires svp :~) ) et plus aucune pub non incorporé au site n'apparaissent, et l'ordi s'éteinds de plus en plus rapidement.

Merci en tous cas de votre aide.

Re

Quelques lignes inutiles dans HijackThis
Relance un scan HijackThis et coche les lignes ci-dessous :

O2 - BHO: (no name) - {D60B6578-737A-4422-99B4-0ABEDEBA0C17} - (no file)
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O20 - Winlogon Notify: wingdm32 - wingdm32.dll (file missing)

Ferme toutes les fenêtres Windows, Internet explorer, Outlook,sauf le logiciel Hijackthis et clique sur « Fix checked »

Combofix a fait du ménage.

As tu encore des dysfonctionnements ?

Et du Combofix :

Wxp - 06-12-31 11:58:37.10 Service Pack 2
ComboFix 06.11.27 - Running from: "C:\Documents and Settings\Wxp\Bureau"

(((((((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

C:\WINDOWS\system32\components
C:\Program Files\Fichiers communs\{84B2DB13-0C7E-1036-0924-040307090029}

~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ Purity ~ ~ ~ ~ ~ ~ ~ ~~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~

Folders Quarantined:

C:\QooBox\Purity\Program Files\SSEMBL~1
C:\QooBox\Purity\Program Files\STEM~1
C:\QooBox\Purity\Program Files\STEM~1\??stem

((((((((((((((((((((((((((((((( Files Created from 2006-11-31 to 2006-12-31 ))))))))))))))))))))))))))))))))))

2006-12-31 11:06 <REP> d--hs---- C:\Documents and Settings\Wxp\Recent
2006-12-24 18:05 <REP> d-------- C:\Documents and Settings\All Users\Application Data\POP3Profiles
2006-12-23 16:43 <REP> d-------- C:\Downloads
2006-12-23 16:43 <REP> d-------- C:\Bases
2006-12-23 16:42 <REP> d-------- C:\Kaspersky
2006-12-23 11:06 853 --a------ C:\reboot.cmd
2006-12-23 11:06 68,096 --a------ C:\diff.exe
2006-12-23 11:06 103,424 --a------ C:\grep.exe
2006-12-22 19:46 <REP> d-------- C:\VundoFix Backups
2006-12-22 17:10 3,968 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2006-12-22 17:10 <REP> d-------- C:\Program Files\Grisoft
2006-12-20 19:20 2,788 --a------ C:\WINDOWS\system32\tmp.reg
2006-12-20 18:43 <REP> d-------- C:\HijackThis
2006-12-18 22:13 <REP> d-------- C:\Program Files\IGN
2006-12-18 19:18 118,804 --a------ C:\WINDOWS\system32\quxfwhbc.dll
2006-12-05 17:40 90,164 --ahs---- C:\WINDOWS\system32\vturs.dll

(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))

2006-12-31 11:59 -------- d-------- C:\Program Files\Fichiers communs
2006-12-26 17:02 -------- d--h----- C:\Program Files\InstallShield Installation Information
2006-12-26 11:17 -------- d-------- C:\Program Files\DAP
2006-12-23 10:56 -------- d---s---- C:\Documents and Settings\Wxp\Application Data\Microsoft
2006-12-17 18:21 -------- d-------- C:\Program Files\Internet Explorer
2006-12-16 16:54 -------- d-------- C:\Program Files\Windows Media Player
2006-12-16 16:54 -------- d-------- C:\Program Files\Outlook Express
2006-12-16 16:54 -------- d-------- C:\Program Files\Movie Maker
2006-12-16 14:55 -------- d-------- C:\Program Files\Fichiers communs\System
2006-12-11 19:03 -------- d-------- C:\Program Files\Opera
2006-12-07 06:29 2374472 --a------ C:\WINDOWS\system32\wmvcore.dll
2006-11-19 10:13 93696 --a------ C:\WINDOWS\system32\swxpckm.dll
2006-11-18 23:03 -------- d-------- C:\Program Files\CCleaner
2006-11-18 22:51 -------- d-------- C:\Program Files\Windows Defender
2006-11-18 12:12 -------- d-------- C:\Program Files\Easy TM
2006-11-17 19:02 -------- d-------- C:\Program Files\MSXML 4.0
2006-11-13 18:41 -------- d-------- C:\Program Files\Java
2006-11-13 18:27 -------- d-------- C:\Program Files\adslTV
2006-11-12 19:50 98304 --a------ C:\WINDOWS\system32\CmdLineExt.dll
2006-11-08 06:07 679424 --a------ C:\WINDOWS\system32\inetcomm.dll
2006-11-06 21:22 -------- d-------- C:\Program Files\iTunes
2006-11-06 21:21 -------- d-------- C:\Program Files\iPod
2006-11-06 21:20 -------- d-------- C:\Program Files\QuickTime
2006-11-06 21:17 -------- d-------- C:\Program Files\Apple Software Update
2006-11-05 22:27 -------- d-------- C:\Documents and Settings\Wxp\Application Data\vlc
2006-11-05 21:44 -------- d-------- C:\Documents and Settings\Wxp\Application Data\Opera
2006-11-05 13:50 -------- d-------- C:\Program Files\Fichiers communs\Autodesk Shared
2006-11-05 13:49 -------- d-------- C:\Program Files\AutoCAD 2006
2006-11-05 13:44 -------- d-------- C:\Program Files\Microsoft Office
2006-11-05 13:44 -------- d-------- C:\Program Files\Fichiers communs\Microsoft Shared
2006-11-05 13:44 -------- d-------- C:\Program Files\Fichiers communs\DESIGNER
2006-11-05 13:44 -------- d-------- C:\Program Files\AnswerWorks 4.0
2006-11-05 13:41 -------- d-------- C:\Documents and Settings\Wxp\Application Data\Autodesk
2006-11-04 21:25 -------- d-------- C:\Program Files\Autodesk
2006-11-04 20:08 -------- d-------- C:\Program Files\Spybot - Search & Destroy2
2006-11-04 16:25 -------- d-------- C:\Documents and Settings\Wxp\Application Data\Lavasoft
2006-11-04 16:24 -------- d-------- C:\Program Files\Lavasoft
2006-11-04 14:14 1245696 --a------ C:\WINDOWS\system32\msxml4.dll
2006-11-02 22:24 -------- d-------- C:\Program Files\MSN Messenger
2006-11-02 22:05 -------- d-------- C:\Program Files\F-Secure
2006-11-01 20:50 -------- d-------- C:\Documents and Settings\Wxp\Application Data\F-Secure
2006-10-31 21:26 -------- d-------- C:\Program Files\Google
2006-10-29 15:28 88 -r-hs---- C:\WINDOWS\system32\4393551409.sys
2006-10-29 15:28 2516 --ahsc--- C:\WINDOWS\system32\KGyGaAvL.sys
2006-10-20 02:38 716800 --a------ C:\WINDOWS\system32\sxs.dll
2006-10-13 13:36 145920 --a------ C:\WINDOWS\system32\nwprovau.dll

(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))

*Note* empty entries are not shown

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"MessengerPlus3"="\"C:\\Program Files\\Messenger Plus! 3\\MsgPlus.exe\" /WinStart"
"MSMSGS"="\"C:\\Program Files\\Messenger\\msmsgs.exe\" /background"
"Start WingMan Profiler"="\"C:\\Program Files\\Logitech\\Profiler\\lwemon.exe\" /noui"
"ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.exe"
"ccleaner"="\"C:\\Program Files\\CCleaner\\ccleaner.exe\" /AUTO"
"msnmsgr"="\"C:\\Program Files\\MSN Messenger\\msnmsgr.exe\" /background"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"ATIPTA"="C:\\Program Files\\ATI Technologies\\ATI Control Panel\\atiptaxx.exe"
"MessengerPlus3"="\"C:\\Program Files\\Messenger Plus! 3\\MsgPlus.exe\""
"SunJavaUpdateSched"="\"C:\\Program Files\\Java\\jre1.5.0_09\\bin\\jusched.exe\""
"avast!"="C:\\PROGRA~1\\ALWILS~1\\Avast4\\ashDisp.exe"
"iTunesHelper"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\""
"Windows Defender"="\"C:\\Program Files\\Windows Defender\\MSASCui.exe\" -hide"
"!AVG Anti-Spyware"="\"C:\\Program Files\\Grisoft\\AVG Anti-Spyware 7.5\\avgas.exe\" /minimized"
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"KernelFaultCheck"=hex(2):25,73,79,73,74,65,6d,72,6f,6f,74,25,5c,73,79,73,74,\
65,6d,33,32,5c,64,75,6d,70,72,65,70,20,30,20,2d,6b,00

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
"NoChange"="1"
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
"Installed"="1"

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components]
"DeskHtmlVersion"=dword:00000110
"DeskHtmlMinorVersion"=dword:00000005
"Settings"=dword:00000001
"GeneralFlags"=dword:00000003

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components\0]
"Source"="C:\\WINDOWS\\SideBar\\sidebar\\index.html"
"SubscribedURL"="C:\\WINDOWS\\SideBar\\sidebar\\index.html"
"FriendlyName"="Longhorn SideBar"
"Flags"=dword:00000002
"Position"=hex:2c,00,00,00,ea,01,00,00,01,00,00,00,96,00,00,00,c1,01,00,00,ec,\
03,00,00,01,00,00,00,01,00,00,00,01,00,00,00,00,00,00,00,00,00,00,00
"CurrentState"=hex:01,00,00,40
"OriginalStateInfo"=hex:18,00,00,00,ea,01,00,00,01,00,00,00,96,00,00,00,c1,01,\
00,00,01,00,00,40
"RestoredStateInfo"=hex:18,00,00,00,13,01,00,00,1d,01,00,00,da,00,00,00,d2,00,\
00,00,01,00,00,40

[HKEY_USERS\.default\software\microsoft\windows\currentversion\runonce]
"SIA7"="\"C:\\Program Files\\Steganos Internet Anonym 7\\SIA7.exe\" -firstboot"

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\runonce]
"SIA7"="\"C:\\Program Files\\Steganos Internet Anonym 7\\SIA7.exe\" -firstboot"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Pré-chargeur Browseui"
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Démon de cache des catégories de composant"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""
"{091EB208-39DD-417D-A5DD-7E2C2D8FB9CB}"="Microsoft AntiMalware ShellExecuteHook"
"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000000

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\Run]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
"0aMCPClient"="{F5DF91F9-15E9-416B-A7C3-7519B11ECBFC}"
"PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}"
"CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}"
"WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"
"SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^Adobe Gamma Loader.exe.lnk]
"path"="C:\\Documents and Settings\\All Users\\Menu Démarrer\\Programmes\\Démarrage\\Adobe Gamma Loader.exe.lnk"
"backup"="C:\\WINDOWS\\pss\\Adobe Gamma Loader.exe.lnkCommon Startup"
"location"="Common Startup"
"command"="C:\\PROGRA~1\\FICHIE~1\\Adobe\\CALIBR~1\\ADOBEG~1.EXE "
"item"="Adobe Gamma Loader.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^VoipBuster.lnk]
"path"="C:\\Documents and Settings\\All Users\\Menu Démarrer\\Programmes\\Démarrage\\VoipBuster.lnk"
"backup"="C:\\WINDOWS\\pss\\VoipBuster.lnkCommon Startup"
"location"="Common Startup"
"command"="C:\\PROGRA~1\\VOIPBU~1.COM\\VOIPBU~1\\VOIPBU~1.EXE -nosplash -minimized"
"item"="VoipBuster"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroCheck]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="NeroCheck"
"hkey"="HKLM"
"command"="C:\\WINDOWS\\system32\\\\NeroCheck.exe"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PeerGuardian]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="PeerGuardian_1"
"hkey"="HKCU"
"command"="C:\\Program Files\\PeerGuardian pr14\\PeerGuardian_1.99b_pr14.exe"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="qttask"
"hkey"="HKLM"
"command"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="SOUNDMAN"
"hkey"="HKLM"
"command"="SOUNDMAN.EXE"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="jusched"
"hkey"="HKLM"
"command"="C:\\Program Files\\Java\\jre1.5.0_02\\bin\\jusched.exe"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="realsched"
"hkey"="HKLM"
"command"="\"C:\\Program Files\\Fichiers communs\\Real\\Update_OB\\realsched.exe\" -osboot"
"inimapping"="0"

HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\wingdm32

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"

~ ~ ~ ~ ~ ~ ~ ~ Hijackthis Backups ~ ~ ~ ~ ~ ~ ~ ~ ~ ~ ~

backup-20061226-111707-214
O18 - Protocol: bwz0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-339
O18 - Protocol: bww0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-669
O18 - Protocol: bwx0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-370
O18 - Protocol: bww0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-947
O18 - Protocol: bwx0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-919
O18 - Protocol: bwy0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-284
O18 - Protocol: bwz0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-904
O18 - Protocol: bwy0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-625
O18 - Protocol: bwt0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-371
O18 - Protocol: bwv0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-507
O18 - Protocol: bws0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-471
O18 - Protocol: bwr0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-360
O18 - Protocol: bwv0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-133
O18 - Protocol: bws0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-520
O18 - Protocol: bwt0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-578
O18 - Protocol: bwu0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-187
O18 - Protocol: bwu0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-237
O18 - Protocol: bwn0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-971
O18 - Protocol: bwp0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-668
O18 - Protocol: bwp0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-647
O18 - Protocol: bwn0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-644
O18 - Protocol: bwo0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-495
O18 - Protocol: bwo0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-612
O18 - Protocol: bwq0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-967
O18 - Protocol: bwr0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-431
O18 - Protocol: bwq0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-984
O18 - Protocol: bwl0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-436
O18 - Protocol: bwl0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-900
O18 - Protocol: bwi0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-816
O18 - Protocol: bwm0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-980
O18 - Protocol: bwk0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-173
O18 - Protocol: bwj0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-901
O18 - Protocol: bwj0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-378
O18 - Protocol: bwm0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-478
O18 - Protocol: bwk0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-112
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
backup-20061226-111707-786
O18 - Protocol: bwg0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-310
O18 - Protocol: bwg0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-739
O18 - Protocol: bwh0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-256
O18 - Protocol: bwi0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-716
O18 - Protocol: bwh0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-420
O18 - Protocol: bwf0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-223
O18 - Protocol: bwf0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-820
O18 - Protocol: bwe0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-683
O18 - Protocol: bwe0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-416
O18 - Protocol: bwd0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-588
O18 - Protocol: bw90 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-449
O18 - Protocol: bwc0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-428
O18 - Protocol: bw90s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-201
O18 - Protocol: bwa0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-597
O18 - Protocol: bw80s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-844
O18 - Protocol: bwc0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-908
O18 - Protocol: bwa0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-393
O18 - Protocol: bwd0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-752
O18 - Protocol: bwb0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-404
O18 - Protocol: bwb0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-398
O18 - Protocol: bw60 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-394
O18 - Protocol: bw50 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-526
O18 - Protocol: bw80 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-259
O18 - Protocol: bw50s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-231
O18 - Protocol: bw70 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-216
O18 - Protocol: bw70s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-981
O18 - Protocol: bw60s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-745
O18 - Protocol: bw40s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-215
O18 - Protocol: bw-0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-188
O18 - Protocol: bw+0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-443
O18 - Protocol: bw00s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-496
O18 - Protocol: bw20s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-888
O18 - Protocol: bw20 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-830
O18 - Protocol: bw10 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-315
O18 - Protocol: bw-0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-781
O18 - Protocol: bw00 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-200
O18 - Protocol: bw10s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-681
O18 - Protocol: bw30s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-670
O18 - Protocol: bw30 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-649
O18 - Protocol: bw40 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111707-978
O18 - Protocol: bw+0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
backup-20061226-111706-358
O16 - DPF: {A91DEB0D-AD0D-453E-9AC8-60178EC24212} (VPlayer Control) - http://video.vividas.com/CDN1/4325_Pepsi/web/player/vivid_ocx.jpeg
backup-20061226-111706-950
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
backup-20061226-111706-479
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
backup-20061226-111706-180
O16 - DPF: {09F1ADAC-76D8-4D0F-99A5-5C907DADB988} - https://www.afternic.com/domains/drivecleaner.com
backup-20061226-111706-846
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
backup-20061226-111706-613
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
backup-20061226-111706-362
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
backup-20061226-111706-609
O9 - Extra button: Run DAP - {669695BC-A811-4A9D-8CDF-BA8C795F261C} - C:\PROGRA~1\DAP\DAP.EXE
backup-20061226-111705-672
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
backup-20061226-111705-795
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
backup-20061226-111705-845
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
backup-20061226-111705-135
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
backup-20061226-111705-830
O8 - Extra context menu item: &Download with &DAP - C:\PROGRA~1\DAP\dapextie.htm
backup-20061226-111705-443
O4 - HKLM\..\Run: [DownloadAccelerator] C:\PROGRA~1\DAP\DAP.EXE /STARTUP
backup-20061226-111705-495
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
backup-20061226-111705-851
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
backup-20061226-111705-334
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
backup-20061226-111705-905
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
backup-20061226-111705-576
O4 - HKLM\..\Run: [DllRunning] rundll32.exe "C:\WINDOWS\system32\qvlaojwx.dll",setvm
backup-20061226-111705-559
O8 - Extra context menu item: Download &all with DAP - C:\PROGRA~1\DAP\dapextie2.htm
backup-20061226-111705-706
O3 - Toolbar: DAP Bar - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - C:\Program Files\DAP\DAPIEBar.dll
backup-20061226-111705-952
O2 - BHO: (no name) - {61E91E9C-BF33-6A6A-7BFC-00B25F19A7AE} - C:\WINDOWS\system32\urwzhx.dll (file missing)
backup-20061226-111705-824
O2 - BHO: (no name) - {36068946-CD51-1AC7-C4AD-044557583146} - C:\WINDOWS\system32\lctsupj.dll (file missing)
backup-20061226-111705-959
O2 - BHO: (no name) - {42E53C82-E11D-E01B-A428-084851DB6947} - C:\WINDOWS\system32\yzivngl.dll (file missing)
backup-20061226-111705-290
O2 - BHO: (no name) - {3FD6B99C-A275-46ea-8FD1-3D63986E51E4} - C:\WINDOWS\system32\hpvekfro.dll (file missing)
backup-20061226-111705-126
O2 - BHO: (no name) - {2527DC3F-C7A0-CF37-33EA-0525C1600A34} - C:\WINDOWS\system32\quqrbkl.dll
backup-20061226-111705-436
O2 - BHO: (no name) - {0964344D-C233-DAF1-2ADC-08C2A8D60810} - C:\WINDOWS\system32\hptukyk.dll
backup-20061226-111705-231
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
backup-20061226-111705-638
O2 - BHO: DAPHelper Class - {0000CC75-ACF3-4cac-A0A9-DD3868E06852} - C:\PROGRA~1\DAP\dapbho.dll
backup-20061226-111705-783
R3 - URLSearchHook: (no name) - {61C40C3D-BDD2-B627-D189-C569348CDBE4} - (no file)

Contents of the 'Scheduled Tasks' folder
C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\MP Scheduled Scan.job
C:\WINDOWS\tasks\{DE596C44-D582-438D-BE6A-E311E18B1DC2}_MICHAEL_Wxp.job

Completion time: 06-12-31 11:59:51.34
C:\ComboFix.txt ... 06-12-31 11:59

Alors voici le rapport de ce chère Hijackthis :

Logfile of HijackThis v1.99.1
Scan saved at 16:11:02, on 31.12.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\SYSTEM32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\system32\UAService7.exe
C:\Program Files\Messenger Plus! 3\MsgPlus.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Logitech\Profiler\lwemon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\NETGEAR\WG111v2 Configuration Utility\RtlWake.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\NETGEAR\WG111v2 Configuration Utility\RtWLan.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
C:\Program Files\iTunes\iTunes.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://accounts.google.com/ServiceLogin?service=mail&passive=true&rm=false&continue=https://mail.google.com/mail/&ss=1&scc=1&ltmpl=default&ltmplcache=2&emr=1&osid=1
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~2\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: (no name) - {D60B6578-737A-4422-99B4-0ABEDEBA0C17} - (no file)
O3 - Toolbar: Steganos Internet Anonyme - {00000000-5736-4205-0008-2fe89c996183} - c:\program files\steganos internet anonym 7\sia7iep.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Start WingMan Profiler] "C:\Program Files\Logitech\Profiler\lwemon.exe" /noui
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: Accélérateur de démarrage AutoCAD.lnk = C:\Program Files\Fichiers communs\Autodesk Shared\acstart16.exe
O4 - Global Startup: WG111v2 Smart Wizard Wireless Setting.lnk = ?
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{B7F9CDB8-BF58-4289-8669-EEA83434ED2E}: NameServer = 192.168.0.1
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\MSOXMLMF.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: wingdm32 - wingdm32.dll (file missing)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Unknown owner - C:\WINDOWS\system32\UAService7.exe

Bonjour

C'est beaucoup mieux.

Télécharge Combofix.exe (par sUBs) sur ton Bureau
http://download.bleepingcomputer.com/sUBs/combofix.exe

Double clique combofix.exe et suis les invites.
Lorsque le scan sera complété, un rapport apparaîtra.
Copie/colle ce rapport dans ta prochaine réponse avec un nouveau HijackThis.

Et voila le dernier rapport Daig :

C:\WINDOWS\System32\wpa.dbl -->30.12.2006 14:45:58
C:\WINDOWS\System32\perfh00C.dat -->23.12.2006 10:56:18
C:\WINDOWS\System32\perfh009.dat -->23.12.2006 10:56:18
C:\WINDOWS\System32\perfc00C.dat -->23.12.2006 10:56:18
C:\WINDOWS\System32\perfc009.dat -->23.12.2006 10:56:18
C:\WINDOWS\System32\PerfStringBackup.INI -->23.12.2006 10:56:17
C:\WINDOWS\System32\tmp.txt -->22.12.2006 17:34:49
C:\WINDOWS\System32\tmp.reg -->22.12.2006 17:34:49
C:\WINDOWS\System32\quxfwhbc.dll -->18.12.2006 19:18:38
C:\WINDOWS\System32\spupdsvc.inf -->17.12.2006 18:19:27
C:\WINDOWS\System32\mcrh.tmp -->17.12.2006 14:26:34
C:\WINDOWS\System32\MRT.exe -->08.12.2006 00:13:44
C:\WINDOWS\System32\wmvcore.dll -->07.12.2006 06:29:34
C:\WINDOWS\System32\vturs.dll -->05.12.2006 17:40:25
C:\WINDOWS\System32\LegitCheckControl.DLL -->29.11.2006 16:31:32
C:\WINDOWS\System32\swxpckm.dll -->19.11.2006 10:13:15
C:\WINDOWS\System32\FNTCACHE.DAT -->19.11.2006 10:08:47
C:\WINDOWS\System32\jupdate-1.5.0_09-b03.log -->13.11.2006 18:41:28
C:\WINDOWS\System32\CmdLineExt.dll -->12.11.2006 19:50:00
C:\WINDOWS\System32\inetcomm.dll -->08.11.2006 06:07:30
C:\WINDOWS\System32\TitanPokerIconDropTRA108.ico -->04.11.2006 16:42:53
C:\WINDOWS\System32\MobileSidewalkRON_2.ico -->04.11.2006 16:32:42
C:\WINDOWS\System32\msxml4.dll -->04.11.2006 14:14:00
C:\WINDOWS\System32\CONFIG.NT -->02.11.2006 22:11:17
C:\WINDOWS\System32\Thumbs.db -->01.11.2006 21:37:45

C:\WINDOWS\WindowsUpdate.log -->30.12.2006 14:45:53
C:\WINDOWS\SchedLgU.Txt -->30.12.2006 14:45:49
C:\WINDOWS\bootstat.dat -->30.12.2006 14:45:47
C:\WINDOWS\BlendSettings.ini -->29.12.2006 23:46:37
C:\WINDOWS\QTFont.qfn -->28.12.2006 20:05:26
C:\WINDOWS\QTFont.for -->24.12.2006 16:04:06
C:\WINDOWS\cdPlayer.ini -->26.11.2006 14:29:21
C:\WINDOWS\Thumbs.db -->19.11.2006 16:47:33
C:\WINDOWS\SWPRODPB.INI -->06.11.2006 23:17:10
C:\WINDOWS\system.ini -->06.11.2006 22:46:44
C:\WINDOWS\cserve.ini -->01.11.2006 21:44:14
C:\WINDOWS\WMSysPr9.prx -->04.10.2006 19:46:53
C:\WINDOWS\mngui.INI -->28.09.2006 10:43:09
C:\WINDOWS\pavsig.txt -->08.09.2006 19:57:38
C:\WINDOWS\BricoPackFoldersDelete.cmd -->12.08.2006 16:08:45

C:\WINDOWS\ALCFDRTM.EXE |03/01/2002 17:07:42
C:\WINDOWS\alcrmv.exe |28/10/2004 16:12:26
C:\WINDOWS\alcupd.exe |28/10/2004 16:12:26
C:\WINDOWS\bwUnin-6.1.4.68-8876480L.exe |02/07/2005 17:43:37
C:\WINDOWS\bwUnin-7.2.0.137-8876480SL.exe |17/07/2005 18:21:58
C:\WINDOWS\bwUnin-7.2.0.157-8876480SL.exe |02/04/2006 17:45:49
C:\WINDOWS\GPInstall.exe |09/02/2005 17:57:37
C:\WINDOWS\IsUn040c.exe |28/10/2004 15:57:55
C:\WINDOWS\IsUninst.exe |28/10/2004 15:45:05
C:\WINDOWS\iun6002.exe |20/07/2005 20:25:04
C:\WINDOWS\ScUnin.exe |24/09/2005 13:02:20
C:\WINDOWS\Setup1.exe |18/12/2004 13:14:19
C:\WINDOWS\slrundll.exe |28/10/2004 15:27:29
C:\WINDOWS\SOUNDMAN.EXE |28/10/2004 16:12:34
C:\WINDOWS\twunk_16.exe |24/04/2003 13:00:00
C:\WINDOWS\twunk_32.exe |24/04/2003 13:00:00
C:\WINDOWS\una2setup.exe |06/12/2004 20:06:03
C:\WINDOWS\unADesktop.exe |14/01/2005 15:43:51
C:\WINDOWS\unin040c.exe |16/02/2005 17:56:29
C:\WINDOWS\uninst.exe |18/08/2005 16:50:31
C:\WINDOWS\USBK700iphmgunin.exe |04/01/2002 19:44:54
C:\WINDOWS\twain.dll |24/04/2003 13:00:00
C:\WINDOWS\twain_32.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\AcSignOpt.exe |05/03/2005 13:18:15
C:\WINDOWS\system32\append.exe |24/04/2003 13:00:00
C:\WINDOWS\system32\asuninst.exe |23/01/2006 20:11:05
C:\WINDOWS\system32\aswBoot.exe |02/11/2006 22:11:06
C:\WINDOWS\system32\ati2evxx.exe |29/09/2004 07:16:44
C:\WINDOWS\system32\Ati2mdxx.exe |29/09/2004 07:18:28
C:\WINDOWS\system32\ati2sgag.exe |28/10/2004 16:20:39
C:\WINDOWS\system32\debug.exe |24/04/2003 13:00:00
C:\WINDOWS\system32\dosx.exe |24/04/2003 13:00:00
C:\WINDOWS\system32\dvdplay.exe |23/08/2001 18:47:34
C:\WINDOWS\system32\edlin.exe |24/04/2003 13:00:00
C:\WINDOWS\system32\exe2bin.exe |24/04/2003 13:00:00
C:\WINDOWS\system32\fastopen.exe |24/04/2003 13:00:00
C:\WINDOWS\system32\java.exe |13/11/2006 18:41:29
C:\WINDOWS\system32\javaw.exe |13/11/2006 18:41:29
C:\WINDOWS\system32\javaws.exe |13/11/2006 18:41:29
C:\WINDOWS\system32\mem.exe |24/04/2003 13:00:00
C:\WINDOWS\system32\mscdexnt.exe |24/04/2003 13:00:00
C:\WINDOWS\system32\NeroCheck.exe |09/07/2001 11:50:42
C:\WINDOWS\system32\nlsfunc.exe |24/04/2003 13:00:00
C:\WINDOWS\system32\redir.exe |24/04/2003 13:00:00
C:\WINDOWS\system32\reico.exe |18/02/2005 18:17:11
C:\WINDOWS\system32\RTLCPL.EXE |28/10/2004 16:12:35
C:\WINDOWS\system32\setver.exe |24/04/2003 13:00:00
C:\WINDOWS\system32\share.exe |24/04/2003 13:00:00
C:\WINDOWS\system32\slrundll.exe |28/10/2004 15:27:30
C:\WINDOWS\system32\slserv.exe |28/10/2004 15:27:30
C:\WINDOWS\system32\SpoonUninstall.exe |17/04/2005 13:31:15
C:\WINDOWS\system32\UAService7.exe |27/03/2005 14:54:25
C:\WINDOWS\system32\Uharc.exe |18/02/2005 18:16:23
C:\WINDOWS\system32\usrmlnka.exe |23/08/2001 18:47:48
C:\WINDOWS\system32\usrprbda.exe |23/08/2001 18:47:48
C:\WINDOWS\system32\usrshuta.exe |23/08/2001 18:47:48
C:\WINDOWS\system32\a3d.dll |28/10/2004 16:12:34
C:\WINDOWS\system32\AcSignExt.dll |05/03/2005 13:18:09
C:\WINDOWS\system32\AcSignExtRes.dll |07/03/2005 19:00:01
C:\WINDOWS\system32\AcSignIcon.dll |05/03/2005 13:18:12
C:\WINDOWS\system32\amstream.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\ati2cqag.dll |28/10/2004 15:27:32
C:\WINDOWS\system32\ati2dvaa.dll |28/10/2004 15:27:32
C:\WINDOWS\system32\ati2dvag.dll |28/10/2004 15:27:31
C:\WINDOWS\system32\ati2edxx.dll |29/09/2004 07:18:20
C:\WINDOWS\system32\ati2evxx.dll |29/09/2004 07:18:08
C:\WINDOWS\system32\ati3d1ag.dll |28/10/2004 15:27:31
C:\WINDOWS\system32\ati3d2ag.dll |13/11/2003 21:10:54
C:\WINDOWS\system32\ati3duag.dll |28/10/2004 15:27:31
C:\WINDOWS\system32\ATIDDC.DLL |29/09/2004 07:16:22
C:\WINDOWS\system32\ATIDEMGR.dll |29/09/2004 09:32:34
C:\WINDOWS\system32\atiiiexx.dll |29/09/2004 09:58:44
C:\WINDOWS\system32\atikvmag.dll |21/02/2006 19:11:02
C:\WINDOWS\system32\atioglx1.dll |21/02/2006 19:27:14
C:\WINDOWS\system32\atioglxx.dll |29/09/2004 07:44:00
C:\WINDOWS\system32\atipdlxx.dll |29/09/2004 07:18:50
C:\WINDOWS\system32\atitvo32.dll |29/09/2004 06:36:20
C:\WINDOWS\system32\ativcoxx.dll |09/11/2001 10:01:04
C:\WINDOWS\system32\ativtmxx.dll |28/10/2004 15:27:31
C:\WINDOWS\system32\ativvaxx.dll |28/10/2004 15:27:31
C:\WINDOWS\system32\atmfd.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\atmlib.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\Audio3D.dll |28/10/2004 16:12:34
C:\WINDOWS\system32\clrvidcc.dll |02/01/2005 21:33:57
C:\WINDOWS\system32\clrviddc.dll |11/08/1998 15:18:52
C:\WINDOWS\system32\CmdLineExt.dll |27/03/2005 14:54:25
C:\WINDOWS\system32\CNCS232.DLL |20/11/2003 14:09:09
C:\WINDOWS\system32\cncs32.dll |27/12/2005 18:15:46
C:\WINDOWS\system32\compatui.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\decdnet.dll |11/08/1998 15:18:44
C:\WINDOWS\system32\dgrpsetu.dll |01/01/2002 00:07:13
C:\WINDOWS\system32\dgsetup.dll |01/01/2002 00:07:13
C:\WINDOWS\system32\DivX.dll |26/10/2004 23:38:23
C:\WINDOWS\system32\divxdec_0407.dll |26/10/2004 23:38:18
C:\WINDOWS\system32\divxdec_040c.dll |26/10/2004 23:38:18
C:\WINDOWS\system32\divxdec_0411.dll |26/10/2004 23:38:18
C:\WINDOWS\system32\divx_xx07.dll |26/10/2004 23:38:17
C:\WINDOWS\system32\divx_xx0c.dll |26/10/2004 23:38:18
C:\WINDOWS\system32\divx_xx11.dll |26/10/2004 23:38:18
C:\WINDOWS\system32\dmgrax2.dll |25/03/2005 20:32:31
C:\WINDOWS\system32\dpu10.dll |26/10/2004 23:39:03
C:\WINDOWS\system32\dpuGUI10.dll |26/10/2004 23:39:03
C:\WINDOWS\system32\dpus10.dll |26/10/2004 23:39:03
C:\WINDOWS\system32\dpv10.dll |26/10/2004 23:39:04
C:\WINDOWS\system32\encdec.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\encdnet.dll |02/01/2005 21:33:57
C:\WINDOWS\system32\EnumDev111.dll |23/10/2006 19:29:44
C:\WINDOWS\system32\EqnClass.Dll |01/01/2002 00:07:12
C:\WINDOWS\system32\GEARAspi.dll |19/09/2006 15:43:58
C:\WINDOWS\system32\hsfcisp2.dll |28/10/2004 15:27:31
C:\WINDOWS\system32\hticons.dll |28/10/2004 15:48:03
C:\WINDOWS\system32\hypertrm.dll |28/10/2004 15:48:03
C:\WINDOWS\system32\iccvid.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\ieencode.dll |28/10/2004 15:27:31
C:\WINDOWS\system32\imagr5.dll |21/09/2000 17:02:28
C:\WINDOWS\system32\imagx5.dll |27/09/2000 16:15:06
C:\WINDOWS\system32\ImagXpr5.dll |21/09/2000 12:53:00
C:\WINDOWS\system32\inetda.dll |02/08/2001 04:11:25
C:\WINDOWS\system32\IpLib.dll |23/10/2006 19:29:44
C:\WINDOWS\system32\ir32_32.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\ir41_qc.dll |28/10/2004 15:27:31
C:\WINDOWS\system32\ir41_qcx.dll |28/10/2004 15:27:31
C:\WINDOWS\system32\ir50_32.dll |28/10/2004 15:27:31
C:\WINDOWS\system32\ir50_qc.dll |28/10/2004 15:27:31
C:\WINDOWS\system32\ir50_qcx.dll |28/10/2004 15:27:31
C:\WINDOWS\system32\isrdbg32.dll |28/10/2004 15:48:58
C:\WINDOWS\system32\jgaw400.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\jgdw400.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\jgmd400.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\jgpl400.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\jgsd400.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\jgsh400.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\KMVIDC32.DLL |30/11/2004 18:40:54
C:\WINDOWS\system32\mdmxsdk.dll |28/10/2004 15:27:31
C:\WINDOWS\system32\mdwmdmsp.dll |23/08/2001 18:47:06
C:\WINDOWS\system32\mrvdlg.dll |28/10/2004 16:17:56
C:\WINDOWS\system32\msdmo.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\msencode.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\msttxl16.dll |24/02/1998 23:21:00
C:\WINDOWS\system32\MSWAY.dll |26/12/2005 11:09:15
C:\WINDOWS\system32\msxwnet32.dll |16/05/2001 11:52:26
C:\WINDOWS\system32\mtxparhd.dll |28/10/2004 15:27:30
C:\WINDOWS\system32\nv4_disp.dll |28/10/2004 15:27:30
C:\WINDOWS\system32\Oemdspif.dll |29/09/2004 07:18:36
C:\WINDOWS\system32\paqsp.dll |23/08/2001 18:47:16
C:\WINDOWS\system32\pdfcmnnt.dll |26/03/2006 10:49:45
C:\WINDOWS\system32\picn20.dll |21/09/2000 07:47:10
C:\WINDOWS\system32\pnc32301.dll |02/01/2005 21:33:58
C:\WINDOWS\system32\pnc32401.dll |02/01/2005 21:33:58
C:\WINDOWS\system32\pncrt.dll |11/08/1998 15:18:44
C:\WINDOWS\system32\pndx5016.dll |26/11/2004 21:09:27
C:\WINDOWS\system32\pndx5032.dll |26/11/2004 21:09:27
C:\WINDOWS\system32\pnen3230.dll |02/01/2005 21:33:58
C:\WINDOWS\system32\pneng101.dll |02/01/2005 21:33:58
C:\WINDOWS\system32\PSIKey.dll |26/10/2004 23:38:24
C:\WINDOWS\system32\ptipbmf.dll |28/10/2004 16:18:41
C:\WINDOWS\system32\qedwipes.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\qt-mt331.dll |26/10/2004 23:39:05
C:\WINDOWS\system32\quxfwhbc.dll |18/12/2006 19:18:34
C:\WINDOWS\system32\RA3214_4.dll |11/08/1998 15:18:44
C:\WINDOWS\system32\ra3228_8.dll |11/08/1998 15:18:44
C:\WINDOWS\system32\ra32clv1.dll |11/08/1998 15:18:44
C:\WINDOWS\system32\ra32dnet.dll |11/08/1998 15:18:44
C:\WINDOWS\system32\ra32rv10.dll |11/08/1998 15:18:44
C:\WINDOWS\system32\ra32sipr.dll |11/08/1998 15:18:44
C:\WINDOWS\system32\rarv1032.dll |11/08/1998 15:18:44
C:\WINDOWS\system32\rarv10en.dll |02/01/2005 21:33:58
C:\WINDOWS\system32\RGSS100J.dll |11/06/2005 15:48:26
C:\WINDOWS\system32\rmevents.dll |02/01/2005 21:33:58
C:\WINDOWS\system32\rmmerge2.dll |02/01/2005 21:33:58
C:\WINDOWS\system32\rmoc3260.dll |26/11/2004 21:09:32
C:\WINDOWS\system32\Roboex32.dll |30/01/2005 14:44:37
C:\WINDOWS\system32\RTLCPAPI.dll |28/10/2004 16:12:34
C:\WINDOWS\system32\s3gnb.dll |28/10/2004 15:27:30
C:\WINDOWS\system32\sbe.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\SIntf16.dll |10/12/2004 17:11:20
C:\WINDOWS\system32\SIntf32.dll |10/12/2004 17:11:20
C:\WINDOWS\system32\SIntfNT.dll |10/12/2004 17:11:20
C:\WINDOWS\system32\slbcsp.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\slbiop.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\slbrccsp.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\slcoinst.dll |28/10/2004 15:27:30
C:\WINDOWS\system32\slextspk.dll |28/10/2004 15:27:30
C:\WINDOWS\system32\slgen.dll |28/10/2004 15:27:30
C:\WINDOWS\system32\spnike.dll |23/08/2001 18:47:18
C:\WINDOWS\system32\sprio600.dll |23/08/2001 18:47:18
C:\WINDOWS\system32\sprio800.dll |23/08/2001 18:47:18
C:\WINDOWS\system32\spxcoins.dll |01/01/2002 00:07:12
C:\WINDOWS\system32\swxpckm.dll |19/11/2006 10:13:15
C:\WINDOWS\system32\tsd32.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\TwnLib20.dll |26/06/2000 10:45:30
C:\WINDOWS\system32\unrar.dll |06/12/2004 20:06:06
C:\WINDOWS\system32\unzip32.dll |05/12/2004 22:08:08
C:\WINDOWS\system32\usrcntra.dll |23/08/2001 18:47:20
C:\WINDOWS\system32\usrcoina.dll |23/08/2001 18:47:20
C:\WINDOWS\system32\usrdpa.dll |23/08/2001 18:47:20
C:\WINDOWS\system32\usrdtea.dll |23/08/2001 18:47:20
C:\WINDOWS\system32\usrfaxa.dll |23/08/2001 18:47:20
C:\WINDOWS\system32\usrlbva.dll |23/08/2001 18:47:20
C:\WINDOWS\system32\usrrtosa.dll |23/08/2001 18:47:20
C:\WINDOWS\system32\usrsdpia.dll |23/08/2001 18:47:20
C:\WINDOWS\system32\usrsvpia.dll |23/08/2001 18:47:20
C:\WINDOWS\system32\usrv42a.dll |23/08/2001 18:47:20
C:\WINDOWS\system32\usrv80a.dll |23/08/2001 18:47:20
C:\WINDOWS\system32\usrvoica.dll |23/08/2001 18:47:20
C:\WINDOWS\system32\usrvpa.dll |23/08/2001 18:47:20
C:\WINDOWS\system32\vboxb410.dll |13/06/2001 03:52:44
C:\WINDOWS\system32\vboxp410.dll |13/06/2001 03:52:45
C:\WINDOWS\system32\vboxt410.dll |13/06/2001 03:52:45
C:\WINDOWS\system32\vturs.dll |05/12/2006 17:40:17
C:\WINDOWS\system32\wbhelp2.dll |02/11/2004 22:03:21
C:\WINDOWS\system32\WG1v2Lib.dll |23/10/2006 19:29:44
C:\WINDOWS\system32\wh2robo.dll |30/01/2005 14:44:37
C:\WINDOWS\system32\win87em.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\WmJoyFrc.dll |21/08/2006 14:02:54
C:\WINDOWS\system32\xmlparse.dll |08/12/2004 13:09:09
C:\WINDOWS\system32\xmltok.dll |08/12/2004 13:09:09
C:\WINDOWS\system32\ZPORT4AS.dll |23/01/2006 20:11:05

Le volume dans le lecteur C s'appelle Wxp
Le numéro de série du volume est 84B2-DB13

Répertoire de C:\WINDOWS\system32

19.08.2004 15:09 6'144 csrss.exe
1 fichier(s) 6'144 octets
0 Rép(s) 32'159'334'400 octets libres

Contenu de Downloaded Program Files
Le volume dans le lecteur C s'appelle Wxp
Le numéro de série du volume est 84B2-DB13

Répertoire de C:\WINDOWS\Downloaded Program Files

26.12.2006 11:17 <REP> .
26.12.2006 11:17 <REP> ..
11.04.2006 16:10 135'168 asinst.dll
03.04.2006 10:00 537 asinst.inf
17.05.2006 13:32 198'304 avsniffdlgs.dll
17.05.2006 13:26 537'704 AXXPEE.dll
06.09.2006 00:00 2'504 catalog.dat
18.11.2006 12:20 <REP> CONFLICT.1
22.12.2006 18:18 <REP> CONFLICT.2
22.12.2006 18:18 <REP> CONFLICT.3
22.12.2006 18:18 <REP> CONFLICT.4
26.12.2006 11:17 <REP> CONFLICT.5
22.12.2006 18:18 <REP> CONFLICT.6
28.10.2004 15:49 65 desktop.ini
06.09.2006 00:00 6'899 ecbootil.vxd
17.05.2006 13:26 42'112 ecmldr32.dll
06.09.2006 00:00 272'040 ecmsvr32.dll
08.09.2004 22:38 1'271 erma.inf
14.02.2003 09:32 283'296 IDrop.ocx
14.02.2003 09:34 114'848 IDropENU.dll
13.03.2003 09:58 114'600 IDropFRA.dll
10.11.2005 13:05 876 jinstall-1_5_0_06.inf
29.11.2006 14:00 367 LegitCheckControl.inf
17.05.2006 13:28 6'850 navapi.vxd
17.05.2006 13:28 201'896 navapi32.dll
06.09.2006 00:00 124'584 naveng32.dll
06.09.2006 00:00 882'344 navex32a.dll
09.12.2005 14:47 24'576 playershim.dll
09.10.2003 10:32 144 QTPlugin.inf
06.09.2006 00:00 97'552 scrauth.dat
22.06.2006 10:41 5'032 swflash.inf
06.09.2006 00:00 14 symaveng.cat
06.09.2006 00:00 901 symaveng.inf
06.09.2006 00:00 48'797 tcdefs.dat
06.09.2006 00:00 966'264 tcscan7.dat
06.09.2006 00:00 315'136 tcscan8.dat
06.09.2006 00:00 659'400 tcscan9.dat
06.09.2006 00:00 453 tinf.dat
06.09.2006 00:00 148 tinfidx.dat
06.09.2006 00:00 1'957 tinfl.dat
06.09.2006 00:00 58'587 tscan1.dat
06.09.2006 00:00 3'027 tscan1hd.dat
06.09.2006 00:00 5'116 v.grd
06.09.2006 00:00 2'261 v.sig
06.09.2006 00:00 106'244 virscan.inf
06.09.2006 00:00 966'811 virscan1.dat
06.09.2006 00:00 569'712 virscan2.dat
06.09.2006 00:00 146'612 virscan3.dat
06.09.2006 00:00 320'186 virscan4.dat
06.09.2006 00:00 2'700'020 virscan5.dat
06.09.2006 00:00 389'301 virscan6.dat
06.09.2006 00:00 4'468'258 virscan7.dat
06.09.2006 00:00 1'593'724 virscan8.dat
06.09.2006 00:00 3'622'432 virscan9.dat
06.09.2006 00:00 32 virscant.dat
08.09.2006 21:30 2'072 vscanmsx.dat
06.09.2006 00:00 224 zdone.dat
49 fichier(s) 20'001'258 octets

Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.1

18.11.2006 12:20 <REP> .
18.11.2006 12:20 <REP> ..
0 fichier(s) 0 octets

Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.2

22.12.2006 18:18 <REP> .
22.12.2006 18:18 <REP> ..
0 fichier(s) 0 octets

Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.3

22.12.2006 18:18 <REP> .
22.12.2006 18:18 <REP> ..
0 fichier(s) 0 octets

Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.4

22.12.2006 18:18 <REP> .
22.12.2006 18:18 <REP> ..
0 fichier(s) 0 octets

Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.5

26.12.2006 11:17 <REP> .
26.12.2006 11:17 <REP> ..
0 fichier(s) 0 octets

Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.6

22.12.2006 18:18 <REP> .
22.12.2006 18:18 <REP> ..
0 fichier(s) 0 octets

Total des fichiers listés :
49 fichier(s) 20'001'258 octets
20 Rép(s) 32'159'330'304 octets libres

Recherche de rootkit! (Merci S!Ri)

Recherche d'infections connues

Liste des programmes installes

Ad-Aware SE Personal
Adobe Flash Player 9 ActiveX
Adobe Photoshop 6.0
Adobe Reader 7.0.8 - Français
Adobe SVG Viewer
adsl TV
Apple Software Update
Archiveur WinRAR
AsusUpdate
ATI - Utilitaire de désinstallation du logiciel
ATI Control Panel
ATI Display Driver
Audacity 1.2.4
AutoCAD 2006 - Français
Autodesk DWF Viewer
AutoUpdate
avast! Antivirus
AVG Anti-Spyware 7.5
BitTorrent 4.0.1
CCleaner (remove only)
DirectX for Managed Code Update (December 2004)
DivX Player
DivX Pro Trial
Download Accelerator Plus
EA SPORTS online 2006
Easy TM 2.4
eMule
FileZilla (remove only)
Freelancer
GeTax2005
Google Earth
Google Toolbar for Internet Explorer
Highway Pursuit v1.1
HijackThis 1.99.1
IGNMap 0.8.1
iTunes
J2SE Runtime Environment 5.0 Update 6
J2SE Runtime Environment 5.0 Update 9
K700i USB-Handset Manager
Language pack for Ad-Aware SE
Lecteur Windows Media 10
Logitech Desktop Messenger
Logitech Gaming Software
Logitech SetPoint
LX Systems Download Manager
Macromedia Shockwave Player
MediaLife
Messenger Plus! 3 & Sponsor
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 French Language Pack
Microsoft .NET Framework 1.1 Hotfix (KB886903)
Microsoft .NET Framework 2.0
Microsoft .NET Framework 2.0
Microsoft .NET Framework 2.0 Language Pack - FRA
Microsoft Game Studios Common Redistributables Pack 1
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office Access MUI (French) 2007 (Beta)
Microsoft Office Excel MUI (French) 2007 (Beta)
Microsoft Office InfoPath MUI (French) 2007 (Beta)
Microsoft Office Outlook MUI (French) 2007 (Beta)
Microsoft Office PowerPoint MUI (French) 2007 (Beta)
Microsoft Office Professional 2007 (Beta)
Microsoft Office Professional Plus 2007 (Beta)
Microsoft Office Proof (Arabic) 2007 (Beta)
Microsoft Office Proof (Dutch) 2007 (Beta)
Microsoft Office Proof (English) 2007 (Beta)
Microsoft Office Proof (French) 2007 (Beta)
Microsoft Office Proof (German) 2007 (Beta)
Microsoft Office Proof (Spanish) 2007 (Beta)
Microsoft Office Publisher MUI (French) 2007 (Beta)
Microsoft Office Shared MUI (French) 2007 (Beta)
Microsoft Office Word MUI (French) 2007 (Beta)
Microsoft XML Parser
Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA
MSXML 4.0 SP2 (KB927978)
MSXML4 Parser
Nero - Burning Rom
NHL06
Oblivion
Package de base Microsoft de service de chiffrement pour cartes à puce
Panda ActiveScan
PDFCreator
Plasma Pong v1.2
PowerDVD
Prince of Persia T2T
Prince of Persia The Two Thrones
QuickTime
RealPlayer
Realtek AC'97 Audio
Rise Of Legends
Rise Of Legends
Rise of Nations
Security Update for Microsoft .NET Framework 2.0 (KB917283)
Security Update pour Microsoft .NET Framework 2.0 (KB922770)
Sony Ericsson Capability Manager
Sony Ericsson Mobile Phone Monitor
Spybot - Search & Destroy 1.4
Starcraft
Steganos Internet Anonym 7.1.6
TrackMania Nations ESWC 0.1.7.5
Watchtower Library 2005 - Édition française
WebFldrs XP
WG111v2 Configuration Utility
Windows Defender
Windows Defender Signatures
Windows Genuine Advantage Notifications (KB905474)
Windows Live Messenger
Windows Live Sign-in Assistant
Windows Media Connect
Windows Media Format Runtime
Windows XP Service Pack 2

Le volume dans le lecteur C s'appelle Wxp
Le numéro de série du volume est 84B2-DB13

Répertoire de C:\Program Files

30.12.2006 14:33 <REP> .
30.12.2006 14:33 <REP> ..
11.09.2005 12:49 <REP> A4DeskMag2
24.11.2005 18:37 <REP> Admiresoft
26.03.2006 11:33 <REP> Adobe
13.11.2006 18:27 <REP> adslTV
01.01.2002 14:00 <REP> Ahead
06.02.2006 21:55 <REP> Alwil Software
07.06.2005 21:58 <REP> America's Army
05.11.2006 13:44 <REP> AnswerWorks 4.0
06.11.2006 21:17 <REP> Apple Software Update
25.03.2005 19:06 <REP> Ashampoo
28.10.2004 15:45 <REP> ASUS
28.10.2004 16:20 <REP> ATI Technologies
02.08.2006 19:03 <REP> Audacity
05.11.2006 13:49 <REP> AutoCAD 2006
04.11.2006 21:25 <REP> Autodesk
24.11.2005 18:36 <REP> AV MP3 Player-Morpher
28.10.2004 16:12 <REP> AvRack
19.04.2005 17:36 <REP> BitTorrent
27.03.2005 20:03 <REP> BoontyGames
18.11.2006 23:03 <REP> CCleaner
12.01.2006 18:02 <REP> Clash N Slash
14.01.2006 15:33 <REP> Common Files
07.02.2006 21:16 <REP> Comodo
28.10.2004 15:48 <REP> ComPlus Applications
29.10.2006 15:16 <REP> Corel(R) Painter(TM) IX.5 TBYB FR
21.03.2005 19:10 <REP> Creative
01.01.2002 13:57 <REP> CyberLink
26.12.2006 11:17 <REP> DAP
22.11.2004 21:21 <REP> directx
20.11.2004 10:31 <REP> DivX
17.04.2006 13:28 <REP> DOSBox-0.65
15.04.2006 11:42 <REP> D-Tools
18.11.2006 12:12 <REP> Easy TM
02.01.2002 16:26 <REP> eMule
21.06.2005 17:15 <REP> eoRezo
30.12.2006 14:15 <REP> Fichiers communs
03.04.2006 18:42 <REP> FileZilla
27.06.2005 21:22 <REP> FlashFXP
02.11.2006 22:05 <REP> F-Secure
11.03.2005 17:33 <REP> Game_Maker6
26.03.2006 11:34 <REP> GeTax2005
31.10.2006 21:26 <REP> Google
22.12.2006 17:10 <REP> Grisoft
30.04.2005 19:00 <REP> GSC Game World
12.09.2005 20:08 <REP> IDM Computer Solutions
18.12.2006 22:13 <REP> IGN
24.09.2006 12:39 <REP> IKEA HomePlanner
17.04.2005 13:31 <REP> Illustrate
28.10.2004 16:03 <REP> Intel
11.01.2006 18:47 <REP> InterActual
17.12.2006 18:21 <REP> Internet Explorer
06.11.2006 21:21 <REP> iPod
06.11.2006 21:22 <REP> iTunes
13.11.2006 18:41 <REP> Java
08.12.2004 12:57 <REP> K700i USB-Handset Manager
04.11.2006 16:24 <REP> Lavasoft
27.12.2005 12:02 <REP> Lecteur CANALPLAY
17.06.2006 13:00 <REP> LimeWire
21.08.2006 14:02 <REP> Logitech
15.05.2005 16:17 <REP> LucasFan Games
25.03.2005 20:32 <REP> LX Download Manager
23.01.2006 20:24 <REP> Messenger
24.09.2006 12:33 <REP> Messenger Plus! 3
28.10.2004 15:50 <REP> microsoft frontpage
23.05.2006 16:36 <REP> Microsoft Games
05.11.2006 13:44 <REP> Microsoft Office
02.07.2006 20:05 <REP> Microsoft Visual Studio
02.07.2006 20:04 <REP> Microsoft Works
02.07.2006 20:04 <REP> Microsoft.NET
16.12.2006 16:54 <REP> Movie Maker
09.01.2006 17:35 <REP> Mozilla Firefox
02.07.2006 20:05 <REP> MSBuild
28.10.2004 15:48 <REP> MSN
28.10.2004 15:48 <REP> MSN Gaming Zone
02.11.2006 22:24 <REP> MSN Messenger
17.11.2006 19:02 <REP> MSXML 4.0
12.09.2005 17:19 <REP> MUSICMATCH
19.04.2005 20:10 <REP> NASA
23.10.2006 19:29 <REP> NETGEAR
28.10.2004 15:26 <REP> NetMeeting
07.09.2006 14:40 <REP> Notepad++
04.01.2002 18:33 <REP> OfficeUpdate11
11.12.2006 19:03 <REP> Opera
16.12.2006 16:54 <REP> Outlook Express
26.03.2006 10:50 <REP> PDFCreator
16.05.2005 17:39 <REP> PeerGuardian pr14
09.03.2005 18:13 <REP> Plustech Inc
27.03.2005 13:48 <REP> PopCap Games
06.11.2006 21:20 <REP> QuickTime
26.11.2004 21:09 <REP> Real
28.10.2004 16:12 <REP> Realtek Sound Manager
21.08.2006 14:07 <REP> ReflexiveArcade
18.02.2005 18:07 <REP> ScreenSaver
23.01.2006 20:26 <REP> Secure Surfing Engine
28.10.2004 15:48 <REP> Services en ligne
28.09.2006 10:59 <REP> Sony Ericsson
01.05.2006 16:03 <REP> Spybot - Search & Destroy
04.11.2006 20:08 <REP> Spybot - Search & Destroy2
23.01.2006 20:26 <REP> Steganos Internet Anonym 7
27.12.2005 12:03 <REP> StreetFighter Flash
17.06.2006 12:53 <REP> TheTurtle
07.02.2006 18:22 <REP> Trustix
31.07.2005 12:04 <REP> Ubi Soft
08.12.2004 13:09 <REP> Ubisoft
01.06.2005 22:14 <REP> Ulead Systems
17.06.2006 12:59 <REP> Visicom Media
17.06.2005 19:32 <REP> VoipBuster.com
20.02.2006 19:44 <REP> Watchtower
09.03.2006 22:47 <REP> Webteh
18.11.2006 22:51 <REP> Windows Defender
05.11.2004 17:41 <REP> Windows Media Components
04.09.2006 19:43 <REP> Windows Media Connect 2
16.12.2006 16:54 <REP> Windows Media Player
28.10.2004 15:26 <REP> Windows NT
27.08.2005 19:55 <REP> WinHex
23.01.2006 20:26 <REP> WinRAR
28.10.2004 15:50 <REP> xerox
19.11.2006 13:26 <REP> ?ssembly
04.11.2006 12:26 <REP> ??stem
0 fichier(s) 0 octets
121 Rép(s) 32'159'117'312 octets libres
Le volume dans le lecteur C s'appelle Wxp
Le numéro de série du volume est 84B2-DB13

Répertoire de C:\Program Files\fichiers communs

30.12.2006 14:15 <REP> .
30.12.2006 14:15 <REP> ..
26.03.2006 11:33 <REP> Adobe
05.11.2006 13:50 <REP> Autodesk Shared
05.08.2006 10:52 <REP> AVSMedia
05.11.2006 13:44 <REP> DESIGNER
21.11.2004 15:01 <REP> InstallShield
05.09.2006 20:30 <REP> Java
21.08.2006 14:02 <REP> Logitech
03.11.2004 19:17 <REP> Macrovision Shared
05.11.2006 13:44 <REP> Microsoft Shared
28.10.2004 15:48 <REP> MSSoap
01.01.2002 00:07 <REP> ODBC
24.09.2006 12:54 <REP> Panda Software
26.11.2004 21:09 <REP> Real
28.10.2004 15:48 <REP> Services
01.01.2002 00:07 <REP> SpeechEngines
20.06.2006 20:39 <REP> Synacast
16.12.2006 14:55 <REP> System
28.09.2006 10:59 <REP> Teleca Shared
26.11.2004 21:09 <REP> xing shared
22.12.2006 18:18 <REP> {84B2DB13-0C7E-1036-0924-040307090029}
0 fichier(s) 0 octets
22 Rép(s) 32'159'113'216 octets libres
Le volume dans le lecteur C s'appelle Wxp
Le numéro de série du volume est 84B2-DB13

Répertoire de C:\Program Files\fichiers communs\Microsoft Shared\Web Folders

02.07.2006 20:05 <REP> .
02.07.2006 20:05 <REP> ..
04.01.2002 18:27 <REP> 1033
02.07.2006 19:59 <REP> 1036
25.04.2006 20:33 967'952 MSONSEXT.DLL
02.05.2006 18:37 40'208 MSOSV.DLL
03.06.1999 13:09 122'937 MSOWS409.DLL
07.03.2001 08:00 127'033 MSOWS40c.DLL
11.07.2003 02:25 80'448 PKMWS.DLL
5 fichier(s) 1'338'578 octets
4 Rép(s) 32'159'113'216 octets libres
Le volume dans le lecteur C s'appelle Wxp
Le numéro de série du volume est 84B2-DB13

Répertoire de C:\Program Files\common files

14.01.2006 15:33 <REP> .
14.01.2006 15:33 <REP> ..
21.08.2006 17:33 <REP> EasyInfo
20.02.2005 12:17 <REP> Stardock
0 fichier(s) 0 octets
4 Rép(s) 32'159'113'216 octets libres
Le volume dans le lecteur C s'appelle Wxp
Le numéro de série du volume est 84B2-DB13

Répertoire de C:\

11.11.2001 00:00 68'096 diff.exe
27.08.2006 14:10 103'424 grep.exe
31.10.2005 16:56 700'416 StubInstaller.exe
24.05.2001 11:59 162'304 UNWISE.EXE
4 fichier(s) 1'034'240 octets
0 Rép(s) 32'159'113'216 octets libres
c:\Documents and Settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 7.0.2.16\iTunesSetupAdmin.exe
c:\Documents and Settings\Wxp\.limewire\.NetworkShare\LimeWireWin4.10.5.exe
c:\Documents and Settings\Wxp\.limewire\.NetworkShare\Incomplete\T-2840440-LimeWireWin4.10.9.exe
c:\Documents and Settings\Wxp\Bureau\VundoFix.exe
c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\diff.exe
c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\FilesInfoCmd.exe
c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\grep.exe
c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\LFiles.exe
c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\LISTDLLS.exe
c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\streams.exe
c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\swreg.exe
c:\Documents and Settings\Wxp\Bureau\newbie\crackme1.exe
c:\Documents and Settings\Wxp\Bureau\newbie\stega11.exe
c:\Documents and Settings\Wxp\Bureau\newbie\stega22.exe
c:\Documents and Settings\Wxp\Bureau\newbie\stega4.exe
c:\Documents and Settings\Wxp\Bureau\newbie\HexDecCharEditor\HexDecCharEditor.exe
c:\Documents and Settings\Wxp\Bureau\newbie\Nouveau dossier\ocamlq-public[1].exe
c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\dumphive.exe
c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\GenericRenosFix.exe
c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\Reboot.exe
c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\SmiUpdate.exe
c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\SrchSTS.exe
c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\swreg.exe
c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\swsc.exe
c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\swxcacls.exe
c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\unzip.exe
c:\Documents and Settings\Wxp\Bureau\Steganos Updates\sia7int.exe
c:\Documents and Settings\Wxp\Mes documents\Ma musique\Adoprixtixics\4dsportdriving\LOAD.EXE
c:\Documents and Settings\Wxp\Mes documents\Ma musique\Adoprixtixics\4dsportdriving\SETUP.EXE
c:\Documents and Settings\All Users\Application Data\Microsoft\IdentityCRL\ppcrlconfig.dll
c:\Documents and Settings\All Users\Application Data\Microsoft\IdentityCRL\production\ppcrlconfig.dll
c:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\Backup\mpengine.dll
c:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\Default\MpEngine.dll
c:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\{15BEA3B1-56BA-483F-B423-5FF9C3F2C64C}\mpengine.dll
c:\Documents and Settings\LocalService\Application Data\Microsoft\UPnP Device Host\upnphost\udhisapi.dll
c:\Documents and Settings\Wxp\Application Data\Microsoft\IdentityCRL\ppcrlconfig.dll

Bonjour

c'est déja mieux.
Encore quelques corrections.

Une partie de la procédure se déroulera sans avoir accès à internet, prière d'imprimer ces instructions, ou de les coller dans un fichier texte, pour lecture durant cette désinfection.
Les manipulations sont à faire sans interruption et dans l'ordre.
Si tu ne comprends pas quelque chose, demande des explications avant de commencer

1 Redémarre en mode sans échec. Attention, tu n'as pas accès à internet dans ce mode, note bien ce que tu as à faire.
Démarre l'ordinateur.
Une fois le chargement du BIOS terminé, il y a un écran noir. Appuye sur la touche F8 ou F5 jusqu'à l'affichage du menu des options avancées de Windows.
En utilisant les touches du curseur, sélectionne le mode sans échec approprié et appuye sur Entrée.

2 Assure toi d'avoir accés à tous les fichiers.
Démarrer, Poste de travail ou autre dossier, Menu Outils, Option des dossiers, onglet Affichage :
Activer la case : Afficher les fichiers et dossiers cachés
Désactiver la case : Masquer les extensions des fichiers dont le type est connu
Désactiver la case : Masquer les fichiers protégés du système d'exploitation
Puis Appliquer

3 Désinstalle ces applications (si tu les trouves) dans Ajout-Suppression de programmes :

MediaTickets by OIN
Adverts
?ssembly
??stem

4 Supprime les fichiers/dossiers incriminés (s'ils existent encore) :

C:\Program Files\MediaTickets by OIN
C:\Program Files\Adverts
C:\Program Files\?ssembly
C:\Program Files\??stem
c:\Documents and Settings\Wxp\Bureau\avgas-setup-7.5.0.50.exe
c:\Documents and Settings\Wxp\Bureau\blbeta.exe
c:\Documents and Settings\Wxp\Bureau\drweb-cureit.exe
c:\Documents and Settings\Wxp\Bureau\mwav.exe
c:\Documents and Settings\Wxp\Bureau\SmitfraudFix.exe
c:\Documents and Settings\Wxp\DoctorWeb
C:\WINDOWS\System32\xwjoalvq.ini
C:\WINDOWS\System32\odtpfici.dll
C:\WINDOWS\System32\wbqmyces.dll
C:\WINDOWS\System32\axgvpryj.dll
C:\WINDOWS\System32\njimnfjf.dll
C:\WINDOWS\System32\cpdymfnb.dll
C:\WINDOWS\System32\cbhwfxuq.ini
C:\WINDOWS\System32\muaktpvk.dll
C:\WINDOWS\System32\efvnvkme.dll
C:\WINDOWS\System32\cvfginer.dll
C:\WINDOWS\System32\gtmbnrcp.dll
C:\WINDOWS\System32\jrharjaq.dll
C:\WINDOWS\System32\rvoqxscq.dll
C:\WINDOWS\System32\quxfwhbc.dll
C:\WINDOWS\system32\vturs.dll
c:\WINDOWS\system32\dmgr2.exe

Recache les fichiers systeme afin de ne pas faire d'erreur à l'avenir en sélectionnant ne pas afficher les fichiers cachés ou les fichiers système.

5 Lance le nettoyage avec CCleaner

6 Redémarre normalement

Poste un nouveau rapport DiagHelp.

et celui de DiagHelp :

C:\WINDOWS\System32\wpa.dbl -->27.12.2006 09:41:25
C:\WINDOWS\System32\perfh00C.dat -->23.12.2006 10:56:18
C:\WINDOWS\System32\perfh009.dat -->23.12.2006 10:56:18
C:\WINDOWS\System32\perfc00C.dat -->23.12.2006 10:56:18
C:\WINDOWS\System32\perfc009.dat -->23.12.2006 10:56:18
C:\WINDOWS\System32\PerfStringBackup.INI -->23.12.2006 10:56:17
C:\WINDOWS\System32\xwjoalvq.ini -->23.12.2006 10:45:05
C:\WINDOWS\System32\odtpfici.dll -->22.12.2006 19:44:58
C:\WINDOWS\System32\wbqmyces.dll -->22.12.2006 19:20:41
C:\WINDOWS\System32\axgvpryj.dll -->22.12.2006 18:22:27
C:\WINDOWS\System32\njimnfjf.dll -->22.12.2006 17:37:06
C:\WINDOWS\System32\tmp.txt -->22.12.2006 17:34:49
C:\WINDOWS\System32\tmp.reg -->22.12.2006 17:34:49
C:\WINDOWS\System32\cpdymfnb.dll -->22.12.2006 17:33:49
C:\WINDOWS\System32\cbhwfxuq.ini -->22.12.2006 17:33:08
C:\WINDOWS\System32\muaktpvk.dll -->22.12.2006 17:02:57
C:\WINDOWS\System32\efvnvkme.dll -->21.12.2006 19:03:21
C:\WINDOWS\System32\cvfginer.dll -->20.12.2006 22:39:03
C:\WINDOWS\System32\gtmbnrcp.dll -->20.12.2006 18:34:44
C:\WINDOWS\System32\jrharjaq.dll -->20.12.2006 18:14:52
C:\WINDOWS\System32\rvoqxscq.dll -->19.12.2006 21:08:23
C:\WINDOWS\System32\quxfwhbc.dll -->18.12.2006 19:18:38
C:\WINDOWS\System32\spupdsvc.inf -->17.12.2006 18:19:27
C:\WINDOWS\System32\mcrh.tmp -->17.12.2006 14:26:34
C:\WINDOWS\System32\MRT.exe -->08.12.2006 00:13:44

C:\WINDOWS\BlendSettings.ini -->27.12.2006 14:42:40
C:\WINDOWS\WindowsUpdate.log -->27.12.2006 09:40:58
C:\WINDOWS\bootstat.dat -->27.12.2006 09:40:48
C:\WINDOWS\SchedLgU.Txt -->26.12.2006 23:29:25
C:\WINDOWS\QTFont.qfn -->26.12.2006 18:44:24
C:\WINDOWS\QTFont.for -->24.12.2006 16:04:06
C:\WINDOWS\cdPlayer.ini -->26.11.2006 14:29:21
C:\WINDOWS\Thumbs.db -->19.11.2006 16:47:33
C:\WINDOWS\SWPRODPB.INI -->06.11.2006 23:17:10
C:\WINDOWS\system.ini -->06.11.2006 22:46:44
C:\WINDOWS\cserve.ini -->01.11.2006 21:44:14
C:\WINDOWS\WMSysPr9.prx -->04.10.2006 19:46:53
C:\WINDOWS\mngui.INI -->28.09.2006 10:43:09
C:\WINDOWS\pavsig.txt -->08.09.2006 19:57:38
C:\WINDOWS\BricoPackFoldersDelete.cmd -->12.08.2006 16:08:45

C:\WINDOWS\ALCFDRTM.EXE |03/01/2002 17:07:42
C:\WINDOWS\alcrmv.exe |28/10/2004 16:12:26
C:\WINDOWS\alcupd.exe |28/10/2004 16:12:26
C:\WINDOWS\bwUnin-6.1.4.68-8876480L.exe |02/07/2005 17:43:37
C:\WINDOWS\bwUnin-7.2.0.137-8876480SL.exe |17/07/2005 18:21:58
C:\WINDOWS\bwUnin-7.2.0.157-8876480SL.exe |02/04/2006 17:45:49
C:\WINDOWS\GPInstall.exe |09/02/2005 17:57:37
C:\WINDOWS\IsUn040c.exe |28/10/2004 15:57:55
C:\WINDOWS\IsUninst.exe |28/10/2004 15:45:05
C:\WINDOWS\iun6002.exe |20/07/2005 20:25:04
C:\WINDOWS\ScUnin.exe |24/09/2005 13:02:20
C:\WINDOWS\Setup1.exe |18/12/2004 13:14:19
C:\WINDOWS\slrundll.exe |28/10/2004 15:27:29
C:\WINDOWS\SOUNDMAN.EXE |28/10/2004 16:12:34
C:\WINDOWS\twunk_16.exe |24/04/2003 13:00:00
C:\WINDOWS\twunk_32.exe |24/04/2003 13:00:00
C:\WINDOWS\una2setup.exe |06/12/2004 20:06:03
C:\WINDOWS\unADesktop.exe |14/01/2005 15:43:51
C:\WINDOWS\unin040c.exe |16/02/2005 17:56:29
C:\WINDOWS\uninst.exe |18/08/2005 16:50:31
C:\WINDOWS\USBK700iphmgunin.exe |04/01/2002 19:44:54
C:\WINDOWS\twain.dll |24/04/2003 13:00:00
C:\WINDOWS\twain_32.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\AcSignOpt.exe |05/03/2005 13:18:15
C:\WINDOWS\system32\append.exe |24/04/2003 13:00:00
C:\WINDOWS\system32\asuninst.exe |23/01/2006 20:11:05
C:\WINDOWS\system32\aswBoot.exe |02/11/2006 22:11:06
C:\WINDOWS\system32\ati2evxx.exe |29/09/2004 07:16:44
C:\WINDOWS\system32\Ati2mdxx.exe |29/09/2004 07:18:28
C:\WINDOWS\system32\ati2sgag.exe |28/10/2004 16:20:39
C:\WINDOWS\system32\debug.exe |24/04/2003 13:00:00
C:\WINDOWS\system32\dmgr2.exe |25/03/2005 20:32:41
C:\WINDOWS\system32\dosx.exe |24/04/2003 13:00:00
C:\WINDOWS\system32\dvdplay.exe |23/08/2001 18:47:34
C:\WINDOWS\system32\edlin.exe |24/04/2003 13:00:00
C:\WINDOWS\system32\exe2bin.exe |24/04/2003 13:00:00
C:\WINDOWS\system32\fastopen.exe |24/04/2003 13:00:00
C:\WINDOWS\system32\java.exe |13/11/2006 18:41:29
C:\WINDOWS\system32\javaw.exe |13/11/2006 18:41:29
C:\WINDOWS\system32\javaws.exe |13/11/2006 18:41:29
C:\WINDOWS\system32\mem.exe |24/04/2003 13:00:00
C:\WINDOWS\system32\mscdexnt.exe |24/04/2003 13:00:00
C:\WINDOWS\system32\NeroCheck.exe |09/07/2001 11:50:42
C:\WINDOWS\system32\nlsfunc.exe |24/04/2003 13:00:00
C:\WINDOWS\system32\redir.exe |24/04/2003 13:00:00
C:\WINDOWS\system32\reico.exe |18/02/2005 18:17:11
C:\WINDOWS\system32\RTLCPL.EXE |28/10/2004 16:12:35
C:\WINDOWS\system32\setver.exe |24/04/2003 13:00:00
C:\WINDOWS\system32\share.exe |24/04/2003 13:00:00
C:\WINDOWS\system32\slrundll.exe |28/10/2004 15:27:30
C:\WINDOWS\system32\slserv.exe |28/10/2004 15:27:30
C:\WINDOWS\system32\SpoonUninstall.exe |17/04/2005 13:31:15
C:\WINDOWS\system32\UAService7.exe |27/03/2005 14:54:25
C:\WINDOWS\system32\Uharc.exe |18/02/2005 18:16:23
C:\WINDOWS\system32\usrmlnka.exe |23/08/2001 18:47:48
C:\WINDOWS\system32\usrprbda.exe |23/08/2001 18:47:48
C:\WINDOWS\system32\usrshuta.exe |23/08/2001 18:47:48
C:\WINDOWS\system32\a3d.dll |28/10/2004 16:12:34
C:\WINDOWS\system32\AcSignExt.dll |05/03/2005 13:18:09
C:\WINDOWS\system32\AcSignExtRes.dll |07/03/2005 19:00:01
C:\WINDOWS\system32\AcSignIcon.dll |05/03/2005 13:18:12
C:\WINDOWS\system32\amstream.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\ati2cqag.dll |28/10/2004 15:27:32
C:\WINDOWS\system32\ati2dvaa.dll |28/10/2004 15:27:32
C:\WINDOWS\system32\ati2dvag.dll |28/10/2004 15:27:31
C:\WINDOWS\system32\ati2edxx.dll |29/09/2004 07:18:20
C:\WINDOWS\system32\ati2evxx.dll |29/09/2004 07:18:08
C:\WINDOWS\system32\ati3d1ag.dll |28/10/2004 15:27:31
C:\WINDOWS\system32\ati3d2ag.dll |13/11/2003 21:10:54
C:\WINDOWS\system32\ati3duag.dll |28/10/2004 15:27:31
C:\WINDOWS\system32\ATIDDC.DLL |29/09/2004 07:16:22
C:\WINDOWS\system32\ATIDEMGR.dll |29/09/2004 09:32:34
C:\WINDOWS\system32\atiiiexx.dll |29/09/2004 09:58:44
C:\WINDOWS\system32\atikvmag.dll |21/02/2006 19:11:02
C:\WINDOWS\system32\atioglx1.dll |21/02/2006 19:27:14
C:\WINDOWS\system32\atioglxx.dll |29/09/2004 07:44:00
C:\WINDOWS\system32\atipdlxx.dll |29/09/2004 07:18:50
C:\WINDOWS\system32\atitvo32.dll |29/09/2004 06:36:20
C:\WINDOWS\system32\ativcoxx.dll |09/11/2001 10:01:04
C:\WINDOWS\system32\ativtmxx.dll |28/10/2004 15:27:31
C:\WINDOWS\system32\ativvaxx.dll |28/10/2004 15:27:31
C:\WINDOWS\system32\atmfd.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\atmlib.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\Audio3D.dll |28/10/2004 16:12:34
C:\WINDOWS\system32\axgvpryj.dll |22/12/2006 18:22:25
C:\WINDOWS\system32\clrvidcc.dll |02/01/2005 21:33:57
C:\WINDOWS\system32\clrviddc.dll |11/08/1998 15:18:52
C:\WINDOWS\system32\CmdLineExt.dll |27/03/2005 14:54:25
C:\WINDOWS\system32\CNCS232.DLL |20/11/2003 14:09:09
C:\WINDOWS\system32\cncs32.dll |27/12/2005 18:15:46
C:\WINDOWS\system32\compatui.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\cpdymfnb.dll |22/12/2006 17:33:47
C:\WINDOWS\system32\cvfginer.dll |20/12/2006 22:39:02
C:\WINDOWS\system32\decdnet.dll |11/08/1998 15:18:44
C:\WINDOWS\system32\dgrpsetu.dll |01/01/2002 00:07:13
C:\WINDOWS\system32\dgsetup.dll |01/01/2002 00:07:13
C:\WINDOWS\system32\DivX.dll |26/10/2004 23:38:23
C:\WINDOWS\system32\divxdec_0407.dll |26/10/2004 23:38:18
C:\WINDOWS\system32\divxdec_040c.dll |26/10/2004 23:38:18
C:\WINDOWS\system32\divxdec_0411.dll |26/10/2004 23:38:18
C:\WINDOWS\system32\divx_xx07.dll |26/10/2004 23:38:17
C:\WINDOWS\system32\divx_xx0c.dll |26/10/2004 23:38:18
C:\WINDOWS\system32\divx_xx11.dll |26/10/2004 23:38:18
C:\WINDOWS\system32\dmgrax2.dll |25/03/2005 20:32:31
C:\WINDOWS\system32\dpu10.dll |26/10/2004 23:39:03
C:\WINDOWS\system32\dpuGUI10.dll |26/10/2004 23:39:03
C:\WINDOWS\system32\dpus10.dll |26/10/2004 23:39:03
C:\WINDOWS\system32\dpv10.dll |26/10/2004 23:39:04
C:\WINDOWS\system32\efvnvkme.dll |21/12/2006 19:03:21
C:\WINDOWS\system32\encdec.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\encdnet.dll |02/01/2005 21:33:57
C:\WINDOWS\system32\EnumDev111.dll |23/10/2006 19:29:44
C:\WINDOWS\system32\EqnClass.Dll |01/01/2002 00:07:12
C:\WINDOWS\system32\GEARAspi.dll |19/09/2006 15:43:58
C:\WINDOWS\system32\gtmbnrcp.dll |20/12/2006 18:34:42
C:\WINDOWS\system32\hsfcisp2.dll |28/10/2004 15:27:31
C:\WINDOWS\system32\hticons.dll |28/10/2004 15:48:03
C:\WINDOWS\system32\hypertrm.dll |28/10/2004 15:48:03
C:\WINDOWS\system32\iccvid.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\ieencode.dll |28/10/2004 15:27:31
C:\WINDOWS\system32\imagr5.dll |21/09/2000 17:02:28
C:\WINDOWS\system32\imagx5.dll |27/09/2000 16:15:06
C:\WINDOWS\system32\ImagXpr5.dll |21/09/2000 12:53:00
C:\WINDOWS\system32\inetda.dll |02/08/2001 04:11:25
C:\WINDOWS\system32\IpLib.dll |23/10/2006 19:29:44
C:\WINDOWS\system32\ir32_32.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\ir41_qc.dll |28/10/2004 15:27:31
C:\WINDOWS\system32\ir41_qcx.dll |28/10/2004 15:27:31
C:\WINDOWS\system32\ir50_32.dll |28/10/2004 15:27:31
C:\WINDOWS\system32\ir50_qc.dll |28/10/2004 15:27:31
C:\WINDOWS\system32\ir50_qcx.dll |28/10/2004 15:27:31
C:\WINDOWS\system32\isrdbg32.dll |28/10/2004 15:48:58
C:\WINDOWS\system32\jgaw400.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\jgdw400.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\jgmd400.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\jgpl400.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\jgsd400.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\jgsh400.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\jrharjaq.dll |20/12/2006 18:14:51
C:\WINDOWS\system32\KMVIDC32.DLL |30/11/2004 18:40:54
C:\WINDOWS\system32\mdmxsdk.dll |28/10/2004 15:27:31
C:\WINDOWS\system32\mdwmdmsp.dll |23/08/2001 18:47:06
C:\WINDOWS\system32\mrvdlg.dll |28/10/2004 16:17:56
C:\WINDOWS\system32\msdmo.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\msencode.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\msttxl16.dll |24/02/1998 23:21:00
C:\WINDOWS\system32\MSWAY.dll |26/12/2005 11:09:15
C:\WINDOWS\system32\msxwnet32.dll |16/05/2001 11:52:26
C:\WINDOWS\system32\mtxparhd.dll |28/10/2004 15:27:30
C:\WINDOWS\system32\muaktpvk.dll |22/12/2006 17:02:55
C:\WINDOWS\system32\njimnfjf.dll |22/12/2006 17:37:05
C:\WINDOWS\system32\nv4_disp.dll |28/10/2004 15:27:30
C:\WINDOWS\system32\odtpfici.dll |22/12/2006 19:44:55
C:\WINDOWS\system32\Oemdspif.dll |29/09/2004 07:18:36
C:\WINDOWS\system32\paqsp.dll |23/08/2001 18:47:16
C:\WINDOWS\system32\pdfcmnnt.dll |26/03/2006 10:49:45
C:\WINDOWS\system32\picn20.dll |21/09/2000 07:47:10
C:\WINDOWS\system32\pnc32301.dll |02/01/2005 21:33:58
C:\WINDOWS\system32\pnc32401.dll |02/01/2005 21:33:58
C:\WINDOWS\system32\pncrt.dll |11/08/1998 15:18:44
C:\WINDOWS\system32\pndx5016.dll |26/11/2004 21:09:27
C:\WINDOWS\system32\pndx5032.dll |26/11/2004 21:09:27
C:\WINDOWS\system32\pnen3230.dll |02/01/2005 21:33:58
C:\WINDOWS\system32\pneng101.dll |02/01/2005 21:33:58
C:\WINDOWS\system32\PSIKey.dll |26/10/2004 23:38:24
C:\WINDOWS\system32\ptipbmf.dll |28/10/2004 16:18:41
C:\WINDOWS\system32\qedwipes.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\qt-mt331.dll |26/10/2004 23:39:05
C:\WINDOWS\system32\quxfwhbc.dll |18/12/2006 19:18:34
C:\WINDOWS\system32\RA3214_4.dll |11/08/1998 15:18:44
C:\WINDOWS\system32\ra3228_8.dll |11/08/1998 15:18:44
C:\WINDOWS\system32\ra32clv1.dll |11/08/1998 15:18:44
C:\WINDOWS\system32\ra32dnet.dll |11/08/1998 15:18:44
C:\WINDOWS\system32\ra32rv10.dll |11/08/1998 15:18:44
C:\WINDOWS\system32\ra32sipr.dll |11/08/1998 15:18:44
C:\WINDOWS\system32\rarv1032.dll |11/08/1998 15:18:44
C:\WINDOWS\system32\rarv10en.dll |02/01/2005 21:33:58
C:\WINDOWS\system32\RGSS100J.dll |11/06/2005 15:48:26
C:\WINDOWS\system32\rmevents.dll |02/01/2005 21:33:58
C:\WINDOWS\system32\rmmerge2.dll |02/01/2005 21:33:58
C:\WINDOWS\system32\rmoc3260.dll |26/11/2004 21:09:32
C:\WINDOWS\system32\Roboex32.dll |30/01/2005 14:44:37
C:\WINDOWS\system32\RTLCPAPI.dll |28/10/2004 16:12:34
C:\WINDOWS\system32\rvoqxscq.dll |19/12/2006 21:08:22
C:\WINDOWS\system32\s3gnb.dll |28/10/2004 15:27:30
C:\WINDOWS\system32\sbe.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\SIntf16.dll |10/12/2004 17:11:20
C:\WINDOWS\system32\SIntf32.dll |10/12/2004 17:11:20
C:\WINDOWS\system32\SIntfNT.dll |10/12/2004 17:11:20
C:\WINDOWS\system32\slbcsp.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\slbiop.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\slbrccsp.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\slcoinst.dll |28/10/2004 15:27:30
C:\WINDOWS\system32\slextspk.dll |28/10/2004 15:27:30
C:\WINDOWS\system32\slgen.dll |28/10/2004 15:27:30
C:\WINDOWS\system32\spnike.dll |23/08/2001 18:47:18
C:\WINDOWS\system32\sprio600.dll |23/08/2001 18:47:18
C:\WINDOWS\system32\sprio800.dll |23/08/2001 18:47:18
C:\WINDOWS\system32\spxcoins.dll |01/01/2002 00:07:12
C:\WINDOWS\system32\swxpckm.dll |19/11/2006 10:13:15
C:\WINDOWS\system32\tsd32.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\TwnLib20.dll |26/06/2000 10:45:30
C:\WINDOWS\system32\unrar.dll |06/12/2004 20:06:06
C:\WINDOWS\system32\unzip32.dll |05/12/2004 22:08:08
C:\WINDOWS\system32\usrcntra.dll |23/08/2001 18:47:20
C:\WINDOWS\system32\usrcoina.dll |23/08/2001 18:47:20
C:\WINDOWS\system32\usrdpa.dll |23/08/2001 18:47:20
C:\WINDOWS\system32\usrdtea.dll |23/08/2001 18:47:20
C:\WINDOWS\system32\usrfaxa.dll |23/08/2001 18:47:20
C:\WINDOWS\system32\usrlbva.dll |23/08/2001 18:47:20
C:\WINDOWS\system32\usrrtosa.dll |23/08/2001 18:47:20
C:\WINDOWS\system32\usrsdpia.dll |23/08/2001 18:47:20
C:\WINDOWS\system32\usrsvpia.dll |23/08/2001 18:47:20
C:\WINDOWS\system32\usrv42a.dll |23/08/2001 18:47:20
C:\WINDOWS\system32\usrv80a.dll |23/08/2001 18:47:20
C:\WINDOWS\system32\usrvoica.dll |23/08/2001 18:47:20
C:\WINDOWS\system32\usrvpa.dll |23/08/2001 18:47:20
C:\WINDOWS\system32\vboxb410.dll |13/06/2001 03:52:44
C:\WINDOWS\system32\vboxp410.dll |13/06/2001 03:52:45
C:\WINDOWS\system32\vboxt410.dll |13/06/2001 03:52:45
C:\WINDOWS\system32\vturs.dll |05/12/2006 17:40:17
C:\WINDOWS\system32\wbhelp2.dll |02/11/2004 22:03:21
C:\WINDOWS\system32\wbqmyces.dll |22/12/2006 19:20:40
C:\WINDOWS\system32\WG1v2Lib.dll |23/10/2006 19:29:44
C:\WINDOWS\system32\wh2robo.dll |30/01/2005 14:44:37
C:\WINDOWS\system32\win87em.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\WmJoyFrc.dll |21/08/2006 14:02:54
C:\WINDOWS\system32\xmlparse.dll |08/12/2004 13:09:09
C:\WINDOWS\system32\xmltok.dll |08/12/2004 13:09:09
C:\WINDOWS\system32\ZPORT4AS.dll |23/01/2006 20:11:05

Le volume dans le lecteur C s'appelle Wxp
Le numéro de série du volume est 84B2-DB13

Répertoire de C:\WINDOWS\system32

19.08.2004 15:09 6'144 csrss.exe
1 fichier(s) 6'144 octets
0 Rép(s) 32'277'811'200 octets libres
Le volume dans le lecteur C s'appelle Wxp
Le numéro de série du volume est 84B2-DB13

Répertoire de C:\WINDOWS\system32

25.03.2005 20:32 860'160 dmgr2.exe
1 fichier(s) 860'160 octets
0 Rép(s) 32'277'811'200 octets libres

Contenu de Downloaded Program Files
Le volume dans le lecteur C s'appelle Wxp
Le numéro de série du volume est 84B2-DB13

Répertoire de C:\WINDOWS\Downloaded Program Files

26.12.2006 11:17 <REP> .
26.12.2006 11:17 <REP> ..
11.04.2006 16:10 135'168 asinst.dll
03.04.2006 10:00 537 asinst.inf
17.05.2006 13:32 198'304 avsniffdlgs.dll
17.05.2006 13:26 537'704 AXXPEE.dll
06.09.2006 00:00 2'504 catalog.dat
18.11.2006 12:20 <REP> CONFLICT.1
22.12.2006 18:18 <REP> CONFLICT.2
22.12.2006 18:18 <REP> CONFLICT.3
22.12.2006 18:18 <REP> CONFLICT.4
26.12.2006 11:17 <REP> CONFLICT.5
22.12.2006 18:18 <REP> CONFLICT.6
28.10.2004 15:49 65 desktop.ini
06.09.2006 00:00 6'899 ecbootil.vxd
17.05.2006 13:26 42'112 ecmldr32.dll
06.09.2006 00:00 272'040 ecmsvr32.dll
08.09.2004 22:38 1'271 erma.inf
14.02.2003 09:32 283'296 IDrop.ocx
14.02.2003 09:34 114'848 IDropENU.dll
13.03.2003 09:58 114'600 IDropFRA.dll
10.11.2005 13:05 876 jinstall-1_5_0_06.inf
29.11.2006 14:00 367 LegitCheckControl.inf
17.05.2006 13:28 6'850 navapi.vxd
17.05.2006 13:28 201'896 navapi32.dll
06.09.2006 00:00 124'584 naveng32.dll
06.09.2006 00:00 882'344 navex32a.dll
09.12.2005 14:47 24'576 playershim.dll
09.10.2003 10:32 144 QTPlugin.inf
06.09.2006 00:00 97'552 scrauth.dat
22.06.2006 10:41 5'032 swflash.inf
06.09.2006 00:00 14 symaveng.cat
06.09.2006 00:00 901 symaveng.inf
06.09.2006 00:00 48'797 tcdefs.dat
06.09.2006 00:00 966'264 tcscan7.dat
06.09.2006 00:00 315'136 tcscan8.dat
06.09.2006 00:00 659'400 tcscan9.dat
06.09.2006 00:00 453 tinf.dat
06.09.2006 00:00 148 tinfidx.dat
06.09.2006 00:00 1'957 tinfl.dat
06.09.2006 00:00 58'587 tscan1.dat
06.09.2006 00:00 3'027 tscan1hd.dat
06.09.2006 00:00 5'116 v.grd
06.09.2006 00:00 2'261 v.sig
06.09.2006 00:00 106'244 virscan.inf
06.09.2006 00:00 966'811 virscan1.dat
06.09.2006 00:00 569'712 virscan2.dat
06.09.2006 00:00 146'612 virscan3.dat
06.09.2006 00:00 320'186 virscan4.dat
06.09.2006 00:00 2'700'020 virscan5.dat
06.09.2006 00:00 389'301 virscan6.dat
06.09.2006 00:00 4'468'258 virscan7.dat
06.09.2006 00:00 1'593'724 virscan8.dat
06.09.2006 00:00 3'622'432 virscan9.dat
06.09.2006 00:00 32 virscant.dat
08.09.2006 21:30 2'072 vscanmsx.dat
06.09.2006 00:00 224 zdone.dat
49 fichier(s) 20'001'258 octets

Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.1

18.11.2006 12:20 <REP> .
18.11.2006 12:20 <REP> ..
0 fichier(s) 0 octets

Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.2

22.12.2006 18:18 <REP> .
22.12.2006 18:18 <REP> ..
0 fichier(s) 0 octets

Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.3

22.12.2006 18:18 <REP> .
22.12.2006 18:18 <REP> ..
0 fichier(s) 0 octets

Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.4

22.12.2006 18:18 <REP> .
22.12.2006 18:18 <REP> ..
0 fichier(s) 0 octets

Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.5

26.12.2006 11:17 <REP> .
26.12.2006 11:17 <REP> ..
0 fichier(s) 0 octets

Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.6

22.12.2006 18:18 <REP> .
22.12.2006 18:18 <REP> ..
0 fichier(s) 0 octets

Total des fichiers listés :
49 fichier(s) 20'001'258 octets
20 Rép(s) 32'277'807'104 octets libres

Recherche de rootkit! (Merci S!Ri)

Recherche d'infections connues

Liste des programmes installes

Ad-Aware SE Personal
Adobe Flash Player 9 ActiveX
Adobe Photoshop 6.0
Adobe Reader 7.0.8 - Français
Adobe SVG Viewer
adsl TV
Apple Software Update
Archiveur WinRAR
AsusUpdate
ATI - Utilitaire de désinstallation du logiciel
ATI Control Panel
ATI Display Driver
Audacity 1.2.4
AutoCAD 2006 - Français
Autodesk DWF Viewer
AutoUpdate
avast! Antivirus
AVG Anti-Spyware 7.5
BitTorrent 4.0.1
CCleaner (remove only)
DirectX for Managed Code Update (December 2004)
DivX Player
DivX Pro Trial
Download Accelerator Plus
EA SPORTS online 2006
Easy TM 2.4
eMule
FileZilla (remove only)
Freelancer
GeTax2005
Google Earth
Google Toolbar for Internet Explorer
Highway Pursuit v1.1
HijackThis 1.99.1
IGNMap 0.8.1
iTunes
J2SE Runtime Environment 5.0 Update 6
J2SE Runtime Environment 5.0 Update 9
K700i USB-Handset Manager
Language pack for Ad-Aware SE
Lecteur Windows Media 10
Logitech Desktop Messenger
Logitech Gaming Software
Logitech SetPoint
LX Systems Download Manager
Macromedia Shockwave Player
MediaLife
MediaTickets by OIN
Messenger Plus! 3 & Sponsor
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 French Language Pack
Microsoft .NET Framework 1.1 Hotfix (KB886903)
Microsoft .NET Framework 2.0
Microsoft .NET Framework 2.0
Microsoft .NET Framework 2.0 Language Pack - FRA
Microsoft Game Studios Common Redistributables Pack 1
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office Access MUI (French) 2007 (Beta)
Microsoft Office Excel MUI (French) 2007 (Beta)
Microsoft Office InfoPath MUI (French) 2007 (Beta)
Microsoft Office Outlook MUI (French) 2007 (Beta)
Microsoft Office PowerPoint MUI (French) 2007 (Beta)
Microsoft Office Professional 2007 (Beta)
Microsoft Office Professional Plus 2007 (Beta)
Microsoft Office Proof (Arabic) 2007 (Beta)
Microsoft Office Proof (Dutch) 2007 (Beta)
Microsoft Office Proof (English) 2007 (Beta)
Microsoft Office Proof (French) 2007 (Beta)
Microsoft Office Proof (German) 2007 (Beta)
Microsoft Office Proof (Spanish) 2007 (Beta)
Microsoft Office Publisher MUI (French) 2007 (Beta)
Microsoft Office Shared MUI (French) 2007 (Beta)
Microsoft Office Word MUI (French) 2007 (Beta)
Microsoft XML Parser
Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA
MSXML 4.0 SP2 (KB927978)
MSXML4 Parser
Nero - Burning Rom
NHL06
Oblivion
Package de base Microsoft de service de chiffrement pour cartes à puce
Panda ActiveScan
PDFCreator
Plasma Pong v1.2
PowerDVD
Prince of Persia T2T
Prince of Persia The Two Thrones
QuickTime
RealPlayer
Realtek AC'97 Audio
Rise Of Legends
Rise Of Legends
Rise of Nations
Security Update for Microsoft .NET Framework 2.0 (KB917283)
Security Update pour Microsoft .NET Framework 2.0 (KB922770)
Sony Ericsson Capability Manager
Sony Ericsson Mobile Phone Monitor
Spybot - Search & Destroy 1.4
Starcraft
Steganos Internet Anonym 7.1.6
TrackMania Nations ESWC 0.1.7.5
Watchtower Library 2005 - Édition française
WebFldrs XP
WG111v2 Configuration Utility
Windows Defender
Windows Defender Signatures
Windows Genuine Advantage Notifications (KB905474)
Windows Live Messenger
Windows Live Sign-in Assistant
Windows Media Connect
Windows Media Format Runtime
Windows XP Service Pack 2

Le volume dans le lecteur C s'appelle Wxp
Le numéro de série du volume est 84B2-DB13

Répertoire de C:\Program Files

26.12.2006 11:19 <REP> .
26.12.2006 11:19 <REP> ..
11.09.2005 12:49 <REP> A4DeskMag2
24.11.2005 18:37 <REP> Admiresoft
26.03.2006 11:33 <REP> Adobe
13.11.2006 18:27 <REP> adslTV
17.11.2005 22:30 <REP> Adverts
01.01.2002 14:00 <REP> Ahead
06.02.2006 21:55 <REP> Alwil Software
07.06.2005 21:58 <REP> America's Army
05.11.2006 13:44 <REP> AnswerWorks 4.0
06.11.2006 21:17 <REP> Apple Software Update
25.03.2005 19:06 <REP> Ashampoo
28.10.2004 15:45 <REP> ASUS
28.10.2004 16:20 <REP> ATI Technologies
02.08.2006 19:03 <REP> Audacity
05.11.2006 13:49 <REP> AutoCAD 2006
04.11.2006 21:25 <REP> Autodesk
24.11.2005 18:36 <REP> AV MP3 Player-Morpher
28.10.2004 16:12 <REP> AvRack
19.04.2005 17:36 <REP> BitTorrent
27.03.2005 20:03 <REP> BoontyGames
18.11.2006 23:03 <REP> CCleaner
12.01.2006 18:02 <REP> Clash N Slash
14.01.2006 15:33 <REP> Common Files
07.02.2006 21:16 <REP> Comodo
28.10.2004 15:48 <REP> ComPlus Applications
29.10.2006 15:16 <REP> Corel(R) Painter(TM) IX.5 TBYB FR
21.03.2005 19:10 <REP> Creative
01.01.2002 13:57 <REP> CyberLink
26.12.2006 11:17 <REP> DAP
22.11.2004 21:21 <REP> directx
20.11.2004 10:31 <REP> DivX
17.04.2006 13:28 <REP> DOSBox-0.65
15.04.2006 11:42 <REP> D-Tools
18.11.2006 12:12 <REP> Easy TM
02.01.2002 16:26 <REP> eMule
21.06.2005 17:15 <REP> eoRezo
19.11.2006 13:26 <REP> Fichiers communs
03.04.2006 18:42 <REP> FileZilla
27.06.2005 21:22 <REP> FlashFXP
02.11.2006 22:05 <REP> F-Secure
11.03.2005 17:33 <REP> Game_Maker6
26.03.2006 11:34 <REP> GeTax2005
31.10.2006 21:26 <REP> Google
22.12.2006 17:10 <REP> Grisoft
30.04.2005 19:00 <REP> GSC Game World
12.09.2005 20:08 <REP> IDM Computer Solutions
18.12.2006 22:13 <REP> IGN
24.09.2006 12:39 <REP> IKEA HomePlanner
17.04.2005 13:31 <REP> Illustrate
28.10.2004 16:03 <REP> Intel
11.01.2006 18:47 <REP> InterActual
17.12.2006 18:21 <REP> Internet Explorer
06.11.2006 21:21 <REP> iPod
06.11.2006 21:22 <REP> iTunes
13.11.2006 18:41 <REP> Java
08.12.2004 12:57 <REP> K700i USB-Handset Manager
04.11.2006 16:24 <REP> Lavasoft
27.12.2005 12:02 <REP> Lecteur CANALPLAY
17.06.2006 13:00 <REP> LimeWire
21.08.2006 14:02 <REP> Logitech
15.05.2005 16:17 <REP> LucasFan Games
25.03.2005 20:32 <REP> LX Download Manager
23.01.2006 20:24 <REP> Messenger
24.09.2006 12:33 <REP> Messenger Plus! 3
28.10.2004 15:50 <REP> microsoft frontpage
23.05.2006 16:36 <REP> Microsoft Games
05.11.2006 13:44 <REP> Microsoft Office
02.07.2006 20:05 <REP> Microsoft Visual Studio
02.07.2006 20:04 <REP> Microsoft Works
02.07.2006 20:04 <REP> Microsoft.NET
16.12.2006 16:54 <REP> Movie Maker
09.01.2006 17:35 <REP> Mozilla Firefox
02.07.2006 20:05 <REP> MSBuild
28.10.2004 15:48 <REP> MSN
28.10.2004 15:48 <REP> MSN Gaming Zone
02.11.2006 22:24 <REP> MSN Messenger
17.11.2006 19:02 <REP> MSXML 4.0
12.09.2005 17:19 <REP> MUSICMATCH
19.04.2005 20:10 <REP> NASA
23.10.2006 19:29 <REP> NETGEAR
28.10.2004 15:26 <REP> NetMeeting
07.09.2006 14:40 <REP> Notepad++
04.01.2002 18:33 <REP> OfficeUpdate11
11.12.2006 19:03 <REP> Opera
16.12.2006 16:54 <REP> Outlook Express
26.03.2006 10:50 <REP> PDFCreator
16.05.2005 17:39 <REP> PeerGuardian pr14
09.03.2005 18:13 <REP> Plustech Inc
27.03.2005 13:48 <REP> PopCap Games
06.11.2006 21:20 <REP> QuickTime
26.11.2004 21:09 <REP> Real
28.10.2004 16:12 <REP> Realtek Sound Manager
21.08.2006 14:07 <REP> ReflexiveArcade
18.02.2005 18:07 <REP> ScreenSaver
23.01.2006 20:26 <REP> Secure Surfing Engine
28.10.2004 15:48 <REP> Services en ligne
28.09.2006 10:59 <REP> Sony Ericsson
01.05.2006 16:03 <REP> Spybot - Search & Destroy
04.11.2006 20:08 <REP> Spybot - Search & Destroy2
23.01.2006 20:26 <REP> Steganos Internet Anonym 7
27.12.2005 12:03 <REP> StreetFighter Flash
17.06.2006 12:53 <REP> TheTurtle
07.02.2006 18:22 <REP> Trustix
31.07.2005 12:04 <REP> Ubi Soft
08.12.2004 13:09 <REP> Ubisoft
01.06.2005 22:14 <REP> Ulead Systems
17.06.2006 12:59 <REP> Visicom Media
17.06.2005 19:32 <REP> VoipBuster.com
20.02.2006 19:44 <REP> Watchtower
09.03.2006 22:47 <REP> Webteh
18.11.2006 22:51 <REP> Windows Defender
05.11.2004 17:41 <REP> Windows Media Components
04.09.2006 19:43 <REP> Windows Media Connect 2
16.12.2006 16:54 <REP> Windows Media Player
28.10.2004 15:26 <REP> Windows NT
27.08.2005 19:55 <REP> WinHex
23.01.2006 20:26 <REP> WinRAR
28.10.2004 15:50 <REP> xerox
19.11.2006 13:26 <REP> ?ssembly
04.11.2006 12:26 <REP> ??stem
0 fichier(s) 0 octets
122 Rép(s) 32'277'479'424 octets libres
Le volume dans le lecteur C s'appelle Wxp
Le numéro de série du volume est 84B2-DB13

Répertoire de C:\Program Files\fichiers communs

19.11.2006 13:26 <REP> .
19.11.2006 13:26 <REP> ..
26.03.2006 11:33 <REP> Adobe
05.11.2006 13:50 <REP> Autodesk Shared
05.08.2006 10:52 <REP> AVSMedia
05.11.2006 13:44 <REP> DESIGNER
21.11.2004 15:01 <REP> InstallShield
05.09.2006 20:30 <REP> Java
21.08.2006 14:02 <REP> Logitech
03.11.2004 19:17 <REP> Macrovision Shared
05.11.2006 13:44 <REP> Microsoft Shared
28.10.2004 15:48 <REP> MSSoap
01.01.2002 00:07 <REP> ODBC
24.09.2006 12:54 <REP> Panda Software
26.11.2004 21:09 <REP> Real
28.10.2004 15:48 <REP> Services
01.01.2002 00:07 <REP> SpeechEngines
20.06.2006 20:39 <REP> Synacast
16.12.2006 14:55 <REP> System
28.09.2006 10:59 <REP> Teleca Shared
26.11.2004 21:09 <REP> xing shared
22.12.2006 18:18 <REP> {84B2DB13-0C7E-1036-0924-040307090029}
0 fichier(s) 0 octets
22 Rép(s) 32'277'487'616 octets libres
Le volume dans le lecteur C s'appelle Wxp
Le numéro de série du volume est 84B2-DB13

Répertoire de C:\Program Files\fichiers communs\Microsoft Shared\Web Folders

02.07.2006 20:05 <REP> .
02.07.2006 20:05 <REP> ..
04.01.2002 18:27 <REP> 1033
02.07.2006 19:59 <REP> 1036
25.04.2006 20:33 967'952 MSONSEXT.DLL
02.05.2006 18:37 40'208 MSOSV.DLL
03.06.1999 13:09 122'937 MSOWS409.DLL
07.03.2001 08:00 127'033 MSOWS40c.DLL
11.07.2003 02:25 80'448 PKMWS.DLL
5 fichier(s) 1'338'578 octets
4 Rép(s) 32'277'487'616 octets libres
Le volume dans le lecteur C s'appelle Wxp
Le numéro de série du volume est 84B2-DB13

Répertoire de C:\Program Files\common files

14.01.2006 15:33 <REP> .
14.01.2006 15:33 <REP> ..
21.08.2006 17:33 <REP> EasyInfo
20.02.2005 12:17 <REP> Stardock
0 fichier(s) 0 octets
4 Rép(s) 32'277'483'520 octets libres
Le volume dans le lecteur C s'appelle Wxp
Le numéro de série du volume est 84B2-DB13

Répertoire de C:\

11.11.2001 00:00 68'096 diff.exe
27.08.2006 14:10 103'424 grep.exe
31.10.2005 16:56 700'416 StubInstaller.exe
24.05.2001 11:59 162'304 UNWISE.EXE
4 fichier(s) 1'034'240 octets
0 Rép(s) 32'277'483'520 octets libres
c:\Documents and Settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 7.0.2.16\iTunesSetupAdmin.exe
c:\Documents and Settings\Wxp\.limewire\.NetworkShare\LimeWireWin4.10.5.exe
c:\Documents and Settings\Wxp\.limewire\.NetworkShare\Incomplete\T-2840440-LimeWireWin4.10.9.exe
c:\Documents and Settings\Wxp\Bureau\avgas-setup-7.5.0.50.exe
c:\Documents and Settings\Wxp\Bureau\blbeta.exe
c:\Documents and Settings\Wxp\Bureau\drweb-cureit.exe
c:\Documents and Settings\Wxp\Bureau\mwav.exe
c:\Documents and Settings\Wxp\Bureau\SmitfraudFix.exe
c:\Documents and Settings\Wxp\Bureau\VundoFix.exe
c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\diff.exe
c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\FilesInfoCmd.exe
c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\grep.exe
c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\LFiles.exe
c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\LISTDLLS.exe
c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\streams.exe
c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\swreg.exe
c:\Documents and Settings\Wxp\Bureau\newbie\crackme1.exe
c:\Documents and Settings\Wxp\Bureau\newbie\stega11.exe
c:\Documents and Settings\Wxp\Bureau\newbie\stega22.exe
c:\Documents and Settings\Wxp\Bureau\newbie\stega4.exe
c:\Documents and Settings\Wxp\Bureau\newbie\HexDecCharEditor\HexDecCharEditor.exe
c:\Documents and Settings\Wxp\Bureau\newbie\Nouveau dossier\ocamlq-public[1].exe
c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\dumphive.exe
c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\GenericRenosFix.exe
c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\Reboot.exe
c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\SmiUpdate.exe
c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\SrchSTS.exe
c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\swreg.exe
c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\swsc.exe
c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\swxcacls.exe
c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\unzip.exe
c:\Documents and Settings\Wxp\Bureau\Steganos Updates\sia7int.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\A0190033.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\A0190035.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\agfherdb.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\amwskrut.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\aolelmeq.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\aqusnwid.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\astpbqig.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\audimhij.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\aupgnxlj.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\bbjudflx.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\bddoirhx.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\bifvcaqc.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\bldhynhq.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\bnyvvhbm.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\cdjwyfix.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\cfvbcrlo.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\cgfvpsjm.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\cgtyqlrr.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\cjgiktsa.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ckxhgpdf.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\crdwqqep.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ddvvohgd.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\difwtfvm.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\dikmwqyc.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\dowllovy.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\dqacyhwy.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\dqxktplr.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\dtsijbas.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\duajsngx.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\dunxmasq.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\duoollxq.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\dwarqyok.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ealavluy.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\edeeccww.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\elsdjceh.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\eoffqsqk.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\exrkvkgu.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\fopwmgdy.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\Fport.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\fskmtsbm.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ftboxnxl.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\fvsidooy.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\gardhtfc.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\gktfxipw.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\gncopicl.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\gobrxtwv.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\guxarogi.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\gvopwqdu.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\gyjqeywt.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\hgcddihu.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\hjqqbfii.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\hsrjerlt.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\hxdfpeav.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ikicnabt.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\imonihvr.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\itdgccxx.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\iuviiqct.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\jkrmhoip.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\katadsql.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\krplutvf.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ksmnegtd.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\kunweeey.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\kvrmyshi.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ldguntat.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\lvvoqgqi.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\mcldsfkv.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\mgxpvprt.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\mjwgqnkh.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\musqllhf.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\mvtnxnrp.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\mydcfiom.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\mykecmyy.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ndjhporp.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\nfqwphvg.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\nhsraulq.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\nloyoorh.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\nnddeawh.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ntfwbkns.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\nwkrfcck.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\odabjrlj.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ogpsrlax.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ohnjbmtx.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ohpkqvys.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\oprsgstw.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\otfoegrk.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\owyllmmu.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\pfodbooc.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\pgshdnsa.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\phlkcrom.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\pmqbsdfq.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\Process.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\pslist.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\qktboyra.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\qnstnlpd.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\qobxyqqr.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\quwjqcea.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\rbneyqpm.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\restart.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\rriktdeh.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\sgbpxmer.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\sqogavnb.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\stuctgge.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\stxubqlj.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\sufgwnyi.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\svyywssj.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\tdbxowgv.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\tduxgeqv.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\tioxqmer.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\tnhgecfn.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\tqdncpme.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\txhihndo.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ubhieikw.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\uglxpxxn.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ujopqkeq.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\unutsgdr.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\vanlhmqa.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\veeqhdea.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\vfnvmtsv.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\vjbmfnse.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\vltjjnrm.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\vsekpwgr.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\vvnidnif.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\vynxttnq.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\waodljik.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\wbxcojle.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\whudvlfi.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\wticjrpl.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\xcbphrhg.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\xcrnlyax.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\xlltauir.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\xonmwfdy.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\xpeisose.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\xsvgmppc.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\xwlplaqj.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ybthtjqe.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ybulhxpc.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\yifydmhf.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ylafajue.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ylorutgu.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\yltenhbs.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ynktjcxl.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ytqesnjf.exe
c:\Documents and Settings\Wxp\DoctorWeb\Quarantine\yyqrwrsj.exe
c:\Documents and Settings\Wxp\Local Settings\Temp\Uninst.exe
c:\Documents and Settings\Wxp\Local Settings\Temp\AUG2005DXREDIST\DXSETUP.exe
c:\Documents and Settings\Wxp\Mes documents\Ma musique\Adoprixtixics\4dsportdriving\LOAD.EXE
c:\Documents and Settings\Wxp\Mes documents\Ma musique\Adoprixtixics\4dsportdriving\SETUP.EXE
c:\Documents and Settings\All Users\Application Data\Microsoft\IdentityCRL\ppcrlconfig.dll
c:\Documents and Settings\All Users\Application Data\Microsoft\IdentityCRL\production\ppcrlconfig.dll
c:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\Backup\mpengine.dll
c:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\Default\MpEngine.dll
c:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\{05D79D39-D5A6-4866-9582-579B32CEA05A}\mpengine.dll
c:\Documents and Settings\LocalService\Application Data\Microsoft\UPnP Device Host\upnphost\udhisapi.dll
c:\Documents and Settings\Wxp\Application Data\Microsoft\IdentityCRL\ppcrlconfig.dll

Alors voila le rapport de eScan :

File C:\Documents and Settings\Wxp\Bureau\SmitfraudFix\Reboot.exe tagged as not-a-virus:RiskTool.Win32.Reboot.f. No

Action Taken.
File C:\Documents and Settings\Wxp\Bureau\SmitfraudFix.exe tagged as not-a-virus:RiskTool.Win32.Reboot.f.

No Action Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\agfherdb.exe tagged as

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and

Settings\Wxp\DoctorWeb\Quarantine\aolelmeq.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\aqusnwid.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No

Action Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\audimhij.exe tagged as

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and

Settings\Wxp\DoctorWeb\Quarantine\aupgnxlj.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\bbjudflx.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No

Action Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\bddoirhx.exe tagged as

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and

Settings\Wxp\DoctorWeb\Quarantine\bifvcaqc.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\cgtyqlrr.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action

Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\cjgiktsa.exe tagged as

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and

Settings\Wxp\DoctorWeb\Quarantine\ckxhgpdf.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\crdwqqep.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No

Action Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ddvvohgd.exe tagged as

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and

Settings\Wxp\DoctorWeb\Quarantine\difwtfvm.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\dikmwqyc.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No

Action Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\dqacyhwy.exe tagged as

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and

Settings\Wxp\DoctorWeb\Quarantine\dunxmasq.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\duoollxq.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action

Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\edeeccww.exe tagged as

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and

Settings\Wxp\DoctorWeb\Quarantine\elsdjceh.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\eoffqsqk.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No

Action Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\fopwmgdy.exe tagged as

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and

Settings\Wxp\DoctorWeb\Quarantine\ftboxnxl.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\fvsidooy.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action

Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\gardhtfc.exe tagged as

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and

Settings\Wxp\DoctorWeb\Quarantine\gobrxtwv.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\gvopwqdu.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No

Action Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\hgcddihu.exe tagged as

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and

Settings\Wxp\DoctorWeb\Quarantine\hjqqbfii.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\hxdfpeav.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No

Action Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ikicnabt.exe tagged as

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and

Settings\Wxp\DoctorWeb\Quarantine\iuviiqct.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\jkrmhoip.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action

Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\krplutvf.exe tagged as

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and

Settings\Wxp\DoctorWeb\Quarantine\kvrmyshi.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ldguntat.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action

Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\lvvoqgqi.exe tagged as

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and

Settings\Wxp\DoctorWeb\Quarantine\mcldsfkv.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\mgxpvprt.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No

Action Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\musqllhf.exe tagged as

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and

Settings\Wxp\DoctorWeb\Quarantine\mydcfiom.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\nfqwphvg.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No

Action Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\nloyoorh.exe tagged as

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and

Settings\Wxp\DoctorWeb\Quarantine\nnddeawh.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ogpsrlax.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action

Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ohpkqvys.exe tagged as

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and

Settings\Wxp\DoctorWeb\Quarantine\pfodbooc.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\pgshdnsa.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No

Action Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\phlkcrom.exe tagged as

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and

Settings\Wxp\DoctorWeb\Quarantine\pmqbsdfq.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\qktboyra.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No

Action Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\qobxyqqr.exe tagged as

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and

Settings\Wxp\DoctorWeb\Quarantine\quwjqcea.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\sgbpxmer.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No

Action Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\sqogavnb.exe tagged as

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and

Settings\Wxp\DoctorWeb\Quarantine\stxubqlj.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\sufgwnyi.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No

Action Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\tduxgeqv.exe tagged as

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and

Settings\Wxp\DoctorWeb\Quarantine\tioxqmer.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\tnhgecfn.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No

Action Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\tqdncpme.exe tagged as

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and

Settings\Wxp\DoctorWeb\Quarantine\txhihndo.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ubhieikw.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No

Action Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\unutsgdr.exe tagged as

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and

Settings\Wxp\DoctorWeb\Quarantine\vanlhmqa.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\veeqhdea.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No

Action Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\vjbmfnse.exe tagged as

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and

Settings\Wxp\DoctorWeb\Quarantine\vltjjnrm.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\vsekpwgr.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No

Action Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\vynxttnq.exe tagged as

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and

Settings\Wxp\DoctorWeb\Quarantine\waodljik.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\whudvlfi.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action

Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\wticjrpl.exe tagged as

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and

Settings\Wxp\DoctorWeb\Quarantine\xcbphrhg.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\xlltauir.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action

Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\xonmwfdy.exe tagged as

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and

Settings\Wxp\DoctorWeb\Quarantine\xwlplaqj.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ybulhxpc.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No

Action Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\yifydmhf.exe tagged as

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and

Settings\Wxp\DoctorWeb\Quarantine\ylafajue.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File

C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ylorutgu.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action

Taken.
File C:\Documents and Settings\Wxp\DoctorWeb\Quarantine\ytqesnjf.exe tagged as

not-a-virus:AdWare.Win32.Agent.at. No Action Taken.

Mais ca va faire la même chose qu'avant juste scanné et non nettoyer. Non ?

Bonjour

Du ménage vient d'être fait. HijackThis est propre.

Mais pour le scan d'eScan, tu n'as pas supprimer les fichiers, c'est marqué No Action Taken..

Tu vas refaire ceci en mode normal

8 Lance eScan 
1.) Pour lancer "eScan Antivirus Toolkit", trouve le fichier mwavscan.com situé dans le dossier C:\Kaspersky 

2.) Double-clique sur mwavscan.com; l'interface d'eScan va apparaître à l'écran. 

3.) Il est très important de bien cocher ces boîtes sous Scan Option 
Memory, Registry, Startup Folders, System Folders, Services. 

4.) Coche la boîte Drive, ce qui donne accès à une nouvelle boîte Drive (bouton rond) juste dessous; coche ce bouton "Drive" (très important..), et tu verras une nouvelle boîte de navigation apparaître à la droite. Clique sur la petite flèche de cette boîte and choisi la lettre de ton disque dur, habituellement C:\. 

5.) Juste au-dessous, assure-toi que Scan All Files est coché, et non Program Files. 

6.) Clique sur Scan Clean et laisse le tool vérifier tout le disque dur (ça peut être long..). Lorsque terminé, tu verras Scan Completed. Ne pas quitter tout de suite ! 

7.) Ouvre un nouveau fichier Bloc notes (clique sur "Démarrer" >> "Programmes" >>"Accessoires" >> "Bloc notes"), puis copie/colle tout le contenu de la fenêtre Virus Log Information (la deuxième, au bas) dans le fichier texte, et sauvegarde le. eScan génère également un rapport complet dans le dossier C:\Kaspersky (nommé mwav.log), mais il est trop lourd pour poster sur le forum. 

Poste le rapport avec un nouveau DiagHelp. Poste le en deux messages, ce sera trop long.

Et enfin celui du DrWeb :

Fport.exeC:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelpProgram.FPort.20
pslist.exeC:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelpProgram.PsList.126
Process.exeC:\Documents and Settings\Wxp\Bureau\SmitfraudFixTool.Prockill
restart.exeC:\Documents and Settings\Wxp\Bureau\SmitfraudFixTool.ShutDown.11
backup-20061226-111705-126.dllC:\HijackThis\backupsTrojan.DownLoader.based
backup-20061226-111705-436.dllC:\HijackThis\backupsTrojan.DownLoader.based
A0190033.exeC:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP703Tool.Prockill
A0190035.exeC:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP703Tool.ShutDown.11
A0203977.dllC:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP739Adware.Softomate
A0203978.dllC:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP739Trojan.Virtumod
A0203979.dllC:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP739Trojan.Virtumod
A0203980.dllC:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP739Trojan.Virtumod
A0204009.dllC:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP739Trojan.DownLoader.based
A0204022.dllC:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP739Trojan.Virtumod
A0204119.dllC:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP740Trojan.Juan
A0204120.dllC:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP740Adware.TopSearch
A0204121.dllC:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP740Trojan.Juan
A0204282.dllC:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP742Trojan.DownLoader.based
A0204283.dllC:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP742Trojan.DownLoader.based
A0204325.dllC:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP742Trojan.DownLoader.based
A0204326.dllC:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP742Trojan.DownLoader.based
urwzhx.dll.badC:\VundoFix BackupsTrojan.DownLoader.based
vtsqq.dll.badC:\VundoFix BackupsTrojan.Virtumod
agfherdb.exeC:\WINDOWS\system32Adware.SearchColours
amwskrut.exeC:\WINDOWS\system32Adware.TopSearch
aolelmeq.exeC:\WINDOWS\system32Adware.SearchColours
aqusnwid.exeC:\WINDOWS\system32Adware.SearchColours
astpbqig.exeC:\WINDOWS\system32Adware.TopSearch
audimhij.exeC:\WINDOWS\system32Adware.SearchColours
aupgnxlj.exeC:\WINDOWS\system32Adware.SearchColours
bbjudflx.exeC:\WINDOWS\system32Adware.SearchColours
bddoirhx.exeC:\WINDOWS\system32Adware.SearchColours
bifvcaqc.exeC:\WINDOWS\system32Adware.SearchColours
bldhynhq.exeC:\WINDOWS\system32Adware.TopSearch
bnyvvhbm.exeC:\WINDOWS\system32Adware.TopSearch
cdjwyfix.exeC:\WINDOWS\system32Adware.TopSearch
cfvbcrlo.exeC:\WINDOWS\system32Adware.TopSearch
cgfvpsjm.exeC:\WINDOWS\system32Adware.TopSearch
cgtyqlrr.exeC:\WINDOWS\system32Adware.SearchColours
cjgiktsa.exeC:\WINDOWS\system32Adware.SearchColours
ckxhgpdf.exeC:\WINDOWS\system32Adware.SearchColours
crdwqqep.exeC:\WINDOWS\system32Adware.SearchColours
ddvvohgd.exeC:\WINDOWS\system32Adware.SearchColours
dhywgghv.dllC:\WINDOWS\system32Trojan.Juan
difwtfvm.exeC:\WINDOWS\system32Adware.SearchColours
dikmwqyc.exeC:\WINDOWS\system32Adware.SearchColours
dowllovy.exeC:\WINDOWS\system32Adware.TopSearch
dqacyhwy.exeC:\WINDOWS\system32Adware.SearchColours
dqxktplr.exeC:\WINDOWS\system32Adware.TopSearch
dtsijbas.exeC:\WINDOWS\system32Adware.TopSearch
duajsngx.exeC:\WINDOWS\system32Adware.TopSearch
dunxmasq.exeC:\WINDOWS\system32Adware.SearchColours
duoollxq.exeC:\WINDOWS\system32Adware.SearchColours
dwarqyok.exeC:\WINDOWS\system32Adware.TopSearch
ealavluy.exeC:\WINDOWS\system32Adware.TopSearch
edeeccww.exeC:\WINDOWS\system32Adware.SearchColours
elsdjceh.exeC:\WINDOWS\system32Adware.SearchColours
eoffqsqk.exeC:\WINDOWS\system32Adware.SearchColours
exrkvkgu.exeC:\WINDOWS\system32Adware.TopSearch
fopwmgdy.exeC:\WINDOWS\system32Adware.SearchColours
fskmtsbm.exeC:\WINDOWS\system32Adware.TopSearch
ftboxnxl.exeC:\WINDOWS\system32Adware.SearchColours
fvsidooy.exeC:\WINDOWS\system32Adware.SearchColours
gardhtfc.exeC:\WINDOWS\system32Adware.SearchColours
gktfxipw.exeC:\WINDOWS\system32Adware.TopSearch
gncopicl.exeC:\WINDOWS\system32Adware.TopSearch
gobrxtwv.exeC:\WINDOWS\system32Adware.SearchColours
guxarogi.exeC:\WINDOWS\system32Adware.TopSearch
gvopwqdu.exeC:\WINDOWS\system32Adware.SearchColours
gyjqeywt.exeC:\WINDOWS\system32Adware.TopSearch
hgcddihu.exeC:\WINDOWS\system32Adware.SearchColours
hjqqbfii.exeC:\WINDOWS\system32Adware.SearchColours
hsrjerlt.exeC:\WINDOWS\system32Adware.TopSearch
hxdfpeav.exeC:\WINDOWS\system32Adware.SearchColours
ikicnabt.exeC:\WINDOWS\system32Adware.SearchColours
imonihvr.exeC:\WINDOWS\system32Adware.TopSearch
itdgccxx.exeC:\WINDOWS\system32Adware.TopSearch
iuviiqct.exeC:\WINDOWS\system32Adware.SearchColours
jkrmhoip.exeC:\WINDOWS\system32Adware.SearchColours
katadsql.exeC:\WINDOWS\system32Adware.TopSearch
krplutvf.exeC:\WINDOWS\system32Adware.SearchColours
ksmnegtd.exeC:\WINDOWS\system32Adware.TopSearch
kunweeey.exeC:\WINDOWS\system32Adware.TopSearch
kvrmyshi.exeC:\WINDOWS\system32Adware.SearchColours
ldguntat.exeC:\WINDOWS\system32Adware.SearchColours
lvvoqgqi.exeC:\WINDOWS\system32Adware.SearchColours
mcldsfkv.exeC:\WINDOWS\system32Adware.SearchColours
mgxpvprt.exeC:\WINDOWS\system32Adware.SearchColours
mjwgqnkh.exeC:\WINDOWS\system32Adware.TopSearch
musqllhf.exeC:\WINDOWS\system32Adware.SearchColours
mvtnxnrp.exeC:\WINDOWS\system32Adware.TopSearch
mydcfiom.exeC:\WINDOWS\system32Adware.SearchColours
mykecmyy.exeC:\WINDOWS\system32Adware.TopSearch
ndjhporp.exeC:\WINDOWS\system32Adware.TopSearch
nfqwphvg.exeC:\WINDOWS\system32Adware.SearchColours
nhsraulq.exeC:\WINDOWS\system32Adware.TopSearch
nloyoorh.exeC:\WINDOWS\system32Adware.SearchColours
nnddeawh.exeC:\WINDOWS\system32Adware.SearchColours
ntfwbkns.exeC:\WINDOWS\system32Adware.TopSearch
nwkrfcck.exeC:\WINDOWS\system32Adware.TopSearch
odabjrlj.exeC:\WINDOWS\system32Adware.TopSearch
ogpsrlax.exeC:\WINDOWS\system32Adware.SearchColours
ohnjbmtx.exeC:\WINDOWS\system32Adware.TopSearch
ohpkqvys.exeC:\WINDOWS\system32Adware.SearchColours
oprsgstw.exeC:\WINDOWS\system32Adware.TopSearch
otfoegrk.exeC:\WINDOWS\system32Adware.TopSearch
owyllmmu.exeC:\WINDOWS\system32Adware.TopSearch
pfodbooc.exeC:\WINDOWS\system32Adware.SearchColours
pgshdnsa.exeC:\WINDOWS\system32Adware.SearchColours
phlkcrom.exeC:\WINDOWS\system32Adware.SearchColours
pmqbsdfq.exeC:\WINDOWS\system32Adware.SearchColours
qktboyra.exeC:\WINDOWS\system32Adware.SearchColours
qnstnlpd.exeC:\WINDOWS\system32Adware.TopSearch
qobxyqqr.exeC:\WINDOWS\system32Adware.SearchColours
quwjqcea.exeC:\WINDOWS\system32Adware.SearchColours
rbneyqpm.exeC:\WINDOWS\system32Adware.TopSearch
rriktdeh.exeC:\WINDOWS\system32Adware.TopSearch
sgbpxmer.exeC:\WINDOWS\system32Adware.SearchColours
sqogavnb.exeC:\WINDOWS\system32Adware.SearchColours
stuctgge.exeC:\WINDOWS\system32Adware.TopSearch
stxubqlj.exeC:\WINDOWS\system32Adware.SearchColours
sufgwnyi.exeC:\WINDOWS\system32Adware.SearchColours
svyywssj.exeC:\WINDOWS\system32Adware.TopSearch
tdbxowgv.exeC:\WINDOWS\system32Adware.TopSearch
tduxgeqv.exeC:\WINDOWS\system32Adware.SearchColours
tioxqmer.exeC:\WINDOWS\system32Adware.SearchColours
tnhgecfn.exeC:\WINDOWS\system32Adware.SearchColours
tqdncpme.exeC:\WINDOWS\system32Adware.SearchColours
txhihndo.exeC:\WINDOWS\system32Adware.SearchColours
ubhieikw.exeC:\WINDOWS\system32Adware.SearchColours
uglxpxxn.exeC:\WINDOWS\system32Adware.TopSearch
ujopqkeq.exeC:\WINDOWS\system32Adware.TopSearch
unutsgdr.exeC:\WINDOWS\system32Adware.SearchColours
vanlhmqa.exeC:\WINDOWS\system32Adware.SearchColours
veeqhdea.exeC:\WINDOWS\system32Adware.SearchColours
vfnvmtsv.exeC:\WINDOWS\system32Adware.TopSearch
vjbmfnse.exeC:\WINDOWS\system32Adware.SearchColours
vltjjnrm.exeC:\WINDOWS\system32Adware.SearchColours
vsekpwgr.exeC:\WINDOWS\system32Adware.SearchColours
vvnidnif.exeC:\WINDOWS\system32Adware.TopSearch
vynxttnq.exeC:\WINDOWS\system32Adware.SearchColours
waodljik.exeC:\WINDOWS\system32Adware.SearchColours
wbxcojle.exeC:\WINDOWS\system32Adware.TopSearch
whudvlfi.exeC:\WINDOWS\system32Adware.SearchColours
wticjrpl.exeC:\WINDOWS\system32Adware.SearchColours
xcbphrhg.exeC:\WINDOWS\system32Adware.SearchColours
xcrnlyax.exeC:\WINDOWS\system32Adware.TopSearch
xlltauir.exeC:\WINDOWS\system32Adware.SearchColours
xonmwfdy.exeC:\WINDOWS\system32Adware.SearchColours
xpeisose.exeC:\WINDOWS\system32Adware.TopSearch
xsvgmppc.exeC:\WINDOWS\system32Adware.TopSearch
xwlplaqj.exeC:\WINDOWS\system32Adware.SearchColours
ybthtjqe.exeC:\WINDOWS\system32Adware.TopSearch
ybulhxpc.exeC:\WINDOWS\system32Adware.SearchColours
yifydmhf.exeC:\WINDOWS\system32Adware.SearchColours
ylafajue.exeC:\WINDOWS\system32Adware.SearchColours
ylorutgu.exeC:\WINDOWS\system32Adware.SearchColours
yltenhbs.exeC:\WINDOWS\system32Adware.TopSearch
ynktjcxl.exeC:\WINDOWS\system32Adware.TopSearch
ytqesnjf.exeC:\WINDOWS\system32Adware.SearchColours
yyqrwrsj.exeC:\WINDOWS\system32Adware.TopSearch

Rapport d'eScan :

File C:\WINDOWS\system32\agfherdb.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\aolelmeq.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\aqusnwid.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\audimhij.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\aupgnxlj.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\bbjudflx.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\bddoirhx.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\bifvcaqc.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\cgtyqlrr.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\cjgiktsa.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\ckxhgpdf.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\comypanr.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\WINDOWS\system32\crdwqqep.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\cvybqyrm.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\WINDOWS\system32\ddvvohgd.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\difwtfvm.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\dikmwqyc.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\dqacyhwy.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\dunxmasq.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\duoollxq.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\edeeccww.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\elsdjceh.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\elxjyalh.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\WINDOWS\system32\eoffqsqk.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\fopwmgdy.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\ftboxnxl.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\fvsidooy.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\fxdcbwjf.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\WINDOWS\system32\gardhtfc.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\gobrxtwv.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\gvopwqdu.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\hgcddihu.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\hjqqbfii.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\hxdfpeav.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\iawlppsf.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\WINDOWS\system32\ikicnabt.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\iuviiqct.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\jhhlvqts.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\WINDOWS\system32\jkrmhoip.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\krplutvf.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\kvrmyshi.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\kyfahway.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\WINDOWS\system32\ldguntat.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\lvaoqfey.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\WINDOWS\system32\lvvoqgqi.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\mcldsfkv.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\mgxpvprt.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\musqllhf.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\mydcfiom.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\nbexprft.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\WINDOWS\system32\nfqwphvg.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\nloyoorh.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\nnddeawh.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\odgjcuus.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\WINDOWS\system32\ogpsrlax.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\ohpkqvys.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\oigkpais.dll infected by "Trojan.Win32.BHO.o" Virus. Action Taken: File Deleted.
File C:\WINDOWS\system32\orebdeyb.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\WINDOWS\system32\pfodbooc.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\pgshdnsa.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\phlkcrom.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\pmqbsdfq.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\qktboyra.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\qobxyqqr.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\quwjqcea.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\rdnoxssp.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\WINDOWS\system32\rnqlfsvi.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\WINDOWS\system32\sgbpxmer.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\sqogavnb.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\stxubqlj.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\sufgwnyi.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\tduxgeqv.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\tioxqmer.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\tnhgecfn.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\tqdncpme.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\txhihndo.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\ubhieikw.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\uetvjhau.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\WINDOWS\system32\unutsgdr.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\vanlhmqa.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\veeqhdea.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\vjbmfnse.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\vltjjnrm.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\vrjsqmcb.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\WINDOWS\system32\vsekpwgr.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\vynxttnq.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\waodljik.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\whudvlfi.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\wticjrpl.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\xcbphrhg.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\xlltauir.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\xonmwfdy.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\xwlplaqj.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\ybulhxpc.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\yifydmhf.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\ylafajue.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\ylorutgu.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\ysglannk.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\WINDOWS\system32\ytqesnjf.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\Documents and Settings\Wxp\Bureau\SmitfraudFix\Reboot.exe tagged as not-a-virus:RiskTool.Win32.Reboot.f. No Action Taken.
File C:\Documents and Settings\Wxp\Bureau\SmitfraudFix.exe tagged as not-a-virus:RiskTool.Win32.Reboot.f. No Action Taken.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP684\A0179308.exe infected by "Trojan-Proxy.Win32.Horst.av" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP703\A0190034.exe tagged as not-a-virus:RiskTool.Win32.Reboot.f. No Action Taken.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP739\A0203977.dll tagged as not-a-virus:AdWare.Win32.Softomate.u. No Action Taken.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP739\A0203978.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.ev. No Action Taken.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP739\A0203979.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.ev. No Action Taken.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP739\A0203981.dll infected by "not-virus:Hoax.Win32.Renos.fw" Virus. Action Taken: File Renamed.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP739\A0204022.dll tagged as not-a-virus:AdWare.Win32.Virtumonde.fj. No Action Taken.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP742\A0204289.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP742\A0204290.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP742\A0204291.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP742\A0204292.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP742\A0204293.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP742\A0204294.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP742\A0204295.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP742\A0204296.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP742\A0204297.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP742\A0204298.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP742\A0204299.dll infected by "Trojan.Win32.BHO.o" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP742\A0204300.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP742\A0204301.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP742\A0204302.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP742\A0204303.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP742\A0204304.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\System Volume Information\_restore{4238CCEF-BE7E-48F1-8B9D-42C70192F096}\RP742\A0204305.dll infected by "Trojan-Spy.Win32.VBStat.h" Virus. Action Taken: File Deleted.
File C:\VundoFix Backups\vtsqq.dll.bad tagged as not-a-virus:AdWare.Win32.Virtumonde.fj. No Action Taken.
File C:\WINDOWS\system32\agfherdb.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\aolelmeq.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\aqusnwid.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\audimhij.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\aupgnxlj.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\bbjudflx.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\bddoirhx.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\bifvcaqc.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\cgtyqlrr.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\cjgiktsa.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\ckxhgpdf.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\crdwqqep.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\ddvvohgd.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\difwtfvm.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\dikmwqyc.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\dqacyhwy.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\dunxmasq.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\duoollxq.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\edeeccww.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\elsdjceh.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\eoffqsqk.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\fopwmgdy.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\ftboxnxl.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\fvsidooy.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\gardhtfc.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\gobrxtwv.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\gvopwqdu.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\hgcddihu.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\hjqqbfii.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\hxdfpeav.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\ikicnabt.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\iuviiqct.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\jkrmhoip.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\krplutvf.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\kvrmyshi.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\ldguntat.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\lvvoqgqi.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\mcldsfkv.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\mgxpvprt.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\musqllhf.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\mydcfiom.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\nfqwphvg.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\nloyoorh.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\nnddeawh.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\ogpsrlax.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\ohpkqvys.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\pfodbooc.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\pgshdnsa.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\phlkcrom.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\pmqbsdfq.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\qktboyra.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\qobxyqqr.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\quwjqcea.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\sgbpxmer.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\sqogavnb.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\stxubqlj.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\sufgwnyi.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\tduxgeqv.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\tioxqmer.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\tnhgecfn.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\tqdncpme.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\txhihndo.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\ubhieikw.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\unutsgdr.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\vanlhmqa.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\veeqhdea.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\vjbmfnse.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\vltjjnrm.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\vsekpwgr.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\vynxttnq.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\waodljik.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\whudvlfi.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\wticjrpl.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\xcbphrhg.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\xlltauir.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\xonmwfdy.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\xwlplaqj.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\ybulhxpc.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\yifydmhf.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\ylafajue.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\ylorutgu.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.
File C:\WINDOWS\system32\ytqesnjf.exe tagged as not-a-virus:AdWare.Win32.Agent.at. No Action Taken.

Bon alors je vais poster sur 3 réponse 1 rapport par réponse :

Rapport d'Hijack :

Logfile of HijackThis v1.99.1
Scan saved at 16:18:45, on 26.12.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\UAService7.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\SYSTEM32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Messenger Plus! 3\MsgPlus.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Logitech\Profiler\lwemon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\NETGEAR\WG111v2 Configuration Utility\RtlWake.exe
C:\Program Files\NETGEAR\WG111v2 Configuration Utility\RtWLan.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\WINDOWS\system32\wuauclt.exe
C:\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://accounts.google.com/ServiceLogin?service=mail&passive=true&rm=false&continue=https://mail.google.com/mail/&ss=1&scc=1&ltmpl=default&ltmplcache=2&emr=1&osid=1
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~2\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: (no name) - {D60B6578-737A-4422-99B4-0ABEDEBA0C17} - (no file)
O3 - Toolbar: Steganos Internet Anonyme - {00000000-5736-4205-0008-2fe89c996183} - c:\program files\steganos internet anonym 7\sia7iep.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Start WingMan Profiler] "C:\Program Files\Logitech\Profiler\lwemon.exe" /noui
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: Accélérateur de démarrage AutoCAD.lnk = C:\Program Files\Fichiers communs\Autodesk Shared\acstart16.exe
O4 - Global Startup: WG111v2 Smart Wizard Wireless Setting.lnk = ?
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{B7F9CDB8-BF58-4289-8669-EEA83434ED2E}: NameServer = 192.168.0.1
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\MSOXMLMF.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: wingdm32 - wingdm32.dll (file missing)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Unknown owner - C:\WINDOWS\system32\UAService7.exe

Bonjour

Pour pouvoir télécharger ce fichier, il faut configurer le niveau de sécurité IE sur Moyen.

Si tu n'y arrives toujours pas, dans l'étape 1 tu fais uniquement la désinstallation des programmes trouvés.
Et tu continues la manip.

J'ai cette fenêtre qui apparais même je stop avast :

http://img293.imageshack.us/img293/3884/messagederreur2ii5.jpg

Et pour le coups du mode sans échec, c'est normale ou y faut faire quelque chose d'autre ?

Qui te met que c'est interdit ?

Si c'est ton antivirus, désactive le temporairement le temps du téléchargement.

Alors j'ai télécharger le premier fichier Escan mais quand je veux prendre le second :

http://www.outerinfo.com/OiUninstaller.exe

il me met que c'est interdis pour ma sécurité. Et aussi mon mode sans-échec ne fonctionne pas, il plante après avoir chargé et me laisse avec "mode sans échec dans les coins".

Donc je ne sais pas si c'est parceque je ne suis pas assez patien (il lui faut déjà 5min) pour se lancer, ou si mon ordi bug pour le mode sans échec.

Bonjour

Voilà à quoi ressemble Vundo
http://www.secuser.com/alertes/2005/vundo-virtumonde.htm

Ces rapports montrent de très nombreuses infections.

Une partie de la procédure se déroulera sans avoir accès à internet, prière d'imprimer ces instructions, ou de les coller dans un fichier texte, pour lecture durant cette désinfection.
Les manipulations sont à faire sans interruption et dans l'ordre.
Si tu ne comprends pas quelque chose, demande des explications avant de commencer

1 Télécharge eScan Antivirus Toolkit
http://www.spywareinfo.dk/download/mwav.exe
Sauvegarde-le sur ton Bureau.
Avant de lancer le programme, il faut le mettre à jour tel qu'indiqué ci-après

Voici comment mettre l'outil à jour :

1.) Double-clique le fichier mwav.exe qui se trouve sur le Bureau; dézippe les fichiers dans le nouveau dossier suggéré (Kaspersky) situé à la racine du lecteur C:\ (C:\Kaspersky.). Le programme va se lancer, et tu dois le quitter (clique sur "Exit" puis "Exit").

2.) Double-clique sur le Poste de travail, puis double-clique sur le lecteur principal (habituellement C:\), double-clique sur le dossier Kaspersky; ensuite, double-clique sur le fichier kavupd.exe. Tu verras maintenant une fenêtre DOS apparaître, et la mise à jour se complètera en quelques minutes.

3.) Lorsque la mise à jour sera complétée, tu verras "Press any key to continue"; tape sur une clé pour continuer.

Ne pas lancer le scan tout de suite !

2 Télécharge ceci
http://www.outerinfo.com/OiUninstaller.exe
Sauvegarde le sur le Bureau.
Regarde si tu as ces programmes dans Ajout/suppression de programmes. Désinstalle les si présent.

Oin
Purityscan by Oin
Snowballwars by Oin
Yazzle by Oin
ou d'autres similaires avec Oin ou Outerinfo dedans
Cowabanga
MediaTickets
Tizzletalk
Zolero

Lance OiUninstaller.exe
Entre le code qui apparait.
Clique sur Uninstall.
Clique sur OK ensuite.

3 Redémarre en mode sans échec. Attention, tu n'as pas accès à internet dans ce mode, note bien ce que tu as à faire.
Démarre l'ordinateur.
Une fois le chargement du BIOS terminé, il y a un écran noir. Appuye sur la touche F8 ou F5 jusqu'à l'affichage du menu des options avancées de Windows.
En utilisant les touches du curseur, sélectionne le mode sans échec approprié et appuye sur Entrée.

4 Relance un scan HijackThis et coche les lignes ci-dessous :

R3 - URLSearchHook: (no name) - {61C40C3D-BDD2-B627-D189-C569348CDBE4} - (no file)
O2 - BHO: DAPHelper Class - {0000CC75-ACF3-4cac-A0A9-DD3868E06852} - C:\PROGRA~1\DAP\dapbho.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {0964344D-C233-DAF1-2ADC-08C2A8D60810} - C:\WINDOWS\system32\hptukyk.dll
O2 - BHO: (no name) - {2527DC3F-C7A0-CF37-33EA-0525C1600A34} - C:\WINDOWS\system32\quqrbkl.dll
O2 - BHO: (no name) - {36068946-CD51-1AC7-C4AD-044557583146} - C:\WINDOWS\system32\lctsupj.dll (file missing)
O2 - BHO: (no name) - {3FD6B99C-A275-46ea-8FD1-3D63986E51E4} - C:\WINDOWS\system32\hpvekfro.dll
O2 - BHO: (no name) - {42E53C82-E11D-E01B-A428-084851DB6947} - C:\WINDOWS\system32\yzivngl.dll (file missing)
O2 - BHO: (no name) - {61E91E9C-BF33-6A6A-7BFC-00B25F19A7AE} - C:\WINDOWS\system32\urwzhx.dll (file missing)
O2 - BHO: (no name) - {D60B6578-737A-4422-99B4-0ABEDEBA0C17} - C:\WINDOWS\system32\vtsqq.dll (file missing)
O3 - Toolbar: DAP Bar - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - C:\Program Files\DAP\DAPIEBar.dll
O4 - HKLM\..\Run: [DownloadAccelerator] C:\PROGRA~1\DAP\DAP.EXE /STARTUP
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [DllRunning] rundll32.exe "C:\WINDOWS\system32\qvlaojwx.dll",setvm
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O8 - Extra context menu item: &Download with &DAP - C:\PROGRA~1\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - C:\PROGRA~1\DAP\dapextie2.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Run DAP - {669695BC-A811-4A9D-8CDF-BA8C795F261C} - C:\PROGRA~1\DAP\DAP.EXE
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O16 - DPF: {09F1ADAC-76D8-4D0F-99A5-5C907DADB988} - https://www.afternic.com/domains/drivecleaner.com
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {A91DEB0D-AD0D-453E-9AC8-60178EC24212} (VPlayer Control) - http://video.vividas.com/CDN1/4325_Pepsi/web/player/vivid_ocx.jpeg
O18 - Protocol: bw+0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

Ferme toutes les fenêtres Windows, Internet explorer, Outlook,sauf le logiciel Hijackthis et clique sur « Fix checked »

5 Désinstalle ces applications (si tu les trouves) dans Ajout-Suppression de programmes :

VSAdd-in
VVSN
?ssembly
??stem

6 Supprime les fichiers/dossiers incriminés (s'ils existent encore) :

C:\Program Files\VSAdd-in
C:\Program Files\VVSN
C:\Program Files\?ssembly
C:\Program Files\??stem

7 Lance le nettoyage avec CCleaner

8 Lance eScan
1.) Pour lancer "eScan Antivirus Toolkit", trouve le fichier mwavscan.com situé dans le dossier C:\Kaspersky

2.) Double-clique sur mwavscan.com; l'interface d'eScan va apparaître à l'écran.

3.) Il est très important de bien cocher ces boîtes sous Scan Option
Memory, Registry, Startup Folders, System Folders, Services.

4.) Coche la boîte Drive, ce qui donne accès à une nouvelle boîte Drive (bouton rond) juste dessous; coche ce bouton "Drive" (très important..), et tu verras une nouvelle boîte de navigation apparaître à la droite. Clique sur la petite flèche de cette boîte and choisi la lettre de ton disque dur, habituellement C:\.

5.) Juste au-dessous, assure-toi que Scan All Files est coché, et non Program Files.

6.) Clique sur Scan Clean et laisse le tool vérifier tout le disque dur (ça peut être long..). Lorsque terminé, tu verras Scan Completed. Ne pas quitter tout de suite !

7.) Ouvre un nouveau fichier Bloc notes (clique sur "Démarrer" >> "Programmes" >>"Accessoires" >> "Bloc notes"), puis copie/colle tout le contenu de la fenêtre Virus Log Information (la deuxième, au bas) dans le fichier texte, et sauvegarde le. eScan génère également un rapport complet dans le dossier C:\Kaspersky (nommé mwav.log), mais il est trop lourd pour poster sur le forum.

Ferme le programme.

9 Redémarre normalement

10 Télécharge DrWeb
ftp://ftp.drweb.com/pub/drweb/cureit/drweb-cureit.exe

La version est automatiquement à jour.
Installe le.
Lance le.
Une analyse des processus se lance.
Ensuite, choisis le lecteur à scanner et lance l'analyse.
Sauvegarde le rapport.

Poste ces trois rapports :
- un nouveau log HijackThis.
- celui d'escan
- celui de DrWeb

Attention, il faudra peut être les poster en deux messages si c'est trop long (ton dernier HijackThis était tronqué).

Alors c'est fais, mais maintenant quand je redémare mon ordi il me dis que le *.dll pour le fichier qvlaojwx.dll est introuvable. Et petite question c'est quoi un Vundo ?

Voici le rapport Diaghelp :

C:\WINDOWS\System32\wpa.dbl -->23.12.2006 11:03:15
C:\WINDOWS\System32\perfh00C.dat -->23.12.2006 10:56:18
C:\WINDOWS\System32\perfh009.dat -->23.12.2006 10:56:18
C:\WINDOWS\System32\perfc00C.dat -->23.12.2006 10:56:18
C:\WINDOWS\System32\perfc009.dat -->23.12.2006 10:56:18
C:\WINDOWS\System32\PerfStringBackup.INI -->23.12.2006 10:56:17
C:\WINDOWS\System32\xwjoalvq.ini -->23.12.2006 10:45:05
C:\WINDOWS\System32\odtpfici.dll -->22.12.2006 19:44:58
C:\WINDOWS\System32\oprsgstw.exe -->22.12.2006 19:44:54
C:\WINDOWS\System32\astpbqig.exe -->22.12.2006 19:20:47
C:\WINDOWS\System32\wbqmyces.dll -->22.12.2006 19:20:41
C:\WINDOWS\System32\ynktjcxl.exe -->22.12.2006 18:22:33
C:\WINDOWS\System32\axgvpryj.dll -->22.12.2006 18:22:27
C:\WINDOWS\System32\njimnfjf.dll -->22.12.2006 17:37:06
C:\WINDOWS\System32\cdjwyfix.exe -->22.12.2006 17:37:03
C:\WINDOWS\System32\tmp.txt -->22.12.2006 17:34:49
C:\WINDOWS\System32\tmp.reg -->22.12.2006 17:34:49
C:\WINDOWS\System32\dowllovy.exe -->22.12.2006 17:33:55
C:\WINDOWS\System32\cpdymfnb.dll -->22.12.2006 17:33:49
C:\WINDOWS\System32\cbhwfxuq.ini -->22.12.2006 17:33:08
C:\WINDOWS\System32\muaktpvk.dll -->22.12.2006 17:02:57
C:\WINDOWS\System32\cgfvpsjm.exe -->22.12.2006 17:02:52
C:\WINDOWS\System32\stuctgge.exe -->21.12.2006 19:03:25
C:\WINDOWS\System32\efvnvkme.dll -->21.12.2006 19:03:21
C:\WINDOWS\System32\cvfginer.dll -->20.12.2006 22:39:03

C:\WINDOWS\WindowsUpdate.log -->23.12.2006 11:03:06
C:\WINDOWS\bootstat.dat -->23.12.2006 11:03:00
C:\WINDOWS\SchedLgU.Txt -->23.12.2006 01:24:06
C:\WINDOWS\cdPlayer.ini -->26.11.2006 14:29:21
C:\WINDOWS\Thumbs.db -->19.11.2006 16:47:33
C:\WINDOWS\SWPRODPB.INI -->06.11.2006 23:17:10
C:\WINDOWS\system.ini -->06.11.2006 22:46:44
C:\WINDOWS\cserve.ini -->01.11.2006 21:44:14
C:\WINDOWS\WMSysPr9.prx -->04.10.2006 19:46:53
C:\WINDOWS\mngui.INI -->28.09.2006 10:43:09
C:\WINDOWS\pavsig.txt -->08.09.2006 19:57:38
C:\WINDOWS\BricoPackFoldersDelete.cmd -->12.08.2006 16:08:45
C:\WINDOWS\BricoPackUninst.txt -->12.08.2006 16:08:44
C:\WINDOWS\BricoPackUninst.cmd -->12.08.2006 16:08:44
C:\WINDOWS\BricoPack Wallpaper.bmp -->12.08.2006 16:08:35

C:\WINDOWS\ALCFDRTM.EXE |03/01/2002 17:07:42
C:\WINDOWS\alcrmv.exe |28/10/2004 16:12:26
C:\WINDOWS\alcupd.exe |28/10/2004 16:12:26
C:\WINDOWS\bwUnin-6.1.4.68-8876480L.exe |02/07/2005 17:43:37
C:\WINDOWS\bwUnin-7.2.0.137-8876480SL.exe |17/07/2005 18:21:58
C:\WINDOWS\bwUnin-7.2.0.157-8876480SL.exe |02/04/2006 17:45:49
C:\WINDOWS\GPInstall.exe |09/02/2005 17:57:37
C:\WINDOWS\IsUn040c.exe |28/10/2004 15:57:55
C:\WINDOWS\IsUninst.exe |28/10/2004 15:45:05
C:\WINDOWS\iun6002.exe |20/07/2005 20:25:04
C:\WINDOWS\ScUnin.exe |24/09/2005 13:02:20
C:\WINDOWS\Setup1.exe |18/12/2004 13:14:19
C:\WINDOWS\slrundll.exe |28/10/2004 15:27:29
C:\WINDOWS\SOUNDMAN.EXE |28/10/2004 16:12:34
C:\WINDOWS\twunk_16.exe |24/04/2003 13:00:00
C:\WINDOWS\twunk_32.exe |24/04/2003 13:00:00
C:\WINDOWS\una2setup.exe |06/12/2004 20:06:03
C:\WINDOWS\unADesktop.exe |14/01/2005 15:43:51
C:\WINDOWS\unin040c.exe |16/02/2005 17:56:29
C:\WINDOWS\uninst.exe |18/08/2005 16:50:31
C:\WINDOWS\USBK700iphmgunin.exe |04/01/2002 19:44:54
C:\WINDOWS\twain.dll |24/04/2003 13:00:00
C:\WINDOWS\twain_32.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\AcSignOpt.exe |05/03/2005 13:18:15
C:\WINDOWS\system32\agfherdb.exe |12/11/2006 15:22:35
C:\WINDOWS\system32\amwskrut.exe |02/12/2006 10:10:42
C:\WINDOWS\system32\aolelmeq.exe |09/11/2006 22:22:04
C:\WINDOWS\system32\append.exe |24/04/2003 13:00:00
C:\WINDOWS\system32\aqusnwid.exe |06/11/2006 20:39:32
C:\WINDOWS\system32\astpbqig.exe |22/12/2006 19:20:44
C:\WINDOWS\system32\asuninst.exe |23/01/2006 20:11:05
C:\WINDOWS\system32\aswBoot.exe |02/11/2006 22:11:06
C:\WINDOWS\system32\ati2evxx.exe |29/09/2004 07:16:44
C:\WINDOWS\system32\Ati2mdxx.exe |29/09/2004 07:18:28
C:\WINDOWS\system32\ati2sgag.exe |28/10/2004 16:20:39
C:\WINDOWS\system32\audimhij.exe |12/11/2006 20:54:38
C:\WINDOWS\system32\aupgnxlj.exe |10/11/2006 20:51:01
C:\WINDOWS\system32\bbjudflx.exe |18/11/2006 23:08:54
C:\WINDOWS\system32\bddoirhx.exe |08/11/2006 17:47:18
C:\WINDOWS\system32\bifvcaqc.exe |23/11/2006 22:57:34
C:\WINDOWS\system32\bldhynhq.exe |05/12/2006 17:35:24
C:\WINDOWS\system32\bnyvvhbm.exe |07/12/2006 22:10:45
C:\WINDOWS\system32\cdjwyfix.exe |22/12/2006 17:37:02
C:\WINDOWS\system32\cfvbcrlo.exe |17/12/2006 13:25:22
C:\WINDOWS\system32\cgfvpsjm.exe |22/12/2006 17:02:51
C:\WINDOWS\system32\cgtyqlrr.exe |18/11/2006 22:50:05
C:\WINDOWS\system32\cjgiktsa.exe |23/11/2006 22:57:43
C:\WINDOWS\system32\ckxhgpdf.exe |18/11/2006 23:02:29
C:\WINDOWS\system32\crdwqqep.exe |12/11/2006 16:53:27
C:\WINDOWS\system32\ddvvohgd.exe |09/11/2006 22:21:49
C:\WINDOWS\system32\debug.exe |24/04/2003 13:00:00
C:\WINDOWS\system32\difwtfvm.exe |11/11/2006 12:49:52
C:\WINDOWS\system32\dikmwqyc.exe |11/11/2006 10:54:21
C:\WINDOWS\system32\dmgr2.exe |25/03/2005 20:32:41
C:\WINDOWS\system32\dosx.exe |24/04/2003 13:00:00
C:\WINDOWS\system32\dowllovy.exe |22/12/2006 17:33:54
C:\WINDOWS\system32\dqacyhwy.exe |11/11/2006 09:40:54
C:\WINDOWS\system32\dqxktplr.exe |18/12/2006 19:14:24
C:\WINDOWS\system32\dtsijbas.exe |18/12/2006 18:58:30
C:\WINDOWS\system32\duajsngx.exe |01/12/2006 19:03:55
C:\WINDOWS\system32\dunxmasq.exe |26/11/2006 12:12:15
C:\WINDOWS\system32\duoollxq.exe |23/11/2006 23:11:12
C:\WINDOWS\system32\dvdplay.exe |23/08/2001 18:47:34
C:\WINDOWS\system32\dwarqyok.exe |04/12/2006 18:08:52
C:\WINDOWS\system32\ealavluy.exe |20/12/2006 18:15:00
C:\WINDOWS\system32\edeeccww.exe |12/11/2006 20:47:27
C:\WINDOWS\system32\edlin.exe |24/04/2003 13:00:00
C:\WINDOWS\system32\elsdjceh.exe |11/11/2006 09:40:23
C:\WINDOWS\system32\eoffqsqk.exe |22/11/2006 20:45:25
C:\WINDOWS\system32\exe2bin.exe |24/04/2003 13:00:00
C:\WINDOWS\system32\exrkvkgu.exe |11/12/2006 18:15:41
C:\WINDOWS\system32\fastopen.exe |24/04/2003 13:00:00
C:\WINDOWS\system32\fopwmgdy.exe |03/11/2006 18:22:53
C:\WINDOWS\system32\fskmtsbm.exe |08/12/2006 17:59:51
C:\WINDOWS\system32\ftboxnxl.exe |16/11/2006 17:48:03
C:\WINDOWS\system32\fvsidooy.exe |05/11/2006 18:30:43
C:\WINDOWS\system32\gardhtfc.exe |20/11/2006 06:21:56
C:\WINDOWS\system32\gktfxipw.exe |10/12/2006 13:54:39
C:\WINDOWS\system32\gncopicl.exe |28/11/2006 17:42:14
C:\WINDOWS\system32\gobrxtwv.exe |21/11/2006 17:41:10
C:\WINDOWS\system32\guxarogi.exe |17/12/2006 18:04:27
C:\WINDOWS\system32\gvopwqdu.exe |25/11/2006 20:39:11
C:\WINDOWS\system32\gyjqeywt.exe |15/12/2006 19:15:29
C:\WINDOWS\system32\hgcddihu.exe |19/11/2006 23:21:40
C:\WINDOWS\system32\hjqqbfii.exe |12/11/2006 15:22:21
C:\WINDOWS\system32\hsrjerlt.exe |27/11/2006 20:35:08
C:\WINDOWS\system32\hxdfpeav.exe |25/11/2006 20:29:13
C:\WINDOWS\system32\ikicnabt.exe |17/11/2006 18:52:57
C:\WINDOWS\system32\imonihvr.exe |08/12/2006 22:51:10
C:\WINDOWS\system32\itdgccxx.exe |12/12/2006 17:39:48
C:\WINDOWS\system32\iuviiqct.exe |23/11/2006 22:05:02
C:\WINDOWS\system32\java.exe |13/11/2006 18:41:29
C:\WINDOWS\system32\javaw.exe |13/11/2006 18:41:29
C:\WINDOWS\system32\javaws.exe |13/11/2006 18:41:29
C:\WINDOWS\system32\jkrmhoip.exe |26/11/2006 23:14:15
C:\WINDOWS\system32\katadsql.exe |16/12/2006 11:44:36
C:\WINDOWS\system32\krplutvf.exe |25/11/2006 15:36:46
C:\WINDOWS\system32\ksmnegtd.exe |18/12/2006 19:48:40
C:\WINDOWS\system32\kunweeey.exe |29/11/2006 18:46:32
C:\WINDOWS\system32\kvrmyshi.exe |06/11/2006 21:22:31
C:\WINDOWS\system32\ldguntat.exe |26/11/2006 18:37:33
C:\WINDOWS\system32\lvvoqgqi.exe |05/11/2006 18:27:03
C:\WINDOWS\system32\mcldsfkv.exe |12/11/2006 20:54:29
C:\WINDOWS\system32\mem.exe |24/04/2003 13:00:00
C:\WINDOWS\system32\mgxpvprt.exe |25/11/2006 15:19:23
C:\WINDOWS\system32\mjwgqnkh.exe |09/12/2006 12:16:41
C:\WINDOWS\system32\mscdexnt.exe |24/04/2003 13:00:00
C:\WINDOWS\system32\musqllhf.exe |10/11/2006 17:09:51
C:\WINDOWS\system32\mvtnxnrp.exe |30/11/2006 17:31:55
C:\WINDOWS\system32\mydcfiom.exe |26/11/2006 13:05:17
C:\WINDOWS\system32\mykecmyy.exe |13/12/2006 17:45:01
C:\WINDOWS\system32\ndjhporp.exe |09/12/2006 16:53:53
C:\WINDOWS\system32\NeroCheck.exe |09/07/2001 11:50:42
C:\WINDOWS\system32\nfqwphvg.exe |10/11/2006 20:50:53
C:\WINDOWS\system32\nhsraulq.exe |20/12/2006 18:34:52
C:\WINDOWS\system32\nloyoorh.exe |12/11/2006 16:53:15
C:\WINDOWS\system32\nlsfunc.exe |24/04/2003 13:00:00
C:\WINDOWS\system32\nnddeawh.exe |13/11/2006 18:29:05
C:\WINDOWS\system32\ntfwbkns.exe |17/12/2006 14:29:09
C:\WINDOWS\system32\nwkrfcck.exe |17/12/2006 13:03:34
C:\WINDOWS\system32\odabjrlj.exe |17/12/2006 14:24:21
C:\WINDOWS\system32\ogpsrlax.exe |24/11/2006 18:35:45
C:\WINDOWS\system32\ohnjbmtx.exe |11/12/2006 19:55:04
C:\WINDOWS\system32\ohpkqvys.exe |04/11/2006 18:23:01
C:\WINDOWS\system32\oprsgstw.exe |22/12/2006 19:44:52
C:\WINDOWS\system32\otfoegrk.exe |11/12/2006 21:56:35
C:\WINDOWS\system32\owyllmmu.exe |19/12/2006 17:39:53
C:\WINDOWS\system32\pfodbooc.exe |13/11/2006 23:38:04
C:\WINDOWS\system32\pgshdnsa.exe |24/11/2006 18:09:29
C:\WINDOWS\system32\phlkcrom.exe |18/11/2006 12:11:46
C:\WINDOWS\system32\pmqbsdfq.exe |26/11/2006 13:34:25
C:\WINDOWS\system32\qktboyra.exe |12/11/2006 10:51:45
C:\WINDOWS\system32\qnstnlpd.exe |16/12/2006 16:56:20
C:\WINDOWS\system32\qobxyqqr.exe |05/11/2006 21:27:39
C:\WINDOWS\system32\quwjqcea.exe |25/11/2006 15:19:49
C:\WINDOWS\system32\rbneyqpm.exe |18/12/2006 19:43:58
C:\WINDOWS\system32\redir.exe |24/04/2003 13:00:00
C:\WINDOWS\system32\reico.exe |18/02/2005 18:17:11
C:\WINDOWS\system32\rriktdeh.exe |18/12/2006 19:10:08
C:\WINDOWS\system32\RTLCPL.EXE |28/10/2004 16:12:35
C:\WINDOWS\system32\setver.exe |24/04/2003 13:00:00
C:\WINDOWS\system32\sgbpxmer.exe |07/11/2006 17:41:06
C:\WINDOWS\system32\share.exe |24/04/2003 13:00:00
C:\WINDOWS\system32\slrundll.exe |28/10/2004 15:27:30
C:\WINDOWS\system32\slserv.exe |28/10/2004 15:27:30
C:\WINDOWS\system32\SpoonUninstall.exe |17/04/2005 13:31:15
C:\WINDOWS\system32\sqogavnb.exe |05/11/2006 21:27:51
C:\WINDOWS\system32\stuctgge.exe |21/12/2006 19:03:24
C:\WINDOWS\system32\stxubqlj.exe |26/11/2006 11:40:49
C:\WINDOWS\system32\sufgwnyi.exe |14/11/2006 17:30:33
C:\WINDOWS\system32\svyywssj.exe |30/11/2006 22:44:10
C:\WINDOWS\system32\tdbxowgv.exe |11/12/2006 19:48:44
C:\WINDOWS\system32\tduxgeqv.exe |08/11/2006 19:29:10
C:\WINDOWS\system32\tioxqmer.exe |08/11/2006 21:09:16
C:\WINDOWS\system32\tnhgecfn.exe |15/11/2006 22:54:24
C:\WINDOWS\system32\tqdncpme.exe |12/11/2006 21:44:10
C:\WINDOWS\system32\txhihndo.exe |06/11/2006 22:10:43
C:\WINDOWS\system32\UAService7.exe |27/03/2005 14:54:25
C:\WINDOWS\system32\ubhieikw.exe |15/11/2006 17:36:05
C:\WINDOWS\system32\uglxpxxn.exe |27/11/2006 18:09:37
C:\WINDOWS\system32\Uharc.exe |18/02/2005 18:16:23
C:\WINDOWS\system32\ujopqkeq.exe |27/11/2006 20:43:06
C:\WINDOWS\system32\unutsgdr.exe |06/11/2006 21:22:44
C:\WINDOWS\system32\usrmlnka.exe |23/08/2001 18:47:48
C:\WINDOWS\system32\usrprbda.exe |23/08/2001 18:47:48
C:\WINDOWS\system32\usrshuta.exe |23/08/2001 18:47:48
C:\WINDOWS\system32\vanlhmqa.exe |12/11/2006 17:03:43
C:\WINDOWS\system32\veeqhdea.exe |01/11/2006 19:14:33
C:\WINDOWS\system32\vfnvmtsv.exe |06/12/2006 19:16:38
C:\WINDOWS\system32\vjbmfnse.exe |25/11/2006 15:27:52
C:\WINDOWS\system32\vltjjnrm.exe |19/11/2006 18:17:10
C:\WINDOWS\system32\vsekpwgr.exe |12/11/2006 17:03:30
C:\WINDOWS\system32\vvnidnif.exe |29/11/2006 17:39:21
C:\WINDOWS\system32\vynxttnq.exe |22/11/2006 17:37:05
C:\WINDOWS\system32\waodljik.exe |16/11/2006 17:47:37
C:\WINDOWS\system32\wbxcojle.exe |20/12/2006 22:38:57
C:\WINDOWS\system32\whudvlfi.exe |05/11/2006 14:39:20
C:\WINDOWS\system32\wticjrpl.exe |19/11/2006 10:11:11
C:\WINDOWS\system32\xcbphrhg.exe |05/11/2006 18:30:34
C:\WINDOWS\system32\xcrnlyax.exe |17/12/2006 18:22:58
C:\WINDOWS\system32\xlltauir.exe |25/11/2006 19:08:10
C:\WINDOWS\system32\xonmwfdy.exe |05/11/2006 19:08:46
C:\WINDOWS\system32\xpeisose.exe |30/11/2006 18:07:37
C:\WINDOWS\system32\xsvgmppc.exe |19/12/2006 21:07:58
C:\WINDOWS\system32\xwlplaqj.exe |11/11/2006 10:53:52
C:\WINDOWS\system32\ybthtjqe.exe |12/12/2006 22:53:02
C:\WINDOWS\system32\ybulhxpc.exe |23/11/2006 17:40:01
C:\WINDOWS\system32\yifydmhf.exe |05/11/2006 21:15:40
C:\WINDOWS\system32\ylafajue.exe |09/11/2006 17:38:38
C:\WINDOWS\system32\ylorutgu.exe |19/11/2006 15:30:27
C:\WINDOWS\system32\yltenhbs.exe |15/12/2006 18:30:22
C:\WINDOWS\system32\ynktjcxl.exe |22/12/2006 18:22:32
C:\WINDOWS\system32\ytqesnjf.exe |25/11/2006 21:41:43
C:\WINDOWS\system32\yyqrwrsj.exe |17/12/2006 13:39:29
C:\WINDOWS\system32\a3d.dll |28/10/2004 16:12:34
C:\WINDOWS\system32\AcSignExt.dll |05/03/2005 13:18:09
C:\WINDOWS\system32\AcSignExtRes.dll |07/03/2005 19:00:01
C:\WINDOWS\system32\AcSignIcon.dll |05/03/2005 13:18:12
C:\WINDOWS\system32\amstream.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\ati2cqag.dll |28/10/2004 15:27:32
C:\WINDOWS\system32\ati2dvaa.dll |28/10/2004 15:27:32
C:\WINDOWS\system32\ati2dvag.dll |28/10/2004 15:27:31
C:\WINDOWS\system32\ati2edxx.dll |29/09/2004 07:18:20
C:\WINDOWS\system32\ati2evxx.dll |29/09/2004 07:18:08
C:\WINDOWS\system32\ati3d1ag.dll |28/10/2004 15:27:31
C:\WINDOWS\system32\ati3d2ag.dll |13/11/2003 21:10:54
C:\WINDOWS\system32\ati3duag.dll |28/10/2004 15:27:31
C:\WINDOWS\system32\ATIDDC.DLL |29/09/2004 07:16:22
C:\WINDOWS\system32\ATIDEMGR.dll |29/09/2004 09:32:34
C:\WINDOWS\system32\atiiiexx.dll |29/09/2004 09:58:44
C:\WINDOWS\system32\atikvmag.dll |21/02/2006 19:11:02
C:\WINDOWS\system32\atioglx1.dll |21/02/2006 19:27:14
C:\WINDOWS\system32\atioglxx.dll |29/09/2004 07:44:00
C:\WINDOWS\system32\atipdlxx.dll |29/09/2004 07:18:50
C:\WINDOWS\system32\atitvo32.dll |29/09/2004 06:36:20
C:\WINDOWS\system32\ativcoxx.dll |09/11/2001 10:01:04
C:\WINDOWS\system32\ativtmxx.dll |28/10/2004 15:27:31
C:\WINDOWS\system32\ativvaxx.dll |28/10/2004 15:27:31
C:\WINDOWS\system32\atmfd.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\atmlib.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\Audio3D.dll |28/10/2004 16:12:34
C:\WINDOWS\system32\axgvpryj.dll |22/12/2006 18:22:25
C:\WINDOWS\system32\clrvidcc.dll |02/01/2005 21:33:57
C:\WINDOWS\system32\clrviddc.dll |11/08/1998 15:18:52
C:\WINDOWS\system32\CmdLineExt.dll |27/03/2005 14:54:25
C:\WINDOWS\system32\CNCS232.DLL |20/11/2003 14:09:09
C:\WINDOWS\system32\cncs32.dll |27/12/2005 18:15:46
C:\WINDOWS\system32\compatui.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\comypanr.dll |17/12/2006 18:48:34
C:\WINDOWS\system32\cpdymfnb.dll |22/12/2006 17:33:47
C:\WINDOWS\system32\cvfginer.dll |20/12/2006 22:39:02
C:\WINDOWS\system32\cvybqyrm.dll |02/12/2006 15:27:15
C:\WINDOWS\system32\decdnet.dll |11/08/1998 15:18:44
C:\WINDOWS\system32\dgrpsetu.dll |01/01/2002 00:07:13
C:\WINDOWS\system32\dgsetup.dll |01/01/2002 00:07:13
C:\WINDOWS\system32\dhywgghv.dll |27/11/2006 20:35:17
C:\WINDOWS\system32\DivX.dll |26/10/2004 23:38:23
C:\WINDOWS\system32\divxdec_0407.dll |26/10/2004 23:38:18
C:\WINDOWS\system32\divxdec_040c.dll |26/10/2004 23:38:18
C:\WINDOWS\system32\divxdec_0411.dll |26/10/2004 23:38:18
C:\WINDOWS\system32\divx_xx07.dll |26/10/2004 23:38:17
C:\WINDOWS\system32\divx_xx0c.dll |26/10/2004 23:38:18
C:\WINDOWS\system32\divx_xx11.dll |26/10/2004 23:38:18
C:\WINDOWS\system32\dmgrax2.dll |25/03/2005 20:32:31
C:\WINDOWS\system32\dpu10.dll |26/10/2004 23:39:03
C:\WINDOWS\system32\dpuGUI10.dll |26/10/2004 23:39:03
C:\WINDOWS\system32\dpus10.dll |26/10/2004 23:39:03
C:\WINDOWS\system32\dpv10.dll |26/10/2004 23:39:04
C:\WINDOWS\system32\efvnvkme.dll |21/12/2006 19:03:21
C:\WINDOWS\system32\elxjyalh.dll |16/11/2006 17:48:12
C:\WINDOWS\system32\encdec.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\encdnet.dll |02/01/2005 21:33:57
C:\WINDOWS\system32\EnumDev111.dll |23/10/2006 19:29:44
C:\WINDOWS\system32\EqnClass.Dll |01/01/2002 00:07:12
C:\WINDOWS\system32\fxdcbwjf.dll |19/11/2006 10:11:23
C:\WINDOWS\system32\GEARAspi.dll |19/09/2006 15:43:58
C:\WINDOWS\system32\gtmbnrcp.dll |20/12/2006 18:34:42
C:\WINDOWS\system32\hptukyk.dll |16/11/2006 17:57:26
C:\WINDOWS\system32\hpvekfro.dll |15/12/2006 19:15:40
C:\WINDOWS\system32\hsfcisp2.dll |28/10/2004 15:27:31
C:\WINDOWS\system32\hticons.dll |28/10/2004 15:48:03
C:\WINDOWS\system32\hypertrm.dll |28/10/2004 15:48:03
C:\WINDOWS\system32\iawlppsf.dll |18/12/2006 19:15:34
C:\WINDOWS\system32\iccvid.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\ieencode.dll |28/10/2004 15:27:31
C:\WINDOWS\system32\iehncmpu.dll |15/12/2006 18:30:07
C:\WINDOWS\system32\imagr5.dll |21/09/2000 17:02:28
C:\WINDOWS\system32\imagx5.dll |27/09/2000 16:15:06
C:\WINDOWS\system32\ImagXpr5.dll |21/09/2000 12:53:00
C:\WINDOWS\system32\inetda.dll |02/08/2001 04:11:25
C:\WINDOWS\system32\IpLib.dll |23/10/2006 19:29:44
C:\WINDOWS\system32\ir32_32.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\ir41_qc.dll |28/10/2004 15:27:31
C:\WINDOWS\system32\ir41_qcx.dll |28/10/2004 15:27:31
C:\WINDOWS\system32\ir50_32.dll |28/10/2004 15:27:31
C:\WINDOWS\system32\ir50_qc.dll |28/10/2004 15:27:31
C:\WINDOWS\system32\ir50_qcx.dll |28/10/2004 15:27:31
C:\WINDOWS\system32\isrdbg32.dll |28/10/2004 15:48:58
C:\WINDOWS\system32\jgaw400.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\jgdw400.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\jgmd400.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\jgpl400.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\jgsd400.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\jgsh400.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\jhhlvqts.dll |18/12/2006 19:49:12
C:\WINDOWS\system32\jrharjaq.dll |20/12/2006 18:14:51
C:\WINDOWS\system32\KMVIDC32.DLL |30/11/2004 18:40:54
C:\WINDOWS\system32\kyfahway.dll |26/11/2006 11:40:41
C:\WINDOWS\system32\lvaoqfey.dll |27/11/2006 20:43:09
C:\WINDOWS\system32\mdmxsdk.dll |28/10/2004 15:27:31
C:\WINDOWS\system32\mdwmdmsp.dll |23/08/2001 18:47:06
C:\WINDOWS\system32\mrvdlg.dll |28/10/2004 16:17:56
C:\WINDOWS\system32\msdmo.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\msencode.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\msttxl16.dll |24/02/1998 23:21:00
C:\WINDOWS\system32\MSWAY.dll |26/12/2005 11:09:15
C:\WINDOWS\system32\msxwnet32.dll |16/05/2001 11:52:26
C:\WINDOWS\system32\mtxparhd.dll |28/10/2004 15:27:30
C:\WINDOWS\system32\muaktpvk.dll |22/12/2006 17:02:55
C:\WINDOWS\system32\nbexprft.dll |18/12/2006 19:44:01
C:\WINDOWS\system32\njimnfjf.dll |22/12/2006 17:37:05
C:\WINDOWS\system32\nv4_disp.dll |28/10/2004 15:27:30
C:\WINDOWS\system32\odgjcuus.dll |26/11/2006 13:28:32
C:\WINDOWS\system32\odtpfici.dll |22/12/2006 19:44:55
C:\WINDOWS\system32\Oemdspif.dll |29/09/2004 07:18:36
C:\WINDOWS\system32\oigkpais.dll |23/11/2006 17:39:55
C:\WINDOWS\system32\orebdeyb.dll |13/12/2006 21:46:36
C:\WINDOWS\system32\paqsp.dll |23/08/2001 18:47:16
C:\WINDOWS\system32\pdfcmnnt.dll |26/03/2006 10:49:45
C:\WINDOWS\system32\picn20.dll |21/09/2000 07:47:10
C:\WINDOWS\system32\pnc32301.dll |02/01/2005 21:33:58
C:\WINDOWS\system32\pnc32401.dll |02/01/2005 21:33:58
C:\WINDOWS\system32\pncrt.dll |11/08/1998 15:18:44
C:\WINDOWS\system32\pndx5016.dll |26/11/2004 21:09:27
C:\WINDOWS\system32\pndx5032.dll |26/11/2004 21:09:27
C:\WINDOWS\system32\pnen3230.dll |02/01/2005 21:33:58
C:\WINDOWS\system32\pneng101.dll |02/01/2005 21:33:58
C:\WINDOWS\system32\PSIKey.dll |26/10/2004 23:38:24
C:\WINDOWS\system32\ptipbmf.dll |28/10/2004 16:18:41
C:\WINDOWS\system32\qedwipes.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\qt-mt331.dll |26/10/2004 23:39:05
C:\WINDOWS\system32\quqrbkl.dll |19/11/2006 10:13:15
C:\WINDOWS\system32\quxfwhbc.dll |18/12/2006 19:18:34
C:\WINDOWS\system32\RA3214_4.dll |11/08/1998 15:18:44
C:\WINDOWS\system32\ra3228_8.dll |11/08/1998 15:18:44
C:\WINDOWS\system32\ra32clv1.dll |11/08/1998 15:18:44
C:\WINDOWS\system32\ra32dnet.dll |11/08/1998 15:18:44
C:\WINDOWS\system32\ra32rv10.dll |11/08/1998 15:18:44
C:\WINDOWS\system32\ra32sipr.dll |11/08/1998 15:18:44
C:\WINDOWS\system32\rarv1032.dll |11/08/1998 15:18:44
C:\WINDOWS\system32\rarv10en.dll |02/01/2005 21:33:58
C:\WINDOWS\system32\rdnoxssp.dll |19/12/2006 17:44:15
C:\WINDOWS\system32\RGSS100J.dll |11/06/2005 15:48:26
C:\WINDOWS\system32\rmevents.dll |02/01/2005 21:33:58
C:\WINDOWS\system32\rmmerge2.dll |02/01/2005 21:33:58
C:\WINDOWS\system32\rmoc3260.dll |26/11/2004 21:09:32
C:\WINDOWS\system32\rnqlfsvi.dll |18/11/2006 22:50:11
C:\WINDOWS\system32\Roboex32.dll |30/01/2005 14:44:37
C:\WINDOWS\system32\RTLCPAPI.dll |28/10/2004 16:12:34
C:\WINDOWS\system32\rvoqxscq.dll |19/12/2006 21:08:22
C:\WINDOWS\system32\s3gnb.dll |28/10/2004 15:27:30
C:\WINDOWS\system32\sbe.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\SIntf16.dll |10/12/2004 17:11:20
C:\WINDOWS\system32\SIntf32.dll |10/12/2004 17:11:20
C:\WINDOWS\system32\SIntfNT.dll |10/12/2004 17:11:20
C:\WINDOWS\system32\slbcsp.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\slbiop.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\slbrccsp.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\slcoinst.dll |28/10/2004 15:27:30
C:\WINDOWS\system32\slextspk.dll |28/10/2004 15:27:30
C:\WINDOWS\system32\slgen.dll |28/10/2004 15:27:30
C:\WINDOWS\system32\spnike.dll |23/08/2001 18:47:18
C:\WINDOWS\system32\sprio600.dll |23/08/2001 18:47:18
C:\WINDOWS\system32\sprio800.dll |23/08/2001 18:47:18
C:\WINDOWS\system32\spxcoins.dll |01/01/2002 00:07:12
C:\WINDOWS\system32\swxpckm.dll |19/11/2006 10:13:15
C:\WINDOWS\system32\tsd32.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\TwnLib20.dll |26/06/2000 10:45:30
C:\WINDOWS\system32\uetvjhau.dll |06/12/2006 21:47:35
C:\WINDOWS\system32\unrar.dll |06/12/2004 20:06:06
C:\WINDOWS\system32\unzip32.dll |05/12/2004 22:08:08
C:\WINDOWS\system32\usrcntra.dll |23/08/2001 18:47:20
C:\WINDOWS\system32\usrcoina.dll |23/08/2001 18:47:20
C:\WINDOWS\system32\usrdpa.dll |23/08/2001 18:47:20
C:\WINDOWS\system32\usrdtea.dll |23/08/2001 18:47:20
C:\WINDOWS\system32\usrfaxa.dll |23/08/2001 18:47:20
C:\WINDOWS\system32\usrlbva.dll |23/08/2001 18:47:20
C:\WINDOWS\system32\usrrtosa.dll |23/08/2001 18:47:20
C:\WINDOWS\system32\usrsdpia.dll |23/08/2001 18:47:20
C:\WINDOWS\system32\usrsvpia.dll |23/08/2001 18:47:20
C:\WINDOWS\system32\usrv42a.dll |23/08/2001 18:47:20
C:\WINDOWS\system32\usrv80a.dll |23/08/2001 18:47:20
C:\WINDOWS\system32\usrvoica.dll |23/08/2001 18:47:20
C:\WINDOWS\system32\usrvpa.dll |23/08/2001 18:47:20
C:\WINDOWS\system32\vboxb410.dll |13/06/2001 03:52:44
C:\WINDOWS\system32\vboxp410.dll |13/06/2001 03:52:45
C:\WINDOWS\system32\vboxt410.dll |13/06/2001 03:52:45
C:\WINDOWS\system32\vrjsqmcb.dll |27/11/2006 20:40:07
C:\WINDOWS\system32\vturs.dll |05/12/2006 17:40:17
C:\WINDOWS\system32\wbhelp2.dll |02/11/2004 22:03:21
C:\WINDOWS\system32\wbqmyces.dll |22/12/2006 19:20:40
C:\WINDOWS\system32\WG1v2Lib.dll |23/10/2006 19:29:44
C:\WINDOWS\system32\wh2robo.dll |30/01/2005 14:44:37
C:\WINDOWS\system32\win87em.dll |24/04/2003 13:00:00
C:\WINDOWS\system32\WmJoyFrc.dll |21/08/2006 14:02:54
C:\WINDOWS\system32\xmlparse.dll |08/12/2004 13:09:09
C:\WINDOWS\system32\xmltok.dll |08/12/2004 13:09:09
C:\WINDOWS\system32\ysglannk.dll |18/11/2006 23:15:34
C:\WINDOWS\system32\ZPORT4AS.dll |23/01/2006 20:11:05

Le volume dans le lecteur C s'appelle Wxp
Le numéro de série du volume est 84B2-DB13

Répertoire de C:\WINDOWS\system32

19.08.2004 15:09 6'144 csrss.exe
1 fichier(s) 6'144 octets
0 Rép(s) 32'448'032'768 octets libres
Le volume dans le lecteur C s'appelle Wxp
Le numéro de série du volume est 84B2-DB13

Répertoire de C:\WINDOWS\system32

25.03.2005 20:32 860'160 dmgr2.exe
1 fichier(s) 860'160 octets
0 Rép(s) 32'448'032'768 octets libres

Contenu de Downloaded Program Files
Le volume dans le lecteur C s'appelle Wxp
Le numéro de série du volume est 84B2-DB13

Répertoire de C:\WINDOWS\Downloaded Program Files

11.12.2006 19:07 <REP> .
11.12.2006 19:07 <REP> ..
11.04.2006 16:10 135'168 asinst.dll
03.04.2006 10:00 537 asinst.inf
17.05.2006 13:32 231'072 avsniff.dll
17.05.2006 13:29 878 avsniff.inf
17.05.2006 13:32 198'304 avsniffdlgs.dll
17.05.2006 13:26 537'704 AXXPEE.dll
09.12.2005 17:08 749 cab.inf
17.05.2006 13:29 241 CabSA.inf
06.09.2006 00:00 2'504 catalog.dat
18.11.2006 12:20 <REP> CONFLICT.1
22.12.2006 18:18 <REP> CONFLICT.2
22.12.2006 18:18 <REP> CONFLICT.3
22.12.2006 18:18 <REP> CONFLICT.4
22.12.2006 18:18 <REP> CONFLICT.5
22.12.2006 18:18 <REP> CONFLICT.6
28.10.2004 15:49 65 desktop.ini
06.09.2006 00:00 6'899 ecbootil.vxd
17.05.2006 13:26 42'112 ecmldr32.dll
06.09.2006 00:00 272'040 ecmsvr32.dll
08.09.2004 22:38 1'271 erma.inf
14.02.2003 09:32 283'296 IDrop.ocx
14.02.2003 09:34 114'848 IDropENU.dll
13.03.2003 09:58 114'600 IDropFRA.dll
10.11.2005 13:05 876 jinstall-1_5_0_06.inf
29.11.2006 14:00 367 LegitCheckControl.inf
17.05.2006 13:28 6'850 navapi.vxd
17.05.2006 13:28 201'896 navapi32.dll
06.09.2006 00:00 124'584 naveng32.dll
06.09.2006 00:00 882'344 navex32a.dll
09.12.2005 17:08 241'664 ocx_play.ocx
09.12.2005 14:47 24'576 playershim.dll
09.10.2003 10:32 144 QTPlugin.inf
17.05.2006 13:32 161'480 rufsi.dll
06.09.2006 00:00 97'552 scrauth.dat
22.06.2006 10:41 5'032 swflash.inf
06.09.2006 00:00 14 symaveng.cat
06.09.2006 00:00 901 symaveng.inf
06.09.2006 00:00 48'797 tcdefs.dat
06.09.2006 00:00 966'264 tcscan7.dat
06.09.2006 00:00 315'136 tcscan8.dat
06.09.2006 00:00 659'400 tcscan9.dat
06.09.2006 00:00 453 tinf.dat
06.09.2006 00:00 148 tinfidx.dat
06.09.2006 00:00 1'957 tinfl.dat
06.09.2006 00:00 58'587 tscan1.dat
06.09.2006 00:00 3'027 tscan1hd.dat
06.09.2006 00:00 5'116 v.grd
06.09.2006 00:00 2'261 v.sig
06.09.2006 00:00 106'244 virscan.inf
06.09.2006 00:00 966'811 virscan1.dat
06.09.2006 00:00 569'712 virscan2.dat
06.09.2006 00:00 146'612 virscan3.dat
06.09.2006 00:00 320'186 virscan4.dat
06.09.2006 00:00 2'700'020 virscan5.dat
06.09.2006 00:00 389'301 virscan6.dat
06.09.2006 00:00 4'468'258 virscan7.dat
06.09.2006 00:00 1'593'724 virscan8.dat
06.09.2006 00:00 3'622'432 virscan9.dat
06.09.2006 00:00 32 virscant.dat
08.09.2006 21:30 2'072 vscanmsx.dat
06.09.2006 00:00 224 zdone.dat
55 fichier(s) 20'637'342 octets

Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.1

18.11.2006 12:20 <REP> .
18.11.2006 12:20 <REP> ..
0 fichier(s) 0 octets

Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.2

22.12.2006 18:18 <REP> .
22.12.2006 18:18 <REP> ..
0 fichier(s) 0 octets

Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.3

22.12.2006 18:18 <REP> .
22.12.2006 18:18 <REP> ..
0 fichier(s) 0 octets

Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.4

22.12.2006 18:18 <REP> .
22.12.2006 18:18 <REP> ..
0 fichier(s) 0 octets

Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.5

22.12.2006 18:18 <REP> .
22.12.2006 18:18 <REP> ..
07.09.2006 12:15 227 UDC6V_0001_D19M0709NetInstaller.inf
1 fichier(s) 227 octets

Répertoire de C:\WINDOWS\Downloaded Program Files\CONFLICT.6

22.12.2006 18:18 <REP> .
22.12.2006 18:18 <REP> ..
0 fichier(s) 0 octets

Total des fichiers listés :
56 fichier(s) 20'637'569 octets
20 Rép(s) 32'448'028'672 octets libres

Recherche de rootkit! (Merci S!Ri)

Recherche d'infections connues

Liste des programmes installes

Ad-Aware SE Personal
Adobe Flash Player 9 ActiveX
Adobe Photoshop 6.0
Adobe Reader 7.0.8 - Français
Adobe SVG Viewer
adsl TV
Apple Software Update
Archiveur WinRAR
AsusUpdate
ATI - Utilitaire de désinstallation du logiciel
ATI Control Panel
ATI Display Driver
Audacity 1.2.4
AutoCAD 2006 - Français
Autodesk DWF Viewer
AutoUpdate
avast! Antivirus
AVG Anti-Spyware 7.5
BitTorrent 4.0.1
CCleaner (remove only)
Command & Conquer Red Alert 2
DirectX for Managed Code Update (December 2004)
DivX Player
DivX Pro Trial
Download Accelerator Plus
EA SPORTS online 2006
Easy TM 2.4
eMule
FileZilla (remove only)
Freelancer
GeTax2005
Google Earth
Google Toolbar for Internet Explorer
Highway Pursuit v1.1
HijackThis 1.99.1
IGNMap 0.8.1
iTunes
J2SE Runtime Environment 5.0 Update 6
J2SE Runtime Environment 5.0 Update 9
K700i USB-Handset Manager
Language pack for Ad-Aware SE
Lecteur Windows Media 10
Logitech Desktop Messenger
Logitech Gaming Software
Logitech SetPoint
LX Systems Download Manager
Macromedia Shockwave Player
MediaLife
MediaTickets by OIN
Messenger Plus! 3 & Sponsor
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 French Language Pack
Microsoft .NET Framework 1.1 Hotfix (KB886903)
Microsoft .NET Framework 2.0
Microsoft .NET Framework 2.0
Microsoft .NET Framework 2.0 Language Pack - FRA
Microsoft Game Studios Common Redistributables Pack 1
Microsoft Internationalized Domain Names Mitigation APIs
Microsoft National Language Support Downlevel APIs
Microsoft Office Access MUI (French) 2007 (Beta)
Microsoft Office Excel MUI (French) 2007 (Beta)
Microsoft Office InfoPath MUI (French) 2007 (Beta)
Microsoft Office Outlook MUI (French) 2007 (Beta)
Microsoft Office PowerPoint MUI (French) 2007 (Beta)
Microsoft Office Professional 2007 (Beta)
Microsoft Office Professional Plus 2007 (Beta)
Microsoft Office Proof (Arabic) 2007 (Beta)
Microsoft Office Proof (Dutch) 2007 (Beta)
Microsoft Office Proof (English) 2007 (Beta)
Microsoft Office Proof (French) 2007 (Beta)
Microsoft Office Proof (German) 2007 (Beta)
Microsoft Office Proof (Spanish) 2007 (Beta)
Microsoft Office Publisher MUI (French) 2007 (Beta)
Microsoft Office Shared MUI (French) 2007 (Beta)
Microsoft Office Word MUI (French) 2007 (Beta)
Microsoft XML Parser
Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA
MSXML 4.0 SP2 (KB927978)
MSXML4 Parser
Nero - Burning Rom
NHL06
Package de base Microsoft de service de chiffrement pour cartes à puce
Panda ActiveScan
PDFCreator
Plasma Pong v1.2
PowerDVD
QuickTime
RealPlayer
Realtek AC'97 Audio
Rise Of Legends
Rise Of Legends
Rise of Nations
Security Update for Microsoft .NET Framework 2.0 (KB917283)
Security Update pour Microsoft .NET Framework 2.0 (KB922770)
Sony Ericsson Capability Manager
Sony Ericsson Mobile Phone Monitor
Spybot - Search & Destroy 1.4
Starcraft
Steganos Internet Anonym 7.1.6
TrackMania Nations ESWC 0.1.7.5
Watchtower Library 2005 - Édition française
WebFldrs XP
WG111v2 Configuration Utility
Windows Defender
Windows Defender Signatures
Windows Genuine Advantage Notifications (KB905474)
Windows Live Messenger
Windows Live Sign-in Assistant
Windows Media Connect
Windows Media Format Runtime
Windows XP Service Pack 2

Le volume dans le lecteur C s'appelle Wxp
Le numéro de série du volume est 84B2-DB13

Répertoire de C:\Program Files

22.12.2006 17:34 <REP> .
22.12.2006 17:34 <REP> ..
11.09.2005 12:49 <REP> A4DeskMag2
24.11.2005 18:37 <REP> Admiresoft
26.03.2006 11:33 <REP> Adobe
13.11.2006 18:27 <REP> adslTV
17.11.2005 22:30 <REP> Adverts
01.01.2002 14:00 <REP> Ahead
06.02.2006 21:55 <REP> Alwil Software
07.06.2005 21:58 <REP> America's Army
05.11.2006 13:44 <REP> AnswerWorks 4.0
06.11.2006 21:17 <REP> Apple Software Update
25.03.2005 19:06 <REP> Ashampoo
28.10.2004 15:45 <REP> ASUS
28.10.2004 16:20 <REP> ATI Technologies
02.08.2006 19:03 <REP> Audacity
05.11.2006 13:49 <REP> AutoCAD 2006
04.11.2006 21:25 <REP> Autodesk
24.11.2005 18:36 <REP> AV MP3 Player-Morpher
28.10.2004 16:12 <REP> AvRack
19.04.2005 17:36 <REP> BitTorrent
27.03.2005 20:03 <REP> BoontyGames
18.11.2006 23:03 <REP> CCleaner
12.01.2006 18:02 <REP> Clash N Slash
14.01.2006 15:33 <REP> Common Files
07.02.2006 21:16 <REP> Comodo
28.10.2004 15:48 <REP> ComPlus Applications
29.10.2006 15:16 <REP> Corel(R) Painter(TM) IX.5 TBYB FR
21.03.2005 19:10 <REP> Creative
01.01.2002 13:57 <REP> CyberLink
08.09.2006 20:18 <REP> DAP
22.11.2004 21:21 <REP> directx
20.11.2004 10:31 <REP> DivX
17.04.2006 13:28 <REP> DOSBox-0.65
15.04.2006 11:42 <REP> D-Tools
18.11.2006 12:12 <REP> Easy TM
02.01.2002 16:26 <REP> eMule
21.06.2005 17:15 <REP> eoRezo
19.11.2006 13:26 <REP> Fichiers communs
03.04.2006 18:42 <REP> FileZilla
27.06.2005 21:22 <REP> FlashFXP
02.11.2006 22:05 <REP> F-Secure
11.03.2005 17:33 <REP> Game_Maker6
26.03.2006 11:34 <REP> GeTax2005
31.10.2006 21:26 <REP> Google
22.12.2006 17:10 <REP> Grisoft
30.04.2005 19:00 <REP> GSC Game World
12.09.2005 20:08 <REP> IDM Computer Solutions
18.12.2006 22:13 <REP> IGN
24.09.2006 12:39 <REP> IKEA HomePlanner
17.04.2005 13:31 <REP> Illustrate
28.10.2004 16:03 <REP> Intel
11.01.2006 18:47 <REP> InterActual
17.12.2006 18:21 <REP> Internet Explorer
06.11.2006 21:21 <REP> iPod
06.11.2006 21:22 <REP> iTunes
13.11.2006 18:41 <REP> Java
08.12.2004 12:57 <REP> K700i USB-Handset Manager
04.11.2006 16:24 <REP> Lavasoft
27.12.2005 12:02 <REP> Lecteur CANALPLAY
17.06.2006 13:00 <REP> LimeWire
21.08.2006 14:02 <REP> Logitech
15.05.2005 16:17 <REP> LucasFan Games
25.03.2005 20:32 <REP> LX Download Manager
23.01.2006 20:24 <REP> Messenger
24.09.2006 12:33 <REP> Messenger Plus! 3
28.10.2004 15:50 <REP> microsoft frontpage
23.05.2006 16:36 <REP> Microsoft Games
05.11.2006 13:44 <REP> Microsoft Office
02.07.2006 20:05 <REP> Microsoft Visual Studio
02.07.2006 20:04 <REP> Microsoft Works
02.07.2006 20:04 <REP> Microsoft.NET
16.12.2006 16:54 <REP> Movie Maker
09.01.2006 17:35 <REP> Mozilla Firefox
02.07.2006 20:05 <REP> MSBuild
28.10.2004 15:48 <REP> MSN
28.10.2004 15:48 <REP> MSN Gaming Zone
02.11.2006 22:24 <REP> MSN Messenger
17.11.2006 19:02 <REP> MSXML 4.0
12.09.2005 17:19 <REP> MUSICMATCH
19.04.2005 20:10 <REP> NASA
23.10.2006 19:29 <REP> NETGEAR
28.10.2004 15:26 <REP> NetMeeting
07.09.2006 14:40 <REP> Notepad++
04.01.2002 18:33 <REP> OfficeUpdate11
11.12.2006 19:03 <REP> Opera
16.12.2006 16:54 <REP> Outlook Express
26.03.2006 10:50 <REP> PDFCreator
16.05.2005 17:39 <REP> PeerGuardian pr14
09.03.2005 18:13 <REP> Plustech Inc
27.03.2005 13:48 <REP> PopCap Games
06.11.2006 21:20 <REP> QuickTime
26.11.2004 21:09 <REP> Real
28.10.2004 16:12 <REP> Realtek Sound Manager
21.08.2006 14:07 <REP> ReflexiveArcade
18.02.2005 18:07 <REP> ScreenSaver
23.01.2006 20:26 <REP> Secure Surfing Engine
28.10.2004 15:48 <REP> Services en ligne
28.09.2006 10:59 <REP> Sony Ericsson
01.05.2006 16:03 <REP> Spybot - Search & Destroy
04.11.2006 20:08 <REP> Spybot - Search & Destroy2
23.01.2006 20:26 <REP> Steganos Internet Anonym 7
27.12.2005 12:03 <REP> StreetFighter Flash
17.06.2006 12:53 <REP> TheTurtle
07.02.2006 18:22 <REP> Trustix
31.07.2005 12:04 <REP> Ubi Soft
08.12.2004 13:09 <REP> Ubisoft
01.06.2005 22:14 <REP> Ulead Systems
17.06.2006 12:59 <REP> Visicom Media
17.06.2005 19:32 <REP> VoipBuster.com
22.12.2006 18:22 <REP> VSAdd-in
15.04.2006 12:11 <REP> VVSN
20.02.2006 19:44 <REP> Watchtower
09.03.2006 22:47 <REP> Webteh
18.11.2006 22:51 <REP> Windows Defender
05.11.2004 17:41 <REP> Windows Media Components
04.09.2006 19:43 <REP> Windows Media Connect 2
16.12.2006 16:54 <REP> Windows Media Player
28.10.2004 15:26 <REP> Windows NT
27.08.2005 19:55 <REP> WinHex
23.01.2006 20:26 <REP> WinRAR
28.10.2004 15:50 <REP> xerox
19.11.2006 13:26 <REP> ?ssembly
04.11.2006 12:26 <REP> ??stem
0 fichier(s) 0 octets
124 Rép(s) 32'447'733'760 octets libres
Le volume dans le lecteur C s'appelle Wxp
Le numéro de série du volume est 84B2-DB13

Répertoire de C:\Program Files\fichiers communs

19.11.2006 13:26 <REP> .
19.11.2006 13:26 <REP> ..
26.03.2006 11:33 <REP> Adobe
05.11.2006 13:50 <REP> Autodesk Shared
05.08.2006 10:52 <REP> AVSMedia
05.11.2006 13:44 <REP> DESIGNER
21.11.2004 15:01 <REP> InstallShield
05.09.2006 20:30 <REP> Java
21.08.2006 14:02 <REP> Logitech
03.11.2004 19:17 <REP> Macrovision Shared
05.11.2006 13:44 <REP> Microsoft Shared
28.10.2004 15:48 <REP> MSSoap
01.01.2002 00:07 <REP> ODBC
24.09.2006 12:54 <REP> Panda Software
26.11.2004 21:09 <REP> Real
28.10.2004 15:48 <REP> Services
01.01.2002 00:07 <REP> SpeechEngines
20.06.2006 20:39 <REP> Synacast
16.12.2006 14:55 <REP> System
28.09.2006 10:59 <REP> Teleca Shared
26.11.2004 21:09 <REP> xing shared
22.12.2006 18:18 <REP> {84B2DB13-0C7E-1036-0924-040307090029}
0 fichier(s) 0 octets
22 Rép(s) 32'447'741'952 octets libres
Le volume dans le lecteur C s'appelle Wxp
Le numéro de série du volume est 84B2-DB13

Répertoire de C:\Program Files\fichiers communs\Microsoft Shared\Web Folders

02.07.2006 20:05 <REP> .
02.07.2006 20:05 <REP> ..
04.01.2002 18:27 <REP> 1033
02.07.2006 19:59 <REP> 1036
25.04.2006 20:33 967'952 MSONSEXT.DLL
02.05.2006 18:37 40'208 MSOSV.DLL
03.06.1999 13:09 122'937 MSOWS409.DLL
07.03.2001 08:00 127'033 MSOWS40c.DLL
11.07.2003 02:25 80'448 PKMWS.DLL
5 fichier(s) 1'338'578 octets
4 Rép(s) 32'447'741'952 octets libres
Le volume dans le lecteur C s'appelle Wxp
Le numéro de série du volume est 84B2-DB13

Répertoire de C:\Program Files\common files

14.01.2006 15:33 <REP> .
14.01.2006 15:33 <REP> ..
21.08.2006 17:33 <REP> EasyInfo
20.02.2005 12:17 <REP> Stardock
0 fichier(s) 0 octets
4 Rép(s) 32'447'741'952 octets libres
Le volume dans le lecteur C s'appelle Wxp
Le numéro de série du volume est 84B2-DB13

Répertoire de C:\

11.11.2001 00:00 68'096 diff.exe
27.08.2006 14:10 103'424 grep.exe
31.10.2005 16:56 700'416 StubInstaller.exe
24.05.2001 11:59 162'304 UNWISE.EXE
4 fichier(s) 1'034'240 octets
0 Rép(s) 32'447'737'856 octets libres
c:\Documents and Settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 7.0.2.16\iTunesSetupAdmin.exe
c:\Documents and Settings\Wxp\.limewire\.NetworkShare\LimeWireWin4.10.5.exe
c:\Documents and Settings\Wxp\.limewire\.NetworkShare\Incomplete\T-2840440-LimeWireWin4.10.9.exe
c:\Documents and Settings\Wxp\Bureau\avgas-setup-7.5.0.50.exe
c:\Documents and Settings\Wxp\Bureau\blbeta.exe
c:\Documents and Settings\Wxp\Bureau\SmitfraudFix.exe
c:\Documents and Settings\Wxp\Bureau\VundoFix.exe
c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\diff.exe
c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\FilesInfoCmd.exe
c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\Fport.exe
c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\grep.exe
c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\LFiles.exe
c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\LISTDLLS.exe
c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\pslist.exe
c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\streams.exe
c:\Documents and Settings\Wxp\Bureau\DiagHelp\DiagHelp\swreg.exe
c:\Documents and Settings\Wxp\Bureau\newbie\crackme1.exe
c:\Documents and Settings\Wxp\Bureau\newbie\stega11.exe
c:\Documents and Settings\Wxp\Bureau\newbie\stega22.exe
c:\Documents and Settings\Wxp\Bureau\newbie\stega4.exe
c:\Documents and Settings\Wxp\Bureau\newbie\HexDecCharEditor\HexDecCharEditor.exe
c:\Documents and Settings\Wxp\Bureau\newbie\Nouveau dossier\ocamlq-public[1].exe
c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\dumphive.exe
c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\GenericRenosFix.exe
c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\Process.exe
c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\Reboot.exe
c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\restart.exe
c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\SmiUpdate.exe
c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\SrchSTS.exe
c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\swreg.exe
c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\swsc.exe
c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\swxcacls.exe
c:\Documents and Settings\Wxp\Bureau\SmitfraudFix\unzip.exe
c:\Documents and Settings\Wxp\Bureau\Steganos Updates\sia7int.exe
c:\Documents and Settings\Wxp\Local Settings\Temp\AutoRun.exe
c:\Documents and Settings\Wxp\Mes documents\Ma musique\Adoprixtixics\4dsportdriving\LOAD.EXE
c:\Documents and Settings\Wxp\Mes documents\Ma musique\Adoprixtixics\4dsportdriving\SETUP.EXE
c:\Documents and Settings\All Users\Application Data\Microsoft\IdentityCRL\ppcrlconfig.dll
c:\Documents and Settings\All Users\Application Data\Microsoft\IdentityCRL\production\ppcrlconfig.dll
c:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\Backup\mpengine.dll
c:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\Default\MpEngine.dll
c:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Definition Updates\{05D79D39-D5A6-4866-9582-579B32CEA05A}\mpengine.dll
c:\Documents and Settings\LocalService\Application Data\Microsoft\UPnP Device Host\upnphost\udhisapi.dll
c:\Documents and Settings\Wxp\Application Data\Microsoft\IdentityCRL\ppcrlconfig.dll

Et celui d'HijackThis :

Logfile of HijackThis v1.99.1
Scan saved at 11:16:30, on 23.12.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\UAService7.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\SYSTEM32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\PROGRA~1\DAP\DAP.EXE
C:\Program Files\Messenger Plus! 3\MsgPlus.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Logitech\Profiler\lwemon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\NETGEAR\WG111v2 Configuration Utility\RtlWake.exe
C:\Program Files\NETGEAR\WG111v2 Configuration Utility\RtWLan.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.5008\GoogleToolbarNotifier.exe
C:\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://accounts.google.com/ServiceLogin?service=mail&passive=true&rm=false&continue=https://mail.google.com/mail/&ss=1&scc=1&ltmpl=default&ltmplcache=2&emr=1&osid=1
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {61C40C3D-BDD2-B627-D189-C569348CDBE4} - (no file)
O2 - BHO: DAPHelper Class - {0000CC75-ACF3-4cac-A0A9-DD3868E06852} - C:\PROGRA~1\DAP\dapbho.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {0964344D-C233-DAF1-2ADC-08C2A8D60810} - C:\WINDOWS\system32\hptukyk.dll
O2 - BHO: (no name) - {2527DC3F-C7A0-CF37-33EA-0525C1600A34} - C:\WINDOWS\system32\quqrbkl.dll
O2 - BHO: (no name) - {36068946-CD51-1AC7-C4AD-044557583146} - C:\WINDOWS\system32\lctsupj.dll (file missing)
O2 - BHO: (no name) - {3FD6B99C-A275-46ea-8FD1-3D63986E51E4} - C:\WINDOWS\system32\hpvekfro.dll
O2 - BHO: (no name) - {42E53C82-E11D-E01B-A428-084851DB6947} - C:\WINDOWS\system32\yzivngl.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~2\SDHelper.dll
O2 - BHO: (no name) - {61E91E9C-BF33-6A6A-7BFC-00B25F19A7AE} - C:\WINDOWS\system32\urwzhx.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: (no name) - {D60B6578-737A-4422-99B4-0ABEDEBA0C17} - C:\WINDOWS\system32\vtsqq.dll (file missing)
O3 - Toolbar: DAP Bar - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - C:\Program Files\DAP\DAPIEBar.dll
O3 - Toolbar: Steganos Internet Anonyme - {00000000-5736-4205-0008-2fe89c996183} - c:\program files\steganos internet anonym 7\sia7iep.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [DownloadAccelerator] C:\PROGRA~1\DAP\DAP.EXE /STARTUP
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [DllRunning] rundll32.exe "C:\WINDOWS\system32\qvlaojwx.dll",setvm
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Start WingMan Profiler] "C:\Program Files\Logitech\Profiler\lwemon.exe" /noui
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\ccleaner.exe" /AUTO
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: Accélérateur de démarrage AutoCAD.lnk = C:\Program Files\Fichiers communs\Autodesk Shared\acstart16.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: WG111v2 Smart Wizard Wireless Setting.lnk = ?
O8 - Extra context menu item: &Download with &DAP - C:\PROGRA~1\DAP\dapextie.htm
O8 - Extra context menu item: Download &all with DAP - C:\PROGRA~1\DAP\dapextie2.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Run DAP - {669695BC-A811-4A9D-8CDF-BA8C795F261C} - C:\PROGRA~1\DAP\DAP.EXE
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {09F1ADAC-76D8-4D0F-99A5-5C907DADB988} - https://www.afternic.com/domains/drivecleaner.com
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {A91DEB0D-AD0D-453E-9AC8-60178EC24212} (VPlayer Control) - http://video.vividas.com/CDN1/4325_Pepsi/web/player/vivid_ocx.jpeg
O17 - HKLM\System\CCS\Services\Tcpip\..\{B7F9CDB8-BF58-4289-8669-EEA83434ED2E}: NameServer = 192.168.0.1
O18 - Protocol: bw+0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {C67A9ECA-D2AF-4C2D-9CC8-E1B4AD2511C3} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program