cid Résolu

Question

bonjour, je crois avoir essayé tout ce qu'il est possible pour désinfecter mon PC, mais rien à faire !!! 
Ce qui est curieux, c'est que je n'ai le pb que sur ma machine de bureau, et rien à mon domicile, ni sur mes deux notebook 
Ci-joint le rapport hijack de ce jour 
merci par avance, et surtout merci de me dire comment éviter ce genre de problème à l'avenir 

Logfile of Trend Micro HijackThis v2.0.0 (BETA) 
Scan saved at 14:21:44, on 21/05/2007 
Platform: Windows XP SP2 (WinNT 5.01.2600) 
Boot mode: Normal 

Running processes: 
C:\WINDOWS\System32\smss.exe 
C:\WINDOWS\system32\winlogon.exe 
C:\WINDOWS\system32\services.exe 
C:\WINDOWS\system32\lsass.exe 
C:\WINDOWS\system32\Ati2evxx.exe 
C:\WINDOWS\system32\svchost.exe 
C:\Program Files\Windows Defender\MsMpEng.exe 
C:\WINDOWS\System32\svchost.exe 
C:\WINDOWS\system32\Ati2evxx.exe 
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe 
c:\acer\KnobService.exe 
C:\Program Files\Alwil Software\Avast4\ashServ.exe 
C:\WINDOWS\system32\spoolsv.exe 
C:\Program Files\Fichiers communs\AOL\ACS\AOLAcsd.exe 
C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe 
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE 
C:\WINDOWS\System32\svchost.exe 
C:\WINDOWS\system32\CAPRPCSK.EXE 
C:\WINDOWS\wanmpsvc.exe 
C:\WINDOWS\system32\fxssvc.exe 
C:\WINDOWS\system32\spool\drivers\w32x86\3\CAPPSWK.EXE 
C:\WINDOWS\system32\spool\drivers\w32x86\3\CAPPSWK.EXE 
C:\WINDOWS\system32\spool\drivers\w32x86\3\CAPPSWK.EXE 
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe 
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe 
C:\WINDOWS\Explorer.EXE 
C:\WINDOWS\mHotkey.exe 
C:\WINDOWS\CNYHKey.exe 
C:\WINDOWS\mHotMon.exe 
C:\Program Files\Aspire\WFTVFM\WFWIZ.exe 
C:\acer\KnobMonitor.exe 
C:\ACER\MPS.EXE 
C:\Program Files\ScanSoft\OmniPageSE\opware32.exe 
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe 
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe 
C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe 
C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe 
C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE 
C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe 
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe 
C:\Program Files\Logitech\MouseWare\system\em_exec.exe 
C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe 
C:\Program Files\Fichiers communs\AOL\1132561829\ee\AOLSoftware.exe 
C:\Program Files\Internet Explorer\iexplore.exe 
C:\Program Files\Windows Defender\MSASCui.exe 
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe 
C:\Program Files\Ariane\Ariane\Ariane.exe 
C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe 
C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe 
C:\Program Files\VIDAL\Communs\VIDAL.exe 
C:\WINDOWS\SOUNDMAN.EXE 
C:\WINDOWS\system32\ctfmon.exe 
C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE 
C:\WINDOWS\System32\svchost.exe 
C:\Program Files\Skype\Phone\Skype.exe 
c:\progra~1\intern~1\iexplore.exe 
c:\progra~1\intern~1\iexplore.exe 
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE 
C:\Program Files\Google\Google Desktop Search\GoogleDesktopCrawl.exe 
C:\Program Files\AOL 9.0a\aoltray.exe 
C:\Program Files\802.11 Wireless LAN\WlanMonitor.exe 
c:\program files\fichiers communs\aol\1132561829\ee\services\antiSpywareApp\ver2_0_28_1\AOLSP Scheduler.exe 
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe 
C:\Program Files\AxiSante2000\axilog.exe 
C:\WINDOWS\GALSVW32.EXE 
C:\Program Files\AxiSante2000\AXILOG.EXE 
C:\Program Files\Visit\Axi4Visit.exe 
C:\Program Files\AOL 9.0a\waol.exe 
C:\Program Files\AOL 9.0a\shellmon.exe 
C:\Program Files\Fichiers communs\Aol\aoltpspd.exe 
c:\program files\fichiers communs\aol\1132561829\ee\aolsoftware.exe 
C:\WINDOWS\system32\wisptis.exe 
C:\Program Files\Mozilla Firefox\firefox.exe 
C:\Documents and Settings\Bernard LAUER\Bureau\HiJackThis_v2.exe 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp 
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.acer.com/worldwide/selection.html 
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens 
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll 
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll 
O2 - BHO: eBay Toolbar Helper - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll 
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll 
O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file) 
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll 
O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll 
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll 
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\AcroIEFavClient.dll 
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file) 
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll 
O3 - Toolbar: Barre de confiance CM-CIC - {55BDF3B0-C0A8-481A-B8A6-01CD2BE0F3FD} - C:\Program Files\BarreConfCMCIC\TAPBar.dll 
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\AcroIEFavClient.dll 
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll 
O3 - Toolbar: eBay Toolbar - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll 
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll 
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar	oolbar.dll 
O4 - HKLM\..\Run: [CHotkey] mHotkey.exe 
O4 - HKLM\..\Run: [ledpointer] CNYHKey.exe 
O4 - HKLM\..\Run: [SSER] sser.exe 
O4 - HKLM\..\Run: [mHotmon] mHotMon.exe 
O4 - HKLM\..\Run: [Aspire Schedule] C:\Program Files\Aspire\WFTVFM\WFWIZ.exe 
O4 - HKLM\..\Run: [KnobMonitor] C:\acer\KnobMonitor.exe 
O4 - HKLM\..\Run: [MPS] C:\ACER\MPS.EXE 
O4 - HKLM\..\Run: [CAPON] C:\WINDOWS\System32\Spool\Drivers\w32x86\3\CAPONN.EXE 
O4 - HKLM\..\Run: [Omnipage] C:\Program Files\ScanSoft\OmniPageSE\opware32.exe 
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe 
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe 
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe 
O4 - HKLM\..\Run: [Vade Retro Outlook Express] "C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe" 
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE 
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe 
O4 - HKLM\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe 
O4 - HKLM\..\Run: [IPHSend] C:\Program Files\Fichiers communs\AOL\IPHSend\IPHSend.exe 
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe" -osboot 
O4 - HKLM\..\Run: [affinity] C:\Program Files\Borland\Interbase\Bin\IB_Affinity.exe -A1 
O4 - HKLM\..\Run: [eBayToolbar] C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe 
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Fichiers communs\AOL\1132561829\ee\AOLSoftware.exe 
O4 - HKLM\..\Run: [ArianeLu] C:\Program Files\Ariane\Lanceur\ArianeLU.exe 
O4 - HKLM\..\Run: [StupidCdromLiteSkip] C:\Documents and Settings\All Users\Application Data\amok blah stupid cdrom\ROAMLICENSE.exe 
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -masquer 
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup 
O4 - HKLM\..\Run: [AOLSAV] C:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe 
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe 
O4 - HKLM\..\Run: [InfoMAJ] C:\Program Files\Fichiers communs\EconomiseurEcran\MAJ_Avril06.exe 
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s 
O4 - HKLM\..\Run: [vdlDeamon] C:\Program Files\VIDAL\Communs\VIDAL.exe 
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE 
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe 
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE" 
O4 - HKCU\..\Run: [BITSUP] C:\DOCUME~1\BERNAR~1\APPLIC~1\HOPEME~1\film dumb.exe 
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized 
O4 - HKCU\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe 
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL') 
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU') 
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM') 
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user') 
O4 - Startup: Moniteur & Configuration.lnk = ? 
O4 - Global Startup: RFScheduler.lnk = ? 
O4 - Global Startup: AOL 9.0 Icône AOL.lnk = C:\Program Files\AOL 9.0a\aoltray.exe 
O8 - Extra context menu item: &eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html 
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll 
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll 
O9 - Extra button: Créer un Favori de l'appareil mobile - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll 
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll 
O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll 
O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll 
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar	oolbar.dll 
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar	oolbar.dll 
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL 
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll 
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) 
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) 
O9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe 
O9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe 
O14 - IERESET.INF: START_PAGE_URL=https://www.acer.com/worldwide/selection.html 
O16 - DPF: {0246ECA8-996F-11D1-BE2F-00A0C9037DFE} (TDServer Control) - http://fr.encyclopedia.yahoo.com/rsc/tdserver.cab 
O16 - DPF: {09C21411-B9A2-4DE6-8416-4E3B58577BE0} (France Telecom MDM ActiveX Control) - http://minitelweb.minitel.com/imin_data/ocx/MDM.cab 
O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} - http://aolcc.aol.fr/computercheckup/qdiagcc.cab 
O16 - DPF: {4E330863-6A11-11D0-BFD8-006097237877} (InstallFromTheWeb ActiveX Control) - http://www.axilog.fr/inetcomp/iftwclix.cab 
O16 - DPF: {B49C4597-8721-4789-9250-315DFBD9F525} (IWinAmpActiveX Class) - http://cdn.digitalcity.com/radio/ampx/ampx2.6.1.11_fr_dl.cab 
O17 - HKLM\System\CCS\Services\Tcpip\..\{9699B95D-776D-4536-A4CD-06E691A19666}: NameServer = 205.188.146.145 
O17 - HKLM\System\CCS\Services\Tcpip\..\{D12B344A-B335-4625-8952-5F77CC442FE5}: NameServer = 192.168.1.22 
O18 - Protocol: bw+0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw+0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw-0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw-0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw00 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw00s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw10 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw10s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw20 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw20s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw30 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw30s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw40 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw40s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw50 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw50s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw60 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw60s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw70 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw70s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw80 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw80s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw90 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw90s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwa0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwa0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwb0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwb0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwc0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwc0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwd0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwd0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwe0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwe0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwf0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwf0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll 
O18 - Protocol: bwg0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwg0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwh0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwh0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwi0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwi0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwj0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwj0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwk0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwk0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwl0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwl0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwm0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwm0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwn0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwn0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwo0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwo0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwp0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwp0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwq0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwq0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwr0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwr0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bws0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bws0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwt0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwt0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwu0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwu0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwv0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwv0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bww0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bww0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwx0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwx0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwy0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwy0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwz0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwz0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: offline-8876480 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL 
O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll 
O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll 
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe 
O23 - Service: AdobeVersionCue - Adobe Sytems - C:\Program Files\Adobe\Adobe Version Cue\service\VersionCue.exe 
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online - C:\Program Files\Fichiers communs\AOL\ACS\AOLAcsd.exe 
O23 - Service: AOL Spyware Protection Service (AOLService) - Unknown owner - C:\Program Files\Fichiers communs\AOL\AOL Spyware Protection\aolserv.exe (file missing) 
O23 - Service: APC UPS Service - American Power Conversion Corporation - C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe 
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe 
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe 
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe 
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe 
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe 
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe 
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe 
O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe 
O23 - Service: Fax - Unknown owner - C:\WINDOWS\system32\fxssvc.exe 
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager.exe 
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe 
O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\System32\imapi.exe 
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe 
O23 - Service: Knob Service (KNOBSERV) - Acer Inc. - c:\acer\KnobService.exe 
O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\System32\mnmsrvc.exe 
O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe 
O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe 
O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe 
O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe 
O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe 
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe 
O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\System32\wbem\wmiapsrv.exe 
O23 - Service: Service Partage réseau du Lecteur Windows Media (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe 

--

Regis59 · Answer

Bienvenue sur le forum d’entraide de CommentCaMarche.net 

Nous connaissons votre situation et nous vous conseillons de ne surtout pas vous inquiéter.
De plus, au vu du nombre croissant de désinfections effectuées sur le forum, nous vous demandons un peu de patience et surtout de ne pas créer plusieurs postes pour le même problème.
Merci de votre compréhension.

Télécharge LopxpMH sur ton Bureau. 

http://www.alt-shift-return.org/Info/Fichiers/lopxpMH2.zip

Dézippe-le (clic droit >> Extraire ici) et double clique sur le fichier lopxpMH.bat. 

Poste le contenu du rapport qui va s'ouvrir.
	
Bon courage

A+

lauer17 · Answer

Rapport lopxpMH2 version 2.0 fait à 17:28:46,79 le 22/05/2007
C:\Documents and Settings\Bernard LAUER\Bureau\lopxpMH2

******************************************
## Répertoires Application Data

Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est 2B1B-1302

Répertoire de C:\Documents and Settings\Default User\Application Data

29/03/2004 12:33 <REP> .
29/03/2004 12:33 <REP> ..
22/04/2004 12:33 <REP> Identities
22/04/2004 12:33 <REP> InterTrust
29/03/2004 12:33 <REP> Microsoft
29/03/2004 12:33 62 desktop.ini
1 fichier(s) 62 octets
5 Rép(s) 54 134 079 488 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est 2B1B-1302

Répertoire de C:\Documents and Settings\Default User\Local Settings\Application Data

29/03/2004 12:33 <REP> .
29/03/2004 12:33 <REP> ..
22/04/2004 12:33 <REP> Microsoft
22/04/2004 12:33 1 695 804 IconCache.db
1 fichier(s) 1 695 804 octets
3 Rép(s) 54 134 079 488 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est 2B1B-1302

Répertoire de C:\Documents and Settings\All Users\Application Data

29/03/2004 12:33 <REP> .
29/03/2004 12:33 <REP> ..
18/01/2007 13:49 <REP> {D904F024-83FF-419F-8EC9-85077FDDC74A}
18/01/2007 13:49 <REP> {F062B1FA-AD02-4F70-8A23-70D4789BFB33}
28/09/2004 09:26 <REP> Adobe
02/01/2006 20:37 <REP> Ahead
02/10/2006 09:08 <REP> amok blah stupid cdrom
07/06/2004 20:16 <REP> AOL
10/02/2006 09:02 <REP> AOL Downloads
12/07/2005 09:55 <REP> Apple Computer
03/04/2007 11:35 <REP> Arovax
29/08/2005 17:10 <REP> BVRP Software
07/04/2006 12:08 <REP> DVD Shrink
19/09/2006 14:42 <REP> Google
03/02/2006 10:13 <REP> Macrovision
29/03/2004 12:33 <REP> Microsoft
30/03/2006 13:36 <REP> MSN6
20/04/2007 09:35 <REP> PC Drivers Headquarters
07/06/2004 20:17 <REP> QuickTime
09/07/2004 10:27 <REP> ScanSoft
05/12/2005 15:28 <REP> Skype
12/06/2006 11:18 <REP> Spybot - Search & Destroy
06/05/2004 15:54 <REP> SSScanAppDataDir
06/05/2004 15:54 <REP> SSScanWizard
22/04/2004 17:28 <REP> Symantec
29/03/2004 12:45 <REP> Ulead Systems
13/02/2006 09:42 <REP> VadeRetro
07/06/2004 20:17 <REP> Viewpoint
24/11/2006 14:18 <REP> WholeSecurity
07/03/2006 10:58 <REP> Windows Genuine Advantage
29/03/2004 12:33 62 desktop.ini
30/01/2006 18:21 1 751 QTSBandwidthCache
2 fichier(s) 1 813 octets
30 Rép(s) 54 134 079 488 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est 2B1B-1302

Répertoire de C:\Documents and Settings\NetworkService\Application Data

29/03/2004 12:41 <REP> .
29/03/2004 12:41 <REP> ..
29/03/2004 12:41 <REP> Microsoft
0 fichier(s) 0 octets
3 Rép(s) 54 134 079 488 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est 2B1B-1302

Répertoire de C:\Documents and Settings\NetworkService\Local Settings\Application Data

29/03/2004 12:41 <REP> .
29/03/2004 12:41 <REP> ..
29/03/2004 12:41 <REP> Microsoft
0 fichier(s) 0 octets
3 Rép(s) 54 134 079 488 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est 2B1B-1302

Répertoire de C:\Documents and Settings\LocalService\Application Data

29/03/2004 12:41 <REP> .
29/03/2004 12:41 <REP> ..
03/07/2006 15:02 <REP> Macromedia
29/03/2004 12:41 <REP> Microsoft
0 fichier(s) 0 octets
4 Rép(s) 54 134 079 488 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est 2B1B-1302

Répertoire de C:\Documents and Settings\LocalService\Local Settings\Application Data

29/03/2004 12:41 <REP> .
29/03/2004 12:41 <REP> ..
16/05/2006 10:20 <REP> AOL
29/03/2004 12:41 <REP> Microsoft
29/05/2006 13:45 <REP> toaster
0 fichier(s) 0 octets
5 Rép(s) 54 134 079 488 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est 2B1B-1302

Répertoire de C:\Documents and Settings\Bernard LAUER\Application Data

22/04/2004 12:33 <REP> .
22/04/2004 12:33 <REP> ..
06/05/2004 16:04 <REP> Adobe
05/12/2005 15:45 <REP> AdobeAUM
28/10/2004 14:42 <REP> AdobeUM
07/06/2004 20:18 <REP> AOL
12/07/2005 09:56 <REP> Apple Computer
19/04/2005 19:23 <REP> Arcsoft
03/01/2006 11:01 <REP> ATI
06/05/2004 16:07 <REP> Canon
14/12/2005 14:59 <REP> Google
23/04/2004 09:23 <REP> Help
02/10/2006 09:08 <REP> hopemessbook
22/04/2004 12:33 <REP> Identities
20/04/2007 12:17 <REP> InstallShield
22/04/2004 12:33 <REP> InterTrust
20/04/2006 15:07 <REP> InterVideo
07/10/2005 11:32 <REP> Itsth
21/04/2006 11:22 <REP> KeySafe
21/04/2006 10:30 <REP> Lavasoft
19/04/2005 18:38 <REP> Leadertech
08/06/2004 10:11 <REP> Macromedia
11/10/2004 09:12 <REP> McAfee.com Personal Firewall
22/04/2004 12:33 <REP> Microsoft
05/07/2004 12:51 <REP> Microsoft Web Folders
18/05/2006 10:20 <REP> Mozilla
30/03/2006 13:36 <REP> MSN6
14/09/2006 14:00 <REP> ntr
12/05/2006 10:45 <REP> Real
06/05/2004 15:54 <REP> ScanSoft
05/12/2005 15:28 <REP> Skype
23/03/2006 13:17 <REP> SlySoft
08/03/2005 11:48 <REP> Sun
22/04/2004 17:28 <REP> Symantec
18/06/2004 19:05 <REP> Ulead Systems
13/02/2006 09:42 <REP> VadeRetro
14/05/2007 13:01 <REP> vlc
25/04/2005 15:11 <REP> WholeSecurity
07/06/2004 20:17 <REP> You've Got Pictures Screensaver
22/04/2004 12:33 62 desktop.ini
13/05/2004 20:41 75 344 GDIPFONTCACHEV1.DAT
22/04/2004 15:07 40 028 wklnhst.dat
3 fichier(s) 115 434 octets
39 Rép(s) 54 134 079 488 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est 2B1B-1302

Répertoire de C:\Documents and Settings\Bernard LAUER\Local Settings\Application Data

22/04/2004 12:33 <REP> .
22/04/2004 12:33 <REP> ..
31/08/2006 13:22 <REP> {7148F0A6-6813-11D6-A77B-00B0D0142100}
28/10/2004 14:41 <REP> Adobe
20/02/2006 18:57 <REP> AOL
12/07/2005 09:56 <REP> Apple Computer
03/01/2006 10:28 <REP> ApplicationHistory
03/01/2006 11:01 <REP> ATI
29/08/2005 17:14 <REP> BVRP Software
20/04/2007 09:34 <REP> Downloaded Installations
22/04/2005 19:27 <REP> Google
23/04/2004 09:23 <REP> Help
06/10/2004 12:41 <REP> Identities
22/04/2004 12:33 <REP> Microsoft
18/05/2006 10:26 <REP> Mozilla
20/04/2007 09:35 <REP> PC_Drivers_Headquarters
18/01/2007 13:49 <REP> Seven Zip
26/09/2005 19:16 <REP> TechSmith
21/11/2005 11:18 <REP> toaster
03/06/2005 10:03 <REP> WMTools Downloaded Files
05/07/2004 12:45 179 200 DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
03/01/2006 10:28 136 fusioncache.dat
25/10/2004 12:35 91 984 GDIPFONTCACHEV1.DAT
12/05/2006 11:25 9 710 280 IconCache.db
4 fichier(s) 9 981 600 octets
20 Rép(s) 54 134 079 488 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est 2B1B-1302

Répertoire de C:\Documents and Settings\Propriétaire

Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est 2B1B-1302

Répertoire de C:\Documents and Settings\Sauve axisante\Application Data

15/07/2005 13:52 <REP> .
15/07/2005 13:52 <REP> ..
15/07/2005 13:53 <REP> AOL
08/09/2006 08:48 <REP> ATI
15/07/2005 13:52 <REP> Identities
15/07/2005 13:52 <REP> InterTrust
15/07/2005 13:52 <REP> Microsoft
08/09/2006 08:47 <REP> Real
15/07/2005 13:53 <REP> WholeSecurity
15/07/2005 13:52 62 desktop.ini
15/07/2005 13:53 0 wklnhst.dat
2 fichier(s) 62 octets
9 Rép(s) 54 134 079 488 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est 2B1B-1302

Répertoire de C:\Documents and Settings\Sauve axisante\Local Settings\Application Data

15/07/2005 13:52 <REP> .
15/07/2005 13:52 <REP> ..
20/02/2006 18:57 <REP> AOL
08/09/2006 08:47 <REP> ApplicationHistory
08/09/2006 08:48 <REP> ATI
15/07/2005 13:52 <REP> Microsoft
08/09/2006 14:00 <REP> toaster
08/09/2006 08:47 137 fusioncache.dat
15/07/2005 13:53 91 984 GDIPFONTCACHEV1.DAT
15/07/2005 13:52 6 024 086 IconCache.db
3 fichier(s) 6 116 207 octets
7 Rép(s) 54 134 079 488 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est 2B1B-1302

Répertoire de C:\Documents and Settings\XXX

Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est 2B1B-1302

Répertoire de C:\WINDOWS\system32\config\systemprofile\Application Data

29/03/2004 12:40 <REP> .
29/03/2004 12:40 <REP> ..
22/04/2004 12:33 <REP> Identities
22/04/2004 12:33 <REP> InterTrust
29/03/2004 12:40 <REP> Microsoft
29/03/2004 12:40 62 desktop.ini
1 fichier(s) 62 octets
5 Rép(s) 54 134 079 488 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est 2B1B-1302

Répertoire de C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data

29/03/2004 12:40 <REP> .
29/03/2004 12:40 <REP> ..
29/03/2004 12:59 <REP> Microsoft
22/04/2004 12:33 1 695 804 IconCache.db
1 fichier(s) 1 695 804 octets
3 Rép(s) 54 134 079 488 octets libres

******************************************
Recherche des taches planifiées dans C:\WINDOWS\tasks

C:\WINDOWS\Tasks\Symantec
Symantec inexploitable

C:\WINDOWS\Tasks\ABC10C07918A834B.job
s "€!× ; c : \ d o c u m e ~ 1 \ b e r n a r ~ 1 \ a p p l i c ~ 1 \ h o p e m e ~ 1 \ O w n s F o u r L i c e n s e . e x e B e r n a r d L A U E R 0 Ð <

C:\WINDOWS\Tasks\MP
MP inexploitable

******************************************
## Répertoires de C:\Program Files

Le volume dans le lecteur C n'a pas de nom.
Le numéro de série du volume est 2B1B-1302

Répertoire de C:\Program Files

29/03/2004 12:34 <REP> .
29/03/2004 12:34 <REP> ..
08/12/2006 09:59 27 272 942 7177_eval.exe
23/03/2006 09:59 <REP> 7-Zip
31/08/2006 18:30 <REP> 802.11 Wireless LAN
29/03/2004 12:44 <REP> Adobe
07/05/2004 16:22 <REP> ahead
13/02/2006 15:26 <REP> AKG HEARO Player SE
03/02/2006 09:52 714 178 ALDToolSetup_V103.exe
13/10/2005 13:54 <REP> Alwil Software
21/11/2005 08:40 <REP> AOL
22/04/2004 16:36 <REP> AOL 8.0
07/06/2004 20:16 <REP> AOL 9.0
19/03/2007 12:35 <REP> AOL 9.0a
22/04/2004 16:36 <REP> AOL Compagnon
07/06/2004 20:17 <REP> AOL Toolbar
30/03/2006 14:03 <REP> APC
06/05/2004 15:52 <REP> ArcSoft
22/04/2004 14:08 <REP> Ariane
03/04/2007 11:35 <REP> Arovax Shield
03/04/2007 11:34 1 976 496 ashield_2_setup_95.exe
29/03/2004 12:46 <REP> Aspire
03/01/2006 10:56 35 898 216 ATI RADEON5-13_xp-2k_dd_ccc_wdm_enu_29124.exe
03/01/2006 10:57 <REP> ATI Technologies
27/01/2006 10:31 12 199 288 ati_61drv_32.exe
16/06/2005 20:32 <REP> AvantGo Connect
08/09/2005 09:08 9 650 584 AVASTsetupfre.exe
20/04/2007 11:50 423 736 avgarkt-setup-1.1.0.42.exe
29/03/2004 12:42 <REP> AvRack
22/04/2004 14:08 <REP> AxiSante2000
12/06/2006 10:01 <REP> Axon Data
19/08/2005 12:01 <REP> BarreConfCMCIC
19/08/2005 12:01 338 488 barreconfcmcic.exe
21/05/2006 19:22 <REP> Borland
16/06/2006 11:12 <REP> Bug Doctor
06/05/2004 15:55 <REP> Canon
19/08/2005 11:49 11 960 392 CAPTURE ECRANsnagitfr.exe
10/03/2006 11:54 <REP> CCleaner
10/03/2006 11:54 1 308 503 ccsetup127.exe
09/01/2007 10:19 1 497 680 ccsetup136.exe
06/03/2007 09:22 2 683 984 ccsetup137.exe
23/03/2007 14:27 2 685 104 ccsetup138.exe
03/04/2006 11:51 <REP> ClocX
22/04/2004 18:43 <REP> Common Files
29/03/2004 12:37 <REP> ComPlus Applications
18/01/2007 13:49 <REP> Courrier
13/02/2006 17:58 16 038 824 COUVERTURE DVDsetup_ovc.exe
23/03/2006 12:41 <REP> Creative
29/03/2004 12:47 <REP> CyberLink
20/04/2006 14:50 <REP> DAP
27/05/2004 12:16 <REP> directx
20/04/2006 15:04 <REP> DivX
15/07/2005 17:51 <REP> Dnote Software
16/03/2006 11:50 122 397 dossierinvestigateurtype.pdf
20/04/2007 09:27 429 112 DRIVER DETECTIVEsetup.exe
20/04/2007 09:33 5 034 240 DriverDetective.exe
27/01/2006 10:20 5 820 634 DriverGenius_fr.exe
27/01/2006 10:20 <REP> Driver-Soft
03/01/2006 10:22 <REP> DVD à DVD
07/04/2006 12:07 <REP> DVD Decrypter
07/04/2006 12:08 <REP> DVD Shrink
03/01/2006 10:20 40 977 003 DVDaDVD_FRA_1[1].00.exe
07/10/2005 11:32 <REP> Easy2Sync
07/10/2005 11:31 2 246 664 Easy2SyncE_Freeware.exe
25/04/2005 15:11 <REP> eBay
22/05/2007 09:00 0 eBayISAPI.dll
13/10/2005 12:53 630 360 EBAYtoolbr.exe
12/01/2007 15:54 <REP> EFT30-USB
12/01/2007 15:54 27 881 EFT30-USB.zip
07/04/2006 12:06 <REP> Elaborate Bytes
22/05/2006 13:13 <REP> eMule
19/04/2007 12:28 <REP> Eraser
19/04/2007 12:27 2 833 921 EraserSetup.exe
18/01/2007 13:49 <REP> External
29/03/2004 12:34 <REP> Fichiers communs
18/05/2006 10:16 5 180 904 Firefox Setup 1.5.0.3.exe
13/03/2007 10:38 5 819 120 Firefox Setup 2.0.0.2.exe
27/10/2006 12:11 2 700 048 flashpoint.exe
18/01/2007 13:49 <REP> Formulaires
23/03/2007 10:10 <REP> Geckomedia
22/04/2005 19:27 <REP> Google
22/04/2005 19:27 748 136 GoogleDesktopSearchSetup.exe
05/02/2007 09:03 14 993 976 GoogleEarthWin.exe
11/08/2005 13:43 609 952 GoogleToolbarInstaller.exe
13/02/2006 09:42 <REP> Goto Software
20/04/2007 11:50 <REP> GRISOFT
27/01/2006 10:33 1 367 551 Hauppauge_wintvpci_346_23061.exe
13/02/2006 15:25 949 452 HEAROPlayer_SE.exe
01/03/2007 08:48 <REP> hopemessbook
02/04/2007 13:52 2 317 632 IE7-KB928089-WindowsXP-x86-enu.exe
02/04/2007 14:19 16 840 120 IE7Setup_G_FR.exe
24/11/2006 13:12 15 505 200 IE7-WindowsXP-x86-enu.exe
16/07/1998 14:15 1 215 720 immc.exe
05/07/2005 11:08 3 799 361 Install_auto_GpsPasSion_POIWARNER_4.zip
20/04/2007 12:19 <REP> Intel
23/03/2006 12:42 <REP> InterActual
29/03/2004 12:37 <REP> Internet Explorer
24/11/2006 16:28 14 842 672 internet-explorer-7-0_internet_explorer_7.0_finale_francais_18706.exe
20/04/2006 15:02 <REP> InterVideo
20/04/2006 15:03 <REP> InterVideo Information Service
22/04/2004 12:35 <REP> Inventel
12/07/2005 09:54 <REP> iPod
06/10/2005 20:43 <REP> iTunes
06/10/2005 20:41 34 039 576 iTunesSetup.exe
19/06/2006 13:57 <REP> IVT Corporation
08/03/2005 11:47 <REP> Java
27/10/2006 12:11 <REP> JustDo
07/03/2006 17:53 <REP> Labtec
21/04/2006 10:30 <REP> Lavasoft
07/06/2004 20:17 <REP> Learn2.com
25/05/2004 14:12 <REP> LedPC Application
27/01/2006 10:26 1 268 249 lg_lcd_drv4605.zip
10/03/2006 11:29 <REP> LimeWire
10/03/2006 11:22 6 220 258 LimeWireOSX.dmg
15/03/2007 09:58 359 112 LimeWireWin.exe
29/08/2005 17:11 <REP> LiveUpdate
30/03/2006 20:34 <REP> Logitech
21/06/2004 20:37 <REP> Lonely Planet
08/08/2005 14:11 1 935 080 lusetup-lt.exe
18/04/2007 14:03 4 473 237 majfax.exe
08/10/2004 10:17 <REP> McAfee.com
03/05/2007 09:03 <REP> MEMORY cpu-z-139
03/05/2007 09:02 423 644 MEMORY cpu-z-139.zip
03/05/2007 19:18 <REP> Messenger
01/07/2006 12:24 7 455 232 messenger.msi
16/06/2005 20:31 <REP> Microsoft ActiveSync
22/04/2004 15:00 <REP> Microsoft Encarta
29/03/2004 12:39 <REP> microsoft frontpage
22/04/2004 14:55 <REP> Microsoft Money
22/04/2004 14:53 <REP> Microsoft Office
22/04/2004 14:57 <REP> Microsoft Picture It! 9
07/03/2007 11:50 <REP> Microsoft Sites publics français
05/07/2004 12:55 <REP> Microsoft Visual Studio
29/03/2004 13:01 <REP> Microsoft Works
22/04/2004 14:49 <REP> Microsoft Works Suite 2004
02/05/2006 20:19 <REP> Microsoft.NET
04/07/2005 14:03 65 223 mini4inis-23-french.zip
04/07/2005 14:04 73 145 Mini4InisFrench-27.zip
02/07/2004 11:25 <REP> Minitel
29/08/2005 17:10 <REP> mobile PhoneTools
29/03/2004 12:37 <REP> Movie Maker
18/05/2006 10:20 <REP> Mozilla Firefox
06/04/2006 13:18 <REP> MP3Gain
23/02/2007 10:41 3 966 912 MSASYNC.EXE
01/07/2006 11:28 4 752 968 MsgPlus-363.exe
29/03/2004 12:36 <REP> MSN
29/03/2004 12:36 <REP> MSN Gaming Zone
07/03/2007 11:49 595 456 MSPF.msi
15/10/1998 11:04 734 517 mssce.cab
15/10/1998 11:04 222 976 mssce.exe
20/04/2006 15:04 <REP> MSXML 4.0
17/02/2006 10:00 <REP> My Privacy Online
29/03/2004 12:37 <REP> NetMeeting
14/05/2007 13:01 <REP> Neuf
29/03/2004 12:48 <REP> NewTech Infosystems
21/10/2006 13:30 <REP> NielsenNetratings
15/05/2006 12:40 1 819 648 Nomenclature pratique du MG.xls
13/05/2006 09:02 1 700 750 Nomenclature pratique du MG.zip
27/11/2006 14:39 2 048 000 Nomenclature_pratique_du_MG.xls
22/04/2004 16:36 <REP> Nullsoft
21/06/2006 12:19 <REP> OBJECTIF LDLc
09/07/2004 12:38 <REP> OfficeUpdate11
09/03/2007 10:39 881 063 olicomw.exe
09/03/2007 10:38 8 071 543 olifaxvx.exe
18/04/2007 13:51 4 473 237 OLITEC majfax.exe
18/04/2007 14:21 35 127 olixp.exe
29/03/2004 12:37 <REP> Outlook Express
13/02/2006 21:07 <REP> Oxilog
20/04/2007 09:34 <REP> PC Drivers HeadQuarters
18/06/2004 18:34 <REP> PCFriendly
27/05/2004 12:14 <REP> PIXELA
15/07/2005 17:50 1 959 460 PoiEdit_v36r1.exe
15/07/2005 16:10 <REP> POI-Warner Medion-Navigator 4 Edition
05/07/2005 11:22 <REP> POI-Warner MN4 Edition
23/02/2007 11:28 <REP> POI-Warner MN6 Edition
02/02/2006 14:10 <REP> PowerArchiver
27/01/2006 09:52 359 485 Presse Papier.exe
27/01/2006 09:52 <REP> PressePapier
11/03/2005 16:18 <REP> Previscan
19/08/2005 10:06 <REP> Qualcomm
06/10/2005 20:44 <REP> QuickTime
09/10/2006 09:44 <REP> QXL Ricardo
09/10/2006 09:24 745 378 QXLTools.exe
20/04/2006 14:45 <REP> Radio Fr Solo
15/10/1998 11:04 11 830 readme.txt
22/04/2004 16:36 <REP> Real
20/04/2007 12:17 <REP> Realtek
18/05/2007 11:08 <REP> Realtek AC97
29/03/2004 12:42 <REP> Realtek Sound Manager
21/10/2004 09:42 <REP> Registry Cleaner
15/10/1998 11:04 37 136 regsvr32.exe
15/07/2005 18:38 13 564 RF.zip
21/06/2005 09:11 12 950 rf300mn RADARFIXES.zip
05/07/2005 11:14 13 222 rf301mnRADARSFIXES.zip
21/06/2005 09:12 86 669 rm300mn RADARSMOBILES.zip
05/07/2005 11:17 88 776 rm301mnRADARSMOBILES.zip
15/05/2006 14:14 11 664 585 rmxvideomail.exe
15/07/2005 15:09 32 153 rp
13/09/2005 15:45 5 536 958 S331bfrx.exe
06/05/2004 15:54 <REP> ScanSoft
15/10/1998 11:04 1 462 scefiles.inf
15/10/1998 11:04 267 scesetup.inf
12/07/2006 12:39 2 816 112 SCESP4I.EXE
29/03/2004 12:37 <REP> Services en ligne
31/08/2006 12:58 <REP> Setup Files
20/04/2007 09:28 429 112 setup.exe
15/10/1998 11:04 8 219 setup.inf
15/07/2005 16:00 2 347 774 setup_arm_en.exe
23/02/2007 11:35 2 758 690 setup_arm_fr.exe
23/02/2007 11:28 1 419 026 setup_arm_ts_fr.exe
08/12/2006 10:00 <REP> SimonTools
05/12/2005 15:28 <REP> Skype
05/12/2005 15:27 8 831 392 SkypeSetup-Beta.exe
20/03/2006 10:34 <REP> SlySoft
28/05/2004 09:30 <REP> Sony Corporation
12/06/2006 11:18 <REP> Spybot - Search & Destroy
02/05/2005 09:48 4 354 084 spybotsd13.exe
29/01/2007 16:55 5 037 072 spybotsd14.exe
19/04/2007 12:30 943 296 srwa5-1.61.27.exe
22/04/2004 17:28 <REP> Symantec
12/07/2006 12:40 <REP> symbols
05/11/2004 19:51 <REP> SymNetDrv
19/08/2005 11:51 <REP> TechSmith
25/04/2005 15:09 2 902 592 ToolbarSetup.exe
22/04/2005 19:28 630 360 toolbr.exe
14/05/2007 12:55 19 595 592 tvpc.exe
14/12/2006 14:13 150 192 TweakUiPowertoySetup.exe
29/03/2004 12:45 <REP> Ulead Systems
27/01/2006 09:07 <REP> unins000
27/01/2006 09:07 375 033 unins000.zip
17/06/2006 08:38 <REP> Unlocker
05/05/2007 14:36 138 535 032 UpdtVXP_Full80.exe
03/02/2006 09:53 <REP> URCAM
30/08/2005 16:52 <REP> Usb to Serial Driver 1.12.25
21/04/2006 14:00 <REP> VIDAL
22/04/2004 16:36 <REP> Viewpoint
18/01/2007 13:49 <REP> Visit
14/03/2006 10:15 <REP> WDM_A384
20/10/2005 13:04 <REP> WebEx
06/03/2007 18:19 878 896 WGAPluginInstall.exe
21/04/2006 10:35 <REP> WinAce
19/04/2007 12:35 <REP> Winamp
19/04/2007 12:32 6 718 976 winamp533_full_emusic-7plus.exe
03/01/2006 10:23 <REP> WinASPI
06/03/2007 18:25 <REP> Windows Defender
23/04/2007 11:52 <REP> Windows Media Connect 2
29/03/2004 12:37 <REP> Windows Media Player
22/04/2004 15:03 <REP> Windows Messaging
29/03/2004 12:36 <REP> Windows NT
06/03/2007 18:23 5 205 504 WindowsDefender.msi
16/05/2006 09:41 57 516 023 WinDVD7.exe
20/04/2006 15:05 <REP> windvd7_cra00
20/04/2006 15:05 235 124 windvd7_cra00.zip
06/04/2006 20:58 <REP> WinRAR
27/01/2006 10:33 <REP> WinTV
05/07/2005 11:12 <REP> WinZip
20/04/2007 12:27 <REP> WLAN
29/06/2006 19:16 24 067 656 wmp11-windowsxp-x86-fr-fr.exe
05/07/2005 11:12 2 539 520 wz90fr.exe
29/03/2004 12:39 <REP> xerox
16/03/2007 18:43 196 297 xiphplins_win32_0_5.exe
28/02/2005 13:20 <REP> Yahoo!
99 fichier(s) 664 330 893 octets
163 Rép(s) 54 134 046 720 octets libres

******************************************
## Popups autorisées

* Internet Explorer

! REG.EXE VERSION 3.0

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow
update.microsoft.com REG_BINARY
televisionsurpc.neuf.fr REG_BINARY

* Mozilla Firefox (1 autorisé 2 interdit)

---------- C:\DOCUMENTS AND SETTINGS\BERNARD LAUER\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\773MTYE9.DEFAULT\HOSTPERM.1
host popup 1 scheme:file
host popup 1 www.egora.fr

******************************************
## Registre

* [HKEY_CURRENT_USER\\Software\Microsoft\Internet Explorer\Main]
Search Bar REG_SZ http://www.google.com/toolbar/ie8/sidebar.html

* [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
StupidCdromLiteSkip REG_SZ C:\Documents and Settings\All Users\Application Data\amok blah stupid cdrom\ROAMLICENSE.exe

* [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
BITSUP REG_SZ C:\DOCUME~1\BERNAR~1\APPLIC~1\HOPEME~1\film dumb.exe

******************************************
## Zones de sécurité

* HKCU Domains (4)

* P3P History (5)

******************************************
## Recherche C:\WINDOWS\*.htm, "C:\WINDOWS\*.gif"

*************** Fin du rapport ****************

Regis59 · Answer

Bonjour, 

Imprime, ou enregistre la manip dans un fichier dans le bloc notes pour être sur ne rien oublier et de tout faire dans l'ordre. 

1/Telecharge ceci: Clean Up 40:
http://pageperso.aol.fr/balltrap34/CleanUp40.exe 
-aide en image:(merci à Balltrap34).
 http://pageperso.aol.fr/balltrap34/democleanup.htm

Déconnecte toi d'Internet et ferme tout les programmes en cours. 

 Redémarre en mode sans échec 
Redémarre le pc, laisse passer l'écran du bios, puis tapote sur la touche F8 avant qu'apparaisse l'écran de chargement de windows. 
Choisis le mode sans échec dans les options et valide avec entrée. 
(Si F8 ne marche pas, essai F5)

 Rend visible les fichiers cachés et système 
panneau de configuration > options des dossiers > onglet affichage 
Cocher la case devant " afficher les fichiers et dossiers cachés " 
Décocher la case devant " masquer les extensions des fichiers dont le type est connu" 
Décocher la case devant " masquer les fichiers protégés du système" 
clic sur [Appliquer] puis sur [ok] pour valider 

-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_ 

 Lance hijackthis et clic sur [do a system scan only] 
cocher la case au début des lignes suivantes: 
 
O4 - HKLM\..\Run: [StupidCdromLiteSkip] C:\Documents and Settings\All Users\Application Data\amok blah stupid cdrom\ROAMLICENSE.exe

O4 - HKCU\..\Run: [BITSUP] C:\DOCUME~1\BERNAR~1\APPLIC~1\HOPEME~1\film dumb.exe 

valider en cliquant sur le bouton [fix checked] 

-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_ 

 Recherche et supprime ces dossiers: 

Supprimer les fichiers en suivant le chemin des fichiers infectés si possible, plutot que d'utiliser la fonction "Rechercher" 

S'ils sont présents, supprime: 

C:\Documents and Settings\All Users\Application Data\amok blah stupid cdrom

C:\Documents and Settings\Bernard LAUER\Application Data\hopemessbook

 C:\Documents and Settings\All Users\Application Data

-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_ 

Ensuite fais Démarrer > exécuter et tape cmd 
puis valide avec ok 

dans la fenêtre qui va s'ouvrir, copie et colle ceci:

del /a C:\WINDOWS	asks\ABC10C07918A834B.job 

et valide en appuyant sur entrée 

-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_ 

Ensuite, très important: 

:: Supprimer les fichiers temporaires :: 

Exécute cleanup40.
 
-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_ 

Redémarre normalement et reposte un Hijackthis sur le poste…
 
Précises moi ou en sont tes soucis…

A+

lauer17 · Answer

Merci beaucoup, je crois que mon problème est réglé...
BRAVO AUX GENS TRES FORTS.
Comment éviter à l'avenir ce genre de cochonneries ??
Le seul pb qui persiste sur ma machine est que le poste de travail s'ouvre tout seul au démarrage
Merci encore et ci-joint le rapport Hijack

Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 16:29:47, on 23/05/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
c:\acer\KnobService.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\AOL\ACS\AOLAcsd.exe
C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\CAPRPCSK.EXE
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\system32\fxssvc.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\CAPPSWK.EXE
C:\WINDOWS\system32\spool\drivers\w32x86\3\CAPPSWK.EXE
C:\WINDOWS\system32\spool\drivers\w32x86\3\CAPPSWK.EXE
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\mHotkey.exe
C:\WINDOWS\CNYHKey.exe
C:\WINDOWS\mHotMon.exe
C:\Program Files\Aspire\WFTVFM\WFWIZ.exe
C:\acer\KnobMonitor.exe
C:\ACER\MPS.EXE
C:\Program Files\ScanSoft\OmniPageSE\opware32.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe
C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe
C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe
C:\Program Files\Fichiers communs\AOL\1132561829\ee\AOLSoftware.exe
C:\Program Files\Logitech\MouseWare\system\em_exec.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe
C:\Program Files\VIDAL\Communs\VIDAL.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE
C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\Ariane\Ariane\Ariane.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopCrawl.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\AOL 9.0a\aoltray.exe
C:\Program Files\802.11 Wireless LAN\WlanMonitor.exe
c:\program files\fichiers communs\aol\1132561829\ee\services\antiSpywareApp\ver2_0_28_1\AOLSP Scheduler.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\AOL 9.0a\waol.exe
C:\Program Files\AOL 9.0a\shellmon.exe
C:\Program Files\Fichiers communs\Aol\aoltpspd.exe
C:\Program Files\AxiSante2000\axilog.exe
C:\WINDOWS\GALSVW32.EXE
C:\Program Files\AxiSante2000\AXILOG.EXE
C:\Program Files\Visit\Axi4Visit.exe
C:\Documents and Settings\Bernard LAUER\Bureau\HiJackThis_v2.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.acer.com/worldwide/selection.html
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :0
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: eBay Toolbar Helper - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: AOL Toolbar Launcher - {7C554162-8CB7-45A4-B8F4-8EA1C75885F9} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
O3 - Toolbar: Barre de confiance CM-CIC - {55BDF3B0-C0A8-481A-B8A6-01CD2BE0F3FD} - C:\Program Files\BarreConfCMCIC\TAPBar.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Adobe Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: AOL Toolbar - {DE9C389F-3316-41A7-809B-AA305ED9D922} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O3 - Toolbar: eBay Toolbar - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar	oolbar.dll
O4 - HKLM\..\Run: [CHotkey] mHotkey.exe
O4 - HKLM\..\Run: [ledpointer] CNYHKey.exe
O4 - HKLM\..\Run: [SSER] sser.exe
O4 - HKLM\..\Run: [mHotmon] mHotMon.exe
O4 - HKLM\..\Run: [Aspire Schedule] C:\Program Files\Aspire\WFTVFM\WFWIZ.exe
O4 - HKLM\..\Run: [KnobMonitor] C:\acer\KnobMonitor.exe
O4 - HKLM\..\Run: [MPS] C:\ACER\MPS.EXE
O4 - HKLM\..\Run: [CAPON] C:\WINDOWS\System32\Spool\Drivers\w32x86\3\CAPONN.EXE
O4 - HKLM\..\Run: [Omnipage] C:\Program Files\ScanSoft\OmniPageSE\opware32.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [Vade Retro Outlook Express] "C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe"
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
O4 - HKLM\..\Run: [IPHSend] C:\Program Files\Fichiers communs\AOL\IPHSend\IPHSend.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [affinity] C:\Program Files\Borland\Interbase\Bin\IB_Affinity.exe -A1
O4 - HKLM\..\Run: [eBayToolbar] C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Fichiers communs\AOL\1132561829\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [ArianeLu] C:\Program Files\Ariane\Lanceur\ArianeLU.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -masquer
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [AOLSAV] C:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [InfoMAJ] C:\Program Files\Fichiers communs\EconomiseurEcran\MAJ_Avril06.exe
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [vdlDeamon] C:\Program Files\VIDAL\Communs\VIDAL.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\WCESCOMM.EXE"
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: Moniteur & Configuration.lnk = ?
O4 - Global Startup: RFScheduler.lnk = ?
O4 - Global Startup: AOL 9.0 Icône AOL.lnk = C:\Program Files\AOL 9.0a\aoltray.exe
O8 - Extra context menu item: &eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Créer un Favori de l'appareil mobile - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll
O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Program Files\Microsoft ActiveSync\inetrepl.dll
O9 - Extra button: AOL Toolbar - {3369AF0D-62E9-4bda-8103-B4C75499B578} - C:\Program Files\AOL\AOL Toolbar 2.0\aoltb.dll
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar	oolbar.dll
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL Toolbar	oolbar.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: @C:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=https://www.acer.com/worldwide/selection.html
O16 - DPF: {0246ECA8-996F-11D1-BE2F-00A0C9037DFE} (TDServer Control) - http://fr.encyclopedia.yahoo.com/rsc/tdserver.cab
O16 - DPF: {09C21411-B9A2-4DE6-8416-4E3B58577BE0} (France Telecom MDM ActiveX Control) - http://minitelweb.minitel.com/imin_data/ocx/MDM.cab
O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} - http://aolcc.aol.fr/computercheckup/qdiagcc.cab
O16 - DPF: {4E330863-6A11-11D0-BFD8-006097237877} (InstallFromTheWeb ActiveX Control) - http://www.axilog.fr/inetcomp/iftwclix.cab
O16 - DPF: {B49C4597-8721-4789-9250-315DFBD9F525} (IWinAmpActiveX Class) - http://cdn.digitalcity.com/radio/ampx/ampx2.6.1.11_fr_dl.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{9699B95D-776D-4536-A4CD-06E691A19666}: NameServer = 205.188.146.145
O17 - HKLM\System\CCS\Services\Tcpip\..\{D12B344A-B335-4625-8952-5F77CC442FE5}: NameServer = 192.168.1.22
O18 - Protocol: bw+0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {1ED575F8-2B93-4250-95DD-655D47DCEEB6} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AdobeVersionCue - Adobe Sytems - C:\Program Files\Adobe\Adobe Version Cue\service\VersionCue.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online - C:\Program Files\Fichiers communs\AOL\ACS\AOLAcsd.exe
O23 - Service: AOL Spyware Protection Service (AOLService) - Unknown owner - C:\Program Files\Fichiers communs\AOL\AOL Spyware Protection\aolserv.exe (file missing)
O23 - Service: APC UPS Service - American Power Conversion Corporation - C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Fax - Unknown owner - C:\WINDOWS\system32\fxssvc.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\System32\imapi.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Knob Service (KNOBSERV) - Acer Inc. - c:\acer\KnobService.exe
O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\System32\mnmsrvc.exe
O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Gestionnaire de session d'aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\System32\wbem\wmiapsrv.exe
O23 - Service: Service Partage réseau du Lecteur Windows Media (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe

Regis59 · Answer

Salut,

¤Relance HijackThis, coche les cases devant ces lignes et ensuite clique sur fix checked :

O2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file)

O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file) 

Ferme HJT.

Dans demarer < tous les programmes < démarrage, tu as quoi?

A+

Regis59 · Answer

OK clik droit supprime, et redemarre

a+

Regis59 · Answer

sur ceci:
AOL9.0 IcôneAOL et RFScheduler

Regis59 · Answer

De rien ;)

Bonne journée

Cid

8 réponses

Discussions similaires

Newsletters