Pub CID

ninese -  
Bonjour,

je viens vous demander de l'aide car sans cesse j'ai des pages de publicités qui s'ouvre avec marqué CID.
je suis novice dans l'informatique mais ca devient tres tres penible. j'ai lu qu'il fallait supprimer messenger sponsor mais ca me dit que c'est impossible. pouvez vous m'aider?
je sais pas quel renseignement il faut vous donner.
merci
Configuration: Windows XP
Internet Explorer 7.0

12 réponses

  1. jlpjlp Contributeur sécurité
    va dans : Démarrer > Exécuter puis copie/colle la ligne suivante en gras :

    "%programfiles%\Lopxp\Lopxp.bat" /Fixme
    puis valide, accepte toutes les demandes de suppression et poste le rapport stp

    et tu dis si encore des pubs

    @+
    0
    1. ninese Auteur
      # Rapport Lopxp fait le 28/04/2008 à 19:34:32
      # Exécuté dans : C:\Program Files\Lopxp
      # Version 3.10 - Maj du 11/04/2008

      Killing 'iexplore.exe'
      "C:\Program Files\Internet Explorer\IEXPLORE.EXE" (260)
      "C:\Program Files\Internet Explorer\IEXPLORE.EXE" (604)
      "C:\Program Files\Internet Explorer\iexplore.exe" (3176)

      ========== Listing des dossiers Application Data

      +- C:\Documents and Settings\All Users\Application Data

      2008-04-12 à 14:03:38 - AOL
      2005-08-21 à 17:59:43 - Apple Computer
      2008-04-28 à 16:06:13 - F-Secure
      2008-04-28 à 15:57:14 - fssg
      2008-04-25 à 17:51:49 - Google
      2003-01-08 à 17:25:28 - Links 2003 Demo
      2006-05-30 à 10:06:04 - Logitech
      2006-04-05 à 17:58:05 - Microsoft
      2006-03-22 à 02:22:52 - MSN Search Toolbar
      2003-02-08 à 23:45:48 - MSN6
      2008-04-12 à 21:35:45 - Part title burn dvd
      2006-03-15 à 16:53:51 - pixelStorm
      2006-03-19 à 17:31:52 - QuickTime
      2005-09-07 à 20:06:05 - Sony Ericsson
      2004-06-12 à 13:38:50 - Viewpoint
      2008-04-12 à 21:35:44 - Waittestsupportexit
      2006-04-07 à 00:02:07 - WinAntiVirus Pro 2006
      2008-04-21 à 17:27:45 - WLInstaller
      2008-04-21 à 16:41:26 - Yahoo! Companion

      +- C:\Documents and Settings\Invit‚\Application Data

      2002-02-25 à 18:29:44 - Adobe
      2003-04-06 à 20:50:55 - Dossier de téléchargement Share-to-Web
      2002-02-25 à 18:29:44 - Identities
      2002-02-25 à 18:29:44 - InterTrust
      2002-02-25 à 18:29:44 - Microsoft
      2002-02-25 à 18:29:44 - Microsoft Web Folders

      +- C:\Documents and Settings\Invit‚\Local Settings\Application Data

      2002-02-25 à 18:29:44 - Microsoft

      +- C:\Documents and Settings\Propri‚taire\Application Data

      2008-04-20 à 16:56:45 - Adobe
      2002-10-09 à 18:24:16 - Aim
      2008-04-12 à 14:03:39 - AOL
      2005-08-21 à 18:02:15 - Apple Computer
      2005-12-24 à 10:35:25 - Creative
      2006-01-16 à 16:18:48 - CyberLink
      2003-03-02 à 19:36:53 - Dossier de téléchargement Share-to-Web
      2004-08-30 à 21:05:52 - Dossier de téléchargement Share-to-Web
      2008-04-28 à 16:41:43 - F-Secure
      2008-04-27 à 16:55:19 - Google
      2008-04-15 à 16:20:30 - HbTools
      2002-02-25 à 16:53:11 - Help
      2003-02-09 à 13:36:08 - Identities
      2006-02-20 à 21:49:42 - Image Zone Express
      2002-02-25 à 18:29:44 - InterTrust
      2002-10-29 à 20:30:39 - InterVideo
      2005-10-02 à 12:18:50 - Lavasoft
      2006-06-15 à 11:26:35 - Logitech
      2004-06-12 à 13:53:47 - Macromedia
      2007-01-04 à 12:57:17 - Media Player Classic
      2006-01-09 à 12:18:20 - Microsoft
      2002-02-25 à 18:29:44 - Microsoft Web Folders
      2003-02-09 à 13:31:59 - MSN6
      2006-04-05 à 16:54:00 - MSNInstaller
      2008-04-12 à 21:35:54 - new 1 download
      2008-04-16 à 16:31:02 - Real
      2008-04-15 à 16:20:29 - ShopperReports
      2006-05-28 à 21:40:13 - Sun
      2002-06-13 à 15:17:58 - Template
      2002-02-27 à 21:18:25 - VERITAS
      2006-11-23 à 00:49:03 - vlc
      2006-04-07 à 00:12:42 - WinAntiVirus Pro 2006
      2004-06-12 à 13:38:58 - You've Got Pictures Screensaver
      2002-09-30 à 20:18:28 - ZapSpot

      +- C:\Documents and Settings\Propri‚taire\Local Settings\Application Data

      2005-08-21 à 18:02:15 - Apple Computer
      2008-04-25 à 18:14:15 - Google
      2002-08-23 à 11:07:16 - Help
      2003-02-09 à 13:36:08 - Identities
      2006-03-19 à 17:53:37 - Logitech-LS
      2006-01-21 à 11:15:35 - MediaLife
      2008-04-28 à 15:33:52 - Microsoft
      2008-04-21 à 16:47:31 - PCHealth
      2006-01-16 à 16:18:00 - Powercinema
      2005-09-07 à 20:39:44 - Sony Ericsson

      ========== Listing du dossier Program Files

      +- C:\Program Files

      2006-11-25 à 10:21:35 - Antipub
      2002-03-13 à 22:43:24 - Anuman Interactive
      2002-02-25 à 18:29:53 - BackWeb
      2002-11-09 à 19:33:37 - Calendarium
      2008-04-21 à 16:38:40 - CCleaner
      2006-03-25 à 18:43:42 - CIF USB CAMERA
      2008-04-12 à 13:45:33 - Common Files
      2005-12-24 à 10:23:20 - Creative
      2005-12-25 à 01:12:05 - CyberLink
      2008-04-12 à 13:45:34 - Dictionnaire
      2004-04-06 à 17:49:53 - DownloadWare
      2005-10-02 à 13:32:42 - Ebates_MoeMoneyMaker
      2008-04-12 à 13:45:34 - eMule
      2008-04-12 à 13:46:50 - EPSON
      2008-04-28 à 17:14:00 - F-Secure
      2008-04-15 à 21:10:52 - Fichiers communs
      2008-04-25 à 17:51:47 - Google
      2002-12-16 à 19:18:53 - Hasbro Interactive
      2008-04-15 à 16:18:25 - HbTools_Icons
      2006-11-22 à 22:58:01 - Hemera Products
      2003-03-02 à 19:35:04 - Hewlett-Packard
      2005-02-18 à 13:19:10 - honestech
      2005-12-23 à 17:34:52 - HP
      2002-02-25 à 18:33:05 - hp center
      2006-11-22 à 22:57:56 - hp deskjet 940c series
      2002-03-16 à 16:49:25 - HP RecordNow
      2002-02-25 à 15:16:09 - Infogrames Interactive
      2008-04-12 à 14:02:45 - InstallShield Installation Information
      2003-09-28 à 13:44:01 - Instant Access
      2008-04-22 à 01:11:38 - Internet Explorer
      2002-02-25 à 18:30:19 - InterVideo
      2005-08-21 à 17:59:48 - iPod
      2005-08-21 à 17:59:49 - iTunes
      2006-05-28 à 21:44:58 - Java
      2008-04-12 à 13:45:43 - Kazaa
      2004-06-12 à 13:38:57 - Learn2.com
      2008-04-12 à 13:45:46 - Logitech
      2008-04-28 à 17:36:08 - Lopxp
      2008-04-21 à 17:22:21 - Messenger
      2006-03-25 à 13:25:24 - Micro Application
      2002-02-25 à 18:30:34 - Microsoft AutoRoute
      2004-11-03 à 17:06:21 - microsoft frontpage
      2002-02-25 à 18:30:45 - Microsoft Money
      2002-02-25 à 18:30:51 - Microsoft Office
      2006-11-22 à 22:57:51 - Microsoft Picture It! PhotoPub
      2008-04-21 à 17:32:25 - Microsoft SQL Server Compact Edition
      2006-11-22 à 22:57:50 - Microsoft Works
      2002-02-25 à 18:31:27 - Microsoft Works Suite 2001
      2006-11-22 à 22:57:48 - Mon choix de logiciels
      2006-11-22 à 22:57:47 - Movie Maker
      2002-02-25 à 18:30:24 - MSN Gaming Zone
      2006-03-22 à 02:24:43 - MSN Toolbar Suite
      2008-04-13 à 10:32:52 - MSXML 4.0
      2008-04-12 à 13:53:51 - MUSICMATCH
      2006-11-22 à 22:57:44 - NetMeeting
      2008-04-12 à 14:56:00 - Neuf
      2008-04-12 à 21:35:24 - new 1 download
      2008-04-13 à 10:24:27 - NewDotNet
      2003-06-13 à 14:06:37 - Nullsoft
      2002-10-29 à 20:53:59 - Oni
      2008-04-13 à 10:41:20 - Outlook Express
      2008-04-28 à 17:14:00 - Pack Securite
      2003-01-01 à 16:31:40 - PanVision
      2003-01-13 à 22:27:10 - pdx.exe&Ref1=Autoinstall_PDX
      2002-02-25 à 18:31:42 - Pinnacle
      2006-11-22 à 22:57:41 - QuickTime
      2002-10-08 à 14:40:51 - Real
      2006-11-22 à 22:57:39 - Save
      2002-02-25 à 18:33:04 - Services en ligne
      2008-04-15 à 16:20:27 - ShopperReports
      2006-11-22 à 22:57:37 - SLD Codec Pack
      2005-09-07 à 20:04:08 - Sony Ericsson
      2003-01-01 à 13:27:20 - TimeSink
      2004-09-17 à 11:39:22 - Uninstall Information
      2003-01-01 à 20:20:46 - Viewpoint
      2005-08-15 à 19:26:35 - vso
      2006-06-15 à 11:31:43 - Wanadoo
      2008-04-12 à 14:01:30 - Wanadoo Messager
      2003-01-14 à 21:52:46 - WebPass
      2002-02-25 à 14:47:24 - Winamp3
      2008-04-22 à 01:02:57 - Windows Live
      2008-04-13 à 10:31:41 - Windows Media Player
      2005-10-28 à 11:45:32 - Windows NT
      2004-09-19 à 16:55:19 - WindowsUpdate
      2008-04-12 à 13:45:56 - winex
      2002-11-14 à 20:58:22 - WinZip
      2002-02-25 à 18:33:05 - xerox
      2005-01-16 à 23:14:04 - Yahoo!

      ========== Tâches planifiées

      AE047AED906BF9A9.job: c:\docume~1\propri~1\applic~1\new1do~1\LessKeepHope.exe
      Rappel d'abonnement 1 auprès de l'ISP.job: C:\WINDOWS\System32\OOBE\oobebaln.exe /sys /i /n:1
      Rappel d'abonnement 2 auprès de l'ISP.job: C:\WINDOWS\System32\OOBE\oobebaln.exe /sys /i /n:2
      Rappel d'abonnement 3 auprès de l'ISP.job: C:\WINDOWS\System32\OOBE\oobebaln.exe /sys /i /n:3

      ========== Clés registre

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "Burn Dvd Mail More"="C:\Documents and Settings\All Users\Application Data\Part title burn dvd\Plus Browse.exe"

      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "Face Manager"="C:\DOCUME~1\PROPRI~1\APPLIC~1\NEW1DO~1\BlehAbout.exe"

      ========== Bloqueur popups Internet Explorer

      searchportal.information.com
      tchat2005.tchatche.com
      www.meexup.com
      www.m6.fr
      www.tf6.fr
      www.mc-sud.com
      membres.lycos.fr
      trezeguet.est-ici.org
      www.ter-sncf.com
      webmessenger.msn.com
      www.voyages-sncf.com
      www.gayvox.com
      www.anpe.fr
      www.info-concours.fr
      www.jd-fonctionpublique.info
      www.nrj.fr
      www.logiciels.tv
      www.emule-paradise.com
      www.youngcelebrity.com
      view.atdmt.com
      www.portailmessenger.com
      *.windowsmedia.com
      www.paroles.net
      melimelo.monbebeblog.com
      *.agence.francetelecom.com
      www.station-drivers.com
      www.allosponsor.com
      dns-look-up.com
      www.dns-look-up.com
      mysearchnow.com
      www.mysearchnow.com
      www.emoticonland.net
      rylfr.free.fr
      www.abc-du-gratuit.com
      www.leroubreau.com
      www.fond-ecran-image.com
      www.superbonplan.com
      www.divxovore.com
      www.test-sexy.com
      *.fr.lastminute.com
      searchweb2.com
      www.searchweb2.com
      api.gestionpub.com
      host-domain-lookup.com
      www.host-domain-lookup.com

      ========== Suggestion ( /!\ Nécessite une interprétation.) ==========

      C:\Documents and Settings\All Users\Application Data\Part title burn dvd
      C:\Documents and Settings\All Users\Application Data\Waittestsupportexit
      C:\Documents and Settings\Propriétaire\Application Data\new 1 download
      C:\Program Files\new 1 download
      C:\WINDOWS\tasks\AE047AED906BF9A9.job

      +- Registre:

      REGEDIT4

      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "Burn Dvd Mail More"=-

      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "Face Manager"=-

      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow]
      "dns-look-up.com"=-
      "www.dns-look-up.com"=-
      "mysearchnow.com"=-
      "www.mysearchnow.com"=-
      "searchweb2.com"=-
      "www.searchweb2.com"=-
      "host-domain-lookup.com"=-
      "www.host-domain-lookup.com"=-

      - Fin du rapport -
      0
      1. ninese Auteur
        bonjour

        je vien d'avoir l'ordi de mon amie car le mien est HS. mais de nouveau des pubs et beaucoup de lenteur. pouvez vous m'aidez svp
        0
        1. jlpjlp Contributeur sécurité
          ok fais le reste!
          0
          2. jlpjlp Contributeur sécurité
            ok tu es infécté!!
            tu n'avais pas que cid comme soucis!!!!

            ___________

            Télécharge BTFix de Bibi26
            http://cluster1.easy-hebergement.net/
            Dézippe l'archive sur ton Bureau.
            Ouvre le dossier BTFix.
            Double clique sur BTFix.exe.
            Clique sur Rechercher.
            Un rapport va apparaître, copie/colle-le dans ta prochaine réponse.

            _____________

            Télécharge SDFix (créé par AndyManchesta) et sauvegarde le sur ton Bureau.
            http://downloads.andymanchesta.com/RemovalTools/SDFix.exe
            Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau. Redémarre ton ordinateur en mode sans échec en suivant la procédure que voici :
            • Redémarre ton ordinateur
            • Après avoir entendu l'ordinateur biper lors du démarrage, mais avant que l'icône Windows apparaisse, tapote la touche F8 (une pression par seconde).
            • A la place du chargement normal de Windows, un menu avec différentes options devrait apparaître.
            • Choisis la première option, pour exécuter Windows en mode sans échec, puis appuie sur "Entrée".
            • Choisis ton compte.
            Déroule la liste des instructions ci-dessous :
            • Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double clique sur RunThis.bat pour lancer le script.
            • Appuie sur Y pour commencer le processus de nettoyage.
            • Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.
            • Appuie sur une touche pour redémarrer le PC.
            • Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
            • Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.
            • Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau.
            • Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.
            • Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse sur le forum
            ________________

            Télécharge Combofix de sUBs : Renomme le avant toute installation, par exemple, nomme le "KillBagle". aide ici : https://forum.pcastuces.com/sujet.asp?f=25&s=37315

            http://download.bleepingcomputer.com/sUBs/ComboFix.exe
            Sauvegarde le sur ton bureau et pas ailleurs !

            Aide à l’utilisation de combofix ici: https://bibou0007.forumpro.fr/login?redirect=%2Ft121-topic

            Double-clic sur combofix, Il va te poser une question, réponds par la touche 1 et entrée pour valider, laisse toi guider.
            Attends que combofix ait terminé, un rapport sera créé. Poste le rapport.
            _________________

            colle moi le rapport navilog aussi!!!
            0
            1. ninese Auteur
              BTFix 1.090 (par bibi26) - 26/03/2008 18:00:46 - Analyse
              Lancé depuis C:\Documents and Settings\nadia roukeb\Bureau\BTFix\BTFix.exe

              ---> Fichiers/Dossiers trouvés

              - C:\Program Files\Seekmo Programs\
              - C:\Program Files\GamesBar\

              ---> Analyse terminée
              0
          3. jlpjlp Contributeur sécurité
            tu me colle le rapport navilog et un nouveau hijkachits
            0
            1. ninese Auteur
              Logfile of HijackThis v1.99.1
              Scan saved at 16:59:29, on 17/03/2008
              Platform: Windows XP SP2 (WinNT 5.01.2600)
              MSIE: Internet Explorer v7.00 (7.00.6000.16608)

              Running processes:
              C:\WINDOWS\System32\smss.exe
              C:\WINDOWS\system32\winlogon.exe
              C:\WINDOWS\system32\services.exe
              C:\WINDOWS\system32\lsass.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\System32\svchost.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\Explorer.EXE
              C:\WINDOWS\system32\spoolsv.exe
              C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
              C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
              C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
              C:\Program Files\Pack Securite\Common\FSMA32.EXE
              C:\Program Files\Pack Securite\Anti-Virus\FSGK32.EXE
              C:\WINDOWS\System32\FTRTSVC.exe
              C:\WINDOWS\System32\svchost.exe
              C:\Program Files\Pack Securite\Common\FSMB32.EXE
              C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
              C:\WINDOWS\system32\nvsvc32.exe
              C:\Program Files\Pack Securite\Common\FCH32.EXE
              C:\WINDOWS\System32\snmp.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\system32\UAService7.exe
              C:\Program Files\Pack Securite\Anti-Virus\fsqh.exe
              C:\Program Files\Pack Securite\Common\FAMEH32.EXE
              C:\Program Files\Pack Securite\FSPC\fspc.exe
              C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe
              C:\Program Files\Pack Securite\Anti-Virus\fssm32.exe
              C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
              C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
              C:\Program Files\Pack Securite\FSAUA\program\fsus.exe
              C:\WINDOWS\SOUNDMAN.EXE
              C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
              C:\WINDOWS\system32\rundll32.exe
              C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
              C:\Program Files\Pack Securite\Common\FSM32.EXE
              C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
              C:\Program Files\Logitech\QuickCam\Quickcam.exe
              C:\Program Files\iTunes\iTunesHelper.exe
              C:\Program Files\Neuf\Kit\WiFi\9wifi.exe
              C:\windows\system32\rxbrdwi.exe
              C:\WINDOWS\system32\DrvMon.exe
              C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
              C:\WINDOWS\system32\ctfmon.exe
              C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
              C:\Program Files\Messenger\msmsgs.exe
              C:\Program Files\Windows Media Player\WMPNSCFG.exe
              C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearch.exe
              C:\WINDOWS\BricoPacks\Longhorn Inspirat\ObjectDock\ObjectDock.exe
              C:\WINDOWS\BricoPacks\Longhorn Inspirat\YzToolBar\YzToolBar.exe
              C:\Program Files\Pack Securite\FSGUI\fsguidll.exe
              C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearchIndexer.exe
              C:\Program Files\iPod\bin\iPodService.exe
              C:\Program Files\Lecteur CANALPLAY\CanalPlayService.exe
              C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
              C:\Program Files\Pack Securite\Anti-Virus\fsav32.exe
              C:\Program Files\Internet Explorer\IEXPLORE.EXE
              C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
              C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

              R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://actus.sfr.fr
              R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.neuf.fr/
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://actus.sfr.fr
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
              R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
              R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
              O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
              O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
              O2 - BHO: Download Manager Browser Helper Object - {19C8E43B-07B3-49CB-BFFC-6777B593E6F8} - C:\PROGRA~1\FICHIE~1\fluxDVD\DOWNLO~1\XEBDLH~1.DLL
              O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
              O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
              O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
              O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
              O2 - BHO: Barre d'outils MSN Search Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll
              O2 - BHO: (no name) - {CB8AE877-6B20-30A8-1208-3EC55801A5B0} - C:\DOCUME~1\NADIAR~1\APPLIC~1\LESSMO~1\DebugThe.exe (file missing)
              O2 - BHO: DeskbarBHO - {FC518CE0-F6B0-45b0-B6D9-9E6293CEC105} - C:\Program Files\Deskbar\deskbar.dll
              O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
              O3 - Toolbar: Barre d'outils MSN Search - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll
              O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
              O4 - HKLM\..\Run: [RestoreIT!] "C:\Program Files\Phoenix Technologies Ltd\RecoverPro_XP\VBPTASK.EXE" VBStart
              O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
              O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
              O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
              O4 - HKLM\..\Run: [fenaffiche] C:\Program Files\FenAffiche\FenUnika.exe
              O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
              O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
              O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
              O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
              O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
              O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Pack Securite\Common\FSM32.EXE" /splash
              O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Pack Securite\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
              O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
              O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
              O4 - HKLM\..\Run: [Servicee] C:\DOCUME~1\NADIAR~1\LOCALS~1\Temp\services.exe
              O4 - HKLM\..\Run: [lklhodc] c:\windows\system32\lklhodc.exe lklhodc
              O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
              O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
              O4 - HKLM\..\Run: [Autoconfigurateur WiFi Neuf] "C:\Program Files\Neuf\Kit\WiFi\9wifi.exe"
              O4 - HKLM\..\Run: [rxbrdwi] c:\windows\system32\rxbrdwi.exe rxbrdwi
              O4 - HKCU\..\Run: [DrvMon.exe] C:\WINDOWS\system32\DrvMon.exe
              O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
              O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
              O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
              O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
              O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
              O4 - HKCU\..\Run: [CanalPlayer] C:\Program Files\Lecteur CANALPLAY\CanalPlayer.exe
              O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
              O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
              O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
              O4 - Startup: Stardock ObjectDock.lnk = C:\WINDOWS\BricoPacks\Longhorn Inspirat\ObjectDock\ObjectDock.exe
              O4 - Startup: Y'z Toolbar.lnk = C:\WINDOWS\BricoPacks\Longhorn Inspirat\YzToolBar\YzToolBar.exe
              O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
              O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
              O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearch.exe
              O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll/search.htm
              O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
              O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fr-fr\msntabres.dll/229?dcd0bd1d92fd4b32831ceeca081fc21
              O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fr-fr\msntabres.dll/230?dcd0bd1d92fd4b32831ceeca081fc21
              O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
              O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
              O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
              O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
              O9 - Extra button: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
              O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
              O9 - Extra 'Tools' menuitem: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
              O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
              O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
              O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
              O10 - Unknown file in Winsock LSP: c:\program files\pack securite\fsps\program\fslsp.dll
              O10 - Unknown file in Winsock LSP: c:\program files\pack securite\fsps\program\fslsp.dll
              O10 - Unknown file in Winsock LSP: c:\program files\pack securite\fsps\program\fslsp.dll
              O10 - Unknown file in Winsock LSP: c:\program files\pack securite\fsps\program\fslsp.dll
              O10 - Unknown file in Winsock LSP: c:\program files\pack securite\fsps\program\fslsp.dll
              O10 - Unknown file in Winsock LSP: c:\program files\pack securite\fsps\program\fslsp.dll
              O10 - Unknown file in Winsock LSP: c:\program files\pack securite\fsps\program\fslsp.dll
              O10 - Unknown file in Winsock LSP: c:\program files\pack securite\fsps\program\fslsp.dll
              O10 - Unknown file in Winsock LSP: c:\program files\pack securite\fsps\program\fslsp.dll
              O10 - Unknown file in Winsock LSP: c:\program files\pack securite\fsps\program\fslsp.dll
              O10 - Unknown file in Winsock LSP: c:\program files\pack securite\fsps\program\fslsp.dll
              O10 - Unknown file in Winsock LSP: c:\program files\pack securite\fsps\program\fslsp.dll
              O10 - Unknown file in Winsock LSP: c:\program files\pack securite\fsps\program\fslsp.dll
              O10 - Unknown file in Winsock LSP: c:\program files\pack securite\fsps\program\fslsp.dll
              O10 - Unknown file in Winsock LSP: c:\program files\pack securite\fsps\program\fslsp.dll
              O10 - Unknown file in Winsock LSP: c:\program files\pack securite\fsps\program\fslsp.dll
              O10 - Unknown file in Winsock LSP: c:\program files\pack securite\fsps\program\fslsp.dll
              O10 - Unknown file in Winsock LSP: c:\program files\pack securite\fsps\program\fslsp.dll
              O10 - Unknown file in Winsock LSP: c:\program files\pack securite\fsps\program\fslsp.dll
              O10 - Unknown file in Winsock LSP: c:\program files\pack securite\fsps\program\fslsp.dll
              O10 - Unknown file in Winsock LSP: c:\program files\pack securite\fsps\program\fslsp.dll
              O10 - Unknown file in Winsock LSP: c:\program files\pack securite\fsps\program\fslsp.dll
              O10 - Unknown file in Winsock LSP: c:\program files\pack securite\fsps\program\fslsp.dll
              O10 - Unknown file in Winsock LSP: c:\program files\pack securite\fsps\program\fslsp.dll
              O10 - Unknown file in Winsock LSP: c:\program files\pack securite\fsps\program\fslsp.dll
              O10 - Unknown file in Winsock LSP: c:\program files\pack securite\fsps\program\fslsp.dll
              O11 - Options group: [INTERNATIONAL] International*
              O15 - Trusted Zone: *.canalplay.com
              O15 - Trusted Zone: *.canalplusactive.com
              O15 - Trusted Zone: *.canalplay.com (HKLM)
              O15 - Trusted Zone: *.canalplusactive.com (HKLM)
              O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
              O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
              O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
              O16 - DPF: {27527D31-447B-11D5-A46E-0001023B4289} (CoGSManager Class) - http://gamingzone.ubisoft.com/dev/packages/GSManager.cab
              O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
              O16 - DPF: {45A0A292-ECC6-4D8F-9EA9-A4BD411D24C1} (king.com) - http://king.orange.fr/ctl/kingcomie.cab
              O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
              O16 - DPF: {5308E02B-4ABA-48E4-AA9E-8A7693661473} (GameCtl Class) - http://jeuxenligne.orange.fr/GisActiveX/Ax/GameAx.cab
              O16 - DPF: {5392B545-31A5-4724-BEF3-4FED1D56FDAC} (CPlayFirstDinerDash2_frControl Object) - file:///C:/Documents%20and%20Settings/nadia%20roukeb/Local%20Settings/Application%20Data/Oberon%20Media/Oberon%20Games%20Host/DinerDash2_fr.1.0.0.70.cab
              O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
              O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) -
              O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
              O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://jeuxenligne.orange.fr/gameshell/online/fr/chainz_2/mjolauncher.cab
              O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
              O16 - DPF: {87AF076E-D86D-4E87-ADDD-F05804E1F150} (VirginMega DownloadManager) - https://www.virginmega.fr/DownloadManager/Release/Prod/DownMan.cab
              O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
              O16 - DPF: {8EB3FF4E-86A1-4717-884D-7BA2D38272CB} (F-Secure Online Scanner) - https://www.nordnet.com/securite
              O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
              O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697519} (NsvPlayX Control) - http://www.nullsoft.com/nsv/embed/nsvplayx_vp6_aac.cab
              O16 - DPF: {C9E17F58-564C-41C6-989F-AB0FE0D2C9D1} (PopcapLoader Object) - http://jeuxentelechargement.orange.fr/orange2.0/OnlineHSS/rocket_mania/Popcap.cab
              O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://jeuxenligne.orange.fr/Gameshell/GameHost/1.0/OberonGameHost.cab
              O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
              O16 - DPF: {DC75FEF6-165D-4D25-A518-C8C4BDA7BAA6} (CPlayFirstDinerDashControl Object) - http://wanadoofr.oberon-media.com/online2/diner_dash/DinerDash.1.0.0.58.cab
              O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - file:///C:/Documents%20and%20Settings/nadia%20roukeb/Local%20Settings/Application%20Data/Oberon%20Media/Oberon%20Games%20Host/popcaploader_v6.cab
              O16 - DPF: {E1342154-4889-42B5-BEF6-19237577048F} (OberongamesLoader Object) - http://jeuxentelechargement.orange.fr/online2/zuma/oberongamesloader.cab
              O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab31267.cab
              O18 - Protocol: bw+0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw+0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw-0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw-0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw00 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw00s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw10 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw10s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw20 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw20s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw30 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw30s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw40 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw40s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw50 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw50s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw60 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw60s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw70 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw70s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw80 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw80s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw90 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw90s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwa0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwa0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwb0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwb0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwc0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwc0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwd0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwd0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwe0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwe0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwf0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwf0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
              O18 - Protocol: bwg0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwg0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwh0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwh0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwi0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwi0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwj0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwj0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwk0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwk0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwl0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwl0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwm0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwm0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwn0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwn0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwo0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwo0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwp0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwp0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwq0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwq0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwr0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwr0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bws0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bws0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwt0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwt0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwu0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwu0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwv0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwv0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bww0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bww0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwx0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwx0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwy0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwy0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwz0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwz0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
              O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
              O18 - Protocol: offline-8876480 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
              O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
              O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
              O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
              O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
              O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe
              O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
              O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\Pack Securite\Common\FSMA32.EXE
              O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
              O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
              O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
              O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
              O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
              O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
              O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
              O23 - Service: Norman API-hooking helper (NipSvc) - Unknown owner - C:\Norman\Nvc\BIN\nipsvc.exe (file missing)
              O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
              O23 - Service: PsShutdown (PsShutdownSvc) - Systems Internals - C:\WINDOWS\System32\PSSDNSVC.EXE
              O23 - Service: Service CANALPLAY - Canal+ Active - C:\Program Files\Lecteur CANALPLAY\CanalPlayService.exe
              O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Unknown owner - C:\WINDOWS\system32\UAService7.exe
              0
          4. jlpjlp Contributeur sécurité
            vire via ton panneau de configuration:

            Megaupload Toolbar

            ____________

            Relance HijackThis, choisis "do a scan only" coche la case devant les lignes ci-dessous et clic en bas sur "fix checked".

            O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
            O2 - BHO: (no name) - {CB8AE877-6B20-30A8-1208-3EC55801A5B0} - C:\DOCUME~1\NADIAR~1\APPLIC~1\LESSMO~1\DebugThe.exe (file missing)
            O2 - BHO: DeskbarBHO - {FC518CE0-F6B0-45b0-B6D9-9E6293CEC105} - C:\Program Files\Deskbar\deskbar.dll

            O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
            O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
            O4 - HKLM\..\Run: [fenaffiche] C:\Program Files\FenAffiche\FenUnika.exe
            O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
            O4 - HKLM\..\Run: [Servicee] C:\DOCUME~1\NADIAR~1\LOCALS~1\Temp\services.exe
            O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
            O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
            O16 - DPF: {5392B545-31A5-4724-BEF3-4FED1D56FDAC} (CPlayFirstDinerDash2_frControl Object) - file:///C:/Documents%20and%20Settings/nadia%20roukeb/Local%20Settings/Application%20Data/O­beron%20Media/Oberon%20Games%20Host/DinerDash2_fr.1.0.0.70.cab
            O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://jeuxenligne.orange.fr/Gameshell/GameHost/1.0/OberonGameHost.cab
            O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
            O16 - DPF: {DC75FEF6-165D-4D25-A518-C8C4BDA7BAA6} (CPlayFirstDinerDashControl Object) - http://wanadoofr.oberon-media.com/online2/diner_dash/DinerDash.1.0.0.58.cab
            O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - file:///C:/Documents%20and%20Settings/nadia%20roukeb/Local%20Settings/Application%20Data/O­beron%20Media/Oberon%20Games%20Host/popcaploader_v6.cab
            O16 - DPF: {E1342154-4889-42B5-BEF6-19237577048F} (OberongamesLoader Object) - http://jeuxentelechargement.orange.fr/online2/zuma/oberongamesloader.cab
            _______________

            Télécharge SDFix (créé par AndyManchesta) et sauvegarde le sur ton Bureau.
            http://downloads.andymanchesta.com/RemovalTools/SDFix.exe
            Double clique sur SDFix.exe et choisis Install pour l'extraire dans un dossier dédié sur le Bureau. Redémarre ton ordinateur en mode sans échec en suivant la procédure que voici :
            • Redémarre ton ordinateur
            • Après avoir entendu l'ordinateur biper lors du démarrage, mais avant que l'icône Windows apparaisse, tapote la touche F8 (une pression par seconde).
            • A la place du chargement normal de Windows, un menu avec différentes options devrait apparaître.
            • Choisis la première option, pour exécuter Windows en mode sans échec, puis appuie sur "Entrée".
            • Choisis ton compte.
            Déroule la liste des instructions ci-dessous :
            • Ouvre le dossier SDFix qui vient d'être créé dans le répertoire C:\ et double clique sur RunThis.bat pour lancer le script.
            • Appuie sur Y pour commencer le processus de nettoyage.
            • Il va supprimer les services et les entrées du Registre de certains trojans trouvés puis te demandera d'appuyer sur une touche pour redémarrer.
            • Appuie sur une touche pour redémarrer le PC.
            • Ton système sera plus long pour redémarrer qu'à l'accoutumée car l'outil va continuer à s'exécuter et supprimer des fichiers.
            • Après le chargement du Bureau, l'outil terminera son travail et affichera Finished.
            • Appuie sur une touche pour finir l'exécution du script et charger les icônes de ton Bureau.
            • Les icônes du Bureau affichées, le rapport SDFix s'ouvrira à l'écran et s'enregistrera aussi dans le dossier SDFix sous le nom Report.txt.
            • Enfin, copie/colle le contenu du fichier Report.txt dans ta prochaine réponse sur le forum

            _________________

            il faut virer boonty game source de pubs...

            fais ceci :

            « Démarrer » > « Executer » > taper cmd > valide par ok

            dans la fenetre noire tape ceci en respectant bien les espaces et guillemets

            sc stop "Boonty Games" ==> [Enter]
            sc config "Boonty Games" start= disabled ==> [Enter]
            sc delete "Boonty Games" ==> [Enter]

            * Double-clique sur OTMoveIt.exe pour lancer le programme,
            * Copie la liste de fichiers ou de dossiers ci-dessous et colle-la dans la fenêtre du programme "Paste Custom List of Files/Folders to Move" :

            C:\Program Files\Fichiers communs\BOONTY Shared
            C:\Program Files\boontyGames
            C:\Program Files\boonty
            C:\Program Files\Deskbar\deskbar.dll
            C:\DOCUME~1\NADIAR~1\LOCALS~1\Temp\services.exe

            * Clique sur MoveIt! pour lancer la suppression,
            * Le résultat appraraîtra dans le cadre Results.
            * Clique sur Exit pour fermer le programme.
            * Poste le rapport qui est situé ici : C:\\\_OTMoveIt\MovedFiles
            * Il te sera peut-être demandé de redémarrer ton PC. Dans ce cas, clique sur Yes.

            post le rapport de ot_move it ainsi qu´un nouveau hijack this

            ________________

            tu me collera le rapport navilog et un nouveau hijkachits et tu me dira si encore des pubs

            a plus
            0
            1. ninese Auteur
              salut
              desolé pour heir soir mais gros beuge avec l'ordi il rame trop.
              depuis hier plus de pub. je viens de supprimer Megaupload Toolbar; tout ce que tu 'a fait faire depuis a l'aire de fonctionner.
              mintenant il faut que je vois pourquoi le net est aussi lent a se charger.
              MERCI BEAUCOUP POUR TON AIDE
              0
          6. jlpjlp Contributeur sécurité
            colle un rapport hijackthis

            http://www.trendsecure.com/portal/en-US/tools/security_tools/hijackthis/download

            manuel :

            https://leblogdeclaude.blogspot.com/2006/10/informatique-section-hijackthis.html

            Je conseille de renomer Hijackthis, pour contrer une éventuelle infection de Vundo.

            ex:Renomme le fichier HijackThis.exe en eden.exe pour cela, fais un clic droit sur le fichier HijackThis.exe et choisis renommer dans la liste

            Ensuite avec Explorer créer un dossier c:\hijackthis
            Décompresser Hijackthis dans ce dossier.
            C'est important pour les sauvegardes."
            ________________

            Fais un clic droit sur ce lien : (IL-MAFIOSO)
            http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe
            Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau.
            Ensuite double clique sur navilog1.exe pour lancer l'installation.
            Une fois l'installation terminée, le fix s'exécutera automatiquement.
            (Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau).

            Laisse-toi guider. Au menu principal, choisis 1 et valides.
            (ne fais pas le choix 2,3 ou 4 sans notre avis/accord)

            Patiente jusqu'au message :
            *** Analyse Termine le ..... ***
            Appuie sur une touche comme demandé, le blocnote va s'ouvrir.
            Copie-colle l'intégralité dans une réponse. Referme le blocnote.
            Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)
            0
            1. ninese Auteur
              je compren pa tout la, suis desolé
              0
            2. ninese Auteur
              Logfile of Trend Micro HijackThis v2.0.2
              Scan saved at 21:26:48, on 16/03/2008
              Platform: Windows XP SP2 (WinNT 5.01.2600)
              MSIE: Internet Explorer v7.00 (7.00.6000.16608)
              Boot mode: Normal

              Running processes:
              C:\WINDOWS\System32\smss.exe
              C:\WINDOWS\system32\winlogon.exe
              C:\WINDOWS\system32\services.exe
              C:\WINDOWS\system32\lsass.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\System32\svchost.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\Explorer.EXE
              C:\WINDOWS\system32\spoolsv.exe
              C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
              C:\WINDOWS\SOUNDMAN.EXE
              C:\WINDOWS\system32\rundll32.exe
              C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
              C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
              C:\Program Files\Pack Securite\Common\FSM32.EXE
              C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
              C:\Program Files\Logitech\QuickCam\Quickcam.exe
              C:\Program Files\iTunes\iTunesHelper.exe
              C:\Program Files\Neuf\Kit\WiFi\9wifi.exe
              C:\WINDOWS\system32\DrvMon.exe
              C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
              C:\WINDOWS\system32\ctfmon.exe
              C:\Program Files\Messenger\msmsgs.exe
              C:\Program Files\Windows Media Player\WMPNSCFG.exe
              C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearch.exe
              C:\WINDOWS\BricoPacks\Longhorn Inspirat\ObjectDock\ObjectDock.exe
              C:\WINDOWS\BricoPacks\Longhorn Inspirat\YzToolBar\YzToolBar.exe
              C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearchIndexer.exe
              C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
              C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
              C:\Program Files\Pack Securite\Common\FSMA32.EXE
              C:\Program Files\Pack Securite\Anti-Virus\FSGK32.EXE
              C:\WINDOWS\System32\FTRTSVC.exe
              C:\WINDOWS\System32\svchost.exe
              C:\Program Files\Pack Securite\Common\FSMB32.EXE
              C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
              C:\WINDOWS\system32\nvsvc32.exe
              C:\Program Files\Pack Securite\Common\FCH32.EXE
              C:\WINDOWS\System32\snmp.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\system32\UAService7.exe
              C:\Program Files\Pack Securite\Common\FAMEH32.EXE
              C:\Program Files\Pack Securite\Anti-Virus\fsqh.exe
              C:\Program Files\Pack Securite\FSPC\fspc.exe
              C:\Program Files\Pack Securite\FSGUI\fsguidll.exe
              C:\Program Files\iPod\bin\iPodService.exe
              C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
              C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe
              C:\Program Files\Pack Securite\Anti-Virus\fssm32.exe
              C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
              C:\Program Files\Pack Securite\FSAUA\program\fsus.exe
              C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
              C:\Program Files\Lecteur CANALPLAY\CanalPlayService.exe
              C:\Program Files\Pack Securite\Anti-Virus\fsav32.exe
              C:\Program Files\Internet Explorer\IEXPLORE.EXE
              C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
              C:\Program Files\Windows Live\Messenger\usnsvc.exe
              C:\Program Files\Windows Live\Messenger\msnmsgr.exe
              C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

              R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://actus.sfr.fr
              R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.neuf.fr/
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://actus.sfr.fr
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
              R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
              R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
              O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
              O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
              O2 - BHO: Download Manager Browser Helper Object - {19C8E43B-07B3-49CB-BFFC-6777B593E6F8} - C:\PROGRA~1\FICHIE~1\fluxDVD\DOWNLO~1\XEBDLH~1.DLL
              O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
              O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
              O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
              O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
              O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
              O2 - BHO: Barre d'outils MSN Search Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll
              O2 - BHO: (no name) - {CB8AE877-6B20-30A8-1208-3EC55801A5B0} - C:\DOCUME~1\NADIAR~1\APPLIC~1\LESSMO~1\DebugThe.exe (file missing)
              O2 - BHO: DeskbarBHO - {FC518CE0-F6B0-45b0-B6D9-9E6293CEC105} - C:\Program Files\Deskbar\deskbar.dll
              O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
              O3 - Toolbar: Barre d'outils MSN Search - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll
              O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
              O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
              O4 - HKLM\..\Run: [RestoreIT!] "C:\Program Files\Phoenix Technologies Ltd\RecoverPro_XP\VBPTASK.EXE" VBStart
              O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
              O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
              O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
              O4 - HKLM\..\Run: [fenaffiche] C:\Program Files\FenAffiche\FenUnika.exe
              O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
              O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
              O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
              O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
              O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
              O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Pack Securite\Common\FSM32.EXE" /splash
              O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Pack Securite\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
              O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
              O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
              O4 - HKLM\..\Run: [Servicee] C:\DOCUME~1\NADIAR~1\LOCALS~1\Temp\services.exe
              O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
              O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
              O4 - HKLM\..\Run: [Autoconfigurateur WiFi Neuf] "C:\Program Files\Neuf\Kit\WiFi\9wifi.exe"
              O4 - HKCU\..\Run: [DrvMon.exe] C:\WINDOWS\system32\DrvMon.exe
              O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
              O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
              O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
              O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
              O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
              O4 - HKCU\..\Run: [CanalPlayer] C:\Program Files\Lecteur CANALPLAY\CanalPlayer.exe
              O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
              O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
              O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
              O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
              O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
              O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
              O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
              O4 - Startup: Stardock ObjectDock.lnk = C:\WINDOWS\BricoPacks\Longhorn Inspirat\ObjectDock\ObjectDock.exe
              O4 - Startup: Y'z Toolbar.lnk = C:\WINDOWS\BricoPacks\Longhorn Inspirat\YzToolBar\YzToolBar.exe
              O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
              O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
              O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearch.exe
              O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll/search.htm
              O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
              O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fr-fr\msntabres.dll/229?dcd0bd1d92fd4b32831ceeca081fc21
              O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fr-fr\msntabres.dll/230?dcd0bd1d92fd4b32831ceeca081fc21
              O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
              O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
              O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
              O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
              O9 - Extra button: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
              O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
              O9 - Extra 'Tools' menuitem: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
              O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
              O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
              O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
              O15 - Trusted Zone: *.canalplay.com
              O15 - Trusted Zone: *.canalplusactive.com
              O15 - Trusted Zone: *.canalplay.com (HKLM)
              O15 - Trusted Zone: *.canalplusactive.com (HKLM)
              O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
              O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
              O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
              O16 - DPF: {27527D31-447B-11D5-A46E-0001023B4289} (CoGSManager Class) - http://gamingzone.ubisoft.com/dev/packages/GSManager.cab
              O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
              O16 - DPF: {45A0A292-ECC6-4D8F-9EA9-A4BD411D24C1} (king.com) - http://king.orange.fr/ctl/kingcomie.cab
              O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
              O16 - DPF: {5308E02B-4ABA-48E4-AA9E-8A7693661473} (GameCtl Class) - http://jeuxenligne.orange.fr/GisActiveX/Ax/GameAx.cab
              O16 - DPF: {5392B545-31A5-4724-BEF3-4FED1D56FDAC} (CPlayFirstDinerDash2_frControl Object) - file:///C:/Documents%20and%20Settings/nadia%20roukeb/Local%20Settings/Application%20Data/Oberon%20Media/Oberon%20Games%20Host/DinerDash2_fr.1.0.0.70.cab
              O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
              O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) -
              O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
              O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://jeuxenligne.orange.fr/gameshell/online/fr/chainz_2/mjolauncher.cab
              O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
              O16 - DPF: {87AF076E-D86D-4E87-ADDD-F05804E1F150} (VirginMega DownloadManager) - https://www.virginmega.fr/DownloadManager/Release/Prod/DownMan.cab
              O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
              O16 - DPF: {8EB3FF4E-86A1-4717-884D-7BA2D38272CB} (F-Secure Online Scanner) - https://www.nordnet.com/securite
              O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
              O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697519} (NsvPlayX Control) - http://www.nullsoft.com/nsv/embed/nsvplayx_vp6_aac.cab
              O16 - DPF: {C9E17F58-564C-41C6-989F-AB0FE0D2C9D1} (PopcapLoader Object) - http://jeuxentelechargement.orange.fr/orange2.0/OnlineHSS/rocket_mania/Popcap.cab
              O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://jeuxenligne.orange.fr/Gameshell/GameHost/1.0/OberonGameHost.cab
              O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
              O16 - DPF: {DC75FEF6-165D-4D25-A518-C8C4BDA7BAA6} (CPlayFirstDinerDashControl Object) - http://wanadoofr.oberon-media.com/online2/diner_dash/DinerDash.1.0.0.58.cab
              O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - file:///C:/Documents%20and%20Settings/nadia%20roukeb/Local%20Settings/Application%20Data/Oberon%20Media/Oberon%20Games%20Host/popcaploader_v6.cab
              O16 - DPF: {E1342154-4889-42B5-BEF6-19237577048F} (OberongamesLoader Object) - http://jeuxentelechargement.orange.fr/online2/zuma/oberongamesloader.cab
              O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab31267.cab
              O18 - Protocol: bw+0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw+0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw-0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw-0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw00 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw00s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw10 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw10s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw20 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw20s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw30 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw30s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw40 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw40s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw50 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw50s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw60 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw60s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw70 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw70s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw80 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw80s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw90 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw90s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwa0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwa0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwb0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwb0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwc0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwc0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwd0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwd0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwe0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwe0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwf0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwf0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
              O18 - Protocol: bwg0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwg0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwh0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwh0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwi0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwi0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwj0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwj0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwk0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwk0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwl0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwl0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwm0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwm0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwn0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwn0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwo0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwo0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwp0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwp0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwq0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwq0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwr0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwr0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bws0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bws0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwt0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwt0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwu0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwu0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwv0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwv0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bww0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bww0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwx0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwx0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwy0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwy0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwz0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwz0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: offline-8876480 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
              O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
              O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
              O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe
              O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
              O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\Pack Securite\Common\FSMA32.EXE
              O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
              O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
              O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
              O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
              O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
              O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
              O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
              O23 - Service: Norman API-hooking helper (NipSvc) - Unknown owner - C:\Norman\Nvc\BIN\nipsvc.exe (file missing)
              O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
              O23 - Service: PsShutdown (PsShutdownSvc) - Systems Internals - C:\WINDOWS\System32\PSSDNSVC.EXE
              O23 - Service: Service CANALPLAY - Canal+ Active - C:\Program Files\Lecteur CANALPLAY\CanalPlayService.exe
              O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Unknown owner - C:\WINDOWS\system32\UAService7.exe
              0
            3. ninese Auteur
              Logfile of Trend Micro HijackThis v2.0.2
              Scan saved at 21:26:48, on 16/03/2008
              Platform: Windows XP SP2 (WinNT 5.01.2600)
              MSIE: Internet Explorer v7.00 (7.00.6000.16608)
              Boot mode: Normal

              Running processes:
              C:\WINDOWS\System32\smss.exe
              C:\WINDOWS\system32\winlogon.exe
              C:\WINDOWS\system32\services.exe
              C:\WINDOWS\system32\lsass.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\System32\svchost.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\Explorer.EXE
              C:\WINDOWS\system32\spoolsv.exe
              C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
              C:\WINDOWS\SOUNDMAN.EXE
              C:\WINDOWS\system32\rundll32.exe
              C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
              C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
              C:\Program Files\Pack Securite\Common\FSM32.EXE
              C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
              C:\Program Files\Logitech\QuickCam\Quickcam.exe
              C:\Program Files\iTunes\iTunesHelper.exe
              C:\Program Files\Neuf\Kit\WiFi\9wifi.exe
              C:\WINDOWS\system32\DrvMon.exe
              C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
              C:\WINDOWS\system32\ctfmon.exe
              C:\Program Files\Messenger\msmsgs.exe
              C:\Program Files\Windows Media Player\WMPNSCFG.exe
              C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearch.exe
              C:\WINDOWS\BricoPacks\Longhorn Inspirat\ObjectDock\ObjectDock.exe
              C:\WINDOWS\BricoPacks\Longhorn Inspirat\YzToolBar\YzToolBar.exe
              C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearchIndexer.exe
              C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
              C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
              C:\Program Files\Pack Securite\Common\FSMA32.EXE
              C:\Program Files\Pack Securite\Anti-Virus\FSGK32.EXE
              C:\WINDOWS\System32\FTRTSVC.exe
              C:\WINDOWS\System32\svchost.exe
              C:\Program Files\Pack Securite\Common\FSMB32.EXE
              C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
              C:\WINDOWS\system32\nvsvc32.exe
              C:\Program Files\Pack Securite\Common\FCH32.EXE
              C:\WINDOWS\System32\snmp.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\system32\UAService7.exe
              C:\Program Files\Pack Securite\Common\FAMEH32.EXE
              C:\Program Files\Pack Securite\Anti-Virus\fsqh.exe
              C:\Program Files\Pack Securite\FSPC\fspc.exe
              C:\Program Files\Pack Securite\FSGUI\fsguidll.exe
              C:\Program Files\iPod\bin\iPodService.exe
              C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
              C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe
              C:\Program Files\Pack Securite\Anti-Virus\fssm32.exe
              C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
              C:\Program Files\Pack Securite\FSAUA\program\fsus.exe
              C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
              C:\Program Files\Lecteur CANALPLAY\CanalPlayService.exe
              C:\Program Files\Pack Securite\Anti-Virus\fsav32.exe
              C:\Program Files\Internet Explorer\IEXPLORE.EXE
              C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
              C:\Program Files\Windows Live\Messenger\usnsvc.exe
              C:\Program Files\Windows Live\Messenger\msnmsgr.exe
              C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

              R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://actus.sfr.fr
              R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.neuf.fr/
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://actus.sfr.fr
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
              R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
              R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
              O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
              O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
              O2 - BHO: Download Manager Browser Helper Object - {19C8E43B-07B3-49CB-BFFC-6777B593E6F8} - C:\PROGRA~1\FICHIE~1\fluxDVD\DOWNLO~1\XEBDLH~1.DLL
              O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
              O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
              O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
              O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
              O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
              O2 - BHO: Barre d'outils MSN Search Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll
              O2 - BHO: (no name) - {CB8AE877-6B20-30A8-1208-3EC55801A5B0} - C:\DOCUME~1\NADIAR~1\APPLIC~1\LESSMO~1\DebugThe.exe (file missing)
              O2 - BHO: DeskbarBHO - {FC518CE0-F6B0-45b0-B6D9-9E6293CEC105} - C:\Program Files\Deskbar\deskbar.dll
              O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
              O3 - Toolbar: Barre d'outils MSN Search - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll
              O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
              O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
              O4 - HKLM\..\Run: [RestoreIT!] "C:\Program Files\Phoenix Technologies Ltd\RecoverPro_XP\VBPTASK.EXE" VBStart
              O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
              O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
              O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
              O4 - HKLM\..\Run: [fenaffiche] C:\Program Files\FenAffiche\FenUnika.exe
              O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
              O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
              O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
              O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
              O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
              O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Pack Securite\Common\FSM32.EXE" /splash
              O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Pack Securite\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
              O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"
              O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide
              O4 - HKLM\..\Run: [Servicee] C:\DOCUME~1\NADIAR~1\LOCALS~1\Temp\services.exe
              O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
              O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
              O4 - HKLM\..\Run: [Autoconfigurateur WiFi Neuf] "C:\Program Files\Neuf\Kit\WiFi\9wifi.exe"
              O4 - HKCU\..\Run: [DrvMon.exe] C:\WINDOWS\system32\DrvMon.exe
              O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
              O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
              O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
              O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
              O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
              O4 - HKCU\..\Run: [CanalPlayer] C:\Program Files\Lecteur CANALPLAY\CanalPlayer.exe
              O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
              O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
              O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
              O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
              O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
              O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
              O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
              O4 - Startup: Stardock ObjectDock.lnk = C:\WINDOWS\BricoPacks\Longhorn Inspirat\ObjectDock\ObjectDock.exe
              O4 - Startup: Y'z Toolbar.lnk = C:\WINDOWS\BricoPacks\Longhorn Inspirat\YzToolBar\YzToolBar.exe
              O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
              O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
              O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearch.exe
              O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll/search.htm
              O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
              O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fr-fr\msntabres.dll/229?dcd0bd1d92fd4b32831ceeca081fc21
              O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fr-fr\msntabres.dll/230?dcd0bd1d92fd4b32831ceeca081fc21
              O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
              O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
              O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
              O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
              O9 - Extra button: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
              O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
              O9 - Extra 'Tools' menuitem: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
              O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
              O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
              O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
              O15 - Trusted Zone: *.canalplay.com
              O15 - Trusted Zone: *.canalplusactive.com
              O15 - Trusted Zone: *.canalplay.com (HKLM)
              O15 - Trusted Zone: *.canalplusactive.com (HKLM)
              O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
              O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
              O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
              O16 - DPF: {27527D31-447B-11D5-A46E-0001023B4289} (CoGSManager Class) - http://gamingzone.ubisoft.com/dev/packages/GSManager.cab
              O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
              O16 - DPF: {45A0A292-ECC6-4D8F-9EA9-A4BD411D24C1} (king.com) - http://king.orange.fr/ctl/kingcomie.cab
              O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w2/resources/MSNPUpld.cab
              O16 - DPF: {5308E02B-4ABA-48E4-AA9E-8A7693661473} (GameCtl Class) - http://jeuxenligne.orange.fr/GisActiveX/Ax/GameAx.cab
              O16 - DPF: {5392B545-31A5-4724-BEF3-4FED1D56FDAC} (CPlayFirstDinerDash2_frControl Object) - file:///C:/Documents%20and%20Settings/nadia%20roukeb/Local%20Settings/Application%20Data/Oberon%20Media/Oberon%20Games%20Host/DinerDash2_fr.1.0.0.70.cab
              O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
              O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) -
              O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
              O16 - DPF: {7E980B9B-8AE5-466A-B6D6-DA8CF814E78A} (MJLauncherCtrl Class) - http://jeuxenligne.orange.fr/gameshell/online/fr/chainz_2/mjolauncher.cab
              O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
              O16 - DPF: {87AF076E-D86D-4E87-ADDD-F05804E1F150} (VirginMega DownloadManager) - https://www.virginmega.fr/DownloadManager/Release/Prod/DownMan.cab
              O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
              O16 - DPF: {8EB3FF4E-86A1-4717-884D-7BA2D38272CB} (F-Secure Online Scanner) - https://www.nordnet.com/securite
              O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
              O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697519} (NsvPlayX Control) - http://www.nullsoft.com/nsv/embed/nsvplayx_vp6_aac.cab
              O16 - DPF: {C9E17F58-564C-41C6-989F-AB0FE0D2C9D1} (PopcapLoader Object) - http://jeuxentelechargement.orange.fr/orange2.0/OnlineHSS/rocket_mania/Popcap.cab
              O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://jeuxenligne.orange.fr/Gameshell/GameHost/1.0/OberonGameHost.cab
              O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
              O16 - DPF: {DC75FEF6-165D-4D25-A518-C8C4BDA7BAA6} (CPlayFirstDinerDashControl Object) - http://wanadoofr.oberon-media.com/online2/diner_dash/DinerDash.1.0.0.58.cab
              O16 - DPF: {DF780F87-FF2B-4DF8-92D0-73DB16A1543A} (PopCapLoader Object) - file:///C:/Documents%20and%20Settings/nadia%20roukeb/Local%20Settings/Application%20Data/Oberon%20Media/Oberon%20Games%20Host/popcaploader_v6.cab
              O16 - DPF: {E1342154-4889-42B5-BEF6-19237577048F} (OberongamesLoader Object) - http://jeuxentelechargement.orange.fr/online2/zuma/oberongamesloader.cab
              O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab31267.cab
              O18 - Protocol: bw+0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw+0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw-0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw-0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw00 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw00s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw10 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw10s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw20 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw20s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw30 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw30s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw40 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw40s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw50 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw50s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw60 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw60s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw70 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw70s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw80 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw80s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw90 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw90s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwa0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwa0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwb0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwb0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwc0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwc0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwd0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwd0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwe0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwe0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwf0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwf0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
              O18 - Protocol: bwg0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwg0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwh0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwh0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwi0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwi0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwj0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwj0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwk0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwk0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwl0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwl0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwm0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwm0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwn0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwn0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwo0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwo0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwp0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwp0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwq0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwq0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwr0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwr0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bws0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bws0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwt0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwt0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwu0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwu0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwv0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwv0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bww0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bww0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwx0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwx0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwy0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwy0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwz0 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwz0s - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: offline-8876480 - {0F12224C-3E95-4B9C-8563-633A36341357} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
              O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
              O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
              O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\Pack Securite\FSAUA\program\fsaua.exe
              O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
              O23 - Service: FSMA - F-Secure Corporation - C:\Program Files\Pack Securite\Common\FSMA32.EXE
              O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
              O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
              O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
              O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
              O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
              O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
              O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
              O23 - Service: Norman API-hooking helper (NipSvc) - Unknown owner - C:\Norman\Nvc\BIN\nipsvc.exe (file missing)
              O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
              O23 - Service: PsShutdown (PsShutdownSvc) - Systems Internals - C:\WINDOWS\System32\PSSDNSVC.EXE
              O23 - Service: Service CANALPLAY - Canal+ Active - C:\Program Files\Lecteur CANALPLAY\CanalPlayService.exe
              O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Unknown owner - C:\WINDOWS\system32\UAService7.exe
              0
          7. jlpjlp Contributeur sécurité
            parfait

            encore des pubs??
            0
            1. ninese Auteur
              oui malheuresemen yen a eu enore une mais comparé à une heure en ariiere ca va beaucoup mieu
              0
          8. jlpjlp Contributeur sécurité
            tu remets msn avec les sponsor
            puis tu desinstalle msn et les sponsor

            __________

            va dans : Démarrer > Exécuter puis copie/colle la ligne suivante en gras :

            "%programfiles%\Lopxp\Lopxp.bat" /Fixme
            puis valide, accepte toutes les demandes de suppression et poste le rapport stp

            et tu dis si encore des pubs

            @+
            0
            1. ninese Auteur
              # Rapport Lopxp fait le 16/03/2008 à 20:56:40
              # Exécuté dans : C:\Program Files\Lopxp
              # Version 3.09 - Maj du 28/02/2008

              ========== FixLog ==========

              +- C:\Documents and Settings\All Users\Application Data\Audio 4 part browse
              Choix utilisateur : Suppression acceptée.
              Déplacé avec succès.

              +- C:\Documents and Settings\All Users\Application Data\timedumbvgaref
              Choix utilisateur : Suppression acceptée.
              Déplacé avec succès.

              +- C:\Documents and Settings\nadia roukeb\Application Data\FLAWCOMP
              Choix utilisateur : Suppression acceptée.
              Déplacé avec succès.

              +- C:\Documents and Settings\nadia roukeb\Application Data\Less Move
              Choix utilisateur : Suppression acceptée.
              Déplacé avec succès.

              +- C:\Program Files\Adverts
              Choix utilisateur : Suppression acceptée.
              Déplacé avec succès.

              +- C:\Program Files\Circle Developement
              Choix utilisateur : Suppression acceptée.
              Déplacé avec succès.

              +- C:\Program Files\FLAWCOMP
              Choix utilisateur : Suppression acceptée.
              Déplacé avec succès.

              +- C:\WINDOWS\tasks\B61B7504942915B8.job
              Choix utilisateur : Suppression acceptée.
              Déplacé avec succès.

              +- Registre :
              Nettoyage effectué.

              +- Fichiers temporaires :
              Nettoyage effectué.

              ========== Listing des dossiers Application Data

              +- C:\Documents and Settings\All Users\Application Data

              2007-03-22 à 17:47:35 - Adobe
              2005-07-11 à 15:28:14 - Ahead
              2008-01-11 à 19:10:36 - Apple
              2008-01-11 à 19:13:11 - Apple Computer
              2006-05-14 à 18:24:34 - BOONTY
              2006-07-14 à 13:21:20 - CanonBJ
              2006-09-01 à 16:26:05 - CyberLink
              2006-05-22 à 00:03:46 - Exetender
              2007-10-20 à 13:15:56 - F-Secure
              2007-09-01 à 15:04:33 - FloodLightGames
              2007-08-31 à 13:35:09 - fluxDVD
              2006-09-14 à 19:16:31 - Forge of Games
              2008-03-03 à 13:46:56 - fssg
              2006-12-22 à 09:22:03 - GamesBar
              2007-02-04 à 19:56:00 - Genimo
              2006-12-29 à 12:46:52 - Google
              2006-09-17 à 14:52:13 - iWin
              2007-11-21 à 18:09:43 - Logishrd
              2007-02-19 à 17:20:10 - Logitech
              2006-05-08 à 09:00:16 - Messenger Plus!
              2007-12-09 à 19:45:43 - Microsoft
              2006-04-16 à 15:52:10 - Microsoft Games
              2007-08-31 à 13:35:22 - mpDRM
              2006-05-14 à 18:13:01 - MSN Search Toolbar
              2007-01-19 à 13:58:04 - MumboJumbo
              2006-12-23 à 18:05:28 - MyCompany
              2007-07-01 à 10:42:50 - NannyMania
              2006-02-08 à 20:41:50 - NFS Underground
              2007-06-11 à 19:59:47 - nView_Profiles
              2007-08-26 à 16:22:34 - Oberon Games
              2006-12-31 à 15:26:34 - Oberon Media
              2006-09-07 à 08:23:23 - Oberongames
              2007-07-01 à 13:31:10 - PlayFirst
              2007-07-02 à 13:33:33 - Playtonium Games
              2007-05-27 à 18:42:53 - PopCap
              2006-05-22 à 16:20:22 - QuickTime
              2007-10-24 à 19:35:06 - Sandlot Games
              2005-07-11 à 13:30:51 - SBSI
              2006-05-24 à 21:23:31 - Skype
              2008-03-03 à 16:35:53 - Spybot - Search & Destroy
              2007-09-01 à 22:39:12 - TEMP
              2006-06-13 à 11:30:19 - Windows Genuine Advantage
              2008-03-01 à 15:21:33 - WLInstaller
              2006-05-03 à 19:31:12 - Yahoo! Companion

              +- C:\Documents and Settings\nadia roukeb\Application Data

              2008-01-02 à 15:55:34 - Adobe
              2007-03-22 à 17:53:56 - AdobeUM
              2005-11-28 à 19:27:05 - Ahead
              2008-02-11 à 19:02:47 - Apple Computer
              2007-08-28 à 14:48:54 - Azureus
              2006-07-20 à 16:52:10 - Beep
              2006-08-18 à 17:06:50 - cerasus.media
              2007-04-08 à 17:05:05 - Chicken Chase
              2007-12-11 à 13:32:28 - COWON
              2005-07-12 à 08:16:30 - CyberLink
              2007-04-22 à 16:59:25 - DiVision Studios - Escaping Atlantis
              2006-10-08 à 12:14:43 - dvdcss
              2006-05-14 à 18:56:45 - eConf
              2007-10-20 à 13:23:30 - F-Secure
              2007-09-01 à 15:04:33 - FloodLightGames
              2006-12-22 à 12:10:26 - FrostWire
              2007-01-27 à 21:06:59 - Gaijin Ent
              2007-02-04 à 19:51:21 - Genimo
              2007-09-27 à 14:22:12 - GetRightToGo
              2006-05-14 à 20:11:46 - Google
              2006-05-01 à 15:10:19 - Help
              2005-07-11 à 13:25:27 - Identities
              2006-05-03 à 18:08:36 - ispnews
              2006-09-17 à 14:52:13 - iWin
              2007-07-15 à 13:44:28 - ma-config.com
              2006-09-17 à 13:25:26 - Macromedia
              2005-10-25 à 14:12:28 - Media Player Classic
              2007-09-26 à 15:21:43 - MegauploadToolbar
              2007-06-26 à 17:52:10 - Microsoft
              2006-04-16 à 15:52:10 - Microsoft Games
              2006-05-14 à 18:15:03 - MSN Search Toolbar
              2006-05-02 à 13:38:19 - MSNInstaller
              2007-06-22 à 15:20:33 - MysteryStudio
              2006-05-03 à 18:11:47 - PEX
              2006-09-14 à 19:38:31 - Player Orange
              2007-07-01 à 13:31:10 - PlayFirst
              2007-12-07 à 12:13:27 - Samsung
              2007-10-24 à 19:34:40 - Sandlot Games
              2007-10-24 à 19:34:10 - SecuROM
              2006-09-03 à 12:57:56 - Skype
              2006-05-14 à 20:12:01 - Sun
              2005-10-25 à 08:30:06 - Template
              2006-07-25 à 15:32:56 - THQ
              2006-07-18 à 18:55:03 - ubi.com
              2006-05-03 à 20:34:46 - vlc

              +- C:\Documents and Settings\nadia roukeb\Local Settings\Application Data

              2005-07-11 à 15:50:33 - Adobe
              2005-10-27 à 10:31:05 - Ahead
              2008-01-11 à 19:12:44 - Apple
              2008-01-11 à 19:09:24 - Apple Computer
              2006-10-22 à 13:38:15 - ApplicationHistory
              2006-10-28 à 18:34:35 - Google
              2006-05-01 à 15:10:19 - Help
              2006-01-10 à 18:48:54 - Identities
              2006-09-30 à 18:05:53 - king.com
              2006-08-10 à 15:12:12 - MakeDVD
              2008-03-01 à 15:25:20 - Microsoft
              2007-04-21 à 08:11:49 - Oberon Games
              2007-05-21 à 18:57:25 - Oberon Media
              2006-04-21 à 16:24:54 - Stardock
              2008-01-09 à 16:58:09 - WMTools Downloaded Files

              ========== Listing du dossier Program Files

              +- C:\Program Files

              2005-07-11 à 15:03:11 - Adobe
              2005-07-11 à 15:30:41 - Ahead
              2007-09-17 à 19:27:31 - AIDA32 - Enterprise System Information
              2007-02-26 à 16:02:36 - Antipub
              2008-01-11 à 19:12:24 - Apple Software Update
              2007-10-07 à 10:58:48 - Audacity
              2007-09-03 à 17:01:55 - Azureus
              2007-06-03 à 18:47:14 - Boonty
              2007-12-11 à 13:31:52 - BoontyGames
              2006-05-22 à 00:46:27 - CasinoOnNet
              2005-07-11 à 13:22:59 - ComPlus Applications
              2005-12-25 à 14:46:06 - Core Design
              2006-08-22 à 09:40:48 - Cuttermaran
              2006-08-22 à 09:50:33 - CyberLink
              2006-02-02 à 20:55:38 - Davilex Games
              2007-02-08 à 18:28:21 - denouvel
              2007-09-10 à 17:13:06 - Deskbar
              2006-03-08 à 17:54:31 - directx
              2007-10-07 à 10:59:52 - DivX
              2007-06-11 à 19:52:45 - EA GAMES
              2007-05-27 à 18:11:56 - eChanblard
              2008-01-14 à 16:30:27 - eMule
              2005-07-11 à 15:12:42 - FenAffiche
              2008-03-01 à 15:21:58 - Fichiers communs
              2006-12-22 à 15:55:31 - FrostWire
              2006-12-22 à 10:59:37 - GamesBar
              2007-09-05 à 16:10:46 - Google
              2005-07-11 à 13:32:41 - HighMAT CD Writing Wizard
              2006-05-03 à 20:43:22 - IndustryGiant 2
              2007-12-07 à 12:10:05 - InstallShield Installation Information
              2005-12-07 à 22:11:55 - InterActual
              2008-02-13 à 16:15:21 - Internet Explorer
              2006-07-09 à 16:49:05 - InternetGameBox
              2008-02-29 à 18:10:58 - iPod
              2008-02-29 à 18:11:12 - iTunes
              2007-12-05 à 19:25:31 - Java
              2005-10-25 à 12:25:37 - K-Lite Codec Pack
              2008-03-09 à 14:27:05 - Lecteur CANALPLAY
              2008-03-11 à 11:13:55 - LimeWire
              2007-11-21 à 17:53:59 - Logitech
              2008-03-16 à 19:58:23 - Lopxp
              2007-07-15 à 13:44:13 - ma-config.com
              2007-09-18 à 08:07:48 - Maxis
              2007-09-18 à 11:33:08 - MegauploadToolbar
              2006-05-14 à 18:24:18 - Mes Jeux Téléchargés
              2005-07-11 à 13:35:18 - Messenger
              2007-12-17 à 16:41:58 - Messenger Plus! Live
              2007-03-04 à 15:05:31 - MessengerPlus! 3
              2006-03-08 à 17:51:41 - Microids
              2007-05-12 à 15:24:11 - Microsoft CAPICOM 2.1.0.2
              2005-07-11 à 13:25:29 - microsoft frontpage
              2005-07-13 à 14:05:10 - Microsoft Office
              2005-07-13 à 14:05:15 - Microsoft Works
              2005-07-11 à 15:14:30 - Microsoft.NET
              2005-07-11 à 13:23:21 - Movie Maker
              2006-05-01 à 15:11:16 - MSN
              2005-07-11 à 13:22:15 - MSN Gaming Zone
              2008-03-01 à 15:23:29 - MSN Messenger
              2006-05-14 à 18:13:34 - MSN Toolbar Suite
              2006-10-15 à 18:33:21 - MSXML 4.0
              2006-07-19 à 11:29:25 - MTV Networks
              2006-02-07 à 15:39:04 - Myst III Exile
              2005-07-11 à 13:23:25 - NetMeeting
              2007-10-15 à 14:48:00 - Neuf
              2005-07-11 à 15:52:22 - Norman
              2005-07-11 à 13:22:21 - Online Services
              2006-09-14 à 19:37:55 - orange
              2007-06-13 à 15:10:39 - Outlook Express
              2008-03-03 à 13:56:18 - Pack Securite
              2005-07-11 à 13:32:42 - Phoenix Technologies Ltd
              2007-02-08 à 18:27:40 - Player Metaboli
              2008-02-29 à 18:09:11 - QuickTime
              2007-06-27 à 19:05:22 - Real
              2005-07-11 à 14:57:21 - Realtek AC97
              2007-12-07 à 12:06:46 - Samsung
              2006-05-03 à 17:59:24 - Securitoo
              2006-10-29 à 17:44:58 - Seekmo Programs
              2005-07-11 à 13:23:43 - Services en ligne
              2006-05-24 à 21:23:21 - Skype
              2008-03-03 à 16:39:39 - Spybot - Search & Destroy
              2007-09-03 à 17:04:54 - Spyware Terminator
              2006-08-21 à 19:41:46 - TerraTec
              2006-11-04 à 11:21:02 - The Adventure Company
              2007-07-17 à 07:47:11 - Tweak-XP Pro 4
              2006-07-18 à 18:55:41 - ubi.com
              2005-07-11 à 13:28:36 - Uninstall Information
              2006-05-03 à 20:34:20 - VideoLAN
              2006-12-30 à 14:09:59 - VirginMega
              2007-10-20 à 13:27:27 - Wanadoo
              2005-07-11 à 13:28:55 - Windows Journal Viewer
              2008-03-01 à 15:21:47 - Windows Live
              2006-12-22 à 10:27:12 - Windows Media Connect
              2006-12-22 à 10:30:38 - Windows Media Connect 2
              2006-12-22 à 11:00:30 - Windows Media Player
              2005-07-11 à 13:22:13 - Windows NT
              2005-07-11 à 13:23:48 - WindowsUpdate
              2006-06-18 à 11:49:56 - WinRAR
              2005-07-11 à 13:25:29 - xerox
              2006-05-03 à 19:23:43 - Yahoo!
              2006-05-14 à 13:59:04 - ZonejeuX

              ========== Tâches planifiées

              AppleSoftwareUpdate.job: C:\Program Files\Apple Software Update\SoftwareUpdate.exe -task
              Nettoyage de disque.job: C:\WINDOWS\system32\cleanmgr.exe

              ========== Clés registre

              ========== Bloqueur popups Internet Explorer

              *.streamops.aol.com
              www.skyrock.com
              pioupiou1560.skyrock.com
              florenceforesti.jexiste.fr
              www.fiat.fr
              mynewcar.peugeot.com
              www.opel.fr
              opel.zpfr.com
              www.occasionsdulion.com
              www.hotel-cavaliere.com
              www.rolinesystem.net
              nadia2704.skyrock.com
              www.gayvox.com
              www.cleargay.fr
              www.3suisses.fr
              *.mail.live.com
              www.canalplay.com
              www.radins.com
              www.madwin.com
              www.pass.fr
              promosejours.voyages-sncf.com
              *.pagesperso-orange.fr
              www.funradio.fr
              candy2607.skyrock.com
              www.cinemasgaumontpathe.com
              www.rap2france.com
              moncompte.neuf.fr
              www.infoconcert.com
              neufassistance.neuf.fr
              www.01net.com
              offres.neuf.fr
              update.microsoft.com
              www.estrepublicain.fr
              www.doctissimo.fr
              *.telecharger.01net.com

              ========== Suggestion ( /!\ Nécessite une interprétation.) ==========

              +- Dossiers\Fichiers : Aucune suggestion.

              +- Registre : Aucune suggestion.

              - Fin du rapport -
              0
          9. jlpjlp Contributeur sécurité
            slt,

            dans DEMARRER puis PANNEAU DE CONFIGURATION puis AJOUT /SUPPRESSION DE PROGRAMME

            cherche quelque chose comme CID et msn plus et desinstalle les
            si tu doit réinstaller msn plus fait le sans les sponsor surtout

            ___________

            Télécharge ceci: (by Moe) :

            http://sosvirus.changelog.fr/Green_day/Lopxpsetup.exe

            Double clic sur Lopxpsetup.exe pour lancer l'installation
            Au menu, choisir l'option 1
            Patienter jusqu'à que l'on demande d'appuyer sur une touche, appuyer !
            Une rapport sera alors crée, à copie/colle en entier sur le forum.
            0
            1. ninese Auteur
              voila le rapport

              Rapport Lopxp fait le 16/03/2008 à 20:42:59
              # Exécuté dans : C:\Program Files\Lopxp
              # Version 3.09 - Maj du 28/02/2008

              Killing 'iexplore.exe'
              "C:\Program Files\Internet Explorer\IEXPLORE.EXE" (3688)
              "C:\Program Files\Internet Explorer\IEXPLORE.EXE" (1920)
              "C:\Program Files\Internet Explorer\IEXPLORE.EXE" -Embedding (2788)
              "C:\Program Files\Internet Explorer\IEXPLORE.EXE" (9808)

              ========== Listing des dossiers Application Data

              +- C:\Documents and Settings\All Users\Application Data

              2007-03-22 à 17:47:35 - Adobe
              2005-07-11 à 15:28:14 - Ahead
              2008-01-11 à 19:10:36 - Apple
              2008-01-11 à 19:13:11 - Apple Computer
              2008-02-14 à 18:39:14 - Audio 4 part browse
              2006-05-14 à 18:24:34 - BOONTY
              2006-07-14 à 13:21:20 - CanonBJ
              2006-09-01 à 16:26:05 - CyberLink
              2006-05-22 à 00:03:46 - Exetender
              2007-10-20 à 13:15:56 - F-Secure
              2007-09-01 à 15:04:33 - FloodLightGames
              2007-08-31 à 13:35:09 - fluxDVD
              2006-09-14 à 19:16:31 - Forge of Games
              2008-03-03 à 13:46:56 - fssg
              2006-12-22 à 09:22:03 - GamesBar
              2007-02-04 à 19:56:00 - Genimo
              2006-12-29 à 12:46:52 - Google
              2006-09-17 à 14:52:13 - iWin
              2007-11-21 à 18:09:43 - Logishrd
              2007-02-19 à 17:20:10 - Logitech
              2006-05-08 à 09:00:16 - Messenger Plus!
              2007-12-09 à 19:45:43 - Microsoft
              2006-04-16 à 15:52:10 - Microsoft Games
              2007-08-31 à 13:35:22 - mpDRM
              2006-05-14 à 18:13:01 - MSN Search Toolbar
              2007-01-19 à 13:58:04 - MumboJumbo
              2006-12-23 à 18:05:28 - MyCompany
              2007-07-01 à 10:42:50 - NannyMania
              2006-02-08 à 20:41:50 - NFS Underground
              2007-06-11 à 19:59:47 - nView_Profiles
              2007-08-26 à 16:22:34 - Oberon Games
              2006-12-31 à 15:26:34 - Oberon Media
              2006-09-07 à 08:23:23 - Oberongames
              2007-07-01 à 13:31:10 - PlayFirst
              2007-07-02 à 13:33:33 - Playtonium Games
              2007-05-27 à 18:42:53 - PopCap
              2006-05-22 à 16:20:22 - QuickTime
              2007-10-24 à 19:35:06 - Sandlot Games
              2005-07-11 à 13:30:51 - SBSI
              2006-05-24 à 21:23:31 - Skype
              2008-03-03 à 16:35:53 - Spybot - Search & Destroy
              2007-09-01 à 22:39:12 - TEMP
              2007-09-17 à 19:16:09 - timedumbvgaref
              2006-06-13 à 11:30:19 - Windows Genuine Advantage
              2008-03-01 à 15:21:33 - WLInstaller
              2006-05-03 à 19:31:12 - Yahoo! Companion

              +- C:\Documents and Settings\nadia roukeb\Application Data

              2008-01-02 à 15:55:34 - Adobe
              2007-03-22 à 17:53:56 - AdobeUM
              2005-11-28 à 19:27:05 - Ahead
              2008-02-11 à 19:02:47 - Apple Computer
              2007-08-28 à 14:48:54 - Azureus
              2006-07-20 à 16:52:10 - Beep
              2006-08-18 à 17:06:50 - cerasus.media
              2007-04-08 à 17:05:05 - Chicken Chase
              2007-12-11 à 13:32:28 - COWON
              2005-07-12 à 08:16:30 - CyberLink
              2007-04-22 à 16:59:25 - DiVision Studios - Escaping Atlantis
              2006-10-08 à 12:14:43 - dvdcss
              2006-05-14 à 18:56:45 - eConf
              2007-10-20 à 13:23:30 - F-Secure
              2008-02-14 à 18:39:42 - FLAWCOMP
              2007-09-01 à 15:04:33 - FloodLightGames
              2006-12-22 à 12:10:26 - FrostWire
              2007-01-27 à 21:06:59 - Gaijin Ent
              2007-02-04 à 19:51:21 - Genimo
              2007-09-27 à 14:22:12 - GetRightToGo
              2006-05-14 à 20:11:46 - Google
              2006-05-01 à 15:10:19 - Help
              2005-07-11 à 13:25:27 - Identities
              2006-05-03 à 18:08:36 - ispnews
              2006-09-17 à 14:52:13 - iWin
              2007-03-04 à 15:07:33 - Less Move
              2007-07-15 à 13:44:28 - ma-config.com
              2006-09-17 à 13:25:26 - Macromedia
              2005-10-25 à 14:12:28 - Media Player Classic
              2007-09-26 à 15:21:43 - MegauploadToolbar
              2007-06-26 à 17:52:10 - Microsoft
              2006-04-16 à 15:52:10 - Microsoft Games
              2006-05-14 à 18:15:03 - MSN Search Toolbar
              2006-05-02 à 13:38:19 - MSNInstaller
              2007-06-22 à 15:20:33 - MysteryStudio
              2006-05-03 à 18:11:47 - PEX
              2006-09-14 à 19:38:31 - Player Orange
              2007-07-01 à 13:31:10 - PlayFirst
              2007-12-07 à 12:13:27 - Samsung
              2007-10-24 à 19:34:40 - Sandlot Games
              2007-10-24 à 19:34:10 - SecuROM
              2006-09-03 à 12:57:56 - Skype
              2006-05-14 à 20:12:01 - Sun
              2005-10-25 à 08:30:06 - Template
              2006-07-25 à 15:32:56 - THQ
              2006-07-18 à 18:55:03 - ubi.com
              2006-05-03 à 20:34:46 - vlc

              +- C:\Documents and Settings\nadia roukeb\Local Settings\Application Data

              2005-07-11 à 15:50:33 - Adobe
              2005-10-27 à 10:31:05 - Ahead
              2008-01-11 à 19:12:44 - Apple
              2008-01-11 à 19:09:24 - Apple Computer
              2006-10-22 à 13:38:15 - ApplicationHistory
              2006-10-28 à 18:34:35 - Google
              2006-05-01 à 15:10:19 - Help
              2006-01-10 à 18:48:54 - Identities
              2006-09-30 à 18:05:53 - king.com
              2006-08-10 à 15:12:12 - MakeDVD
              2008-03-01 à 15:25:20 - Microsoft
              2007-04-21 à 08:11:49 - Oberon Games
              2007-05-21 à 18:57:25 - Oberon Media
              2006-04-21 à 16:24:54 - Stardock
              2008-01-09 à 16:58:09 - WMTools Downloaded Files

              ========== Listing du dossier Program Files

              +- C:\Program Files

              2005-07-11 à 15:03:11 - Adobe
              2007-09-17 à 19:16:10 - Adverts
              2005-07-11 à 15:30:41 - Ahead
              2007-09-17 à 19:27:31 - AIDA32 - Enterprise System Information
              2007-02-26 à 16:02:36 - Antipub
              2008-01-11 à 19:12:24 - Apple Software Update
              2007-10-07 à 10:58:48 - Audacity
              2007-09-03 à 17:01:55 - Azureus
              2007-06-03 à 18:47:14 - Boonty
              2007-12-11 à 13:31:52 - BoontyGames
              2006-05-22 à 00:46:27 - CasinoOnNet
              2007-12-17 à 16:41:58 - Circle Developement
              2005-07-11 à 13:22:59 - ComPlus Applications
              2005-12-25 à 14:46:06 - Core Design
              2006-08-22 à 09:40:48 - Cuttermaran
              2006-08-22 à 09:50:33 - CyberLink
              2006-02-02 à 20:55:38 - Davilex Games
              2007-02-08 à 18:28:21 - denouvel
              2007-09-10 à 17:13:06 - Deskbar
              2006-03-08 à 17:54:31 - directx
              2007-10-07 à 10:59:52 - DivX
              2007-06-11 à 19:52:45 - EA GAMES
              2007-05-27 à 18:11:56 - eChanblard
              2008-01-14 à 16:30:27 - eMule
              2005-07-11 à 15:12:42 - FenAffiche
              2008-03-01 à 15:21:58 - Fichiers communs
              2008-02-14 à 18:38:16 - FLAWCOMP
              2006-12-22 à 15:55:31 - FrostWire
              2006-12-22 à 10:59:37 - GamesBar
              2007-09-05 à 16:10:46 - Google
              2005-07-11 à 13:32:41 - HighMAT CD Writing Wizard
              2006-05-03 à 20:43:22 - IndustryGiant 2
              2007-12-07 à 12:10:05 - InstallShield Installation Information
              2005-12-07 à 22:11:55 - InterActual
              2008-02-13 à 16:15:21 - Internet Explorer
              2006-07-09 à 16:49:05 - InternetGameBox
              2008-02-29 à 18:10:58 - iPod
              2008-02-29 à 18:11:12 - iTunes
              2007-12-05 à 19:25:31 - Java
              2005-10-25 à 12:25:37 - K-Lite Codec Pack
              2008-03-09 à 14:27:05 - Lecteur CANALPLAY
              2008-03-11 à 11:13:55 - LimeWire
              2007-11-21 à 17:53:59 - Logitech
              2008-03-16 à 19:43:07 - Lopxp
              2007-07-15 à 13:44:13 - ma-config.com
              2007-09-18 à 08:07:48 - Maxis
              2007-09-18 à 11:33:08 - MegauploadToolbar
              2006-05-14 à 18:24:18 - Mes Jeux Téléchargés
              2005-07-11 à 13:35:18 - Messenger
              2007-12-17 à 16:41:58 - Messenger Plus! Live
              2007-03-04 à 15:05:31 - MessengerPlus! 3
              2006-03-08 à 17:51:41 - Microids
              2007-05-12 à 15:24:11 - Microsoft CAPICOM 2.1.0.2
              2005-07-11 à 13:25:29 - microsoft frontpage
              2005-07-13 à 14:05:10 - Microsoft Office
              2005-07-13 à 14:05:15 - Microsoft Works
              2005-07-11 à 15:14:30 - Microsoft.NET
              2005-07-11 à 13:23:21 - Movie Maker
              2006-05-01 à 15:11:16 - MSN
              2005-07-11 à 13:22:15 - MSN Gaming Zone
              2008-03-01 à 15:23:29 - MSN Messenger
              2006-05-14 à 18:13:34 - MSN Toolbar Suite
              2006-10-15 à 18:33:21 - MSXML 4.0
              2006-07-19 à 11:29:25 - MTV Networks
              2006-02-07 à 15:39:04 - Myst III Exile
              2005-07-11 à 13:23:25 - NetMeeting
              2007-10-15 à 14:48:00 - Neuf
              2005-07-11 à 15:52:22 - Norman
              2005-07-11 à 13:22:21 - Online Services
              2006-09-14 à 19:37:55 - orange
              2007-06-13 à 15:10:39 - Outlook Express
              2008-03-03 à 13:56:18 - Pack Securite
              2005-07-11 à 13:32:42 - Phoenix Technologies Ltd
              2007-02-08 à 18:27:40 - Player Metaboli
              2008-02-29 à 18:09:11 - QuickTime
              2007-06-27 à 19:05:22 - Real
              2005-07-11 à 14:57:21 - Realtek AC97
              2007-12-07 à 12:06:46 - Samsung
              2006-05-03 à 17:59:24 - Securitoo
              2006-10-29 à 17:44:58 - Seekmo Programs
              2005-07-11 à 13:23:43 - Services en ligne
              2006-05-24 à 21:23:21 - Skype
              2008-03-03 à 16:39:39 - Spybot - Search & Destroy
              2007-09-03 à 17:04:54 - Spyware Terminator
              2006-08-21 à 19:41:46 - TerraTec
              2006-11-04 à 11:21:02 - The Adventure Company
              2007-07-17 à 07:47:11 - Tweak-XP Pro 4
              2006-07-18 à 18:55:41 - ubi.com
              2005-07-11 à 13:28:36 - Uninstall Information
              2006-05-03 à 20:34:20 - VideoLAN
              2006-12-30 à 14:09:59 - VirginMega
              2007-10-20 à 13:27:27 - Wanadoo
              2005-07-11 à 13:28:55 - Windows Journal Viewer
              2008-03-01 à 15:21:47 - Windows Live
              2006-12-22 à 10:27:12 - Windows Media Connect
              2006-12-22 à 10:30:38 - Windows Media Connect 2
              2006-12-22 à 11:00:30 - Windows Media Player
              2005-07-11 à 13:22:13 - Windows NT
              2005-07-11 à 13:23:48 - WindowsUpdate
              2006-06-18 à 11:49:56 - WinRAR
              2005-07-11 à 13:25:29 - xerox
              2006-05-03 à 19:23:43 - Yahoo!
              2006-05-14 à 13:59:04 - ZonejeuX

              ========== Tâches planifiées

              AppleSoftwareUpdate.job: C:\Program Files\Apple Software Update\SoftwareUpdate.exe -task
              B61B7504942915B8.job: c:\docume~1\nadiar~1\applic~1\flawcomp\Dash media kind.exe
              Nettoyage de disque.job: C:\WINDOWS\system32\cleanmgr.exe

              ========== Clés registre

              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
              "Part browse safe hold"="C:\Documents and Settings\All Users\Application Data\Audio 4 part browse\BIAS ENC.exe"

              [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
              "BONE RULE"="C:\DOCUME~1\NADIAR~1\APPLIC~1\FLAWCOMP\safebendobj.exe"

              ========== Bloqueur popups Internet Explorer

              www.dns-look-up.com
              mysearchnow.com
              www.mysearchnow.com
              netbios-wait.com
              www.netbios-wait.com
              searchweb2.com
              www.searchweb2.com
              eu1.badoo.com
              *.streamops.aol.com
              host-domain-lookup.com
              www.host-domain-lookup.com
              www.skyrock.com
              pioupiou1560.skyrock.com
              florenceforesti.jexiste.fr
              www.fiat.fr
              mynewcar.peugeot.com
              www.opel.fr
              opel.zpfr.com
              www.occasionsdulion.com
              www.hotel-cavaliere.com
              www.rolinesystem.net
              nadia2704.skyrock.com
              www.gayvox.com
              www.cleargay.fr
              www.3suisses.fr
              *.mail.live.com
              www.canalplay.com
              www.radins.com
              www.madwin.com
              www.pass.fr
              promosejours.voyages-sncf.com
              *.pagesperso-orange.fr
              www.funradio.fr
              candy2607.skyrock.com
              www.cinemasgaumontpathe.com
              www.rap2france.com
              moncompte.neuf.fr
              www.infoconcert.com
              neufassistance.neuf.fr
              www.01net.com
              offres.neuf.fr
              update.microsoft.com
              www.estrepublicain.fr
              www.doctissimo.fr
              *.telecharger.01net.com

              ========== Suggestion ( /!\ Nécessite une interprétation.) ==========

              C:\Documents and Settings\All Users\Application Data\Audio 4 part browse
              C:\Documents and Settings\All Users\Application Data\timedumbvgaref
              C:\Documents and Settings\nadia roukeb\Application Data\FLAWCOMP
              C:\Documents and Settings\nadia roukeb\Application Data\Less Move
              C:\Program Files\Adverts
              C:\Program Files\Circle Developement
              C:\Program Files\FLAWCOMP
              C:\WINDOWS\tasks\B61B7504942915B8.job

              +- Registre:

              REGEDIT4

              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
              "Part browse safe hold"=-

              [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
              "BONE RULE"=-

              [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\New Windows\Allow]
              "dns-look-up.com"=-
              "www.dns-look-up.com"=-
              "mysearchnow.com"=-
              "www.mysearchnow.com"=-
              "netbios-wait.com"=-
              "www.netbios-wait.com"=-
              "searchweb2.com"=-
              "www.searchweb2.com"=-
              "host-domain-lookup.com"=-
              "www.host-domain-lookup.com"=-

              - Fin du rapport -
              0
            2. ninese Auteur
              @ninesequand je veu supprimer messenger et donc le sponsor ca me di que messenger sera supprimer mais pa le sponsor; que doi-je faire?
              0

          Discussions similaires

          Ouvrir un fichier .pub sans Publisher
          baissaoui

          0 réponse
          Ouvrir document Publisher sans Publisher
          Curtis Hayes

          7 réponses
          Lire, afficher, exécuter un fichier *.pub sans Publisher
          jeannoellaurenti

          1 réponse
          Publicité "Bidru n'en peut plus"
          _Ritchi_

          5 réponses
          musique de pub
          zabou

          7 réponses