Fenêtres intempestives

Bonjour,
lorsque je surfe sur Internet, j'ai des fenêtres intempestives qui s'ouvrent: jouer au pocker, voyance, PC infesté, rachat de crédits... Comment peut-on se débarrasser d'une telle plaie?
J'ai trouvé plusieurs discussions sur le même sujet, mais les solutions semblent à chaque fois très personnalisées.
Configuration: Windows XP
Firefox 2.0.0.8

29 réponses

Résumé de la discussion

Le sujet décrit des fenêtres intempestives qui s'ouvrent lors de la navigation sur Internet sous Windows XP et Firefox 2.0.0.8, affichant des publicités de poker, voyance et autres contenus indésirables. Plusieurs intervenants proposent des solutions techniques et des rapports d'analyse, utilisant Navilog, Clean, HijackThis et SmitFraudFix, avec avis sur l'interprétation des résultats et prudence avant toute suppression. Des procédures recommandées incluent le redémarrage en mode sans échec, l'exécution des outils de nettoyage, la suppression de fichiers et de clés de registre, puis la génération et le partage des rapports. Une nuance utile rappelle qu certains rapports volumineux peuvent exposer des données sensibles, nécessitant un examen attentif et, si possible, un envoi sécurisé ou l'avis d'un spécialiste avant désinfection.

Bobot (l’IA à votre service)
  1. avec le program navilog
    fais un scan de ton pc
    ensuite fait une desinfection automatique
    -2
    1. Après lancement de Navilog avec désinfection automatique (dès le redémarrage), le surf sur Internet se faisait alors sans fenêtres intempestives (du moins durant les 20 minutes d'essai).
      Par contre les boutons personnalisés du clavier ne marchaient plus et plusieurs programmes (par exemple: Skype, Copernic... ) qui se lancent au démarrage du PC n'étaient pas lancés. Après un redémarrage du PC, tout était à nouveau en ordre (boutons du clavier et programmes lancés au démarrage), mais les fenêtres intempestives sur Internet étaient à nouveau là.
      Quelqu'un a-t-il une suggestion?
      0
      1. Salut

        Tu as passé Navilog ?
        Il est où le rapport ??

        Fais un clic droit sur ce lien :
        http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe

        Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau.
        Fais un clic droit sur navilog1.zip et choisis "tout extraire"
        Ensuite double clique sur navilog1.exe pour lancer l'installation.
        Une fois l'installation terminée, le fix s'exécutera automatiquement.
        (Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau).

        Laisse-toi guider. Au menu principal, choisis 1 et valides.
        (ne fais pas le choix 2,3 ou 4 sans notre avis/accord)
        Patiente jusqu'au message :
        *** Analyse Termine le ..... ***
        Appuie sur une touche comme demandé, le blocnote va s'ouvrir.
        Copie-colle l'intégralité dans une réponse. Referme le blocnote.
        Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)

        Bon courage
        A++

        0
    2. Bonjour,
      Merci de t'intéresser à mon cas. Voici le rapport donné par Navilog:
      Search Navipromo version 3.3.3 commencé le 30/10/2007 à 23:00:42,17

      !!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
      !!! Postez ce rapport sur le forum pour le faire analyser !!!
      !!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

      Outil exécuté depuis C:\Program Files\navilog1
      Mise à jour le 30.10.2007 à 19h00 par IL-MAFIOSO

      Microsoft Windows XP [version 5.1.2600]
      Internet Explorer : 6.0.2900.2180

      *** Recherche Programmes installés ***

      *** Recherche dossiers dans C:\WINDOWS ***

      *** Recherche dossiers dans C:\Program Files ***

      *** Recherche dossiers dans C:\Documents and Settings\All Users\Application Data ***

      *** Recherche dossiers dans C:\Documents and Settings\Propri‚taire\Application Data ***

      *** Recherche dossiers dans C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1 ***

      ...\WebMediaPlayer trouvé !

      *** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
      pour + d'infos : http://www.gmer.net

      Aucun fichier trouvé dans :

      - C:\WINDOWS\system32
      - C:\DOCUME~1\PROPRI~1\LOCALS~1\APPLIC~1

      *** Recherche avec GenericNaviSearch ***
      !!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
      !!! A vérifier impérativement avant toute suppression manuelle !!!

      * Recherche dans C:\WINDOWS\system32 *

      * Recherche dans C:\DOCUME~1\PROPRI~1\LOCALS~1\APPLIC~1 *

      Fichiers trouvés :

      nynjsbjcf.exe trouvé !

      *** Recherche fichiers ***

      *** Recherche clés spécifiques dans le Registre ***

      HKEY_CURRENT_USER\Software\Lanconfig trouvé !

      *** Module de Recherche complémentaire ***
      (Recherche fichiers spécifiques)

      1)Recherche fichiers connus:

      2)Recherche Heuristique :

      C:\DOCUME~1\PROPRI~1\LOCALS~1\APPLIC~1\nynjsbjcf.dat trouvé !

      3)Recherche Certificats :

      Certificat Egroup trouvé !

      *** Analyse terminée le 30/10/2007 à 23:01:23,92 ***
      0
      1. Double cliques sur le raccourci Navilog1 présent sur le bureau et laisse-toi guider.
        Au menu principal, choisis 2 et valides.

        Le fix va t'informer qu'il va alors redémarrer ton PC
        Fermes toutes les fenêtres ouvertes et enregistre tes documents personnels ouverts
        Appuies sur une touche comme demandé.
        (si ton Pc ne redémarre pas automatiquement, fais le toi même)
        Au redémarrage de ton PC, choisis ta session habituelle.

        Patiente jusqu'au message :
        *** Nettoyage Termine le ..... ***
        Le bloc-notes va s'ouvrir.
        Sauvegarde le rapport de manière à le retrouver
        Referme le bloc-notes. Ton bureau va réapparaitre

        PS:Si ton bureau ne réapparait pas, fais CTRL+ALT+SUPP pour ouvrir le gestionnaire de tâches.
        Puis rends-toi à l'onglet "processus". Clique en haut à gauche sur fichiers et choisis "exécuter"
        Tape explorer et valide. Celà te fera apparaitre ton bureau.

        Postes le rapport içi.

        Ferme internet explorer puis Démarrer/panneau de configuration/options internet
        - onglet "Contenu" puis onglet "Certificats" et si tu trouves ceci, en particulier dans "éditeurs approuvés", mais regarde ailleurs :
        electronic-group
        egroup
        Montorgueil
        VIP
        "Sunny Day Design Ltd"
        Tu les supprimes.


        ================

        Télécharge sur ton bureau : http://www.malekal.com/download/clean.zip
        Tuto
        http://mickael.barroux.free.fr/securite/clean.php
        Une fois sur le bureau, tu fais un clic droit sur ton fichier clean.zip et dans le menu déroulant, tu clics sur extrait tout ou extraire ici.
        Cela va créer un dossier clean.
        Double-clic sur ce dossier clean, tu y trouveras dedans plusieurs fichiers.
        Double-clic sur clean. Cela va ouvrir une fenêtre noire.
        Un menu va apparaître, choisis l'option 1 en appuyant sur la touche 1 de ton clavier.
        Clean va travailler.
        Un rapport Va etre généré, colle le contenu entier ici.

        (- Où est le rapport clean ? : « Poste de travail » / double clic sur disque « C / » double-clic sur « rapport_clean.txt » et « copier/coller le contenu » sur le forum. )


        A demain

        0
        1. Bonjour
          J'ai lancé Navilog1 avec l'option 2, voici le rapport


          Clean Navipromo version 3.3.3 commencé le 30/10/2007 à 23:29:47,37

          Outil exécuté depuis C:\Program Files\navilog1
          Mise à jour le 30.10.2007 à 19h00 par IL-MAFIOSO

          Microsoft Windows XP [version 5.1.2600]
          Internet Explorer : 6.0.2900.2180

          Mode suppression automatique

          *** fsbl1.txt non trouvé ***
          (Assurez-vous que Catchme n'avait rien trouvé lors de la recherche)

          *** Suppression avec sauvegardes résultats GenericNaviSearch ***

          * Suppression dans C:\WINDOWS\System32 *

          C:\WINDOWS\prefetch\nynjsbjcf*.pf trouvé !
          Copie C:\WINDOWS\prefetch\nynjsbjcf*.pf réalisé avec succès !
          C:\WINDOWS\prefetch\nynjsbjcf*.pf supprimé !

          * Suppression dans C:\DOCUME~1\PROPRI~1\LOCALS~1\APPLIC~1 *

          nynjsbjcf.exe trouvé !
          Copie nynjsbjcf.exe réalisé avec succès !
          nynjsbjcf.exe supprimé !

          nynjsbjcf.dat trouvé !
          Copie nynjsbjcf.dat réalisé avec succès !
          nynjsbjcf.dat supprimé !

          nynjsbjcf_nav.dat trouvé !
          Copie nynjsbjcf_nav.dat réalisé avec succès !
          nynjsbjcf_nav.dat supprimé !

          nynjsbjcf_navps.dat trouvé !
          Copie nynjsbjcf_navps.dat réalisé avec succès !
          nynjsbjcf_navps.dat supprimé !

          *** Suppression dossiers dans C:\WINDOWS ***

          *** Suppression dossiers dans C:\Program Files ***

          *** Suppression dossiers dans C:\Documents and Settings\All Users\Application Data ***

          *** Suppression dossiers dans C:\Documents and Settings\Propri‚taire\Application Data ***

          *** Suppression dossiers dans C:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1 ***

          ...\WebMediaPlayer ...suppression...
          ...\WebMediaPlayer supprimé !

          *** Suppression fichiers ***

          *** Suppression fichiers temporaires ***

          Nettoyage contenu C:\WINDOWS\Temp effectué !
          Nettoyage contenu C:\Documents and Settings\Propri‚taire\Local Settings\Temp effectué !

          *** Traitement Recherche complémentaire ***
          (Recherche fichiers spécifiques)

          1)Recherche fichiers connus:

          2)Recherche, création sauvegardes et suppression Heuristique :

          *** Sauvegarde du Registre vers dossier Backupnavi ***

          sauvegarde du Registre réalisé avec succès !

          *** Nettoyage Registre ***

          Nettoyage Registre Ok

          *** Certificats ***

          Certificat Egroup supprimé !

          *** Nettoyage terminé le 30/10/2007 à 23:33:07,51 ***


          J'ai ensuite supprimé le certificat: electronic-group, puis j'ai installé et lancé clean, dont voici le rapport:


          30/10/2007 a 23:46:54,51

          *** Recherche des fichiers dans C:

          *** Recherche des fichiers dans C:\WINDOWS\
          C:\WINDOWS\ALCXMNTR.EXE FOUND
          C:\WINDOWS\UnGins.exe FOUND

          *** Recherche des fichiers dans C:\WINDOWS\system32

          *** Recherche des fichiers dans C:\Program Files
          "C:\Program Files\Media\" FOUND
          *** Fin du rapport !

          A demain
          0
          1. Mon problème semble résolu. Cela fait 36 h que je n'ai plus eu de fenêtres intempestives.

            Merci à ^^Marie^^
            0
            1. lol

              C pas fini

              Redémarre ton PC en mode sans échec :
              Redémarre en mode sans échec (Pour cela : démarrer le PC en tapotant sur la touche F8 du clavier jusqu'à ce que le menu des options avancées de Windows apparaisse puis avec les touches fléchées du clavier, sélectionner Mode sans échec puis appuyer sur la touche Entrée...)
              Double-clic sur clean. Cela va ouvrir une fenêtre noire.
              Un menu va apparaître, choisis l'option 2 en appuyant sur la touche 2 de ton clavier.
              Clean va travailler.
              Un rapport Va etre généré, envoie le moi dans ta prochaine réponse !

              0
              1. Bonjour,

                J'ai lancé Clean en mode sans échec et sans gestion du réseau. Je n'ai donc pas pu envoyer le rapport "upload_moi_xxx.tar.gz" au site Malekal. Ce rapport est par ailleurs très volumineux (272 Mo) et il faudrait plusieurs heures de connexion pour l'envoyer. A ton avis, faut-il l'envoyer par la suite? Ce rapport ne contient-il pas d'informations confidentielles?
                Voici ci-dessous le rapport final de Clean.


                Script execute en mode sans echec
                Rapport clean par Malekal_morte - http://www.malekal.com
                Script execute en mode sans echec 01/11/2007 a 11:22:23,01

                Microsoft Windows XP [version 5.1.2600]

                *** Suppression des fichiers dans C:

                *** Suppression des fichiers dans C:\WINDOWS\
                tentative de suppression de C:\WINDOWS\ALCXMNTR.EXE
                tentative de suppression de C:\WINDOWS\UnGins.exe

                *** Suppression des fichiers dans C:\WINDOWS\system32

                *** Suppression des fichiers dans C:\Program Files
                tentative de suppression de "C:\Program Files\Media\"

                *** Suppression des clefs du registre effectuee..
                *** Fin du rapport !
                0
                1. OK

                  Supprime CleanZip il a fait son boulot

                  F - Hijackthis - Outil de diagnostic et réparation
                  télécharge HijackThis ici:
                  http://telechargement.zebulon.fr/138-hijackthis-1991.html
                  Dézippe le dans un dossier prévu à cet effet.
                  Par exemple C:\hijackthis < Enregistre le bien dans c : !
                  Démo : (Merci a Balltrap34 pour cette réalisation)
                  http://pageperso.aol.fr/balltrap34/Hijenr.gif
                  Lance le puis:
                  clique sur "do a system scan and save logfile" (cf démo)
                  faire un copier coller du log entier sur le forum
                  Démo : (Merci a Balltrap34 pour cette réalisation)
                  http://pageperso.aol.fr/balltrap34/demohijack.htm
                  http://www.tutoriaux-excalibur.com/hijackthis.htm
                  https://leblogdeclaude.blogspot.com/2006/10/informatique-section-hijackthis.html

                  Bon courage

                  A+

                  0
                  1. Bonjour
                    J'ai installé et lancé Hijackthis, voici le rapport:


                    Logfile of Trend Micro HijackThis v2.0.2
                    Scan saved at 14:42:34, on 01/11/2007
                    Platform: Windows XP SP2 (WinNT 5.01.2600)
                    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
                    Boot mode: Normal

                    Running processes:
                    C:\WINDOWS\System32\smss.exe
                    C:\WINDOWS\system32\winlogon.exe
                    C:\WINDOWS\system32\services.exe
                    C:\WINDOWS\system32\lsass.exe
                    C:\WINDOWS\system32\Ati2evxx.exe
                    C:\WINDOWS\system32\svchost.exe
                    C:\Program Files\Windows Defender\MsMpEng.exe
                    C:\WINDOWS\System32\svchost.exe
                    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                    C:\Program Files\Alwil Software\Avast4\ashServ.exe
                    C:\WINDOWS\system32\spoolsv.exe
                    C:\WINDOWS\system32\Ati2evxx.exe
                    C:\WINDOWS\Explorer.EXE
                    C:\Program Files\SPAMfighter\sfus.exe
                    C:\WINDOWS\System32\svchost.exe
                    C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
                    C:\windows\system\hpsysdrv.exe
                    C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
                    C:\WINDOWS\System32\hphmon05.exe
                    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                    C:\Program Files\Multimedia Card Reader\shwicon2k.exe
                    C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
                    C:\PROGRA~1\TEXTBR~1.0\Bin\INSTAN~1.EXE
                    C:\WINDOWS\system32\LVCOMSX.EXE
                    C:\Program Files\Logitech\Video\LogiTray.exe
                    C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
                    C:\WINDOWS\system32\dla\tfswctrl.exe
                    C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
                    C:\Program Files\iTunes\iTunesHelper.exe
                    C:\Program Files\QuickTime\qttask.exe
                    C:\Program Files\Windows Defender\MSASCui.exe
                    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                    C:\Program Files\WistitiSoft\Agent.exe
                    C:\HP\KBD\KBD.EXE
                    C:\Program Files\Logitech\Video\FxSvr2.exe
                    C:\Program Files\SPAMfighter\SFAgent.exe
                    C:\Program Files\Ditto\Ditto.exe
                    C:\WINDOWS\system32\ctfmon.exe
                    C:\Program Files\Skype\Phone\Skype.exe
                    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                    C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
                    C:\Program Files\Canon\CAL\CALMAIN.exe
                    C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
                    C:\Program Files\EssentialPIM\EssentialPIM.exe
                    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                    C:\Program Files\iPod\bin\iPodService.exe
                    C:\Program Files\Copernic Desktop Search 2\DesktopSearchService.exe
                    C:\WINDOWS\System32\svchost.exe
                    C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
                    C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exe
                    C:\Program Files\Skype\Plugin Manager\skypePM.exe
                    C:\PROGRAM FILES\OUTLOOK EXPRESS\MSIMN.EXE
                    C:\WINDOWS\system32\wuauclt.exe
                    C:\PROGRA~1\WinZip\winzip32.exe
                    C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\HijackThis.exe
                    C:\Francois\Logiciels\Hijackthis\HijackThis.exe

                    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
                    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
                    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
                    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                    O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
                    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
                    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
                    O3 - Toolbar: (no name) - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - (no file)
                    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
                    O3 - Toolbar: Copernic Desktop Search 2 - {968631B6-4729-440D-9BF4-251F5593EC9A} - C:\Program Files\Copernic Desktop Search 2\DesktopSearchBand201013011.dll
                    O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
                    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
                    O4 - HKLM\..\Run: [CamMonitor] c:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
                    O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
                    O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
                    O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
                    O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
                    O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
                    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
                    O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
                    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                    O4 - HKLM\..\Run: [Sunkist2k] C:\Program Files\Multimedia Card Reader\shwicon2k.exe
                    O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
                    O4 - HKLM\..\Run: [InstantAccess] C:\PROGRA~1\TEXTBR~1.0\Bin\INSTAN~1.EXE /h
                    O4 - HKLM\..\Run: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\Bin\REGIST~1.EXE
                    O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
                    O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
                    O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
                    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
                    O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
                    O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
                    O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
                    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                    O4 - HKLM\..\Run: [BDNewsAgent] C:\Program Files\Softwin\BitDefender Free Edition\bdnagent.exe
                    O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
                    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                    O4 - HKLM\..\Run: [ExtraFilmHemmaAgent] "C:\Program Files\WistitiSoft\Agent.exe"
                    O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
                    O4 - HKLM\..\Run: [SPAMfighter Agent] "C:\Program Files\SPAMfighter\SFAgent.exe" update delay 60
                    O4 - HKLM\..\RunServices: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\Bin\REGIST~1.EXE
                    O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
                    O4 - HKCU\..\Run: [Ditto] C:\Program Files\Ditto\Ditto.exe
                    O4 - HKCU\..\Run: [FreeCall] "C:\program files\freecall.com\freecall\freecall.exe" -nosplash -minimized
                    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                    O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
                    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                    O4 - HKCU\..\Run: [EssentialPIM] "C:\Program Files\EssentialPIM\EssentialPIM.exe" /autorun
                    O4 - HKCU\..\Run: [Copernic Desktop Search 2] "C:\Program Files\Copernic Desktop Search 2\DesktopSearchService.exe" /tray
                    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
                    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
                    O4 - HKUS\S-1-5-18\..\Run: [Spyware Doctor] (User 'SYSTEM')
                    O4 - HKUS\.DEFAULT\..\Run: [Spyware Doctor] (User 'Default user')
                    O4 - .DEFAULT User Startup: mod_sm.lnk = C:\hp\bin\cloaker.exe (User 'Default user')
                    O4 - Startup: wkcalrem.LNK = C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exe
                    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
                    O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
                    O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
                    O4 - Global Startup: Microsoft Recherche accélérée.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
                    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.1_02\bin\npjpi141_02.dll
                    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.1_02\bin\npjpi141_02.dll
                    O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~2\tools\iesdpb.dll
                    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
                    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
                    O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - c:\Program Files\Microsoft Money\System\mnyside.dll
                    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                    O16 - DPF: {09C21411-B9A2-4DE6-8416-4E3B58577BE0} (France Telecom MDM ActiveX Control) - http://minitelweb.minitel.com/imin_data/ocx/MDM.cab
                    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab
                    O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.wistiti.fr/ImageUploader4.cab
                    O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
                    O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - https://www.zonealarm.com/
                    O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} - https://boutique.gpcservices.com/
                    O16 - DPF: {8F48147B-78D9-40F9-ACC0-BDDE59B246F4} (AccountHelper Class) - http://www.tele2mail.com/static/apps/utils/AccountHelper.cab
                    O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
                    O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - http://www.wisup.net/_plateforme/Upload/Aurigma/AurigmaActiveX/ImageUploader35.cab
                    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
                    O18 - Protocol: bw+0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw+0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw-0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw-0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw00 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw00s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw10 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw10s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw20 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw20s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw30 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw30s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw40 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw40s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw50 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw50s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw60 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw60s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw70 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw70s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw80 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw80s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw90 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw90s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwa0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwa0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwb0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwb0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwc0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwc0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwd0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwd0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwe0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwe0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwf0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwf0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
                    O18 - Protocol: bwg0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwg0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwh0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwh0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwi0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwi0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwj0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwj0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwk0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwk0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwl0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwl0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwm0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwm0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwn0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwn0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwo0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwo0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwp0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwp0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwq0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwq0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwr0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwr0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bws0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bws0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwt0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwt0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwu0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwu0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwv0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwv0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bww0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bww0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwx0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwx0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwy0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwy0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwz0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwz0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: offline-8876480 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
                    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
                    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                    O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
                    O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
                    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
                    O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
                    O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
                    O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - C:\Program Files\Spyware Doctor\sdhelp.exe
                    O23 - Service: SPAMfighter Update Service - SPAMfighter ApS - C:\Program Files\SPAMfighter\sfus.exe
                    O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
                    O23 - Service: BitDefender Communicator (XCOMM) - Softwin - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
                    0
                    1. Re

                      Logitech\Desktop Messenger ==< supprime le dans ajout/supp des programmes

                      Télécharge SmitfraudFix
                      Utilitaire de S!Ri: Moe et balltrap34
                      http://siri.urz.free.fr/Fix/SmitfraudFix.php
                      et télécharge SmitfraudFix.exe.

                      Regarde le tuto

                      Exécute le en choisissant l’option 1,
                      il va générer un rapport
                      Copie/colle le sur le poste stp.
                      0
                      1. Bonjour
                        J'ai supprimé le programme "Logitech\Desktop Messenger".
                        Ensuite, j'ai exécuté SmitFraudFix. Voici le rapport.


                        SmitFraudFix v2.239

                        Rapport fait à 19:37:33,17, 01/11/2007
                        Executé à partir de C:\Francois\Logiciels\SmitFraudFix\SmitfraudFix
                        OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
                        Le type du système de fichiers est NTFS
                        Fix executé en mode normal

                        »»»»»»»»»»»»»»»»»»»»»»»» Process

                        C:\WINDOWS\System32\smss.exe
                        C:\WINDOWS\system32\winlogon.exe
                        C:\WINDOWS\system32\services.exe
                        C:\WINDOWS\system32\lsass.exe
                        C:\WINDOWS\system32\Ati2evxx.exe
                        C:\WINDOWS\system32\svchost.exe
                        C:\Program Files\Windows Defender\MsMpEng.exe
                        C:\WINDOWS\System32\svchost.exe
                        C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                        C:\Program Files\Alwil Software\Avast4\ashServ.exe
                        C:\WINDOWS\system32\spoolsv.exe
                        C:\WINDOWS\system32\Ati2evxx.exe
                        C:\WINDOWS\Explorer.EXE
                        C:\Program Files\SPAMfighter\sfus.exe
                        C:\WINDOWS\System32\svchost.exe
                        C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
                        C:\windows\system\hpsysdrv.exe
                        C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
                        C:\WINDOWS\System32\hphmon05.exe
                        C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                        C:\Program Files\Multimedia Card Reader\shwicon2k.exe
                        C:\Program Files\Fichiers communs\Microsoft Shared\Works

                        Shared\WkUFind.exe
                        C:\PROGRA~1\TEXTBR~1.0\Bin\INSTAN~1.EXE
                        C:\WINDOWS\system32\LVCOMSX.EXE
                        C:\Program Files\Logitech\Video\LogiTray.exe
                        C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
                        C:\WINDOWS\system32\dla\tfswctrl.exe
                        C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
                        C:\Program Files\iTunes\iTunesHelper.exe
                        C:\Program Files\QuickTime\qttask.exe
                        C:\Program Files\Windows Defender\MSASCui.exe
                        C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                        C:\Program Files\WistitiSoft\Agent.exe
                        C:\HP\KBD\KBD.EXE
                        C:\Program Files\Logitech\Video\FxSvr2.exe
                        C:\Program Files\SPAMfighter\SFAgent.exe
                        C:\Program Files\Ditto\Ditto.exe
                        C:\WINDOWS\system32\ctfmon.exe
                        C:\Program Files\Skype\Phone\Skype.exe
                        C:\Program

                        Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                        C:\Program Files\Fichiers communs\Softwin\BitDefender

                        Communicator\xcommsvr.exe
                        C:\Program Files\Canon\CAL\CALMAIN.exe
                        C:\Program Files\Fichiers communs\Softwin\BitDefender Scan

                        Server\bdss.exe
                        C:\Program Files\EssentialPIM\EssentialPIM.exe
                        C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                        C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                        C:\Program Files\iPod\bin\iPodService.exe
                        C:\Program Files\Copernic Desktop Search 2\DesktopSearchService.exe
                        C:\WINDOWS\System32\svchost.exe
                        C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
                        C:\Program Files\Fichiers communs\Microsoft Shared\Works

                        Shared\WkCalRem.exe
                        C:\Program Files\Skype\Plugin Manager\skypePM.exe
                        C:\PROGRAM FILES\OUTLOOK EXPRESS\MSIMN.EXE
                        C:\WINDOWS\system32\wuauclt.exe
                        C:\Program Files\MSN Messenger\msnmsgr.exe
                        C:\Program Files\MSN Messenger\usnsvc.exe
                        C:\Program Files\MSN Messenger\livecall.exe
                        C:\WINDOWS\system32\cmd.exe

                        »»»»»»»»»»»»»»»»»»»»»»»» hosts

                        »»»»»»»»»»»»»»»»»»»»»»»» C:\

                        »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

                        »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

                        »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

                        »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

                        »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32\LogFiles

                        »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\Propri‚taire

                        »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and

                        Settings\Propri‚taire\Application Data

                        »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

                        »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\PROPRI~1\Favoris

                        »»»»»»»»»»»»»»»»»»»»»»»» Bureau

                        »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

                        »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

                        »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

                        »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
                        !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                        SrchSTS.exe by S!Ri
                        Search SharedTaskScheduler's .dll

                        »»»»»»»»»»»»»»»»»»»»»»»» AppInit_DLLs
                        !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows

                        NT\CurrentVersion\Windows]
                        "AppInit_DLLs"=""

                        »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
                        !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows

                        NT\CurrentVersion\Winlogon]
                        "System"=""

                        »»»»»»»»»»»»»»»»»»»»»»»» Rustock

                        »»»»»»»»»»»»»»»»»»»»»»»» DNS

                        Description: Carte réseau 3Com EtherLink XL 10/100 PCI TX (3C905B-TX)

                        - Miniport d'ordonnancement de paquets
                        DNS Server Search Order: 192.168.0.1

                        HKLM\SYSTEM\CCS\Services\Tcpip\..\{144BBC60-FE2A-41D4-BD4D-

                        ABA91C83D73D}: DhcpNameServer=192.168.0.1
                        HKLM\SYSTEM\CCS\Services\Tcpip\..\{FB22D620-F3BC-4DD5-8E9E-

                        0ECA47879191}: DhcpNameServer=192.168.0.250
                        HKLM\SYSTEM\CS1\Services\Tcpip\..\{144BBC60-FE2A-41D4-BD4D-

                        ABA91C83D73D}: DhcpNameServer=192.168.0.1
                        HKLM\SYSTEM\CS1\Services\Tcpip\..\{FB22D620-F3BC-4DD5-8E9E-

                        0ECA47879191}: DhcpNameServer=192.168.0.250
                        HKLM\SYSTEM\CS3\Services\Tcpip\..\{144BBC60-FE2A-41D4-BD4D-

                        ABA91C83D73D}: DhcpNameServer=192.168.0.1
                        HKLM\SYSTEM\CS3\Services\Tcpip\..\{FB22D620-F3BC-4DD5-8E9E-

                        0ECA47879191}: DhcpNameServer=192.168.0.250
                        HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1
                        HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1
                        HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1

                        »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

                        »»»»»»»»»»»»»»»»»»»»»»»» Fin
                        0
                        1. Démarre en mode sans échec :
                          Pour cela, tu tapotes la touche F8 ((Si F8 ne marche pas utilise la touche F5)).
                          dès le début de l’allumage du pc sans t’arrêter.
                          Une fenêtre va s’ouvrir tu te déplaces avec les flèches du clavier sur démarrer en mode sans échec puis tape entrée.
                          Une fois sur le bureau s’il n’y a pas toutes les couleurs et autres c’est normal !
                          ----------------------------------------------------------------------------
                          Relance le programme Smitfraud,
                          Cette fois choisit l’option 2,
                          répond oui à tous ;
                          Sauvegarde le rapport,
                          Redémarre en mode normal,
                          Copie/colle le rapport sauvegardé sur le forum

                          Refais un log Hitjackthis
                          0
                          1. Bonjour
                            Merci pour ta dernière réponsel.
                            Je suis absent, en déplacement, pour 2 jours. Je serai à nouveau devant mon PC lundi. Je ferai les opérations à ce moment là.
                            Bon week end.
                            0
                            1. OK
                              Je t'attends
                              Bon W.E.
                              0
                          2. Bonjour
                            J'ai relancé SmitFraudFix avec l'option 2 en mode sans échec et avec l'option nettoyage du registre.
                            L'image de fond de mon bureau a disparu, j'ai du la réinstaller.
                            J'ai ensuite lancer HijackThis.
                            Voici les 2 rapports:

                            Rapport SmitFraudFix:


                            SmitFraudFix v2.239

                            Rapport fait à 22:51:17,85, 06/11/2007
                            Executé à partir de C:\Francois\Logiciels\SmitFraudFix\SmitfraudFix
                            OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT
                            Le type du système de fichiers est NTFS
                            Fix executé en mode sans echec

                            »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Avant SmitFraudFix
                            !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                            SrchSTS.exe by S!Ri
                            Search SharedTaskScheduler's .dll

                            »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus

                            »»»»»»»»»»»»»»»»»»»»»»»» hosts

                            127.0.0.1 localhost

                            »»»»»»»»»»»»»»»»»»»»»»»» Winsock2 Fix

                            S!Ri's WS2Fix: LSP not Found.
                            »»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix

                            GenericRenosFix by S!Ri

                            »»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés

                            »»»»»»»»»»»»»»»»»»»»»»»» DNS

                            HKLM\SYSTEM\CCS\Services\Tcpip\..\{144BBC60-FE2A-41D4-BD4D-ABA91C83D73D}: DhcpNameServer=192.168.0.1
                            HKLM\SYSTEM\CCS\Services\Tcpip\..\{FB22D620-F3BC-4DD5-8E9E-0ECA47879191}: DhcpNameServer=192.168.0.250
                            HKLM\SYSTEM\CS1\Services\Tcpip\..\{144BBC60-FE2A-41D4-BD4D-ABA91C83D73D}: DhcpNameServer=192.168.0.1
                            HKLM\SYSTEM\CS1\Services\Tcpip\..\{FB22D620-F3BC-4DD5-8E9E-0ECA47879191}: DhcpNameServer=192.168.0.250
                            HKLM\SYSTEM\CS3\Services\Tcpip\..\{144BBC60-FE2A-41D4-BD4D-ABA91C83D73D}: DhcpNameServer=192.168.0.1
                            HKLM\SYSTEM\CS3\Services\Tcpip\..\{FB22D620-F3BC-4DD5-8E9E-0ECA47879191}: DhcpNameServer=192.168.0.250
                            HKLM\SYSTEM\CCS\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1
                            HKLM\SYSTEM\CS1\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1
                            HKLM\SYSTEM\CS3\Services\Tcpip\Parameters: DhcpNameServer=192.168.0.1

                            »»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires

                            »»»»»»»»»»»»»»»»»»»»»»»» Winlogon.System
                            !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                            [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
                            "System"=""

                            »»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

                            Nettoyage terminé.

                            »»»»»»»»»»»»»»»»»»»»»»»» SharedTaskScheduler Après SmitFraudFix
                            !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                            SrchSTS.exe by S!Ri
                            Search SharedTaskScheduler's .dll

                            »»»»»»»»»»»»»»»»»»»»»»»» Fin

                            Rapport HijackThis

                            Logfile of Trend Micro HijackThis v2.0.2
                            Scan saved at 23:06:10, on 06/11/2007
                            Platform: Windows XP SP2 (WinNT 5.01.2600)
                            MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
                            Boot mode: Normal

                            Running processes:
                            C:\WINDOWS\System32\smss.exe
                            C:\WINDOWS\system32\winlogon.exe
                            C:\WINDOWS\system32\services.exe
                            C:\WINDOWS\system32\lsass.exe
                            C:\WINDOWS\system32\Ati2evxx.exe
                            C:\WINDOWS\system32\svchost.exe
                            C:\Program Files\Windows Defender\MsMpEng.exe
                            C:\WINDOWS\System32\svchost.exe
                            C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                            C:\Program Files\Alwil Software\Avast4\ashServ.exe
                            C:\WINDOWS\system32\spoolsv.exe
                            C:\WINDOWS\system32\Ati2evxx.exe
                            C:\WINDOWS\Explorer.EXE
                            C:\Program Files\SPAMfighter\sfus.exe
                            C:\WINDOWS\System32\svchost.exe
                            C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
                            C:\windows\system\hpsysdrv.exe
                            C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
                            C:\WINDOWS\System32\hphmon05.exe
                            C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                            C:\Program Files\Multimedia Card Reader\shwicon2k.exe
                            C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
                            C:\PROGRA~1\TEXTBR~1.0\Bin\INSTAN~1.EXE
                            C:\WINDOWS\system32\LVCOMSX.EXE
                            C:\Program Files\Logitech\Video\LogiTray.exe
                            C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
                            C:\WINDOWS\system32\dla\tfswctrl.exe
                            C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
                            C:\Program Files\iTunes\iTunesHelper.exe
                            C:\Program Files\QuickTime\qttask.exe
                            C:\Program Files\Windows Defender\MSASCui.exe
                            C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                            C:\Program Files\WistitiSoft\Agent.exe
                            C:\HP\KBD\KBD.EXE
                            C:\Program Files\SPAMfighter\SFAgent.exe
                            C:\Program Files\Ditto\Ditto.exe
                            C:\WINDOWS\system32\ctfmon.exe
                            C:\Program Files\Skype\Phone\Skype.exe
                            C:\Program Files\Logitech\Video\FxSvr2.exe
                            C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                            C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
                            C:\Program Files\Canon\CAL\CALMAIN.exe
                            C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
                            C:\Program Files\EssentialPIM\EssentialPIM.exe
                            C:\Program Files\Copernic Desktop Search 2\DesktopSearchService.exe
                            C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
                            C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                            C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                            C:\Program Files\iPod\bin\iPodService.exe
                            C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exe
                            C:\WINDOWS\system32\msiexec.exe
                            C:\WINDOWS\System32\svchost.exe
                            C:\Program Files\Skype\Plugin Manager\skypePM.exe
                            C:\WINDOWS\system32\wuauclt.exe
                            C:\Francois\Logiciels\Hijackthis\HijackThis.exe

                            R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
                            R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                            O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
                            O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                            O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
                            O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                            O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
                            O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
                            O3 - Toolbar: (no name) - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - (no file)
                            O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
                            O3 - Toolbar: Copernic Desktop Search 2 - {968631B6-4729-440D-9BF4-251F5593EC9A} - C:\Program Files\Copernic Desktop Search 2\DesktopSearchBand201013011.dll
                            O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
                            O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
                            O4 - HKLM\..\Run: [CamMonitor] c:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
                            O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
                            O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
                            O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
                            O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
                            O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
                            O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
                            O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
                            O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                            O4 - HKLM\..\Run: [Sunkist2k] C:\Program Files\Multimedia Card Reader\shwicon2k.exe
                            O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
                            O4 - HKLM\..\Run: [InstantAccess] C:\PROGRA~1\TEXTBR~1.0\Bin\INSTAN~1.EXE /h
                            O4 - HKLM\..\Run: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\Bin\REGIST~1.EXE
                            O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
                            O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
                            O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
                            O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
                            O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
                            O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
                            O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
                            O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                            O4 - HKLM\..\Run: [BDNewsAgent] C:\Program Files\Softwin\BitDefender Free Edition\bdnagent.exe
                            O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
                            O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                            O4 - HKLM\..\Run: [ExtraFilmHemmaAgent] "C:\Program Files\WistitiSoft\Agent.exe"
                            O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
                            O4 - HKLM\..\Run: [SPAMfighter Agent] "C:\Program Files\SPAMfighter\SFAgent.exe" update delay 60
                            O4 - HKLM\..\RunServices: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0\Bin\REGIST~1.EXE
                            O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
                            O4 - HKCU\..\Run: [Ditto] C:\Program Files\Ditto\Ditto.exe
                            O4 - HKCU\..\Run: [FreeCall] "C:\program files\freecall.com\freecall\freecall.exe" -nosplash -minimized
                            O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                            O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
                            O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                            O4 - HKCU\..\Run: [EssentialPIM] "C:\Program Files\EssentialPIM\EssentialPIM.exe" /autorun
                            O4 - HKCU\..\Run: [Copernic Desktop Search 2] "C:\Program Files\Copernic Desktop Search 2\DesktopSearchService.exe" /tray
                            O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
                            O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
                            O4 - HKUS\S-1-5-18\..\Run: [Spyware Doctor] (User 'SYSTEM')
                            O4 - HKUS\.DEFAULT\..\Run: [Spyware Doctor] (User 'Default user')
                            O4 - .DEFAULT User Startup: mod_sm.lnk = C:\hp\bin\cloaker.exe (User 'Default user')
                            O4 - Startup: wkcalrem.LNK = C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkCalRem.exe
                            O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
                            O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
                            O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
                            O4 - Global Startup: Microsoft Recherche accélérée.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
                            O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.1_02\bin\npjpi141_02.dll
                            O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.1_02\bin\npjpi141_02.dll
                            O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~2\tools\iesdpb.dll
                            O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
                            O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
                            O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - c:\Program Files\Microsoft Money\System\mnyside.dll
                            O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                            O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                            O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                            O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                            O16 - DPF: {09C21411-B9A2-4DE6-8416-4E3B58577BE0} (France Telecom MDM ActiveX Control) - http://minitelweb.minitel.com/imin_data/ocx/MDM.cab
                            O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.zebulon.fr/scan8/oscan8.cab
                            O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.wistiti.fr/ImageUploader4.cab
                            O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
                            O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class) - https://www.zonealarm.com/
                            O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} - https://boutique.gpcservices.com/
                            O16 - DPF: {8F48147B-78D9-40F9-ACC0-BDDE59B246F4} (AccountHelper Class) - http://www.tele2mail.com/static/apps/utils/AccountHelper.cab
                            O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
                            O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - http://www.wisup.net/_plateforme/Upload/Aurigma/AurigmaActiveX/ImageUploader35.cab
                            O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
                            O18 - Protocol: bw+0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw+0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw-0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw-0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw00 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw00s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw10 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw10s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw20 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw20s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw30 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw30s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw40 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw40s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw50 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw50s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw60 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw60s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw70 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw70s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw80 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw80s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw90 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw90s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwa0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwa0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwb0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwb0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwc0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwc0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwd0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwd0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwe0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwe0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwf0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwf0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
                            O18 - Protocol: bwg0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwg0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwh0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwh0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwi0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwi0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwj0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwj0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwk0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwk0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwl0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwl0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwm0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwm0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwn0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwn0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwo0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwo0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwp0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwp0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwq0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwq0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwr0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwr0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bws0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bws0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwt0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwt0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwu0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwu0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwv0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwv0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bww0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bww0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwx0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwx0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwy0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwy0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwz0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwz0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: offline-8876480 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
                            O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                            O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
                            O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                            O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                            O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                            O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
                            O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe
                            O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                            O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
                            O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
                            O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
                            O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research Pty Ltd - C:\Program Files\Spyware Doctor\sdhelp.exe
                            O23 - Service: SPAMfighter Update Service - SPAMfighter ApS - C:\Program Files\SPAMfighter\sfus.exe
                            O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
                            O23 - Service: BitDefender Communicator (XCOMM) - Softwin - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
                            0
                            1. Bonjour,
                              Ce message est à l'attention de ^^Marie^^.
                              Je n'ai pas eu de réponse à mon dernier message.
                              Toutefois comme je n'ai plus de fenêtres intempestives en naviguant sur Internet, je considère que mon problème est résolu.
                              Merci encore à ^^Marie^^ pour son aide précieuse.
                              0
                              1. Bonjour,

                                Houlalaaaaa !!!
                                Pour t'avoir zappé, je t'ai zappé grave ... déso

                                Logitech\Desktop Messenge► tu l'as encore ??

                                Refais moi un log hijakthis
                                stp
                                0
                                1. Bonjour,
                                  Voici le dernier log hijakthis. Comporte-t-il une différence par rapport au précédent?


                                  Logfile of Trend Micro HijackThis v2.0.2
                                  Scan saved at 23:18:57, on 10/11/2007
                                  Platform: Windows XP SP2 (WinNT 5.01.2600)
                                  MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
                                  Boot mode: Normal

                                  Running processes:
                                  C:\WINDOWS\System32\smss.exe
                                  C:\WINDOWS\system32\winlogon.exe
                                  C:\WINDOWS\system32\services.exe
                                  C:\WINDOWS\system32\lsass.exe
                                  C:\WINDOWS\system32\Ati2evxx.exe
                                  C:\WINDOWS\system32\svchost.exe
                                  C:\Program Files\Windows Defender\MsMpEng.exe
                                  C:\WINDOWS\System32\svchost.exe
                                  C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                                  C:\Program Files\Alwil Software\Avast4\ashServ.exe
                                  C:\WINDOWS\system32\spoolsv.exe
                                  C:\WINDOWS\system32\Ati2evxx.exe
                                  C:\WINDOWS\Explorer.EXE
                                  C:\windows\system\hpsysdrv.exe
                                  C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
                                  C:\WINDOWS\System32\hphmon05.exe
                                  C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                                  C:\Program Files\Multimedia Card Reader\shwicon2k.exe
                                  C:\Program Files\Fichiers communs\Microsoft Shared\Works

                                  Shared\WkUFind.exe
                                  C:\PROGRA~1\TEXTBR~1.0\Bin\INSTAN~1.EXE
                                  C:\WINDOWS\system32\LVCOMSX.EXE
                                  C:\Program Files\Logitech\Video\LogiTray.exe
                                  C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
                                  C:\WINDOWS\system32\dla\tfswctrl.exe
                                  C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
                                  C:\Program Files\iTunes\iTunesHelper.exe
                                  C:\Program Files\QuickTime\qttask.exe
                                  C:\Program Files\Windows Defender\MSASCui.exe
                                  C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                                  C:\HP\KBD\KBD.EXE
                                  C:\Program Files\SPAMfighter\SFAgent.exe
                                  C:\Program Files\Ditto\Ditto.exe
                                  C:\WINDOWS\system32\ctfmon.exe
                                  C:\Program

                                  Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                                  C:\Program Files\EssentialPIM\EssentialPIM.exe
                                  C:\Program Files\Copernic Desktop Search 2\DesktopSearchService.exe
                                  C:\Program Files\Logitech\Video\FxSvr2.exe
                                  C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
                                  C:\Program Files\SPAMfighter\sfus.exe
                                  C:\WINDOWS\System32\svchost.exe
                                  C:\Program Files\Fichiers communs\Microsoft Shared\Works

                                  Shared\WkCalRem.exe
                                  C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
                                  C:\Program Files\Fichiers communs\Softwin\BitDefender

                                  Communicator\xcommsvr.exe
                                  C:\Program Files\Canon\CAL\CALMAIN.exe
                                  C:\Program Files\Fichiers communs\Softwin\BitDefender Scan

                                  Server\bdss.exe
                                  C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                                  C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                                  C:\Program Files\iPod\bin\iPodService.exe
                                  C:\WINDOWS\System32\svchost.exe
                                  C:\WINDOWS\system32\wuauclt.exe
                                  C:\Program Files\MSN Messenger\usnsvc.exe
                                  C:\PROGRAM FILES\OUTLOOK EXPRESS\MSIMN.EXE
                                  C:\Program Files\Windows Media Player\wmplayer.exe
                                  C:\Francois\Logiciels\Hijackthis\HijackThis.exe

                                  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title =

                                  Microsoft Internet Explorer
                                  R0 - HKCU\Software\Microsoft\Internet

                                  Explorer\Toolbar,LinksFolderName = Liens
                                  O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-

                                  784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0

                                  \ActiveX\AcroIEHelper.dll
                                  O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} -

                                  C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                                  O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890}

                                  - C:\WINDOWS\system32\dla\tfswshx.dll
                                  O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no

                                  file)
                                  O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-

                                  CF10577473F7} - c:\program files\google\googletoolbar3.dll
                                  O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-

                                  CE66B5AD205D} - C:\Program

                                  Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
                                  O3 - Toolbar: (no name) - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} -

                                  (no file)
                                  O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} -

                                  c:\program files\google\googletoolbar3.dll
                                  O3 - Toolbar: Copernic Desktop Search 2 - {968631B6-4729-440D-9BF4-

                                  251F5593EC9A} - C:\Program Files\Copernic Desktop Search 2

                                  \DesktopSearchBand201013011.dll
                                  O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
                                  O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
                                  O4 - HKLM\..\Run: [CamMonitor] c:\Program Files\Hewlett-

                                  Packard\Digital Imaging\Unload\hpqcmon.exe
                                  O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\Hewlett-

                                  Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
                                  O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
                                  O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Fichiers

                                  communs\Sonic\Update Manager\sgtray.exe" /r
                                  O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
                                  O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
                                  O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32

                                  \NvCpl.dll,NvStartup
                                  O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
                                  O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI

                                  Control Panel\atiptaxx.exe
                                  O4 - HKLM\..\Run: [Sunkist2k] C:\Program Files\Multimedia Card

                                  Reader\shwicon2k.exe
                                  O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program

                                  Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
                                  O4 - HKLM\..\Run: [InstantAccess] C:\PROGRA~1\TEXTBR~1.0

                                  \Bin\INSTAN~1.EXE /h
                                  O4 - HKLM\..\Run: [RegisterDropHandler] C:\PROGRA~1\TEXTBR~1.0

                                  \Bin\REGIST~1.EXE
                                  O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
                                  O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program

                                  Files\Logitech\Video\ISStart.exe
                                  O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program

                                  Files\Logitech\Video\LogiTray.exe
                                  O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers

                                  communs\Real\Update_OB\realsched.exe" -osboot
                                  O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
                                  O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP

                                  Software Update\HPWuSchd2.exe
                                  O4 - HKLM\..\Run: [iTunesHelper] "C:\Program

                                  Files\iTunes\iTunesHelper.exe"
                                  O4 - HKLM\..\Run: [QuickTime Task] "C:\Program

                                  Files\QuickTime\qttask.exe" -atboottime
                                  O4 - HKLM\..\Run: [BDNewsAgent] C:\Program Files\Softwin\BitDefender

                                  Free Edition\bdnagent.exe
                                  O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows

                                  Defender\MSASCui.exe" -hide
                                  O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                                  O4 - HKLM\..\Run: [ExtraFilmHemmaAgent] "C:\Program

                                  Files\WistitiSoft\Agent.exe"
                                  O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
                                  O4 - HKLM\..\Run: [SPAMfighter Agent] "C:\Program

                                  Files\SPAMfighter\SFAgent.exe" update delay 60
                                  O4 - HKLM\..\RunServices: [RegisterDropHandler] C:\PROGRA~1

                                  \TEXTBR~1.0\Bin\REGIST~1.EXE
                                  O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
                                  O4 - HKCU\..\Run: [Ditto] C:\Program Files\Ditto\Ditto.exe
                                  O4 - HKCU\..\Run: [FreeCall] "C:\program

                                  files\freecall.com\freecall\freecall.exe" -nosplash -minimized
                                  O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                                  O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe"

                                  /nosplash /minimized
                                  O4 - HKCU\..\Run: [swg] C:\Program

                                  Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                                  O4 - HKCU\..\Run: [EssentialPIM] "C:\Program

                                  Files\EssentialPIM\EssentialPIM.exe" /autorun
                                  O4 - HKCU\..\Run: [Copernic Desktop Search 2] "C:\Program

                                  Files\Copernic Desktop Search 2\DesktopSearchService.exe" /tray
                                  O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32

                                  \CTFMON.EXE (User 'SERVICE LOCAL')
                                  O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32

                                  \CTFMON.EXE (User 'SERVICE RÉSEAU')
                                  O4 - HKUS\S-1-5-18\..\Run: [Spyware Doctor] (User 'SYSTEM')
                                  O4 - HKUS\.DEFAULT\..\Run: [Spyware Doctor] (User 'Default user')
                                  O4 - .DEFAULT User Startup: mod_sm.lnk = C:\hp\bin\cloaker.exe (User

                                  'Default user')
                                  O4 - Startup: wkcalrem.LNK = C:\Program Files\Fichiers

                                  communs\Microsoft Shared\Works Shared\WkCalRem.exe
                                  O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program

                                  Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
                                  O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program

                                  Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
                                  O4 - Global Startup: Microsoft Office.lnk = C:\Program

                                  Files\Microsoft Office\Office10\OSA.EXE
                                  O4 - Global Startup: Microsoft Recherche accélérée.lnk = C:\Program

                                  Files\Microsoft Office\Office\FINDFAST.EXE
                                  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501}

                                  - C:\Program Files\Java\j2re1.4.1_02\bin\npjpi141_02.dll
                                  O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-

                                  11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.1_02

                                  \bin\npjpi141_02.dll
                                  O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-

                                  4C56B4E14E84} - C:\PROGRA~1\SPYWAR~2\tools\iesdpb.dll
                                  O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66}

                                  - C:\WINDOWS\bdoscandel.exe
                                  O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8

                                  - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
                                  O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21}

                                  - c:\Program Files\Microsoft Money\System\mnyside.dll
                                  O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583}

                                  - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                                  O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-

                                  4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                                  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683}

                                  - C:\Program Files\Messenger\msmsgs.exe
                                  O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2

                                  -BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                                  O16 - DPF: {09C21411-B9A2-4DE6-8416-4E3B58577BE0} (France Telecom MDM

                                  ActiveX Control) -

                                  http://minitelweb.minitel.com/imin_data/ocx/MDM.cab
                                  O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE

                                  Control) - http://www.zebulon.fr/scan8/oscan8.cab
                                  O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader

                                  Control) - http://www.wistiti.fr/ImageUploader4.cab
                                  O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control)

                                  -

                                  http://a840.g.akamai.net/7/840/537/2005111401/housecall.trendmicro.co

                                  m/housecall/xscan53.cab
                                  O16 - DPF: {7F8C8173-AD80-4807-AA75-5672F22B4582} (ICSScanner Class)

                                  -

                                  https://www.zonealarm.com/

                                  r37480.cab
                                  O16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} -

                                  https://boutique.gpcservices.com/
                                  O16 - DPF: {8F48147B-78D9-40F9-ACC0-BDDE59B246F4} (AccountHelper

                                  Class) - http://www.tele2mail.com/static/apps/utils/AccountHelper.cab
                                  O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan

                                  Installer Class) -

                                  http://acs.pandasoftware.com/activescan/as5free/asinst.cab
                                  O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image

                                  Uploader 3.5 Control) -

                                  http://www.wisup.net/_plateforme/Upload/Aurigma/AurigmaActiveX/ImageU

                                  ploader35.cab
                                  O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash

                                  Object) -

                                  http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.ca

                                  b
                                  O18 - Protocol: bw+0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bw+0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bw-0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bw-0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bw00 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bw00s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bw10 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bw10s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bw20 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bw20s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bw30 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bw30s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bw40 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bw40s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bw50 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bw50s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bw60 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bw60s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bw70 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bw70s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bw80 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bw80s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bw90 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bw90s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwa0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwa0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwb0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwb0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwc0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwc0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwd0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwd0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwe0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwe0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwf0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwf0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-

                                  C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\GAPlugProtocol-8876480.dll
                                  O18 - Protocol: bwg0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwg0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwh0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwh0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwi0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwi0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwj0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwj0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwk0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwk0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwl0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwl0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwm0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwm0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwn0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwn0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwo0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwo0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwp0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwp0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwq0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwq0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwr0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwr0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bws0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bws0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwt0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwt0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwu0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwu0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwv0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwv0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bww0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bww0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwx0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwx0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwy0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwy0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwz0 - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwz0s - {AA6F51D6-3354-4A7A-9A2B-58A15F78177B} -

                                  C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: offline-8876480 - {AA6F51D6-3354-4A7A-9A2B-

                                  58A15F78177B} - C:\Program Files\Logitech\Desktop Messenger\8876480

                                  \Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} -

                                  C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
                                  O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL

                                  Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                                  O23 - Service: Ati HotKey Poller - ATI Technologies Inc. -

                                  C:\WINDOWS\system32\Ati2evxx.exe
                                  O23 - Service: avast! Antivirus - ALWIL Software - C:\Program

                                  Files\Alwil Software\Avast4\ashServ.exe
                                  O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program

                                  Files\Alwil Software\Avast4\ashMaiSv.exe
                                  O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program

                                  Files\Alwil Software\Avast4\ashWebSv.exe
                                  O23 - Service: BitDefender Scan Server (bdss) - Unknown owner -

                                  C:\Program Files\Fichiers communs\Softwin\BitDefender Scan

                                  Server\bdss.exe
                                  O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. -

                                  C:\Program Files\Canon\CAL\CALMAIN.exe
                                  O23 - Service: Google Updater Service (gusvc) - Google - C:\Program

                                  Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                                  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision

                                  Corporation - C:\Program Files\Fichiers

                                  communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
                                  O23 - Service: iPodService - Apple Computer, Inc. - C:\Program

                                  Files\iPod\bin\iPodService.exe
                                  O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA

                                  Corporation - C:\WINDOWS\System32\nvsvc32.exe
                                  O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools Research

                                  Pty Ltd - C:\Program Files\Spyware Doctor\sdhelp.exe
                                  O23 - Service: SPAMfighter Update Service - SPAMfighter ApS -

                                  C:\Program Files\SPAMfighter\sfus.exe
                                  O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot

                                  Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRSSSDK.exe
                                  O23 - Service: BitDefender Communicator (XCOMM) - Softwin -

                                  C:\Program Files\Fichiers communs\Softwin\BitDefender

                                  Communicator\xcommsvr.exe
                                  0
                                  1. Bonjour,
                                    Que dois-je faire pour qu'il soit lisible?
                                    0
                                    • 1
                                    • 2