Virus lecteur cd

Résolu
Bonjour

J'ai un problème mon lecteur graveur cd s'ouvre et se ferme a intervalle régulier j ai norton et avast comme antivirus mais ils ne détectent rien alors je me suis placé devants les gestionnaire de tache a regarder mes procecus et la surprise imapi.exe s allume le lecteur s ouvre puis imapi.exe disparaît et le lecteur se ferme je sais pas quoi faire pour que se lecteur reste fermé

au secours!!!!!!!!
Configuration: Windows XP
Safari 525.19 en fait j ai pas safari mais il me le met automatiquement

62 réponses

Résumé de la discussion

Le lecteur/graveur CD s'ouvre et se referme à intervalles réguliers, IMAPI.EXE semblant déclencher ces mouvements et les antivirus Norton et Avast ne détectant pas clairement d’infection sous Windows XP. Des réponses recommandent d'éliminer des éléments indésirables comme Kiwee toolbar et d'utiliser Toolbar-S&D pour générer un rapport et guider le nettoyage. Une autre intervention évoque l'exécution de ComboFix et l'examen des rapports pour identifier les modifications système et corriger les passages responsables de l'activité IMAPI.EXE. En cas de récurrence, il peut être nécessaire d'un nettoyage approfondi et de réaliser des suppressions de programmes potentiellement indésirables, ainsi que l'analyse des tâches planifiées et des services associés.

Bobot (l’IA à votre service)
  1. Deja ,un seul antivirus sinon des conflits et des ralentissements du pc,ensuite

    Afin d'evaluer tes infections

    Télécharge Random's System Information Tool (RSIT) de random/random et enregistre l'exécutable sur ton Bureau.

    ! Déconnecte toi et ferme toutes tes applications en cours !

    Double-clique sur " RSIT.exe " pour le lancer .

    -> Une première fenêtre s'ouvre avec en titre : " Disclaimer of warranty " .

    * Devant l'option "List files/folders created ..." , tu choisis : 2 months

    * clique ensuite sur " Continue " pour lancer l'analyse ...

    -> laisse faire le scan et ne touche pas au PC ...

    Lorsque l'analyse sera terminée, deux fichiers texte s'ouvriront (probablement avec le bloc-note).

    Poste le contenu de " log.txt " (c'est celui qui apparait à l'écran), ainsi que de " info.txt " (que tu verras dans la barre des tâches), pour analyse et attends la suite ...

    Important : poste un rapport, puis l'autre dans la réponse suivante
    Si tu essaies de poster les deux en même temps, cela risque d'être trop long pour le forum

    ( Note : les rapports seront en outre sauvegardés dans ce dossier -> C:\rsit )
    1. Logfile of random's system information tool 1.06 (written by random/random)
      Run by Dan at 2009-04-25 18:54:48
      Microsoft Windows XP Édition familiale Service Pack 3
      System drive C: has 2 GB (5%) free of 31 GB
      Total RAM: 2046 MB (45% free)

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 18:56:00, on 25/04/2009
      Platform: Windows XP SP3 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16827)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
      C:\Program Files\Fichiers communs\Symantec Shared\VAScanner\comHost.exe
      D:\Documents and Settings\avast\aswUpdSv.exe
      D:\Documents and Settings\avast\ashServ.exe
      C:\WINDOWS\system32\spoolsv.exe
      c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
      C:\Program Files\AGI\common\win32\PythonService.exe
      C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
      C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
      C:\Program Files\Bonjour\mDNSResponder.exe
      c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
      c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
      C:\WINDOWS\System32\GEARSec.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
      C:\Program Files\Google\Update\GoogleUpdate.exe
      C:\WINDOWS\system32\nvsvc32.exe
      C:\Apps\Softex\OmniPass\Omniserv.exe
      C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
      C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
      C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
      c:\APPS\Powercinema\Kernel\TV\CLSched.exe
      C:\Apps\Softex\OmniPass\OPXPApp.exe
      C:\WINDOWS\Explorer.EXE
      D:\Documents and Settings\avast\ashMaiSv.exe
      D:\Documents and Settings\avast\ashWebSv.exe
      C:\WINDOWS\system32\RUNDLL32.EXE
      C:\WINDOWS\RTHDCPL.EXE
      C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
      C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe
      C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe
      C:\APPS\Powercinema\PCMService.exe
      C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
      C:\Program Files\Neuf\Kit\WiFi\9wifi.exe
      C:\WINDOWS\system32\LVCOMSX.EXE
      C:\Program Files\Logitech\Video\CameraAssistant.exe
      C:\WINDOWS\system32\ElkCtrl.exe
      C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
      C:\Program Files\Kiwee Toolbar\2.8.167\kwtbaim.exe
      C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
      D:\DOCUME~1\avast\ashDisp.exe
      C:\Program Files\QuickTime\QTTask.exe
      C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
      D:\Documents and Settings\iTunesHelper.exe
      C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
      C:\APPS\SMP\SmpSys.exe
      C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
      C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\Program Files\Registry Mechanic\RegMech.exe
      D:\Documents and Settings\amélioration windows\Spybot - Search & Destroy\TeaTimer.exe
      D:\Documents and Settings\netgear\WG111v2.exe
      D:\Documents and Settings\amélioration windows\StartClock\StartClock.exe
      D:\Documents and Settings\amélioration windows\win flip\WinFlip.exe
      C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
      C:\PROGRA~1\FICHIE~1\SYMANT~1\CCPD-LC\symlcsvc.exe
      C:\Program Files\Google\Chrome\Application\chrome.exe
      D:\Documents and Settings\Dan\Mes documents\Downloads\RSIT.exe
      C:\Program Files\trend micro\Dan.exe
      D:\Documents and Settings\avast\setup\avast.setup

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://neufportail.fr/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = wmplayer.exe //ICWLaunch
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: AGSearchHook Class - {0BC6E3FA-78EF-4886-842C-5A1258C4455A} - C:\Program Files\agi\common\agcutils.dll
      O2 - BHO: AGSearchHook Class - {0BC6E3FA-78EF-4886-842C-5A1258C4455A} - C:\Program Files\agi\common\agcutils.dll
      O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
      O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
      O2 - BHO: Click-to-Call BHO - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:\Program Files\Windows Live\Messenger\wlchtc.dll
      O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\2.6\coIEPlg.dll
      O2 - BHO: Kiwee Toolbar - {6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - C:\Program Files\Kiwee Toolbar\2.8.167\KiweeIEToolbar.dll
      O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\FICHIE~1\SYMANT~1\IDS\IPSBHO.dll
      O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
      O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
      O3 - Toolbar: Show Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\2.6\CoIEPlg.dll
      O3 - Toolbar: Kiwee Toolbar - {6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - C:\Program Files\Kiwee Toolbar\2.8.167\KiweeIEToolbar.dll
      O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
      O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
      O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
      O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
      O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
      O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
      O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
      O4 - HKLM\..\Run: [Vade Retro Outlook Express] "C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe"
      O4 - HKLM\..\Run: [DetectorApp] C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe
      O4 - HKLM\..\Run: [PCMService] "c:\APPS\Powercinema\PCMService.exe"
      O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
      O4 - HKLM\..\Run: [Autoconfigurateur WiFi Neuf] "C:\Program Files\Neuf\Kit\WiFi\9wifi.exe"
      O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
      O4 - HKLM\..\Run: [LogitechCameraAssistant] C:\Program Files\Logitech\Video\CameraAssistant.exe
      O4 - HKLM\..\Run: [LogitechVideo[inspector]] C:\Program Files\Logitech\Video\InstallHelper.exe /inspect
      O4 - HKLM\..\Run: [LogitechCameraService(E)] C:\WINDOWS\system32\ElkCtrl.exe /automation
      O4 - HKLM\..\Run: [SDFix] C:\SDFix\RunThis.bat /second
      O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
      O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton 360\osCheck.exe"
      O4 - HKLM\..\Run: [KiweeHook] "C:\Program Files\Kiwee Toolbar\2.8.167\kwtbaim.exe"
      O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
      O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
      O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
      O4 - HKLM\..\Run: [avast!] D:\DOCUME~1\avast\ashDisp.exe
      O4 - HKLM\..\Run: [VisualTooltip] D:\Documents and Settings\amélioration windows\VisualToolTip\VisualToolTip.exe
      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
      O4 - HKLM\..\Run: [iTunesHelper] "D:\Documents and Settings\iTunesHelper.exe"
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
      O4 - HKCU\..\Run: [SmpcSys] C:\APPS\SMP\SmpSys.exe
      O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
      O4 - HKCU\..\Run: [Creative WebCam Tray] "C:\Program Files\Creative\Shared Files\CamTray.exe"
      O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [RegistryMechanic] C:\Program Files\Registry Mechanic\RegMech.exe /H
      O4 - HKCU\..\Run: [SpybotSD TeaTimer] D:\Documents and Settings\amélioration windows\Spybot - Search & Destroy\TeaTimer.exe
      O4 - HKCU\..\Run: [Yodm3D] D:\Documents and Settings\Dan\Bureau\Yodm3D.exe
      O4 - HKLM\..\Policies\Explorer\Run: []
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-19\..\RunOnce: [] (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-20\..\RunOnce: [] (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-21-1836123935-2857530727-1326383774-1009\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'Françoise')
      O4 - HKUS\S-1-5-21-1836123935-2857530727-1326383774-1009\..\RunOnce: [] (User 'Françoise')
      O4 - HKUS\S-1-5-21-1836123935-2857530727-1326383774-1010\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Thibaut')
      O4 - HKUS\S-1-5-21-1836123935-2857530727-1326383774-1010\..\RunOnce: [] (User 'Thibaut')
      O4 - HKUS\S-1-5-21-1836123935-2857530727-1326383774-1011\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'Marion')
      O4 - HKUS\S-1-5-21-1836123935-2857530727-1326383774-1011\..\RunOnce: [] (User 'Marion')
      O4 - HKUS\S-1-5-21-1836123935-2857530727-1326383774-1012\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (User '?')
      O4 - HKUS\S-1-5-21-1836123935-2857530727-1326383774-1012\..\RunOnce: [] (User '?')
      O4 - HKUS\S-1-5-21-1836123935-2857530727-1326383774-1013\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (User '?')
      O4 - HKUS\S-1-5-21-1836123935-2857530727-1326383774-1013\..\RunOnce: [] (User '?')
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\S-1-5-18\..\RunOnce: [] (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
      O4 - HKUS\.DEFAULT\..\RunOnce: [] (User 'Default user')
      O4 - Startup: Adobe Media Player.lnk = D:\Documents and Settings\Adobe Media Player\Adobe Media Player.exe
      O4 - Startup: StartClock.lnk = ?
      O4 - Startup: WinFlip.lnk = ?
      O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
      O4 - Global Startup: iTunes.lnk = ?
      O4 - Global Startup: NETGEAR WG111v2 Smart Wizard.lnk = D:\Documents and Settings\netgear\WG111v2.exe
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
      O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
      O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
      O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
      O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
      O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
      O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
      O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
      O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
      O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
      O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
      O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cab
      O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
      O16 - DPF: {9122D757-5A4F-4768-82C5-B4171D8556A7} (PhotoPickConvert Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/PhtPkMSN.cab
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
      O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
      O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
      O18 - Protocol: bw+0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw+0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
      O18 - Protocol: bwg0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwg0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: offline-8876480 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
      O20 - Winlogon Notify: epsfadcrmt - epsfadcrmt.dll (file missing)
      O23 - Service: AG Windows Service (AGWinService) - Unknown owner - C:\Program Files\AGI\common\win32\PythonService.exe
      O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
      O23 - Service: Apache2.2 - Unknown owner - C:\Program Files\ImmobilierLoyer\rocherdigital\apache\bin\apache.exe (file missing)
      O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - D:\Documents and Settings\avast\aswUpdSv.exe
      O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
      O23 - Service: avast! Antivirus - ALWIL Software - D:\Documents and Settings\avast\ashServ.exe
      O23 - Service: avast! Mail Scanner - ALWIL Software - D:\Documents and Settings\avast\ashMaiSv.exe
      O23 - Service: avast! Web Scanner - ALWIL Software - D:\Documents and Settings\avast\ashWebSv.exe
      O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
      O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
      O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
      O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
      O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
      O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
      O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\VAScanner\comHost.exe
      O23 - Service: CyberLink Media Library Service - Cyberlink - c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
      O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe
      O23 - Service: Google Desktop Manager 5.7.805.16405 (GoogleDesktopManager-051608-133132) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
      O23 - Service: Google Update Service (gupdate1c98c6b311d32da) (gupdate1c98c6b311d32da) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
      O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
      O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
      O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: Softex OmniPass Service (omniserv) - Softex Inc. - C:\Apps\Softex\OmniPass\Omniserv.exe
      O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
      O23 - Service: PsExec (PSEXESVC) - Unknown owner - C:\WINDOWS\PSEXESVC.EXE (file missing)
      O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\FICHIE~1\SYMANT~1\CCPD-LC\symlcsvc.exe
      O23 - Service: Symantec RemoteAssist - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\Support Controls\ssrc.exe (file missing)
      O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
      O23 - Service: USBDeviceService - Unknown owner - C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
      O23 - Service: Windows Media Connect (WMC) (WmcCds) - Unknown owner - d:\documents and settings\mswmccds.exe (file missing)
      O23 - Service: Windows Media Connect (WMC) Helper (WmcCdsLs) - Unknown owner - D:\Documents and Settings\mswmcls.exe (file missing)
      1. ======Uninstall list======

        -->"c:\apps\skype\phone\unins000.exe"
        -->"C:\Program Files\Fichiers communs\aolshare\Coach\AolCInUn.exe" -lang="fr-fr"
        -->"C:\Program Files\Symantec\LiveUpdate\LSETUP.EXE" /U
        -->C:\PROGRA~1\FICHIE~1\AOL\ACS\AcsUninstall.exe /c
        -->C:\PROGRA~1\GOTOSO~1\VADERE~1\UNWISE.EXE C:\PROGRA~1\GOTOSO~1\VADERE~1\INSTALL.LOG
        -->C:\PROGRA~1\Norman\NORMAN~1\UNWISE.EXE C:\PROGRA~1\Norman\NORMAN~1\INSTALL.LOG
        -->C:\Program Files\Fichiers communs\AOL\Screensaver\uninst_ygpss.exe
        -->C:\Program Files\Fichiers communs\aolshare\Aolunins_fr.exe
        -->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
        -->C:\Program Files\Learn2.com\StRunner\stuninst.exe
        -->C:\Program Files\Viewpoint\Viewpoint Experience Technology\mtsAxInstaller.exe /u
        -->C:\WINDOWS\IsUn040c.exe -fC:\WINDOWS\orun32.isu
        -->C:\WINDOWS\system32\\MSIEXEC.EXE /x {075473F5-846A-448B-BCB3-104AA1760205}
        -->C:\WINDOWS\system32\\MSIEXEC.EXE /x {AB708C9B-97C8-4AC9-899B-DBF226AC9382}
        -->C:\WINDOWS\system32\\MSIEXEC.EXE /x {B12665F4-4E93-4AB4-B7FC-37053B524629}
        -->msiexec.exe /I {E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}
        -->MsiExec.exe /I{8B543A39-9401-44F4-B572-069E64C15189}
        -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2637C347-9DAD-11D6-9EA2-00055D0CA761}\Setup.exe" -uninstall
        -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{3F9CFBD8-8F77-4DCD-8CB5-CDD5F653C872}\setup.exe" -l0x40c
        -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5AFA4872-16B2-419E-ADCA-8E96E739115D}\setup.exe" -l0x40c
        -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{A82F10CB-18B5-4EAC-AEF2-FA49CD565626}\setup.exe" -l0x40c
        -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E5ABA5FD-EE3D-4F15-895D-B32321E6C96B}\setup.exe" -l0x40c
        -->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F4E57F49-84B4-4CF2-B0A1-8CA1752BDF7E}\setup.exe" -l0x40c
        -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf
        Adobe AIR-->C:\Program Files\Fichiers communs\Adobe AIR\Versions\1.0\Resources\Adobe AIR Updater.exe -arp:uninstall
        Adobe AIR-->MsiExec.exe /I{197A3012-8C85-4FD3-AB66-9EC7E13DB92E}
        Adobe Flash Player 10 ActiveX-->C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
        Adobe Flash Player 10 Plugin-->C:\WINDOWS\system32\Macromed\Flash\uninstall_plugin.exe
        Adobe Reader 9.1 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A91000000001}
        adsl TV-->D:\Documents and Settings\Uninstal.exe
        Age of Empires III-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{485775E8-AEB8-46BD-922B-242879E03DD5}
        AppCore-->MsiExec.exe /I{EFB5B3B5-A280-4E25-BE1C-634EEFE32C1B}
        Apple Mobile Device Support-->MsiExec.exe /I{162B71B8-8464-4680-A086-601D555B331D}
        Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033}
        Assistant de connexion Windows Live-->MsiExec.exe /I{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}
        avast! Antivirus-->D:\Documents and Settings\avast\aswRunDll.exe "D:\Documents and Settings\avast\Setup\setiface.dll",RunSetup
        AVI-MPG-WMV Screensaver Trial-->"D:\Documents and Settings\Dan\Mes documents\Downloads\AVI-MPG-WMV Screensaver Trial\unins000.exe"
        Backup-->MsiExec.exe /I{24DF7221-644B-4C3A-A478-459502D40522}
        Blender (remove only)-->"D:\Documents and Settings\Blender\uninstall.exe"
        Bonjour-->MsiExec.exe /I{07287123-B8AC-41CE-8346-3D777245C35B}
        ccCommon-->MsiExec.exe /I{B24E05CC-46FF-4787-BBB8-5CD516AFB118}
        CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe"
        Choice Guard-->MsiExec.exe /I{8FFC5648-FAF8-43A3-BC8F-42BA1E275C4E}
        Codeur Windows Media Série 9-->MsiExec.exe /I{E38C00D0-A68B-4318-A8A6-F7D4B5B1DF0E}
        Compatibility Pack for the 2007 Office system-->MsiExec.exe /X{90120000-0020-040C-0000-0000000FF1CE}
        Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe"
        Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe"
        Creative WebCam Center-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{E5ABA5FD-EE3D-4F15-895D-B32321E6C96B}\setup.exe" -l0x40c /remove
        Dofus 1.26.0-->C:\Program Files\Dofus\uninstall.exe
        Encyclopédie Hachette Multimédia-->C:\WINDOWS\unvise32.exe C:\program files\EHMINSTALL\uninstal.log
        EVEREST Home Edition v2.20-->"D:\Documents and Settings\Dan\Mes documents\Downloads\EVEREST Home Edition\unins000.exe"
        F1 Challenge 99-02-->C:\Program Files\EA SPORTS\F1 Challenge 99-02\EAUninstall.exe
        Free FLV Converter V 6.22.0-->"D:\Documents and Settings\amélioration windows\Free FLV Converter\unins000.exe"
        Galerie de photos Windows Live-->MsiExec.exe /X{44E54A81-9D91-4AA1-9417-80AFF134F5FF}
        GameCenter-->C:\Program Files\Cyanide\GameCenter\uninstall.exe
        GearDrvs-->MsiExec.exe /I{206FD69B-F9FE-4164-81BD-D52552BC9C23}
        GIMP 2.6.5-->"C:\Program Files\GIMP-2.0\setup\unins000.exe"
        Glary Utilities 2.12.0.658-->"D:\Bureau\Glary Utilities\unins000.exe"
        Google Chrome-->"C:\Program Files\Google\Chrome\Application\1.0.154.59\Installer\setup.exe" --uninstall --system-level
        Google Desktop-->C:\Program Files\Google\Google Desktop Search\GoogleDesktopSetup.exe -uninstall
        Google Earth-->MsiExec.exe /I{407B9B5C-DAC5-4F44-A756-B57CAB4E6A8B}
        Google Toolbar for Internet Explorer-->"C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_0531C63A913CC9D1.exe" /uninstall
        Google Update Helper-->MsiExec.exe /I{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
        greenstreet PowerText3D 2.0-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Common Files\greenstreet\PowerText\PowerText.isu"
        greenstreet Publisher 3.13-->C:\WINDOWS\IsUn040c.exe -f"d:\documents and settings\Publisher313.isu" -c"d:\documents and settings\_UNODBC.DLL"
        greenstreet Utilities-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\greenstreet\Utils.isu"
        GUILD WARS-->"C:\Program Files\GUILD WARS\Gw.exe" -uninstall
        High Definition Audio Driver Package - KB888111-->"C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe"
        HijackThis 2.0.2-->"C:\Program Files\trend micro\HijackThis.exe" /uninstall
        Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe"
        HP Document Viewer 5.3-->C:\Program Files\HP\Digital Imaging\DocumentViewer\hpzscr01.exe -datfile hpqbud04.dat
        HP Extended Capabilities 5.3-->C:\Program Files\HP\Digital Imaging\ExtCapUninstall\hpzscr01.exe -datfile hpqhsc01.dat
        HP Image Zone 5.3-->C:\Program Files\HP\Digital Imaging\uninstall\hpzscr01.exe -datfile hpqscr01.dat
        HP Imaging Device Functions 5.3-->C:\Program Files\HP\Digital Imaging\DigitalImagingMonitor\hpzscr01.exe -datfile hpqbud01.dat
        HP Product Assistant-->MsiExec.exe /I{36FDBE6E-6684-462B-AE98-9A39A1B200CC}
        HP PSC & OfficeJet 5.3.A-->"C:\Program Files\HP\Digital Imaging\{3E386744-10FA-44b2-98C9-DF7A270DECB3}\setup\hpzscr01.exe" -datfile hposcr06.dat
        HP Solution Center & Imaging Support Tools 5.3-->C:\Program Files\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat
        HP Update-->MsiExec.exe /X{FE57DE70-95DE-4B64-9266-84DA811053DB}
        Indiana Jones and the Emperors Tomb-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{0DBF3265-57F1-4D8A-87EA-332B2A669BDE}\Setup.exe" -l0x40c
        Installation Windows Live-->C:\Program Files\Windows Live\Installer\wlarp.exe
        Installation Windows Live-->MsiExec.exe /I{7370DF47-B4F9-4279-BFC3-3F09919F720D}
        iPod for Windows 2005-03-23-->C:\Program Files\Fichiers communs\InstallShield\Driver\8\Intel 32\IDriver.exe /M{44A537A5-859C-43A6-8285-C0668142A090} /l1036
        iTunes-->MsiExec.exe /I{C26B06A9-27BB-45B0-9873-9C623EC2BA38}
        J2SE Runtime Environment 5.0 Update 4-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0150040}
        Java Runtime Environment 1.1-->C:\WINDOWS\uninst.exe -f"C:\Program Files\JavaSoft\JRE\1.1\lib\DeIsL1.isu"
        Java(TM) 6 Update 7-->MsiExec.exe /I{3248F0A8-6813-11D6-A77B-00B0D0160070}
        Junk Mail filter update-->MsiExec.exe /I{4DE3E3D9-AE81-45DE-9195-3015F7B1DBF3}
        Kiwee Toolbar-->"C:\Program Files\agi\common\bootstrapper.exe" -uninstall"\"C:/Program Files/AGI/Python25\pythonw.exe\" \"C:\Program Files\agi\common\pyagcore\installer.pyc\" -u KiweeToolbar"
        LAME v3.98.2 for Audacity-->"D:\Documents and Settings\audacity-win-unicode-1.3.7\unins000.exe"
        Le Maître de l'Olympe - Zeus.-->C:\WINDOWS\IsUn040c.exe -f"C:\Sierra\Le Maître de l' Olympe Zeus\Uninst.isu"
        Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall
        Les Sims 2 : Nuits de Folie-->C:\Program Files\EA GAMES\Les Sims 2 Nuits de Folie\EAUninstall.exe
        Les Sims 2 : La bonne affaire-->C:\Program Files\EA GAMES\Les Sims 2  La bonne affaire\EAUninstall.exe
        Les Sims 2-->C:\Program Files\EA GAMES\Les Sims 2\EAUninstall.exe
        Les Sims™ 2 Kit Glamour-->C:\Program Files\EA GAMES\Les Sims 2 Kit Glamour\EAUninstall.exe
        Les Sims™ 2 Bon Voyage-->D:\EA GAMES\EAUninstall.exe
        LiveUpdate (Symantec Corporation)-->MsiExec.exe /x {E80F62FF-5D3C-4A19-8409-9721F2928206} /l*v "D:\Documents and Settings\All Users\Application Data\LuUninstall.LiveUpdate"
        LiveUpdate (Symantec Corporation)-->MsiExec.exe /X{E80F62FF-5D3C-4A19-8409-9721F2928206}
        Logiciel QuickCam de Logitech-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C191BE7C-8542-4A61-973A-714EF76C5995}\setup.exe" -l0x40c
        Logitech Desktop Messenger-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\09\01\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{900B1197-53F5-4F46-A882-2CFFFE2EEDCB}\setup.exe" -l0x40c UNINSTALL
        Ma-Config.com plugin-->MsiExec.exe /I{1EF0CD25-69FA-4A4A-9975-83E69C6F1886}
        Macromedia Shockwave Player-->MsiExec.exe /X{7D1D6A24-65D4-454C-8815-4F08A5FFF12C}
        Manuel d'utilisation de Creative WebCam Live! Ultra (Français)-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Creative\Creative WebCam Live! Ultra\Manuel d'utilisation de Creative WebCam Live! Ultra\French\CTManual.isu"
        MediaPortal-->C:\Program Files\Team MediaPortal\MediaPortal\uninstall-mp.exe
        Microsoft .NET Framework 1.1 French Language Pack-->MsiExec.exe /X{9A394342-4A68-4EBA-85A6-55B559F4E700}
        Microsoft .NET Framework 1.1 Hotfix (KB928366)-->"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\hotfix.exe" "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\Updates\M928366\M928366Uninstall.msp"
        Microsoft .NET Framework 1.1-->msiexec.exe /X {CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
        Microsoft .NET Framework 1.1-->MsiExec.exe /X{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}
        Microsoft .NET Framework 2.0 Service Pack 1-->MsiExec.exe /I{B508B3F1-A24A-32C0-B310-85786919EF28}
        Microsoft Bootvis-->MsiExec.exe /I{0F9196C6-58B4-445B-B56E-B1200FECC151}
        Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe"
        Microsoft Flight Simulator 2004 Un siècle d'aviation-->"C:\Program Files\Microsoft Games\Flight Simulator 9\UNINSTAL.EXE" /runtemp /addremove
        Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe"
        Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe"
        Microsoft Office Live Add-in 1.3-->MsiExec.exe /I{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}
        Microsoft Office XP Professional avec FrontPage-->MsiExec.exe /I{9028040C-6000-11D3-8CFE-0050048383C9}
        Microsoft Search Enhancement Pack-->MsiExec.exe /I{9C9CEB9D-53FD-49A7-85D2-FE674F72F24E}
        Microsoft Silverlight-->MsiExec.exe /X{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}
        Microsoft SQL Server 2005 Compact Edition [ENU]-->MsiExec.exe /I{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}
        Microsoft SQL Server 2005 Express Edition (SQLEXPRESS)-->MsiExec.exe /I{2AFFFDD7-ED85-4A90-8C52-5DA9EBDC9B8F}
        Microsoft SQL Server 2005 Tools Express Edition-->MsiExec.exe /I{2750B389-A2D2-4953-99CA-27C1F2A8E6FD}
        Microsoft SQL Server 2005-->"C:\Program Files\Microsoft SQL Server\90\Setup Bootstrap\ARPWrapper.exe" /Remove
        Microsoft SQL Server Native Client-->MsiExec.exe /I{BD68F46D-8A82-4664-8E68-F87C55BDEFD4}
        Microsoft SQL Server Setup Support Files (English)-->MsiExec.exe /X{53F5C3EE-05ED-4830-994B-50B2F0D50FCE}
        Microsoft SQL Server VSS Writer-->MsiExec.exe /I{56B4002F-671C-49F4-984C-C760FE3806B5}
        Microsoft Sync Framework Runtime Native v1.0 (x86)-->MsiExec.exe /I{8A74E887-8F0F-4017-AF53-CBA42211AAA5}
        Microsoft Sync Framework Services Native v1.0 (x86)-->MsiExec.exe /I{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}
        Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe"
        Microsoft Visual C++ 2005 Redistributable-->MsiExec.exe /X{7299052b-02a4-4627-81f2-1818da5d550d}
        Microsoft Word 2002-->MsiExec.exe /I{911B040C-6000-11D3-8CFE-0050048383C9}
        Mise à jour critique pour Lecteur Windows Media 11 (KB959772)-->"C:\WINDOWS\$NtUninstallKB959772_WM11$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour le Codeur Windows Media (KB954156)-->"C:\WINDOWS\$NtUninstallKB954156_WM9L$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Lecteur Windows Media (KB952069)-->"C:\WINDOWS\$NtUninstallKB952069_WM9$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Lecteur Windows Media 10 (KB917734)-->"C:\WINDOWS\$NtUninstallKB917734_WMP10$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Step by Step Interactive Training (KB898458)-->"C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Step by Step Interactive Training (KB923723)-->"C:\WINDOWS\$NtUninstallKB923723$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127-v2)-->"C:\WINDOWS\ie7updates\KB938127-v2-IE7\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows Internet Explorer 7 (KB958215)-->"C:\WINDOWS\ie7updates\KB958215-IE7\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows Internet Explorer 7 (KB960714)-->"C:\WINDOWS\ie7updates\KB960714-IE7\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows Internet Explorer 7 (KB961260)-->"C:\WINDOWS\ie7updates\KB961260-IE7\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows Internet Explorer 7 (KB963027)-->"C:\WINDOWS\ie7updates\KB963027-IE7\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB923561)-->"C:\WINDOWS\$NtUninstallKB923561$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB938464-v2)-->"C:\WINDOWS\$NtUninstallKB938464-v2$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB950759)-->"C:\WINDOWS\$NtUninstallKB950759$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB952004)-->"C:\WINDOWS\$NtUninstallKB952004$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB953838)-->"C:\WINDOWS\$NtUninstallKB953838$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB954600)-->"C:\WINDOWS\$NtUninstallKB954600$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB956572)-->"C:\WINDOWS\$NtUninstallKB956572$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB956802)-->"C:\WINDOWS\$NtUninstallKB956802$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB958687)-->"C:\WINDOWS\$NtUninstallKB958687$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB958690)-->"C:\WINDOWS\$NtUninstallKB958690$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB959426)-->"C:\WINDOWS\$NtUninstallKB959426$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB960225)-->"C:\WINDOWS\$NtUninstallKB960225$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB960715)-->"C:\WINDOWS\$NtUninstallKB960715$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB960803)-->"C:\WINDOWS\$NtUninstallKB960803$\spuninst\spuninst.exe"
        Mise à jour de sécurité pour Windows XP (KB961373)-->"C:\WINDOWS\$NtUninstallKB961373$\spuninst\spuninst.exe"
        Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe"
        Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe"
        Mise à jour pour Windows XP (KB955839)-->"C:\WINDOWS\$NtUninstallKB955839$\spuninst\spuninst.exe"
        Mise à jour pour Windows XP (KB967715)-->"C:\WINDOWS\$NtUninstallKB967715$\spuninst\spuninst.exe"
        Module de prise en charge linguistique de Microsoft .NET Framework 2.0 - FRA-->C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\Microsoft .NET Framework 2.0 Language Pack - FRA\install.exe
        Motorola SM56 Data Fax Modem-->rundll32.exe sm56co.dll,SM56UnInstaller
        Mozilla Firefox (3.0.4)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe
        Mozilla Firefox (3.0.8)-->D:\Documents and Settings\Mozilla Firefox\uninstall\helper.exe
        MSN-->C:\Program Files\MSN\MsnInstaller\msninst.exe /Action:ARP
        MSVCRT-->MsiExec.exe /I{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}
        MSXML 4.0 SP2 (KB927978)-->MsiExec.exe /I{37477865-A3F1-4772-AD43-AAFC6BCFF99F}
        MSXML 4.0 SP2 (KB954430)-->MsiExec.exe /I{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}
        MSXML 6.0 Parser-->MsiExec.exe /I{A43BF6A5-D5F0-4AAA-BF41-65995063EC44}
        My Screen Recorder 2.65-->"D:\Documents and Settings\My Screen Recorder\unins000.exe"
        NETGEAR WG111v2 wireless USB 2.0 adapter-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\10\INTEL3~1\IDriver.exe /M{E0F252A6-DE85-4E93-A93B-DFC3537B3965}
        Neuf - Kit de connexion-->C:\Program Files\Neuf\Kit\uninstall.exe
        Norton 360 (Symantec Corporation)-->"C:\Program Files\Fichiers communs\Symantec Shared\SymSetup\{2D617065-1C52-4240-B5BC-C0AE12157777}_2_2_0_2\Setup.exe" /X
        Norton 360 HTMLHelp-->MsiExec.exe /I{0BDD3FAD-61CD-4BF3-B9C4-4CEFD43F53F8}
        Norton 360-->MsiExec.exe /I{21829177-4DED-4209-AD08-490B3AC9C01A}
        Norton 360-->MsiExec.exe /I{2D617065-1C52-4240-B5BC-C0AE12157777}
        Norton Confidential Core-->MsiExec.exe /I{55A6283C-638A-4EE0-B491-51118554BDA2}
        NVIDIA Drivers-->C:\WINDOWS\system32\nvudisp.exe UninstallGUI
        Outil de mise à jour Google-->"C:\Program Files\Google\Google Updater\GoogleUpdater.exe" -uninstall
        Outil de téléchargement Windows Live-->MsiExec.exe /I{205C6BDD-7B73-42DE-8505-9A093F35A238}
        Programme de gestion Camera de Logitech®-->"C:\Program Files\Fichiers communs\Logitech\QCDRV\BIN\SETUP.EXE" UNINSTALL REMOVEPROMPT
        QuickTime-->MsiExec.exe /I{216AB108-2AE1-4130-B3D5-20B2C4C80F8F}
        RealPlayer-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0
        REALTEK GbE & FE Ethernet PCI NIC Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{ACCA20B0-C4D1-4BF5-BF21-0A0EB5EF9730}\SETUP.exe" -l0x40c -removeonly
        Realtek High Definition Audio Driver-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}\Setup.exe" -l0x40c -removeonly
        Registry Mechanic 8.0-->"C:\Program Files\Registry Mechanic\unins000.exe" /Log
        SAMSUNG CDMA Modem Driver Set-->C:\WINDOWS\system32\Samsung_USB_Drivers\3\SSCDUninstall.exe
        SAMSUNG Mobile Composite Device Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\6\SSBCUninstall.exe
        Samsung Mobile phone USB driver Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\5\SSSDUninstall.exe
        SAMSUNG Mobile USB Modem 1.0 Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\1\SS_Uninstall.exe
        SAMSUNG Mobile USB Modem Software-->C:\WINDOWS\system32\Samsung_USB_Drivers\2\SSM_Uninstall.exe
        Samsung PC Studio 3 USB Driver Installer-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{EBA29752-DDD2-4B62-B2E3-9841F92A3E3A}\setup.exe" -l0x40c -removeonly
        Samsung PC Studio 3-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\10\50\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{C4A4722E-79F9-417C-BD72-8D359A090C97}\setup.exe" -l0x40c -removeonly
        Screensaver Wonder 4.8-->"D:\Bureau\Screensaver Wonder 4\unins000.exe"
        Security Update for CAPICOM (KB931906)-->MsiExec.exe /I{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
        Security Update for CAPICOM (KB931906)-->MsiExec.exe /X{0EFDF2F9-836D-4EB7-A32D-038BD3F1FB2A}
        Segoe UI-->MsiExec.exe /I{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}
        SesamTV Media Center-->C:\WINDOWS\SesamTV Media Center Uninstaller.exe
        Shock Aero 3D v0.91-->"C:\WINDOWS\IFinst27.exe" -UD:\Documents and Settings\Shock Utility\ShockAero3D\IFU77.inf
        SimCity™ Sociétés-->MsiExec.exe /X{0B5154C0-8F00-4616-B0AB-6240AE80D9CE}
        SM56Tester-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\11\00\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D9774B38-ED2C-494D-A154-8208A12D0545}\Setup.exe" -l0x9 -removeonly
        SmartSound Quicktracks Plugin-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{4A7FDA4D-F4D7-4A49-934A-066D59A43C7E}
        Sonic Express Labeler-->MsiExec.exe /I{6675CA7F-E51B-4F6A-99D4-F8F0124C6EAA}
        Sonic MyDVD LE-->MsiExec.exe /I{21657574-BD54-48A2-9450-EB03B2C7FC29}
        Sonic RecordNow Audio-->MsiExec.exe /I{AB708C9B-97C8-4AC9-899B-DBF226AC9382}
        Sonic RecordNow Copy-->MsiExec.exe /I{B12665F4-4E93-4AB4-B7FC-37053B524629}
        Sonic RecordNow Data-->MsiExec.exe /I{075473F5-846A-448B-BCB3-104AA1760205}
        SPBBC 32bit-->MsiExec.exe /I{77772678-817F-4401-9301-ED1D01A8DA56}
        Spybot - Search & Destroy-->"D:\Documents and Settings\amélioration windows\Spybot - Search & Destroy\unins000.exe"
        Star Wars JK II Jedi Outcast-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{576E71DA-3000-48F6-9B21-B9A70D47DFCF}\Setup.exe"
        StartClock 3.2-->"D:\Documents and Settings\amélioration windows\StartClock\unins000.exe"
        Symantec Real Time Storage Protection Component-->MsiExec.exe /I{D6E6FA4A-5445-4850-8365-CF216C1CBB7A}
        Symantec Technical Support Controls-->MsiExec.exe /I{45690715-80A6-4445-B61D-ADEC5888E8CD}
        Symantec Technical Support Web Controls-->MsiExec.exe /X{20C53FA2-4307-4671-A93F-9463B29DFCF1}
        Tweak UI-->"C:\WINDOWS\system32\mshta.exe" "res://C:\WINDOWS\system32\TweakUI.exe/uninstall.hta"
        Ulead PhotoImpact 10 SE-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{5A065EA0-0EEC-4E94-A2A0-40812576C122}\setup.exe" -l0x40c
        Ulead VideoStudio 9.0 SE DVD-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\PROFES~1\RunTime\0701\Intel32\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{8EAB2384-C794-40ED-A9DD-3270A0D2BB76}\setup.exe" -l0x40c
        VB Runtime-->C:\WINDOWS\system32\UNINSTAL.EXE /A /R C:\WINDOWS\system32\VBRunTme.LOG
        VLC media player 0.9.8a-->D:\Documents and Settings\uninstall.exe
        WallPaper-->C:\WINDOWS\unin040c.exe -f"d:\documents and settings\amélioration windows\DeIsL1.isu" -c"d:\documents and settings\amélioration windows\_ISREG32.DLL"
        Windows Desktop Search 3.01-->"C:\WINDOWS\$NtUninstallKB917013$\spuninst\spuninst.exe"
        Windows Imaging Component-->"C:\WINDOWS\$NtUninstallWIC$\spuninst\spuninst.exe"
        Windows Live Call-->MsiExec.exe /I{82C7B308-0BDD-49D8-8EA5-9CD3A3F9DF41}
        Windows Live Communications Platform-->MsiExec.exe /I{3B4E636E-9D65-4D67-BA61-189800823F52}
        Windows Live Contrôle parental-->MsiExec.exe /X{D6A2DDE3-9D7C-412C-932A-756580D29919}
        Windows Live Mail-->MsiExec.exe /I{63DC2DA0-2A6C-4C38-9249-B75395458657}
        Windows Live Messenger-->MsiExec.exe /X{059C042E-796A-4ACC-A81A-ECC2010BB78C}
        Windows Live Sync-->MsiExec.exe /X{9C5EB781-0D37-44B8-9A58-77B3E4BF5F5E}
        Windows Live Toolbar-->MsiExec.exe /X{F7D27C70-90F5-49B9-B188-0A133C0CE353}
        Windows Live Writer-->MsiExec.exe /X{2231CE39-B963-4B9D-823A-F412ECA637B1}
        Windows Media Connect-->msiexec.exe /I {F6869CD2-3DB4-476D-A4C7-B3AE7C3ACF7B}
        Windows Media Connect-->MsiExec.exe /I{F6869CD2-3DB4-476D-A4C7-B3AE7C3ACF7B}
        Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll
        Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe"
        Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe"
        Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe"
        ZNsoft Free 2007-->"C:\Program Files\ZNsoft Corporation\ZNsoft Free\unins000.exe"
        ZNsoft Optimizer Xp-->"D:\Documents and Settings\amélioration windows\ZNsoft Optimizer Xp\unins000.exe"

        ======Hosts File======

        127.0.0.1 localhost

        ======Security center information======

        AV: avast! antivirus 4.8.1335 [VPS 090425-0]
        AV: Norton 360
        FW: Norton 360

        ======System event log======

        Computer Name:
        Event Code: 7036
        Message: Le service Service COM de gravage de CD IMAPI est entré dans l'état : en cours d'exécution.

        Record Number: 213180
        Source Name: Service Control Manager
        Time Written: 20090329174815.000000+120
        Event Type: Informations
        User:

        Computer Name:
        Event Code: 7035
        Message: Un contrôle Démarrer a correctement été envoyé au service Service COM de gravage de CD IMAPI.

        Record Number:
        Source Name: Service Control Manager
        Time Written: 20090329174815.000000+120
        Event Type: Informations
        User: AUTORITE NT\SYSTEM

        Computer Name:
        Event Code: 7036
        Message: Le service Service COM de gravage de CD IMAPI est entré dans l'état : arrêté.

        Record Number: 213178
        Source Name: Service Control Manager
        Time Written: 20090329174759.000000+120
        Event Type: Informations
        User:

        Computer Name:
        Event Code: 7036
        Message: Le service Service COM de gravage de CD IMAPI est entré dans l'état : en cours d'exécution.

        Record Number: 213177
        Source Name: Service Control Manager
        Time Written: 20090329174753.000000+120
        Event Type: Informations
        User:

        Computer Name:
        Event Code: 7035
        Message: Un contrôle Démarrer a correctement été envoyé au service Service COM de gravage de CD IMAPI.

        Record Number: 213176
        Source Name: Service Control Manager
        Time Written: 20090329174753.000000+120
        Event Type: Informations
        User: AUTORITE NT\SYSTEM

        =====Application event log=====

        Computer Name: *****
        Event Code: 26048
        Message: Server local connection provider is ready to accept connection on [ \\.\pipe\SQLLocal\SQLEXPRESS ].

        Record Number: 82477
        Source Name: MSSQL$SQLEXPRESS
        Time Written: 20090324200455.000000+060
        Event Type: Informations
        User:

        Computer Name:
        Event Code: 26022
        Message: Server is listening on [ 'any' <ipv4> 1164].

        Record Number: 82476
        Source Name: MSSQL$SQLEXPRESS
        Time Written: 20090324200455.000000+060
        Event Type: Informations
        User:

        Computer Name:
        Event Code: 9688
        Message: Service Broker manager has started.

        Record Number: 82475
        Source Name: MSSQL$SQLEXPRESS
        Time Written: 20090324200455.000000+060
        Event Type: Informations
        User:

        Computer Name:
        Event Code: 9666
        Message: The Database Mirroring protocol transport is disabled or not configured.

        Record Number: 82474
        Source Name: MSSQL$SQLEXPRESS
        Time Written: 20090324200453.000000+060
        Event Type: Informations
        User:

        Computer Name:
        Event Code: 9666
        Message: The Service Broker protocol transport is disabled or not configured.

        Record Number: 82473
        Source Name: MSSQL$SQLEXPRESS
        Time Written: 20090324200453.000000+060
        Event Type: Informations
        User:

        ======Environment variables======

        "ComSpec"=%SystemRoot%\system32\cmd.exe
        "Path"=%systemroot%\system32;%systemroot%;%systemroot%\system32\wbem;C:\Apps\Softex\OmniPass;C:\Program Files\Fichiers communs\Ulead Systems\MPEG;C:\Program Files\Samsung\Samsung PC Studio 3;C:\Program Files\QuickTime\QTSystem;C:\Program Files\Microsoft SQL Server\90\Tools\binn\;C:\Program Files\QuickTime\QTSystem\
        "windir"=%SystemRoot%
        "FP_NO_HOST_CHECK"=NO
        "OS"=Windows_NT
        "PROCESSOR_ARCHITECTURE"=x86
        "PROCESSOR_LEVEL"=15
        "PROCESSOR_IDENTIFIER"=x86 Family 15 Model 6 Stepping 2, GenuineIntel
        "PROCESSOR_REVISION"=0602
        "NUMBER_OF_PROCESSORS"=2
        "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
        "TEMP"=%SystemRoot%\TEMP
        "TMP"=%SystemRoot%\TEMP
        "SonicCentral"=C:\Program Files\Fichiers communs\Sonic Shared\Sonic Central\
        "PYTHONPATH"=C:\Program Files\agi\common;C:\Program Files\agi\common\python25.zip
        "CLASSPATH"=.;C:\Program Files\Java\jre1.6.0_07\lib\ext\QTJava.zip
        "QTJAVA"=C:\Program Files\Java\jre1.6.0_07\lib\ext\QTJava.zip

        -----------------EOF-----------------
        1. Tu es tres tres virusé,je vais te donner les proedures à suivre,tu me poste le rapport a chaque etape
          1. Tu dois avoir hijack this sur ton bureau,sinon telecharges le ici

            Télécharges et installes le logiciel de diagnostic :

            ici Hijackthis
            ou ici Hijackthis
            ou ici Hijackthis

            Ensuite:

            réouvre hijackthis
            fais scan only
            coches ces lignes sur leur gauche:

            R3 - URLSearchHook: AGSearchHook Class - {0BC6E3FA-78EF-4886-842C-5A1258C4455A} - C:\Program Files\agi\common\agcutils.dll
            O2 - BHO: AGSearchHook Class - {0BC6E3FA-78EF-4886-842C-5A1258C4455A} - C:\Program Files\agi\common\agcutils.dll
            O2 - BHO: Kiwee Toolbar - {6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - C:\Program Files\Kiwee Toolbar\2.8.167\KiweeIEToolbar.dll
            O3 - Toolbar: Kiwee Toolbar - {6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - C:\Program Files\Kiwee Toolbar\2.8.167\KiweeIEToolbar.dll
            O4 - HKLM\..\Run: [KiweeHook] "C:\Program Files\Kiwee Toolbar\2.8.167\kwtbaim.exe"
            O23 - Service: avast! Antivirus - ALWIL Software - D:\Documents and Settings\avast\ashServ.exe
            O23 - Service: PsExec (PSEXESVC) - Unknown owner - C:\WINDOWS\PSEXESVC.EXE (file missing)
            O4 - HKLM\..\Run: [iTunesHelper] "D:\Documents and Settings\iTunesHelper.exe"
            O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
            O4 - HKUS\S-1-5-19\..\RunOnce: [] (User 'SERVICE LOCAL')
            O4 - HKUS\S-1-5-20\..\RunOnce: [] (User 'SERVICE RÉSEAU')
            O4 - HKUS\S-1-5-18\..\RunOnce: [] (User 'SYSTEM')
            O4 - HKUS\.DEFAULT\..\RunOnce: [] (User 'Default user')
            O4 - Startup: StartClock.lnk = ?
            O4 - Startup: WinFlip.lnk = ?
            O4 - Global Startup: iTunes.lnk = ?
            O18 - Protocol: bw+0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw+0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw-0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw-0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw00 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw00s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw10 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw10s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw20 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw20s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw30 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw30s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw40 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw40s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw50 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw50s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw60 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw60s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw70 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw70s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw80 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw80s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw90 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw90s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwa0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwb0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwb0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwc0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwc0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwd0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwd0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwe0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwe0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwf0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwf0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwg0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwg0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwh0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwh0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwi0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwi0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwj0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwj0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwk0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwk0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwl0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwl0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwm0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwm0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwn0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwn0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwo0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwo0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwp0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwp0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwq0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwq0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwr0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwr0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bws0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bws0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwt0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwt0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwu0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwu0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwv0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwv0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bww0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bww0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwx0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwx0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwy0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwy0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwz0 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwz0s - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: offline-8876480 - {77A2E796-4C06-4712-8A59-97ACC7B8C8C0} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
            O4 - HKLM\..\Policies\Explorer\Run: []
            O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
            O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
            O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
            O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
            O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
            O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
            O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
            O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
            O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
            O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
            O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
            O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
            O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
            O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
            O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
            O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
            O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
            O4 - HKUS\S-1-5-21-1836123935-2857530727-1326383774-1009\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'Françoise')
            O4 - HKUS\S-1-5-21-1836123935-2857530727-1326383774-1010\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Thibaut')
            O4 - HKUS\S-1-5-21-1836123935-2857530727-1326383774-1011\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe (User 'Marion')
            O4 - HKUS\S-1-5-21-1836123935-2857530727-1326383774-1012\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (User '?')
            O4 - HKUS\S-1-5-21-1836123935-2857530727-1326383774-1013\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (User '?')
            O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
            O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
            O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

            tu les coches et tu clic sur "fix checked"

            et tu fermes le programme.
            1. Ensuite,on vas essayé de virer la kiwee toolbar,c'est une grosse verrolle,il ne faut surtout pas la retelecharger

              1/Télécharge TOOLBAR S&D( de Eric_71/Team IDN ) sur ton bureau :

              ( Tuto : https://sites.google.com/site/toolbarsd/aideenimages )

              !! Déconnecte toi et ferme toutes tes applications en cours le temps de la manipe !!

              * Double-clique sur ToolBar SD.exe pour lancer l'outil et laisse toi guider ...
              --> Tapes ( option " recherche " ) puis tape sur [Entrée].

              Un rapport sera généré à la fin du processus : poste son contenu dans ta prochaine réponse

              ( le rapport est en outre sauvegardé ici -> C:\TB.txt )

              2/
              Relance Toolbar-S&D en double-cliquant sur le raccourci
              .
              Ø Tape sur "2" puis valide en appuyant sur "Entrée".

              ! Ne ferme pas la fenêtre lors de la suppression !

              Un rapport sera généré, poste son contenu ici.

              NOTE : Si ton Bureau ne réapparait pas, appuie simultanément sur Ctrl+Alt+Suppr pour ouvrir le Gestionnaire des tâches.
              Rends-toi sur l'onglet "Processus". Clique en haut à gauche sur Fichier et choisis "Exécuter..."
              Tape explorer puis valide.

              Ensuite,ton infection des ports usb (ce qui doit provoquer tes disfonctionnments)

              1/######## | XP _ Instal & recherche | #######

              Telecharge et install UsbFix (de C_XX & Chiquitine29)

              Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) suceptible d avoir été infectés sans les ouvrir

              # Double clic sur le raccourci UsbFix présent sur ton bureau .

              # Choisi l option 1 ( Recherche )

              # Laisse travailler l outil.

              # Ensuite post le rapport UsbFix.txt qui apparaitra.

              # Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque. ( C:\UsbFix.txt )

              ( CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

              # Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
              Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
              Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

              2/
              ######## | Suppression | ########

              Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) suceptible d avoir été infectés sans les ouvrir

              # Double clic sur le raccourci UsbFix présent sur ton bureau

              # choisi l option 2 ( Suppression )

              # Ton bureau disparaitra et le pc redémarrera .

              # Au redémarrage , UsbFix scannera ton pc , laisse travailler l outil.

              # Ensuite post le rapport UsbFix.txt qui apparaitra avec le bureau .

              # Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque.( C:\UsbFix.txt )

              ( CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

              ######### | Désinstallation | #######

              # Double clic sur le raccourci UsbFix présent sur ton bureau

              # Choisi l option 3 ( Désinstaller ) ....

              Ensuite scan avec malwarebytes pour degrossir le terrain des nombreux trojans presents

              Imprime ces instructions car il faudra fermer toutes les fenêtres et applications lors de l'installation et de l'analyse.

              Télécharges :
              Malwarebytes ou :
              Malwarebytes

              * Installe le ( choisis bien "francais" ; ne modifie pas les paramètres d'installe ) et mets le à jour .

              (NB : S'il te manque "COMCTL32.OCX" lors de l'installe, alors télécharge le ici : COMCTL32.OCX

              * Potasses le Tuto pour te familiariser avec le prg :

              ( cela dis, il est très simple d'utilisation ).

              relance malwarebytes en suivant scrupuleusement ces consignes :

              ! Déconnecte toi et ferme toutes applications en cours !

              * Lance Malwarebyte's .

              Fais un examen dit "Complet" .

              --> Laisse le programme travailler ( et ne rien faire d'autre avec le PC durant le scan ).
              --> à la fin tu cliques sur "résultat" .
              --> Vérifie que tous les objets infectés soient validés, puis clique sur " suppression " .

              Note : si il faut redémarrer ton PC pour finir le nettoyage, fais le !

              Poste le rapport sauvegardé après la suppression des objets infectés (dans l'onglet "rapport/log"de Malwarebytes, le dernier en date)
              1. BOOT : Normal boot
                Antivirus : Norton 360 2007 (Activated)
                Firewall : Norton 360 2007 (Activated)
                C:\ (Local Disk) - NTFS - Total:29 Go (Free:1 Go)
                D:\ (Local Disk) - NTFS - Total:334 Go (Free:305 Go)
                E:\ (CD or DVD)
                F:\ (CD or DVD)
                G:\ (USB) - FAT - Total:1983 Mo (Free:1 Go)
                I:\ (USB)

                "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
                Option : [1] ( 25/04/2009|19:58 )

                -----------\\ Recherche de Fichiers / Dossiers ...

                C:\Program Files\Kiwee Toolbar
                C:\Program Files\Kiwee Toolbar\2.8.167
                C:\Program Files\Kiwee Toolbar\2.8.167\AGTBCore.dll
                C:\Program Files\Kiwee Toolbar\2.8.167\AolIMToolbar.dll
                C:\Program Files\Kiwee Toolbar\2.8.167\FlashCOM.dll
                C:\Program Files\Kiwee Toolbar\2.8.167\KiweeCommonCtrls.dll
                C:\Program Files\Kiwee Toolbar\2.8.167\KiweeContentHost.dll
                C:\Program Files\Kiwee Toolbar\2.8.167\KiweeIMToolbar.dll
                C:\Program Files\Kiwee Toolbar\2.8.167\KiweeTBCore.dll
                C:\Program Files\Kiwee Toolbar\2.8.167\KiweeTBCore.tlb
                C:\Program Files\Kiwee Toolbar\2.8.167\kiweetoolbar.zip
                C:\Program Files\Kiwee Toolbar\2.8.167\kwtbaim.exe
                C:\Program Files\Kiwee Toolbar\2.8.167\mfc80u.dll
                C:\Program Files\Kiwee Toolbar\2.8.167\Microsoft.VC80.CRT.manifest
                C:\Program Files\Kiwee Toolbar\2.8.167\Microsoft.VC80.MFC.manifest
                C:\Program Files\Kiwee Toolbar\2.8.167\msimg32.dll
                C:\Program Files\Kiwee Toolbar\2.8.167\MsnIMToolbar.dll
                C:\Program Files\Kiwee Toolbar\2.8.167\msvcp80.dll
                C:\Program Files\Kiwee Toolbar\2.8.167\msvcr80.dll
                C:\Program Files\Kiwee Toolbar\2.8.167\RemoteLib.dll
                C:\Program Files\Kiwee Toolbar\2.8.167\Riched20.dll
                D:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Kiwee Toolbar

                -----------\\ [..\Internet Explorer\Main]

                [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
                "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
                "Start Page"="http://neufportail.fr/"
                "Search Page"="https://www.google.com/?gws_rd=ssl"
                "Search Bar"="http://www.google.com/toolbar/ie8/sidebar.html"
                "SearchMigratedDefaultURL"="https://www.google.com/webhp?gws_rd=ssl{searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"

                [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
                "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
                "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
                "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
                "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home"

                --------------------\\ Recherche d'autres infections

                Aucune autre infection trouvée !

                1 - "C:\ToolBar SD\TB_1.txt" - 25/04/2009|20:00 - Option : [1]

                -----------\\ Fin du rapport a 20:00:58,56
                1. ############################## [ UsbFix V3.012 ]

                  # User : (Administrateurs) #
                  # Update on 24/04/09 by C_XX & Chiquitine29
                  # Start at: 20:06:00 | 25/04/2009

                  # Intel(R) Pentium(R) D CPU 3.40GHz
                  # Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
                  # Internet Explorer 7.0.5730.13
                  # Windows Firewall Status : Enabled
                  # AV : avast! antivirus 4.8.1335 [VPS 090425-0] 4.8.1335 [ Enabled | Updated ]
                  # AV : Norton 360 2007 [ Enabled | Updated ]
                  # FW : Norton 360[ Enabled ]2007

                  # C:\ # Disque fixe local # 29,99 Go (1,6 Go free) [HDD] # NTFS
                  # D:\ # Disque fixe local # 334,8 Go (305,96 Go free) [DATA] # NTFS
                  # E:\ # Disque CD-ROM
                  # F:\ # Disque CD-ROM
                  # G:\ # Disque amovible # 1,94 Go (1,37 Go free) # FAT
                  # I:\ # Disque amovible

                  ############################## [ Processus actifs ]

                  C:\WINDOWS\System32\smss.exe
                  C:\WINDOWS\system32\csrss.exe
                  C:\WINDOWS\system32\winlogon.exe
                  C:\WINDOWS\system32\services.exe
                  C:\WINDOWS\system32\lsass.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\WINDOWS\System32\svchost.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
                  C:\Program Files\Fichiers communs\Symantec Shared\VAScanner\comHost.exe
                  D:\Documents and Settings\avast\aswUpdSv.exe
                  D:\Documents and Settings\avast\ashServ.exe
                  C:\WINDOWS\system32\spoolsv.exe
                  c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\Program Files\AGI\common\win32\PythonService.exe
                  C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
                  C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                  C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
                  C:\Program Files\Bonjour\mDNSResponder.exe
                  c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
                  c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
                  C:\WINDOWS\System32\GEARSec.exe
                  C:\WINDOWS\System32\svchost.exe
                  C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
                  C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
                  C:\Program Files\Google\Update\GoogleUpdate.exe
                  C:\WINDOWS\system32\nvsvc32.exe
                  C:\Apps\Softex\OmniPass\Omniserv.exe
                  C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
                  C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
                  C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
                  C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
                  C:\Program Files\Windows Media Player\WMPNetwk.exe
                  c:\APPS\Powercinema\Kernel\TV\CLSched.exe
                  C:\Apps\Softex\OmniPass\OPXPApp.exe
                  C:\WINDOWS\Explorer.EXE
                  D:\Documents and Settings\avast\ashMaiSv.exe
                  D:\Documents and Settings\avast\ashWebSv.exe
                  C:\WINDOWS\System32\alg.exe
                  C:\WINDOWS\system32\RUNDLL32.EXE
                  C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe
                  C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe
                  C:\APPS\Powercinema\PCMService.exe
                  C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
                  C:\Program Files\Neuf\Kit\WiFi\9wifi.exe
                  C:\Program Files\Logitech\Video\CameraAssistant.exe
                  C:\WINDOWS\system32\ElkCtrl.exe
                  C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
                  C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
                  D:\DOCUME~1\avast\ashDisp.exe
                  C:\Program Files\QuickTime\QTTask.exe
                  C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
                  D:\Documents and Settings\iTunesHelper.exe
                  C:\APPS\SMP\SmpSys.exe
                  C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                  C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
                  C:\Program Files\iPod\bin\iPodService.exe
                  C:\Program Files\Registry Mechanic\RegMech.exe
                  D:\Documents and Settings\amélioration windows\Spybot - Search & Destroy\TeaTimer.exe
                  D:\Documents and Settings\netgear\WG111v2.exe
                  D:\Documents and Settings\amélioration windows\StartClock\StartClock.exe
                  D:\Documents and Settings\amélioration windows\win flip\WinFlip.exe
                  C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
                  C:\PROGRA~1\FICHIE~1\SYMANT~1\CCPD-LC\symlcsvc.exe
                  C:\Program Files\Google\Chrome\Application\chrome.exe
                  C:\Program Files\Google\Chrome\Application\chrome.exe
                  C:\Program Files\Google\Chrome\Application\chrome.exe
                  C:\Program Files\Google\Chrome\Application\chrome.exe
                  C:\Program Files\Google\Chrome\Application\chrome.exe
                  C:\WINDOWS\system32\wbem\wmiprvse.exe
                  C:\WINDOWS\system32\imapi.exe

                  ################## [ Registre # Startup ]

                  HKCU_Main: "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
                  HKCU_Main: "Search Page"="https://www.google.com/?gws_rd=ssl"
                  HKCU_Main: "Start Page"="http://neufportail.fr/"
                  HKLM_logon: "Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"
                  HKLM_logon: "DefaultUserName"="Dan"
                  HKLM_logon: "AltDefaultUserName"="Dan"
                  HKLM_logon: "LegalNoticeCaption"=""
                  HKLM_logon: "LegalNoticeText"=""
                  HKLM_Run: NvCplDaemon=RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                  HKLM_Run: nwiz=nwiz.exe /install
                  HKLM_Run: NvMediaCenter=RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
                  HKLM_Run: High Definition Audio Property Page Shortcut=HDAShCut.exe
                  HKLM_Run: Vade Retro Outlook Express="C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe"
                  HKLM_Run: DetectorApp=C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe
                  HKLM_Run: PCMService="c:\APPS\Powercinema\PCMService.exe"
                  HKLM_Run: HP Software Update=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
                  HKLM_Run: Autoconfigurateur WiFi Neuf="C:\Program Files\Neuf\Kit\WiFi\9wifi.exe"
                  HKLM_Run: LogitechCameraAssistant=C:\Program Files\Logitech\Video\CameraAssistant.exe
                  HKLM_Run: LogitechVideo[inspector]=C:\Program Files\Logitech\Video\InstallHelper.exe /inspect
                  HKLM_Run: LogitechCameraService(E)=C:\WINDOWS\system32\ElkCtrl.exe /automation
                  HKLM_Run: SDFix=C:\SDFix\RunThis.bat /second
                  HKLM_Run: ccApp="C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
                  HKLM_Run: osCheck="C:\Program Files\Norton 360\osCheck.exe"
                  HKLM_Run: Google Desktop Search="C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
                  HKLM_Run: Tweak UI=RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
                  HKLM_Run: avast!=D:\DOCUME~1\avast\ashDisp.exe
                  HKLM_Run: VisualTooltip=D:\Documents and Settings\amélioration windows\VisualToolTip\VisualToolTip.exe
                  HKLM_Run: Adobe Reader Speed Launcher="C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
                  HKLM_Run: QuickTime Task="C:\Program Files\QuickTime\QTTask.exe" -atboottime
                  HKLM_Run: iTunesHelper="D:\Documents and Settings\iTunesHelper.exe"
                  HKLM_Run: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents=
                  HKCU_Run: SmpcSys=C:\APPS\SMP\SmpSys.exe
                  HKCU_Run: MsnMsgr="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
                  HKCU_Run: Creative WebCam Tray="C:\Program Files\Creative\Shared Files\CamTray.exe"
                  HKCU_Run: swg=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                  HKCU_Run: ctfmon.exe=C:\WINDOWS\system32\ctfmon.exe
                  HKCU_Run: RegistryMechanic=C:\Program Files\Registry Mechanic\RegMech.exe /H
                  HKCU_Run: SpybotSD TeaTimer=D:\Documents and Settings\amélioration windows\Spybot - Search & Destroy\TeaTimer.exe
                  HKCU_Run: Yodm3D=D:\Documents and Settings\Dan\Bureau\Yodm3D.exe

                  ################## [ Informations ]

                  # Contenu de l'autorun D:\autorun.inf
                  [autorun]
                  OPEN=setupSNK.exe
                  ICON=\SMRTNTKY\fcw.ico
                  ACTION=Assistant Réseau sans fil

                  ################## [ Fichiers # Dossiers infectieux ]

                  Found ! D:\autorun.inf

                  ################## [ Registre # Clés Run infectieuses ]

                  ################## [ Registre # Mountpoints2 ]

                  HKCU\Software\Microsoft\....\MountPoints2\{4a13e0cd-3a9c-11db-896b-806d6172696f}\Shell\AutoRun\command
                  HKCU\Software\Microsoft\....\MountPoints2\{779a3688-831e-11dc-8bd1-00038a000015}\Shell\AutoRun\command

                  ################## [ Cracks / Keygens / Serials ]

                  ################## [ ! Fin du rapport # UsbFix V3.012 ! ]
                  1. Ok tu peux faire la procedure 2 de toolbar sd et de usbfix et me poster les deux rapports
                    1. ############################## [ UsbFix V3.012 ]

                      # User : (Administrateurs) #
                      # Update on 24/04/09 by C_XX & Chiquitine29
                      # Start at: 20:15:30 | 25/04/2009

                      # Intel(R) Pentium(R) D CPU 3.40GHz
                      # Microsoft Windows XP Édition familiale (5.1.2600 32-bit) # Service Pack 3
                      # Internet Explorer 7.0.5730.13
                      # Windows Firewall Status : Enabled
                      # AV : avast! antivirus 4.8.1335 [VPS 090425-0] 4.8.1335 [ Enabled | Updated ]
                      # AV : Norton 360 2007 [ Enabled | Updated ]
                      # FW : Norton 360[ Enabled ]2007

                      # C:\ # Disque fixe local # 29,99 Go (1,63 Go free) [HDD] # NTFS
                      # D:\ # Disque fixe local # 334,8 Go (305,95 Go free) [DATA] # NTFS
                      # E:\ # Disque CD-ROM
                      # F:\ # Disque CD-ROM
                      # G:\ # Disque amovible # 1,94 Go (1,37 Go free) # FAT

                      ############################## [ Processus actifs ]

                      C:\WINDOWS\System32\smss.exe
                      C:\WINDOWS\system32\csrss.exe
                      C:\WINDOWS\system32\winlogon.exe
                      C:\WINDOWS\system32\services.exe
                      C:\WINDOWS\system32\lsass.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\WINDOWS\System32\svchost.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
                      C:\Program Files\Fichiers communs\Symantec Shared\VAScanner\comHost.exe
                      D:\Documents and Settings\avast\aswUpdSv.exe
                      D:\Documents and Settings\avast\ashServ.exe
                      C:\WINDOWS\system32\spoolsv.exe
                      c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\Program Files\AGI\common\win32\PythonService.exe
                      C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
                      C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                      C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
                      C:\Program Files\Bonjour\mDNSResponder.exe
                      c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
                      c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
                      C:\WINDOWS\System32\GEARSec.exe
                      C:\WINDOWS\System32\svchost.exe
                      C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
                      C:\Program Files\Google\Update\GoogleUpdate.exe
                      C:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe
                      C:\WINDOWS\system32\nvsvc32.exe
                      C:\Apps\Softex\OmniPass\Omniserv.exe
                      C:\WINDOWS\system32\HPZipm12.exe
                      C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
                      C:\Program Files\Microsoft SQL Server\90\Shared\sqlbrowser.exe
                      C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
                      C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
                      c:\APPS\Powercinema\Kernel\TV\CLSched.exe
                      C:\Program Files\Windows Media Player\WMPNetwk.exe
                      C:\Apps\Softex\OmniPass\OPXPApp.exe
                      D:\Documents and Settings\avast\ashMaiSv.exe
                      D:\Documents and Settings\avast\ashWebSv.exe
                      C:\WINDOWS\Explorer.EXE
                      C:\WINDOWS\system32\wuauclt.exe
                      C:\WINDOWS\system32\wbem\wmiprvse.exe
                      C:\WINDOWS\System32\alg.exe
                      C:\WINDOWS\system32\taskmgr.exe

                      ################## [ Fichiers # Dossiers infectieux ]

                      Deleted ! D:\autorun.inf

                      ################## [ Registre # Clés Run infectieuses ]

                      ################## [ Registre # Startup ]

                      HKCU_Main: "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
                      HKCU_Main: "Search Page"="https://www.google.com/?gws_rd=ssl"
                      HKCU_Main: "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
                      HKCU_Main: "Window Title"=""
                      HKLM_logon: "Userinit"="C:\\WINDOWS\\system32\\userinit.exe,"
                      HKLM_logon: "DefaultUserName"=""
                      HKLM_logon: "AltDefaultUserName"="Dan"
                      HKLM_logon: "LegalNoticeCaption"=""
                      HKLM_logon: "LegalNoticeText"=""
                      HKLM_Run: NvCplDaemon=RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                      HKLM_Run: nwiz=nwiz.exe /install
                      HKLM_Run: NvMediaCenter=RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
                      HKLM_Run: High Definition Audio Property Page Shortcut=HDAShCut.exe
                      HKLM_Run: Vade Retro Outlook Express="C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe"
                      HKLM_Run: DetectorApp=C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe
                      HKLM_Run: PCMService="c:\APPS\Powercinema\PCMService.exe"
                      HKLM_Run: HP Software Update=C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
                      HKLM_Run: Autoconfigurateur WiFi Neuf="C:\Program Files\Neuf\Kit\WiFi\9wifi.exe"
                      HKLM_Run: LogitechCameraAssistant=C:\Program Files\Logitech\Video\CameraAssistant.exe
                      HKLM_Run: LogitechVideo[inspector]=C:\Program Files\Logitech\Video\InstallHelper.exe /inspect
                      HKLM_Run: LogitechCameraService(E)=C:\WINDOWS\system32\ElkCtrl.exe /automation
                      HKLM_Run: SDFix=C:\SDFix\RunThis.bat /second
                      HKLM_Run: ccApp="C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
                      HKLM_Run: osCheck="C:\Program Files\Norton 360\osCheck.exe"
                      HKLM_Run: Google Desktop Search="C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
                      HKLM_Run: Tweak UI=RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
                      HKLM_Run: avast!=D:\DOCUME~1\avast\ashDisp.exe
                      HKLM_Run: VisualTooltip=D:\Documents and Settings\amélioration windows\VisualToolTip\VisualToolTip.exe
                      HKLM_Run: Adobe Reader Speed Launcher="C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
                      HKLM_Run: QuickTime Task="C:\Program Files\QuickTime\QTTask.exe" -atboottime
                      HKLM_Run: iTunesHelper="D:\Documents and Settings\iTunesHelper.exe"
                      HKLM_Run: HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents=
                      HKCU_Run: SmpcSys=C:\APPS\SMP\SmpSys.exe
                      HKCU_Run: MsnMsgr="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
                      HKCU_Run: Creative WebCam Tray="C:\Program Files\Creative\Shared Files\CamTray.exe"
                      HKCU_Run: swg=C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                      HKCU_Run: ctfmon.exe=C:\WINDOWS\system32\ctfmon.exe
                      HKCU_Run: RegistryMechanic=C:\Program Files\Registry Mechanic\RegMech.exe /H
                      HKCU_Run: SpybotSD TeaTimer=D:\Documents and Settings\amélioration windows\Spybot - Search & Destroy\TeaTimer.exe
                      HKCU_Run: Yodm3D=D:\Documents and Settings\Dan\Bureau\Yodm3D.exe

                      ################## [ Registre # Mountpoints2 ]

                      Deleted ! HKCU\Software\Microsoft\....\MountPoints2\{779a3688-831e-11dc-8bd1-00038a000015}\Shell\AutoRun\command

                      ################## [ Listing des fichiers présent ]

                      C:\NTDETECT.COM
                      C:\Nss.exe
                      C:\BOOT.INI
                      D:\NG Recovery Point Storage.ini

                      ################## [ Vaccination ]

                      # C:\autorun.inf -> Folder created by UsbFix.
                      # D:\autorun.inf -> Folder created by UsbFix.
                      # G:\autorun.inf -> Folder created by UsbFix.

                      ################## [ Cracks / Keygens / Serials ]

                      ################## [ ! Fin du rapport # UsbFix V3.012 ! ]
                      1. dsl j ai du l oublier

                        -----------\\ ToolBar S&D 1.2.8 XP/Vista

                        Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
                        X86-based PC ( Multiprocessor Free : Intel(R) Pentium(R) D CPU 3.40GHz )
                        BIOS : )Phoenix - Award WorkstationBIOS v6.00PG
                        USER : Dan ( Administrator )
                        BOOT : Normal boot
                        Antivirus : Norton 360 2007 (Activated)
                        Firewall : Norton 360 2007 (Activated)
                        C:\ (Local Disk) - NTFS - Total:29 Go (Free:1 Go)
                        D:\ (Local Disk) - NTFS - Total:334 Go (Free:305 Go)
                        E:\ (CD or DVD)
                        F:\ (CD or DVD)
                        G:\ (USB) - FAT - Total:1983 Mo (Free:1 Go)

                        "C:\ToolBar SD" ( MAJ : 21-12-2008|20:47 )
                        Option : [2] ( 25/04/2009|20:25 )

                        -----------\\ SUPPRESSION

                        Supprime! - C:\Program Files\Kiwee Toolbar\2.8.167
                        Supprime! - D:\DOCUME~1\ALLUSE~1\MENUDM~1\PROGRA~1\Kiwee Toolbar
                        Supprime! - C:\Program Files\Kiwee Toolbar

                        -----------\\ Recherche de Fichiers / Dossiers ...

                        -----------\\ [..\Internet Explorer\Main]

                        [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
                        "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
                        "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
                        "Search Page"="https://www.google.com/?gws_rd=ssl"
                        "Search Bar"="http://www.google.com/toolbar/ie8/sidebar.html"
                        "SearchMigratedDefaultURL"="https://www.google.com/webhp?gws_rd=ssl{searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8"

                        [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
                        "Default_Page_URL"="https://www.msn.com/fr-fr/?ocid=iehp"
                        "Default_Search_URL"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
                        "Search Page"="https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF"
                        "Start Page"="https://www.msn.com/fr-fr/"

                        --------------------\\ Recherche d'autres infections

                        Aucune autre infection trouvée !

                        1 - "C:\ToolBar SD\TB_1.txt" - 25/04/2009|20:00 - Option : [1]
                        2 - "C:\ToolBar SD\TB_2.txt" - 25/04/2009|20:29 - Option : [2]

                        -----------\\ Fin du rapport a 20:29:54,09
                        1. Ok,tu peux faire le scan malwarebytes (postes moi le rapport) car tu as pas mal dinfections encore,on aura ensuite d'autres procedure a faire,faut faire attention ou tu surfes.Tu as bien fixé toute les lignes indiquée sur hijack this?
                          1. malwarebytes est en cours et il a trouvé 2 infection et je sais que ma soeur surfes n importes ou
                            1. Oui c'est clair j'ai rarement vu autant d'infections.Surtout dis lui de ne plus rien chargé sur le site kiwee (emoticones) car cela te donne enormement d'infection et de plus il est tres difficile de se debarasser des verroles kiwee
                              Une fois que le scan est terminé postes moi le rapport,

                              ensuite,tu me repostes un Rsit complet (les deux rapports) afin que je controle les infections restantes
                              1. Logfile of random's system information tool 1.06 (written by random/random)
                                Run by Dan at 2009-04-25 21:21:49
                                Microsoft Windows XP Édition familiale Service Pack 3
                                System drive C: has 2 GB (5%) free of 31 GB
                                Total RAM: 2046 MB (59% free)

                                Logfile of Trend Micro HijackThis v2.0.2
                                Scan saved at 21:22:41, on 25/04/2009
                                Platform: Windows XP SP3 (WinNT 5.01.2600)
                                MSIE: Internet Explorer v7.00 (7.00.6000.16827)
                                Boot mode: Normal

                                Running processes:
                                C:\WINDOWS\System32\smss.exe
                                C:\WINDOWS\system32\winlogon.exe
                                C:\WINDOWS\system32\services.exe
                                C:\WINDOWS\system32\lsass.exe
                                C:\WINDOWS\system32\svchost.exe
                                C:\WINDOWS\System32\svchost.exe
                                C:\WINDOWS\system32\svchost.exe
                                C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
                                C:\Program Files\Fichiers communs\Symantec Shared\VAScanner\comHost.exe
                                D:\Documents and Settings\avast\aswUpdSv.exe
                                D:\Documents and Settings\avast\ashServ.exe
                                C:\WINDOWS\system32\spoolsv.exe
                                c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
                                C:\Program Files\AGI\common\win32\PythonService.exe
                                C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
                                C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                                C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
                                C:\Program Files\Bonjour\mDNSResponder.exe
                                c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
                                c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
                                C:\WINDOWS\System32\GEARSec.exe
                                C:\WINDOWS\System32\svchost.exe
                                C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
                                C:\Program Files\Google\Update\GoogleUpdate.exe
                                C:\WINDOWS\system32\nvsvc32.exe
                                C:\Apps\Softex\OmniPass\Omniserv.exe
                                C:\WINDOWS\system32\HPZipm12.exe
                                C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
                                C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
                                C:\WINDOWS\system32\svchost.exe
                                C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
                                C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
                                c:\APPS\Powercinema\Kernel\TV\CLSched.exe
                                C:\Apps\Softex\OmniPass\OPXPApp.exe
                                D:\Documents and Settings\avast\ashMaiSv.exe
                                D:\Documents and Settings\avast\ashWebSv.exe
                                C:\WINDOWS\explorer.exe
                                C:\Program Files\Google\Chrome\Application\chrome.exe
                                C:\Program Files\Google\Chrome\Application\chrome.exe
                                D:\Documents and Settings\amélioration windows\Malwarebytes' Anti-Malware\mbam.exe
                                D:\Documents and Settings\iTunes.exe
                                C:\Program Files\iPod\bin\iPodService.exe
                                C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
                                C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
                                C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
                                D:\Documents and Settings\Dan\Mes documents\Downloads\RSIT (1).exe
                                D:\Documents and Settings\amélioration windows\Dan.exe

                                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
                                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
                                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
                                R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = wmplayer.exe //ICWLaunch
                                R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
                                R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                                R3 - URLSearchHook: (no name) - {0BC6E3FA-78EF-4886-842C-5A1258C4455A} - (no file)
                                O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
                                O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
                                O2 - BHO: Click-to-Call BHO - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:\Program Files\Windows Live\Messenger\wlchtc.dll
                                O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\2.6\coIEPlg.dll
                                O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\PROGRA~1\FICHIE~1\SYMANT~1\IDS\IPSBHO.dll
                                O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
                                O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                                O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
                                O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
                                O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
                                O3 - Toolbar: Show Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Fichiers communs\Symantec Shared\coShared\Browser\2.6\CoIEPlg.dll
                                O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
                                O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
                                O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
                                O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
                                O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
                                O4 - HKLM\..\Run: [Vade Retro Outlook Express] "C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe"
                                O4 - HKLM\..\Run: [DetectorApp] C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\DetectorApp.exe
                                O4 - HKLM\..\Run: [PCMService] "c:\APPS\Powercinema\PCMService.exe"
                                O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
                                O4 - HKLM\..\Run: [Autoconfigurateur WiFi Neuf] "C:\Program Files\Neuf\Kit\WiFi\9wifi.exe"
                                O4 - HKLM\..\Run: [LogitechCameraAssistant] C:\Program Files\Logitech\Video\CameraAssistant.exe
                                O4 - HKLM\..\Run: [LogitechVideo[inspector]] C:\Program Files\Logitech\Video\InstallHelper.exe /inspect
                                O4 - HKLM\..\Run: [LogitechCameraService(E)] C:\WINDOWS\system32\ElkCtrl.exe /automation
                                O4 - HKLM\..\Run: [SDFix] C:\SDFix\RunThis.bat /second
                                O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
                                O4 - HKLM\..\Run: [osCheck] "C:\Program Files\Norton 360\osCheck.exe"
                                O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
                                O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
                                O4 - HKLM\..\Run: [avast!] D:\DOCUME~1\avast\ashDisp.exe
                                O4 - HKLM\..\Run: [VisualTooltip] D:\Documents and Settings\amélioration windows\VisualToolTip\VisualToolTip.exe
                                O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
                                O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
                                O4 - HKLM\..\Run: [iTunesHelper] "D:\Documents and Settings\iTunesHelper.exe"
                                O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] D:\Documents and Settings\amélioration windows\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
                                O4 - HKCU\..\Run: [SmpcSys] C:\APPS\SMP\SmpSys.exe
                                O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
                                O4 - HKCU\..\Run: [Creative WebCam Tray] "C:\Program Files\Creative\Shared Files\CamTray.exe"
                                O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
                                O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                                O4 - HKCU\..\Run: [RegistryMechanic] C:\Program Files\Registry Mechanic\RegMech.exe /H
                                O4 - HKCU\..\Run: [SpybotSD TeaTimer] D:\Documents and Settings\amélioration windows\Spybot - Search & Destroy\TeaTimer.exe
                                O4 - HKCU\..\Run: [Yodm3D] D:\Documents and Settings\Dan\Bureau\Yodm3D.exe
                                O4 - HKLM\..\Policies\Explorer\Run: []
                                O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
                                O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
                                O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
                                O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
                                O4 - Startup: Adobe Media Player.lnk = D:\Documents and Settings\Adobe Media Player\Adobe Media Player.exe
                                O4 - Startup: StartClock.lnk = ?
                                O4 - Startup: WinFlip.lnk = ?
                                O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
                                O4 - Global Startup: iTunes.lnk = ?
                                O4 - Global Startup: NETGEAR WG111v2 Smart Wizard.lnk = D:\Documents and Settings\netgear\WG111v2.exe
                                O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
                                O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
                                O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                                O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
                                O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                                O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
                                O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
                                O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                                O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                                O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
                                O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
                                O14 - IERESET.INF: START_PAGE_URL=file://C:\APPS\IE\offline\fr.htm
                                O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
                                O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
                                O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
                                O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
                                O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
                                O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
                                O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
                                O16 - DPF: {6A344D34-5231-452A-8A57-D064AC9B7862} (Symantec Download Manager) - https://webdl.symantec.com/activex/symdlmgr.cab
                                O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://www.touslesdrivers.com/...
                                O16 - DPF: {9122D757-5A4F-4768-82C5-B4171D8556A7} (PhotoPickConvert Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/PhtPkMSN.cab
                                O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
                                O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
                                O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
                                O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
                                O20 - Winlogon Notify: epsfadcrmt - epsfadcrmt.dll (file missing)
                                O23 - Service: AG Windows Service (AGWinService) - Unknown owner - C:\Program Files\AGI\common\win32\PythonService.exe
                                O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
                                O23 - Service: Apache2.2 - Unknown owner - C:\Program Files\ImmobilierLoyer\rocherdigital\apache\bin\apache.exe (file missing)
                                O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
                                O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - D:\Documents and Settings\avast\aswUpdSv.exe
                                O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\AluSchedulerSvc.exe
                                O23 - Service: avast! Antivirus - ALWIL Software - D:\Documents and Settings\avast\ashServ.exe
                                O23 - Service: avast! Mail Scanner - ALWIL Software - D:\Documents and Settings\avast\ashMaiSv.exe
                                O23 - Service: avast! Web Scanner - ALWIL Software - D:\Documents and Settings\avast\ashWebSv.exe
                                O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
                                O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
                                O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
                                O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLCapSvc.exe
                                O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\APPS\Powercinema\Kernel\TV\CLSched.exe
                                O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
                                O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\VAScanner\comHost.exe
                                O23 - Service: CyberLink Media Library Service - Cyberlink - c:\APPS\Powercinema\Kernel\CLML_NTService\CLMLServer.exe
                                O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe
                                O23 - Service: Google Desktop Manager 5.7.805.16405 (GoogleDesktopManager-051608-133132) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
                                O23 - Service: Google Update Service (gupdate1c98c6b311d32da) (gupdate1c98c6b311d32da) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
                                O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                                O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
                                O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
                                O23 - Service: LiveUpdate - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\LuComServer_3_4.EXE
                                O23 - Service: LiveUpdate Notice - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSvcHst.exe
                                O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
                                O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
                                O23 - Service: Softex OmniPass Service (omniserv) - Softex Inc. - C:\Apps\Softex\OmniPass\Omniserv.exe
                                O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
                                O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
                                O23 - Service: PsExec (PSEXESVC) - Unknown owner - C:\WINDOWS\PSEXESVC.EXE (file missing)
                                O23 - Service: Symantec Core LC - Unknown owner - C:\PROGRA~1\FICHIE~1\SYMANT~1\CCPD-LC\symlcsvc.exe
                                O23 - Service: Symantec RemoteAssist - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\Support Controls\ssrc.exe (file missing)
                                O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
                                O23 - Service: USBDeviceService - Unknown owner - C:\Program Files\Sonic\DigitalMedia LE v7\MyDVD LE\USBDeviceService.exe
                                O23 - Service: Windows Media Connect (WMC) (WmcCds) - Unknown owner - d:\documents and settings\mswmccds.exe (file missing)
                                O23 - Service: Windows Media Connect (WMC) Helper (WmcCdsLs) - Unknown owner - D:\Documents and Settings\mswmcls.exe (file missing)
                                • 1
                                • 2
                                • 3
                                • 4