Virus msn espagnol [Résolu]

Salut

Télécharge lopxp :
http://perso.numericable.fr/~altshift/Info/Fichiers/lopxpMH2.zip

dézippe-le sur ton bureau puis double-clic sur le fichier "lopxpMH.bat"
quand il a terminé, un rapport s'ouvre : fait un copier-coller du rapport puis mets le ici

Salut Boulepate62,
Merci de ta réponse.
Voir le rapport demandé ci-dessous.
Bon courage !
A+
al78wan

Rapport fait à 10:13:46,85 le 17/02/2007

******************************************
## Répertoires Application Data

Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7

R‚pertoire de C:\Documents and Settings\Administrateur\Application Data

28/01/2005 00:07 <REP> .
28/01/2005 00:07 <REP> ..
28/01/2005 00:07 <REP> Microsoft
28/01/2005 00:07 62 desktop.ini
1 fichier(s) 62 octets
3 R‚p(s) 7ÿ888ÿ596ÿ992 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7

R‚pertoire de C:\Documents and Settings\Administrateur\Local Settings\Application Data

28/01/2005 00:07 <REP> .
28/01/2005 00:07 <REP> ..
28/01/2005 00:07 <REP> Microsoft
28/01/2005 00:13 3ÿ184ÿ656 IconCache.db
1 fichier(s) 3ÿ184ÿ656 octets
3 R‚p(s) 7ÿ888ÿ580ÿ608 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7

R‚pertoire de C:\Documents and Settings\All Users\Application Data

25/01/2005 20:53 <REP> .
25/01/2005 20:53 <REP> ..
30/01/2005 15:53 <REP> Adobe
04/02/2005 09:11 <REP> Ahead
11/09/2005 00:06 <REP> Creative
28/09/2006 19:08 <REP> Google
17/12/2006 18:05 <REP> Kaspersky Lab
29/09/2006 23:43 <REP> Macrovision
27/11/2005 17:46 <REP> Messenger Plus!
25/01/2005 20:53 <REP> Microsoft
26/01/2005 18:40 <REP> MSN6
10/02/2007 10:33 <REP> Quark
14/03/2006 20:31 <REP> QuickTime
20/10/2006 22:57 <REP> Spybot - Search & Destroy
28/10/2005 23:51 <REP> Symantec
19/12/2006 00:11 <REP> WholeSecurity
01/11/2005 21:44 <REP> Windows Genuine Advantage
22/04/2006 22:19 <REP> Wma 16 close idol
25/01/2005 20:53 62 desktop.ini
25/01/2005 22:09 188 hpzinstall.log
2 fichier(s) 250 octets
18 R‚p(s) 7ÿ888ÿ580ÿ608 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7

R‚pertoire de C:\Documents and Settings\Default User\Application Data

25/01/2005 20:53 <REP> .
25/01/2005 20:53 <REP> ..
25/01/2005 20:53 <REP> Microsoft
25/01/2005 20:53 62 desktop.ini
1 fichier(s) 62 octets
3 R‚p(s) 7ÿ888ÿ580ÿ608 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7

R‚pertoire de C:\Documents and Settings\Default User\Local Settings\Application Data

25/01/2005 20:53 <REP> .
25/01/2005 20:53 <REP> ..
0 fichier(s) 0 octets
2 R‚p(s) 7ÿ888ÿ580ÿ608 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7

R‚pertoire de C:\Documents and Settings\eMule_Secure\Application Data

26/11/2006 19:08 <REP> .
26/11/2006 19:08 <REP> ..
17/12/2006 09:20 <REP> Google
26/11/2006 19:08 <REP> Microsoft
26/11/2006 19:08 62 desktop.ini
1 fichier(s) 62 octets
4 R‚p(s) 7ÿ888ÿ580ÿ608 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7

R‚pertoire de C:\Documents and Settings\eMule_Secure\Local Settings\Application Data

26/11/2006 19:08 <REP> .
26/11/2006 19:08 <REP> ..
17/12/2006 09:20 <REP> Google
26/11/2006 19:08 <REP> Microsoft
0 fichier(s) 0 octets
4 R‚p(s) 7ÿ888ÿ580ÿ608 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7

R‚pertoire de C:\Documents and Settings\Joanne\Application Data

27/01/2005 09:05 <REP> .
27/01/2005 09:05 <REP> ..
12/12/2005 22:01 <REP> Ahead
12/12/2005 21:46 <REP> Conceptworld
09/05/2005 19:04 <REP> Help
27/01/2005 09:05 <REP> Identities
10/05/2005 18:00 <REP> Macromedia
27/01/2005 09:05 <REP> Microsoft
09/05/2005 19:03 <REP> Real
27/01/2005 23:11 <REP> Symantec
27/01/2005 09:05 62 desktop.ini
1 fichier(s) 62 octets
10 R‚p(s) 7ÿ888ÿ576ÿ512 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7

R‚pertoire de C:\Documents and Settings\Joanne\Local Settings\Application Data

27/01/2005 09:05 <REP> .
27/01/2005 09:05 <REP> ..
12/12/2005 21:38 <REP> Copernic
09/05/2005 19:04 <REP> Help
12/12/2005 21:38 <REP> Logitech-LS
27/01/2005 09:05 <REP> Microsoft
27/01/2005 09:05 13ÿ104 GDIPFONTCACHEV1.DAT
27/01/2005 23:14 4ÿ318ÿ140 IconCache.db
2 fichier(s) 4ÿ331ÿ244 octets
6 R‚p(s) 7ÿ888ÿ576ÿ512 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7

R‚pertoire de C:\Documents and Settings\Lauren\Application Data

25/01/2005 21:09 <REP> .
25/01/2005 21:09 <REP> ..
25/01/2005 23:35 <REP> Adobe
25/01/2005 23:36 <REP> AdobeUM
04/02/2005 08:43 <REP> Ahead
03/02/2007 16:54 <REP> Conceptworld
11/09/2005 12:03 <REP> Creative
12/02/2005 19:14 <REP> DataLayer
04/02/2005 16:22 <REP> FotoWire
02/09/2005 21:26 <REP> Google
25/01/2005 23:33 <REP> Help
25/01/2005 22:17 <REP> Hewlett-Packard
25/01/2005 21:10 <REP> Identities
29/01/2005 18:01 <REP> Lavasoft
19/11/2006 18:34 <REP> Leadertech
30/01/2005 12:38 <REP> Macromedia
25/01/2005 21:09 <REP> Microsoft
03/02/2007 10:53 <REP> Mozilla
26/01/2005 18:40 <REP> MSN6
12/02/2005 19:14 <REP> Nokia
12/02/2005 19:40 <REP> Nokia Multimedia Player
12/02/2005 19:13 <REP> PC Suite
10/02/2007 10:37 <REP> Quark
30/01/2005 16:37 <REP> Real
13/02/2005 19:52 <REP> RTE
15/08/2006 16:28 <REP> Sun
25/03/2006 20:34 <REP> WholeSecurity
25/01/2005 21:09 62 desktop.ini
1 fichier(s) 62 octets
27 R‚p(s) 7ÿ888ÿ576ÿ512 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7

R‚pertoire de C:\Documents and Settings\Lauren\Local Settings\Application Data

25/01/2005 21:09 <REP> .
25/01/2005 21:09 <REP> ..
25/01/2005 23:36 <REP> Adobe
05/04/2005 08:12 <REP> Google
25/01/2005 23:33 <REP> Help
26/01/2005 20:38 <REP> Identities
04/02/2005 16:36 <REP> Logitech-LS
25/01/2005 21:09 <REP> Microsoft
03/02/2007 10:53 <REP> Mozilla
29/01/2005 17:46 77ÿ824 DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
26/01/2005 06:42 66ÿ872 GDIPFONTCACHEV1.DAT
31/01/2005 23:19 2ÿ644ÿ898 IconCache.db
3 fichier(s) 2ÿ789ÿ594 octets
9 R‚p(s) 7ÿ888ÿ576ÿ512 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7

R‚pertoire de C:\Documents and Settings\LocalService\Application Data

25/01/2005 21:08 <REP> .
25/01/2005 21:08 <REP> ..
27/08/2005 22:39 <REP> Macromedia
25/01/2005 21:08 <REP> Microsoft
20/10/2006 23:52 <REP> Webroot
0 fichier(s) 0 octets
5 R‚p(s) 7ÿ888ÿ572ÿ416 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7

R‚pertoire de C:\Documents and Settings\LocalService\Local Settings\Application Data

25/01/2005 21:08 <REP> .
25/01/2005 21:08 <REP> ..
25/01/2005 21:08 <REP> Microsoft
0 fichier(s) 0 octets
3 R‚p(s) 7ÿ888ÿ572ÿ416 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7

R‚pertoire de C:\Documents and Settings\NetworkService\Application Data

25/01/2005 21:08 <REP> .
25/01/2005 21:08 <REP> ..
25/01/2005 21:08 <REP> Microsoft
28/01/2005 00:34 <REP> Symantec
0 fichier(s) 0 octets
4 R‚p(s) 7ÿ888ÿ572ÿ416 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7

R‚pertoire de C:\Documents and Settings\NetworkService\Local Settings\Application Data

25/01/2005 21:08 <REP> .
25/01/2005 21:08 <REP> ..
25/01/2005 21:08 <REP> Microsoft
0 fichier(s) 0 octets
3 R‚p(s) 7ÿ888ÿ572ÿ416 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7

R‚pertoire de C:\WINDOWS\system32\config\systemprofile\Application Data

25/01/2005 21:07 <REP> .
25/01/2005 21:07 <REP> ..
25/01/2005 21:07 <REP> Microsoft
25/01/2005 21:07 62 desktop.ini
1 fichier(s) 62 octets
3 R‚p(s) 7ÿ888ÿ572ÿ416 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7

R‚pertoire de C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data

25/01/2005 21:07 <REP> .
25/01/2005 21:07 <REP> ..
26/01/2005 06:42 <REP> Microsoft
0 fichier(s) 0 octets
3 R‚p(s) 7ÿ888ÿ572ÿ416 octets libres

******************************************
Recherche des taches planifiées dans C:\WINDOWS\tasks

Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7

R‚pertoire de C:\WINDOWS\Tasks

20/10/2006 23:32 330 MP Scheduled Scan.job
30/01/2005 20:04 392 FRU Task #Hewlett-Packard#hp psc 1200 series#1107111835.job
25/01/2005 22:17 344 FRU Task #Hewlett-Packard#hp psc 1200 series#1106687810.job
25/01/2005 21:04 6 SA.DAT
25/01/2005 21:02 65 desktop.ini
25/01/2005 21:02 <REP> ..
25/01/2005 21:02 <REP> .
5 fichier(s) 1ÿ137 octets
2 R‚p(s) 7ÿ888ÿ572ÿ416 octets libres

******************************************
## Répertoires de C:\Program Files

Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est B842-D9A7

R‚pertoire de C:\Program Files

11/02/2007 12:16 <REP> .
11/02/2007 12:16 <REP> ..
13/02/2005 10:45 <REP> 4t Tray Minimizer
20/08/2006 11:23 <REP> Accords
29/09/2006 23:39 <REP> Adobe
04/02/2005 13:47 <REP> Ahead
21/01/2007 09:43 <REP> ASCII
13/02/2005 10:16 <REP> CodeStuff
29/04/2006 06:25 <REP> Common Files
13/02/2005 11:17 <REP> Conceptworld
30/11/2006 19:37 <REP> CoolMP3Splitter
11/09/2005 00:44 <REP> Creative
25/03/2006 20:33 <REP> eBay
17/04/2005 14:16 <REP> Elaborate Bytes
16/02/2007 19:50 <REP> eMule
25/12/2006 11:00 <REP> Fichiers communs
06/08/2006 13:51 <REP> GEOGRAPHIE
01/02/2007 21:11 <REP> Google
25/01/2005 22:16 <REP> Hewlett-Packard
30/12/2005 11:55 <REP> Intel
29/01/2005 01:32 <REP> Intel Corporation
21/10/2006 10:06 <REP> interMute
19/12/2006 00:06 <REP> Internet Explorer
01/11/2005 12:48 <REP> Inventel
28/09/2006 19:06 <REP> Java
17/12/2006 18:05 <REP> Kaspersky Lab
17/12/2006 11:01 <REP> kav-antiblaklist
02/02/2005 23:38 <REP> K-Lite Codec Pack
25/01/2005 21:32 <REP> Launch Manager
29/01/2005 20:51 <REP> Lavasoft
29/01/2005 20:58 <REP> Lavasoft Refupdate
29/01/2005 20:58 <REP> Lavasoft RegHance
04/02/2005 16:22 <REP> Logitech
03/04/2005 20:47 <REP> LRC Editor 4
25/06/2006 12:21 <REP> Macrogaming
13/05/2006 07:40 <REP> MediaCoder
11/02/2005 06:32 <REP> Messenger
25/01/2005 21:04 <REP> microsoft frontpage
26/12/2006 16:05 <REP> Microsoft Money 2005
07/10/2006 10:09 <REP> Microsoft Office
30/01/2005 18:13 <REP> Microsoft.NET
23/09/2006 00:17 <REP> MorpheusBar
26/01/2005 06:27 <REP> Movie Maker
03/02/2007 11:42 <REP> Mozilla Firefox
26/11/2006 18:27 <REP> MP3 EasySplitter Trial
01/11/2005 21:45 <REP> MSN Apps
01/11/2005 16:15 <REP> msn gaming zone
17/12/2006 18:48 <REP> MSN Messenger
16/11/2006 03:02 <REP> MSXML 4.0
11/02/2007 12:16 <REP> Native Instruments
25/01/2005 23:29 <REP> NETGEAR
26/01/2005 06:21 <REP> NetMeeting
13/10/2006 23:13 <REP> Neuf
12/02/2005 19:12 <REP> Nokia
30/01/2005 18:29 <REP> OfficeUpdate11
14/10/2006 17:10 <REP> Optical Mousemate
16/12/2006 03:01 <REP> Outlook Express
25/11/2006 15:59 <REP> PhotoRecoveryT for Digital Media
10/02/2007 10:33 <REP> Quark
14/03/2006 20:32 <REP> QuickTime
30/01/2005 16:38 <REP> Real
13/02/2005 19:52 <REP> RTE
14/02/2005 19:23 <REP> SAGEM
25/01/2005 21:00 <REP> Services en ligne
17/04/2005 14:16 <REP> SlySoft
21/01/2007 16:38 <REP> solarus
16/12/2006 17:01 <REP> Spybot - Search & Destroy
03/02/2007 17:03 <REP> Symantec
25/01/2005 21:32 <REP> Synaptics
14/07/2003 07:53 73ÿ771ÿ054 URLLists
01/11/2005 16:48 <REP> Utilitaire WLAN (USB) IEEE 802.11b
27/09/2005 20:55 <REP> Voice Rooms
27/09/2005 20:55 <REP> WebDeployerSupport
04/04/2005 18:52 <REP> Winamp
20/10/2006 23:29 <REP> Windows Defender
24/12/2006 12:49 <REP> Windows Media Connect 2
24/12/2006 17:05 <REP> Windows Media Player
18/09/2005 16:15 <REP> Windows NT
30/11/2005 19:04 <REP> WinRAR
22/12/2005 12:35 <REP> WinZip
25/01/2005 21:04 <REP> xerox
12/11/2005 10:43 <REP> YourWare Solutions
1 fichier(s) 73ÿ771ÿ054 octets
81 R‚p(s) 7ÿ888ÿ568ÿ320 octets libres

******************************************
## Popups autorisées

* Internet Explorer

! REG.EXE VERSION 3.0

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow
*.creative.com REG_BINARY
support.fujitsu-siemens.fr REG_BINARY
www.rfm.fr REG_BINARY
www.lido.fr REG_BINARY
www.rtl2.fr REG_BINARY

* Mozilla Firefox (1 autorisé 2 interdit)

---------- C:\DOCUMENTS AND SETTINGS\LAUREN\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\VNO8PW2A.DEFAULT\HOSTPERM.1

******************************************
## Registre

* [HKEY_CURRENT_USER\\Software\Microsoft\Internet Explorer\Main]
Search Bar REG_SZ http://www.google.com/ie

* [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
closeidoldebugobj REG_SZ C:\Documents and Settings\All Users\Application Data\Wma 16 close idol\Bike owns.exe

* [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
RectSoftware REG_SZ C:\DOCUME~1\Lauren\APPLIC~1\DATAFL~1\Cash Stupid.exe

******************************************
## Zones de sécurité

* HKCU Domains (4)

* P3P History (5)

******************************************
## Recherche C:\WINDOWS\*.htm, "C:\WINDOWS\*.gif"


*************** Fin du rapport ****************

Salut al78wan

Fait ceci :

Pour afficher tous les dossiers et fichiers cachés :

Clique sur "démarrer", "panneau de configuration", "outils" ,"option des dossiers", "affichage"
"
Coche:
¤ afficher les fichiers et dossiers cachés
- Clique sur "appliquer" puis "ok"
------------------------------------------------------------------

Clic sur C:\Documents and Settings\All Users\Application Data et supprime ce dossier :

- Wma 16 close idol

------------------------------------------------------------------

Télécharge et installe AVG anti-spyware :
Tu fais un scan complet de ton système, dès qu'il a fini.
Si il te trouve des espions, supprime les. Enregistre le rapport et colle le ici stp

AVG anti-spyware : reste gratuit après la période d'essai en français
---->http://www.infos-du-net.com/telecharger/Anti-Spyware-AVG,0301-7063.html

Si tu as besoin d'aide avec Ewido(devenu AVG-antispyware) regarde ce tutoriel:
--> http://www.kachouri.com/tuto/tuto-161-avg-anti-spyware-75-pour-votre-securite.html

Bonsoir,
Voir ci-dessous le rapport en question.
Merci,
Al78wan

---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

+ Créé à: 22:59:03 17/02/2007

+ Résultat de l'analyse:



C:\Program Files\Common Files\Companion Wizard\compwiz.exe -> Adware.Companion : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\Program Files\Common Files\Companion Wizard\WapCHK.dll -> Adware.Companion : Ignoré.
C:\WINDOWS\system32\server.exe -> Dropper.Paradrop.a : Nettoyé et sauvegardé (mise en quarantaine).
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.1\UWFX5V_0001_N57M1412NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.b : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.1\UERSV_0001_N68M0602NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.2\UERSV_0001_N68M0602NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.3\UERSV_0001_N68M0602NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.4\UERSV_0001_N68M0602NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.5\UERSV_0001_N68M0602NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.6\UERSV_0001_N68M0602NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\UERSV_0001_N68M0602NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.1\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.2\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.3\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.4\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.5\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.6\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.7\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.8\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Ignoré.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Ignoré.
C:\WINDOWS\Downloaded Program Files\USDR6V_0001_D18M3107NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Ignoré.
:mozilla.219:C:\Documents and Settings\Lauren\Application Data\Mozilla\Firefox\Profiles\vno8pw2a.default\cookies.txt -> TrackingCookie.2o7 : Nettoyé.
C:\Documents and Settings\Lauren\Cookies\lauren@gettyimages.122.2o7[1].txt -> TrackingCookie.2o7 : Nettoyé.
:mozilla.397:C:\Documents and Settings\Lauren\Application Data\Mozilla\Firefox\Profiles\vno8pw2a.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.398:C:\Documents and Settings\Lauren\Application Data\Mozilla\Firefox\Profiles\vno8pw2a.default\cookies.txt -> TrackingCookie.Adtech : Nettoyé.
:mozilla.370:C:\Documents and Settings\Lauren\Application Data\Mozilla\Firefox\Profiles\vno8pw2a.default\cookies.txt -> TrackingCookie.Estat : Nettoyé.
C:\Documents and Settings\Lauren\Cookies\lauren@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
:mozilla.393:C:\Documents and Settings\Lauren\Application Data\Mozilla\Firefox\Profiles\vno8pw2a.default\cookies.txt -> TrackingCookie.Sitestat : Nettoyé.
:mozilla.419:C:\Documents and Settings\Lauren\Application Data\Mozilla\Firefox\Profiles\vno8pw2a.default\cookies.txt -> TrackingCookie.Sitestat : Nettoyé.
:mozilla.124:C:\Documents and Settings\Lauren\Application Data\Mozilla\Firefox\Profiles\vno8pw2a.default\cookies.txt -> TrackingCookie.Tacoda : Nettoyé.
:mozilla.125:C:\Documents and Settings\Lauren\Application Data\Mozilla\Firefox\Profiles\vno8pw2a.default\cookies.txt -> TrackingCookie.Tacoda : Nettoyé.
:mozilla.116:C:\Documents and Settings\Lauren\Application Data\Mozilla\Firefox\Profiles\vno8pw2a.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.130:C:\Documents and Settings\Lauren\Application Data\Mozilla\Firefox\Profiles\vno8pw2a.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.142:C:\Documents and Settings\Lauren\Application Data\Mozilla\Firefox\Profiles\vno8pw2a.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
:mozilla.97:C:\Documents and Settings\Lauren\Application Data\Mozilla\Firefox\Profiles\vno8pw2a.default\cookies.txt -> TrackingCookie.Weborama : Nettoyé.
C:\Documents and Settings\Lauren\Cookies\lauren@weborama[1].txt -> TrackingCookie.Weborama : Nettoyé.


Fin du rapport

Regarde ici rien n'a été supprimé Ignoré

Une fois que le scan est terminé, tu dois y avoir un bouton mettre en quarantaine ou supprimer.
Regarde le tutoriel si besoin est ;-)

Bonjour,
Désolé d'avoir appliqué les actions un peu vite !
Voir nouveau rapport ci-dessous.
Remarque :
Lors de la remise sous tension du PC, Kaspersky a supprimé un certain nombre de menaces.
A+
Al78wan

---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

+ Créé à: 10:31:13 18/02/2007

+ Résultat de l'analyse:



C:\Program Files\Common Files\Companion Wizard\compwiz.exe -> Adware.Companion : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\Program Files\Common Files\Companion Wizard\WapCHK.dll -> Adware.Companion : Nettoyé.
C:\System Volume Information\_restore{C0C8113E-1810-4FE1-804D-44BA8AB99697}\RP851\A0118967.exe -> Dropper.Paradrop.a : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.1\UWFX5V_0001_N57M1412NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.b : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.1\UERSV_0001_N68M0602NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.2\UERSV_0001_N68M0602NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.3\UERSV_0001_N68M0602NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.4\UERSV_0001_N68M0602NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.5\UERSV_0001_N68M0602NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.6\UERSV_0001_N68M0602NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\UERSV_0001_N68M0602NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.d : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.1\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.2\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.3\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.4\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.5\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.6\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.7\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\CONFLICT.8\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Nettoyé.
C:\Program Files\interMute\SpySubtract\Backup\Clean Session - 1161425696.ssb/C:\WINDOWS\Downloaded Program Files\USDR6V_0001_D08M1005NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Nettoyé.
C:\WINDOWS\Downloaded Program Files\USDR6V_0001_D18M3107NetInstaller.exe -> Not-A-Virus.Downloader.Win32.WinFixer.l : Nettoyé.
C:\Documents and Settings\Lauren\Cookies\lauren@weborama[1].txt -> TrackingCookie.Weborama : Nettoyé.


Fin du rapport

Salut

Ok, très bien.

Clic sur démarrer, poste de travail, C:, program files et supprime ce dossier :

- eoRezo < n'installe plus ça

**Si un fichier/dossier persiste lors de la suppression fait ceci:
- Redémarre ton PC. Dès l'allumage de celui-ci tapote la touche F8 (ou F5 si F8 ne fonctionne pas), à l'écran qui va apparaître choisis "mode sans echec" attends un peu..
Puis va supprimer les fichiers/dossiers, vide ta corbeille et redémarre ton PC normalement.


¤ Tu as quoi comme anti-spywares ?

¤ Remet un rapport hijackthis pour faire le nettoyage ;-)

Bonsoir boulepate62,
1. eoRezo : Je l'ai desinstallé depuis un bon moment déjà. Peut-être en reste-t-il quelques traces dans le PC
2. J'ai utilisé Spybot et Spysubtract mais je ne les utilisais guère dernèrement
3. Rapport Hijackthis : voir ci-desous.
Merci,
Al78wan

Logfile of HijackThis v1.99.1
Scan saved at 22:38:44, on 22/02/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\WINDOWS\system32\ZCfgSvc.exe
C:\WINDOWS\system32\RegSrvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\wlancfg.exe
C:\WINDOWS\system32\1XConfig.exe
C:\Program Files\Launch Manager\Wbutton.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Launch Manager\LaunchAp.exe
C:\WINDOWS\System32\igfxtray.exe
C:\WINDOWS\System32\hkcmd.exe
C:\Program Files\Launch Manager\HotkeyApp.exe
C:\Program Files\Launch Manager\CtrlVol.exe
C:\Program Files\Elaborate Bytes\CloneCD\CloneCDTray.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\Java\jre1.5.0\bin\jusched.exe
C:\Program Files\NETGEAR\WG511\Utility\WG511WLU.exe
C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Neuf\Kit\WiFi\9wifi.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\Program Files\YourWare Solutions\FreeRAM XP Pro\FreeRAM XP Pro.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Fichiers communs\RTE\RTEGPRS.exe
C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
C:\WINDOWS\System32\wbem\wmiapsrv.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Adobe\Acrobat 6.0\Distillr\AcroTray.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\HPZSTC07.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Lauren\Local Settings\Temporary Internet Files\Content.IE5\Q3YUWJHV\HijackThis[1].exe
C:\Program Files\Hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll (file missing)
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SWEETIE - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - C:\PROGRA~1\MACROG~1\SWEETI~1\toolbar.dll (file missing)
O2 - BHO: eBay Toolbar Helper - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\PROGRA~1\eoRezo\EoAdv\EOREZO~1.DLL (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: eBay Toolbar - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll (file missing)
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [Wbutton] "C:\Program Files\Launch Manager\Wbutton.exe"
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LaunchAp] C:\Program Files\Launch Manager\LaunchAp.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [HotkeyApp] C:\Program Files\Launch Manager\HotkeyApp.exe
O4 - HKLM\..\Run: [ElbyCheckElbyCDFL] "C:\Program Files\Elaborate Bytes\CloneCD\ElbyCheck.exe" /L ElbyCDFL
O4 - HKLM\..\Run: [CtrlVol] C:\Program Files\Launch Manager\CtrlVol.exe
O4 - HKLM\..\Run: [CloneCDTray] C:\Program Files\Elaborate Bytes\CloneCD\CloneCDTray.exe
O4 - HKLM\..\Run: [Ad-watch] "C:\Program Files\Lavasoft\Ad-aware 6\Ad-watch.exe"
O4 - HKLM\..\Run: [ZCfgSvc.exe] C:\WINDOWS\system32\ZCfgSvc.exe
O4 - HKLM\..\Run: [PRONoMgr.exe] C:\Program Files\Intel\NCS\PROSet\PRONoMgr.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [eBayToolbar] C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe
O4 - HKLM\..\Run: [EoEngine] "C:\Program Files\eoRezo\EoEngine.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0\bin\jusched.exe
O4 - HKLM\..\Run: [WG511WLU] C:\Program Files\NETGEAR\WG511\Utility\WG511WLU.exe
O4 - HKLM\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKLM\..\Run: [Install_BlueDSL] D:\install.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [closeidoldebugobj] C:\Documents and Settings\All Users\Application Data\Wma 16 close idol\Bike owns.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [Autoconfigurateur WiFi Neuf] C:\Program Files\Neuf\Kit\WiFi\9wifi.exe
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - HKCU\..\Run: [FreeRAM XP] "C:\Program Files\YourWare Solutions\FreeRAM XP Pro\FreeRAM XP Pro.exe" -win
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\mnyexpr.exe"
O4 - HKCU\..\Run: [RTEGPRS] "C:\Program Files\Fichiers communs\RTE\RTEGPRS.exe" tray
O4 - HKCU\..\Run: [Creative Detector] "C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe" /R
O4 - HKCU\..\Run: [RectSoftware] C:\DOCUME~1\Lauren\APPLIC~1\DATAFL~1\Cash Stupid.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: k.lnk = C:\Program Files\kav-antiblaklist\k.BAT
O4 - Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: k.lnk = C:\Program Files\kav-antiblaklist\k.BAT
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O8 - Extra context menu item: Ajouter à Kaspersky Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\ie_banner_deny.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Antivirus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scieplugin.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: teleir_cert - https://static.ir.dgi.minefi.gouv.fr/secure/connexion/archives/ie4n4/teleir_cert.cab
O16 - DPF: {00330010-0000-0000-0000-000020060010} - http://207.234.185.217/ABoxInst_int22.exe
O16 - DPF: {00330010-0000-0000-0000-000020160010} - http://207.234.185.217/ABoxInst_int25.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {09F1ADAC-76D8-4D0F-99A5-5C907DADB988} - http://fr.systemdoctor.com/download/2006/cab/SystemDoctor2006FreeInstall_fr.cab
O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://creative.com/su/ocx/15015/CTSUEng.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1F83CD9E-505E-4F87-BECE-0832A763E36F} (Image Uploader 3.0 Control) - http://www.mypixmania.com/fr/fr/importer/MypixUploader.cab
O16 - DPF: {2D2BEE6E-3C9A-4D58-B9EC-458EDB28D0F6} - http://cdn.drivecleaner.com/installdrivecleanerstart_fr.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by102fd.bay102.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {6DB731A3-B074-4118-8B1C-32511C65D836} (FotovistaPhotoUploader.ctrFpu) - http://www.mypixmania.com/fr/fr/tools/activex/fpu.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {A8482EAF-A1F3-4934-AE3F-56EB195A50BF} (DeskUpdate- Activex Control) - http://support.fujitsu-siemens.de/DeskUpdate/isapi/activex.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab47946.cab
O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://creative.com/su/ocx/15016/CTPID.cab
O18 - Protocol: bw+0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: offline-8876480 - {3383017C-85F8-4498-8110-0687A68FCC7A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - AppInit_DLLs: "C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll"
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll
O20 - Winlogon Notify: Sebring - C:\WINDOWS\system32\LgNotify.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - C:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Kaspersky Internet Security 6.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" -r (file missing)
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: InCD Helper (InCDsrv) - Unknown owner - C:\Program Files\Ahead\InCD\InCDsrv.exe (file missing)
O23 - Service: LiveUpdate - Unknown owner - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE (file missing)
O23 - Service: Intel NCS NetService (NetSvc) - Intel(R) Corporation - C:\Program Files\Intel\NCS\Sync\NetSvc.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: RegSrvc - Intel Corporation - C:\WINDOWS\system32\RegSrvc.exe
O23 - Service: Spectrum24 Event Monitor (S24EventMonitor) - Intel Corporation - C:\WINDOWS\system32\S24EvMon.exe
O23 - Service: Service de lancement de WlanCfg (Wlancfg) - Inventel - C:\WINDOWS\wlancfg.exe

Salut al78wan

Ok, très bien. On va faire le nettoyage rien ne sera supprimé sauf si indiqué.

¤ Relance HijackThis, choisis "do a scan only" coche la case devant les lignes ci-dessous et clic en bas sur "fix checked"

R3 - URLSearchHook: (no name) - - (no file)
R3 - URLSearchHook: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll (file missing)
O2 - BHO: EoRezoBHO - {64F56FC1-1272-44CD-BA6E-39723696E350} - C:\PROGRA~1\eoRezo\EoAdv\EOREZO~1.DLL (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: eBay Toolbar - {92085AD4-F48A-450D-BD93-B28CC7DF67CE} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll (file missing)
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [CloneCDTray] C:\Program Files\Elaborate Bytes\CloneCD\CloneCDTray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [eBayToolbar] C:\Program Files\eBay\eBay Toolbar2\eBayTBDaemon.exe
O4 - HKLM\..\Run: [EoEngine] "C:\Program Files\eoRezo\EoEngine.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0\bin\jusched.exe
O4 - HKLM\..\Run: [Install_BlueDSL] D:\install.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [closeidoldebugobj] C:\Documents and Settings\All Users\Application Data\Wma 16 close idol\Bike owns.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - HKCU\..\Run: [FreeRAM XP] "C:\Program Files\YourWare Solutions\FreeRAM XP Pro\FreeRAM XP Pro.exe" -win
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SweetIM] C:\Program Files\Macrogaming\SweetIM\SweetIM.exe
O4 - HKCU\..\Run: [MoneyAgent] "C:\Program Files\Microsoft Money\System\mnyexpr.exe"
O4 - HKCU\..\Run: [RectSoftware] C:\DOCUME~1\Lauren\APPLIC~1\DATAFL~1\Cash Stupid.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)

+ Toutes les O16


¤ Clic sur démarrer, poste de travail, C:, program files et supprime ces dossiers si présents :

- Symantec / Norton
- MSN Apps


¤ Clic sur "démarrer", "exécuter", tape: services.msc
Cherche dans la liste les lignes ci-dessous, tu fais un clic droit dessus choisis "propriétés" et régle les sur "désactivé"

- AVG Anti-Spyware Guard
- LiveUpdate
- Planificateur LiveUpdate automatique


¤ Désinstalle ce programme inutile pas de souci pour ta cam ;-)

- Desktop Messenger
- FreeRAM XP Pro < à toi de voir, pour moi ce genre de logiciel n'est pas très utile si ton système est bien configuré. De plus il consomme lui aussi de la RAM pour fonctionner :-/


Prècise ou en est ton problème puis n'ésite pas à remettre un rapport hijackthis car c'est le chantier ;-)

Bonjour Boulepate 62,
Le problème étant résolu, je clos ce post en te remerciant de nouveau pour ton aide.
A bientôt et bon courage pour les autres pbs à régler !
Al78wan