Rapport HiJackThis pour virus cid, que faire? [Résolu]

http://www.commentcamarche.net/faq/sujet 5996 comment bloquer les fenetres cid

Bonjour,

Télécharge LopS&D.
http://eric.71.mespages.googlepages.com/LopSD.exe

Installe le logiciel.
Une icône va apparaitre sur le bureau. Double clique dessus pour lancer le logiciel
Tu choisis la langue et l'option 1 pour effectuer la recherche.
A la fin de la recherche, un rapport LopR.txt apparait. Il se trouve en C:\LopR.txt.
Tu posteras ce rapport dans le prochain message

A+

RE BONJOUR je vous merci pour la rapidité de vos réponse, voici le rapport

-----------------------[ Lop S&D 4.2.2-0 XP/Vista ]---------------------

[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : Villa Patrick ] [ "C:\Lop SD" ] [ Selection : 1 ]
[ 07/07/2008 | 13:18:36,43 ] [ PC : ACER-7989E0343A ]
[ MAJ : 06-07-2008 | 10:55 ]

-------------[ Listing des dossiers dans Application Data ]------------

[11/08/2006|21:25] C:\DOCUME~1\ADMINI~1\APPLIC~1\desktop.ini
[01/11/2006|01:09] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[01/11/2006|01:09] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia
[01/11/2006|01:09] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft

[07/03/2008|08:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[07/07/2008|11:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
[22/01/2007|17:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CanonBJ
[14/08/2007|21:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[11/08/2006|21:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[03/08/2007|11:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[22/01/2007|17:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[13/11/2007|20:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[06/03/2007|19:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
[22/01/2007|17:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ScanSoft
[03/08/2007|11:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[12/11/2007|20:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[23/04/2007|15:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[07/07/2008|11:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[21/06/2008|15:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\third lies itch ford
[29/01/2007|21:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[29/02/2008|17:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[11/08/2006|21:25] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[01/11/2006|01:09] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[01/11/2006|01:09] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
[01/11/2006|01:09] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[01/11/2006|01:09] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[01/11/2006|01:09] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft


----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------

[07/07/2008 13:00][--ah-----] C:\WINDOWS\tasks\AA355792918AC302.job
[07/07/2008 10:17][--ah-----] C:\WINDOWS\tasks\SA.DAT
[10/08/2004 22:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

AA355792918AC302.job <--> c:\docume~1\villap~1\applic~1\gramvi~1\meetonegrim.exe

---------------[ Listing des dossiers dans C:\Program Files ]--------------

[01/11/2006|01:10] C:\Program Files\Acer WLAN 11g USB Dongle
[07/03/2008|08:26] C:\Program Files\Adobe
[23/04/2007|15:52] C:\Program Files\Alwil Software
[22/01/2007|17:53] C:\Program Files\ArcSoft
[24/12/2007|12:03] C:\Program Files\Ares
[22/01/2007|18:14] C:\Program Files\Canon
[22/01/2007|17:47] C:\Program Files\CanonBJ
[04/12/2007|19:46] C:\Program Files\CCleaner
[01/11/2006|01:10] C:\Program Files\commercial
[11/08/2006|19:27] C:\Program Files\ComPlus Applications
[17/02/2007|18:02] C:\Program Files\Controle Parental
[01/11/2006|01:10] C:\Program Files\CyberLink
[01/11/2006|01:10] C:\Program Files\DIFX
[22/01/2007|17:09] C:\Program Files\DivX
[13/05/2008|20:03] C:\Program Files\Everest Poker
[13/11/2007|20:08] C:\Program Files\Fichiers communs
[01/11/2006|01:10] C:\Program Files\FrenchOtto
[23/04/2007|16:09] C:\Program Files\GemMasterFrench
[14/11/2007|20:52] C:\Program Files\Google
[21/06/2008|15:29] C:\Program Files\Gram View 4
[07/07/2008|11:20] C:\Program Files\HiJackThis
[24/03/2008|11:16] C:\Program Files\InstallShield Installation Information
[11/06/2008|20:39] C:\Program Files\Internet Explorer
[29/01/2007|17:37] C:\Program Files\Inventel
[02/09/2007|12:16] C:\Program Files\Iteral
[11/11/2007|17:35] C:\Program Files\Java
[25/07/2007|18:44] C:\Program Files\Logitech
[01/11/2006|01:10] C:\Program Files\Messenger
[07/07/2008|11:11] C:\Program Files\Messenger Plus! Live
[13/11/2007|21:54] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[01/11/2006|01:10] C:\Program Files\microsoft frontpage
[13/11/2007|20:22] C:\Program Files\Microsoft SQL Server Compact Edition
[01/11/2006|01:10] C:\Program Files\Movie Maker
[02/12/2007|17:43] C:\Program Files\MP3
[30/01/2007|18:06] C:\Program Files\MSBuild
[22/01/2007|21:11] C:\Program Files\MSN
[01/11/2006|01:10] C:\Program Files\MSN Gaming Zone
[24/03/2008|11:19] C:\Program Files\MSN Messenger
[29/01/2007|21:41] C:\Program Files\MSXML 4.0
[17/08/2007|11:19] C:\Program Files\MSXML 6.0
[24/12/2007|11:40] C:\Program Files\MyMPxPlayer.org
[01/11/2006|01:10] C:\Program Files\NetMeeting
[01/11/2006|01:10] C:\Program Files\NewTech Infosystems
[01/11/2006|01:11] C:\Program Files\Oca History Tool
[01/11/2006|01:11] C:\Program Files\Online Services
[25/04/2007|09:31] C:\Program Files\OpenOffice.org 2.1
[25/04/2007|09:31] C:\Program Files\OpenOffice.org 2.2
[14/06/2007|07:06] C:\Program Files\Outlook Express
[25/09/2007|18:04] C:\Program Files\QuickTime
[01/11/2006|01:11] C:\Program Files\Realtek
[30/01/2007|18:03] C:\Program Files\Reference Assemblies
[22/01/2007|17:54] C:\Program Files\ScanSoft
[01/11/2006|01:11] C:\Program Files\Services en ligne
[03/08/2007|11:33] C:\Program Files\Skype
[12/11/2007|20:49] C:\Program Files\Spybot - Search & Destroy
[03/07/2008|08:24] C:\Program Files\Spyware Doctor
[24/03/2008|11:16] C:\Program Files\ToniArts
[11/08/2006|19:40] C:\Program Files\Uninstall Information
[07/07/2008|10:19] C:\Program Files\Wanadoo
[27/02/2008|18:45] C:\Program Files\Windows Live
[24/03/2008|11:19] C:\Program Files\Windows Live Safety Center
[30/01/2007|17:59] C:\Program Files\Windows Media Connect 2
[30/01/2007|17:59] C:\Program Files\Windows Media Player
[01/11/2006|01:11] C:\Program Files\Windows NT
[01/11/2006|01:11] C:\Program Files\Windows Plus
[11/08/2006|19:28] C:\Program Files\WindowsUpdate
[01/11/2006|01:11] C:\Program Files\xerox
[14/11/2007|17:05] C:\Program Files\Yahoo!

------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------

[07/03/2008|08:26] C:\Program Files\Fichiers communs\Adobe
[29/01/2007|17:37] C:\Program Files\Fichiers communs\FDEUnInstaller.exe
[22/01/2007|17:55] C:\Program Files\Fichiers communs\InstallShield
[19/01/2007|17:14] C:\Program Files\Fichiers communs\Java
[01/11/2006|01:10] C:\Program Files\Fichiers communs\LightScribe
[25/07/2007|18:45] C:\Program Files\Fichiers communs\Logitech
[13/11/2007|20:12] C:\Program Files\Fichiers communs\Microsoft Shared
[01/11/2006|01:10] C:\Program Files\Fichiers communs\MSSoap
[01/11/2006|01:10] C:\Program Files\Fichiers communs\muvee Technologies
[01/11/2006|01:10] C:\Program Files\Fichiers communs\NewTech Infosystems
[01/11/2006|01:10] C:\Program Files\Fichiers communs\ODBC
[22/01/2007|17:55] C:\Program Files\Fichiers communs\ScanSoft Shared
[01/11/2006|01:10] C:\Program Files\Fichiers communs\Services
[03/08/2007|11:33] C:\Program Files\Fichiers communs\Skype
[01/11/2006|01:10] C:\Program Files\Fichiers communs\SpeechEngines
[23/04/2007|15:50] C:\Program Files\Fichiers communs\Symantec Shared
[14/06/2007|07:06] C:\Program Files\Fichiers communs\System
[13/11/2007|20:12] C:\Program Files\Fichiers communs\WindowsLiveInstaller

---------------------------[ Process ]--------------------------

... 68

iexplore.exe ~ [2068]
iexplore.exe ~ [2736]
iexplore.exe ~ [2776]
iexplore.exe ~ [5432]

----------------------[ Recherche avec S_Lop ]---------------------

Aucun fichier / dossier Lop trouvé !

-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\augiwrum.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\emocgvia.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\jxnipmeb.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\meetonegrim.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\mpeg heck.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\nahlmgeh.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\otmagokm.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\uploadsettingsfacehole.exe
C:\Program Files\Gram View 4
C:\DOCUME~1\ALLUSE~1\APPLIC~1\third lies itch ford
C:\DOCUME~1\ALLUSE~1\APPLIC~1\third lies itch ford\Deaf soft.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\augiwrum.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\emocgvia.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\jxnipmeb.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\meetonegrim.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\mpeg heck.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\nahlmgeh.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\otmagokm.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\uploadsettingsfacehole.exe
C:\Program Files\gramvi~1
C:\WINDOWS\Prefetch\MEETONEGRIM.EXE-00F90FAC.pf
C:\WINDOWS\Prefetch\MPEG HECK.EXE-158C54C5.pf
C:\WINDOWS\Prefetch\DEAF SOFT.EXE-30A8BB4A.pf
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@www.adserver5[1].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@bigpoint[1].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@fr1.seafight.bigpoint[1].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@banner.cotedazurpalace[2].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@cotedazurpalace[2].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@adopt.euroclick[1].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@fr1.seafight.bigpoint[1].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@2xmoinscher[1].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@www.2xmoinscher[2].txt
C:\WINDOWS\Tasks\AA355792918AC302.job

----------------------[ Verification du Registre ]----------------------

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"morewin"="C:\\DOCUME~1\\VILLAP~1\\APPLIC~1\\GRAMVI~1\\mpeg heck.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Itch ford four knob"="C:\\Documents and Settings\\All Users\\Application Data\\third lies itch ford\\Deaf soft.exe"

--------------------[ Verification du fichier Hosts ]---------------------

Fichier Hosts MODIFIE

127.0.0.1 bin.errorprotector.com ## added by CiD
127.0.0.1 br.errorsafe.com ## added by CiD
127.0.0.1 br.winantivirus.com ## added by CiD
127.0.0.1 br.winfixer.com ## added by CiD
127.0.0.1 cdn.drivecleaner.com ## added by CiD
127.0.0.1 cdn.errorsafe.com ## added by CiD
127.0.0.1 cdn.winsoftware.com ## added by CiD
127.0.0.1 de.errorsafe.com ## added by CiD
127.0.0.1 de.winantivirus.com ## added by CiD
127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
127.0.0.1 download.cdn.errorsafe.com ## added by CiD
127.0.0.1 download.cdn.winsoftware.com ## added by CiD
127.0.0.1 download.errorsafe.com ## added by CiD
127.0.0.1 download.systemdoctor.com ## added by CiD
127.0.0.1 download.winantispyware.com ## added by CiD
127.0.0.1 download.windrivecleaner.com ## added by CiD
127.0.0.1 download.winfixer.com ## added by CiD
127.0.0.1 drivecleaner.com ## added by CiD
127.0.0.1 dynamique.drivecleaner.com ## added by CiD
127.0.0.1 errorprotector.com ## added by CiD
127.0.0.1 errorsafe.com ## added by CiD
127.0.0.1 es.winantivirus.com ## added by CiD
127.0.0.1 fr.winantivirus.com ## added by CiD
127.0.0.1 fr.winfixer.com ## added by CiD
127.0.0.1 go.drivecleaner.com ## added by CiD
127.0.0.1 go.errorsafe.com ## added by CiD
127.0.0.1 go.winantispyware.com ## added by CiD
127.0.0.1 go.winantivirus.com ## added by CiD
127.0.0.1 hk.winantivirus.com ## added by CiD
127.0.0.1 instlog.errorsafe.com ## added by CiD
127.0.0.1 instlog.winantivirus.com ## added by CiD
127.0.0.1 instlog.winfixer.com ## added by CiD
127.0.0.1 jsp.drivecleaner.com ## added by CiD
127.0.0.1 kb.errorsafe.com ## added by CiD
127.0.0.1 kb.winantivirus.com ## added by CiD
127.0.0.1 nl.errorsafe.com ## added by CiD
127.0.0.1 se.errorsafe.com ## added by CiD
127.0.0.1 secure.drivecleaner.com ## added by CiD
127.0.0.1 secure.errorsafe.com ## added by CiD
127.0.0.1 secure.winantispam.com ## added by CiD
127.0.0.1 secure.winantispy.com ## added by CiD
127.0.0.1 secure.winantivirus.com ## added by CiD
127.0.0.1 support.winantivirus.com ## added by CiD
127.0.0.1 trial.updates.winsoftware.com ## added by CiD
127.0.0.1 ulog.winantivirus.com ## added by CiD
127.0.0.1 utils.errorsafe.com ## added by CiD
127.0.0.1 utils.winantivirus.com ## added by CiD
127.0.0.1 utils.winfixer.com ## added by CiD
127.0.0.1 winantispyware.com ## added by CiD
127.0.0.1 winantivirus.com ## added by CiD
127.0.0.1 winfixer.com ## added by CiD
127.0.0.1 winfixer2006.com ## added by CiD
127.0.0.1 winsoftware.com ## added by CiD
127.0.0.1 [i]ww/iw.drivecleaner.com ## added by CiD
127.0.0.1 [i]ww/iw.errorprotector.com ## added by CiD
127.0.0.1 [i]ww/iw.errorsafe.com ## added by CiD
127.0.0.1 [i]ww/iw.systemdoctor.com ## added by CiD
127.0.0.1 [i]ww/iw.utils.winfixer.com ## added by CiD
127.0.0.1 [i]ww/iw.win-anti-virus-pro.com ## added by CiD
127.0.0.1 [i]ww/iw.win-virus-pro.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispam.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispy.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispyware.com ## added by CiD
127.0.0.1 [i]ww/iw.winantivirus.com ## added by CiD
127.0.0.1 [i]ww/iw.winantiviruspro.com ## added by CiD
127.0.0.1 [i]ww/iw.windrivecleaner.com ## added by CiD
127.0.0.1 [i]ww/iw.windrivesafe.com ## added by CiD
127.0.0.1 [i]ww/iw.winfixer.com ## added by CiD
127.0.0.1 [i]ww/iw.winfixer2006.com ## added by CiD
127.0.0.1 [i]ww/iw.winsoftware.com ## added by CiD

-> 7455 ( 70 ## added by CiD )

/!\ 1 Not 127.0.0.1 !!

----------------[ Recherche de fichiers avec Catchme ]-----------------

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-07-07 13:21:17
Windows 5.1.2600 Service Pack 2 NTFS
detected NTDLL code modification:
ZwClose
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------[ Recherche d'autres infections ]---------------------

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Acer Empowering Technology Monitor"="C:\\WINDOWS\\system32\\SysMonitor.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"eDataSecurity Loader"="C:\\Acer\\Empowering Technology\\eDataSecurity\\eDSloader.exe 0"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"eRecoveryService"="C:\\Acer\\Empowering Technology\\eRecovery\\eRAgent.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"eDataSecurity Loader"="C:\\Acer\\Empowering Technology\\eDataSecurity\\eDSloader.exe 0"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PHIME2002ASync"="C:\\WINDOWS\\system32\\IME\\TINTLGNT\\TINTSETP.EXE /SYNC"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PHIME2002A"="C:\\WINDOWS\\system32\\IME\\TINTLGNT\\TINTSETP.EXE /IMEName"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"eDataSecurity Loader"="C:\\Acer\\Empowering Technology\\eDataSecurity\\eDSloader.exe 0"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"eRecoveryService"="C:\\Acer\\Empowering Technology\\eRecovery\\eRAgent.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SSBkgdUpdate"="\"C:\\Program Files\\Fichiers communs\\Scansoft Shared\\SSBkgdUpdate\\SSBkgdupdate.exe\" -Embedding -boot"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"OpwareSE4"="\"C:\\Program Files\\ScanSoft\\OmniPageSE4.0\\OpwareSE4.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LogitechCameraService(E)"="C:\\WINDOWS\\system32\\ElkCtrl.exe /automation"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TalkAndWrite"="C:\\Documents and Settings\\All Users\\Application Data\\Skype\\Plugins\\Plugins\\1163D2B46CC742E5A3CC9E4157887751\\TalkAndWrite.exe /run"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ScanSoft OmniPage SE 4.0-reminder"="\"C:\\Program Files\\ScanSoft\\OmniPageSE4.0\\Ereg\\Ereg.exe\" -r \"C:\\Documents and Settings\\All Users\\Application Data\\ScanSoft\\OmniPageSE4.0\\Ereg\\ereg.ini\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Itch ford four knob"="C:\\Documents and Settings\\All Users\\Application Data\\third lies itch ford\\Deaf soft.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Itch ford four knob"="C:\\Documents and Settings\\All Users\\Application Data\\third lies itch ford\\Deaf soft.exe"

[b]! EGDACCESS !/b



[F:500][D:8]-> C:\DOCUME~1\VILLAP~1\LOCALS~1\Temp
[F:199][D:0]-> C:\DOCUME~1\VILLAP~1\Cookies
[F:15233][D:18]-> C:\DOCUME~1\VILLAP~1\LOCALS~1\TEMPOR~1\content.IE5

--------------------[ Fin du rapport a 13:21:56,85 ]----------------------

voici le premier rapport


-----------------------[ Lop S&D 4.2.2-0 XP/Vista ]---------------------

[ Windows XP (NT 5.1) Build 2600, Service Pack 2 ]
[ USER : Villa Patrick ] [ "C:\Lop SD" ] [ Selection : 1 ]
[ 07/07/2008 | 13:18:36,43 ] [ PC : ACER-7989E0343A ]
[ MAJ : 06-07-2008 | 10:55 ]

-------------[ Listing des dossiers dans Application Data ]------------

[11/08/2006|21:25] C:\DOCUME~1\ADMINI~1\APPLIC~1\desktop.ini
[01/11/2006|01:09] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
[01/11/2006|01:09] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia
[01/11/2006|01:09] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft

[07/03/2008|08:26] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
[07/07/2008|11:01] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Azureus
[22/01/2007|17:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CanonBJ
[14/08/2007|21:27] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
[11/08/2006|21:25] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
[03/08/2007|11:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
[22/01/2007|17:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
[13/11/2007|20:12] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
[06/03/2007|19:41] C:\DOCUME~1\ALLUSE~1\APPLIC~1\nView_Profiles
[22/01/2007|17:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\ScanSoft
[03/08/2007|11:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Skype
[12/11/2007|20:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
[23/04/2007|15:48] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
[07/07/2008|11:20] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
[21/06/2008|15:30] C:\DOCUME~1\ALLUSE~1\APPLIC~1\third lies itch ford
[29/01/2007|21:07] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
[29/02/2008|17:13] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

[11/08/2006|21:25] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
[01/11/2006|01:09] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
[01/11/2006|01:09] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
[01/11/2006|01:09] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

[01/11/2006|01:09] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

[01/11/2006|01:09] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft


----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]---------------

[07/07/2008 13:00][--ah-----] C:\WINDOWS\tasks\AA355792918AC302.job
[07/07/2008 10:17][--ah-----] C:\WINDOWS\tasks\SA.DAT
[10/08/2004 22:00][-r-h-----] C:\WINDOWS\tasks\desktop.ini

AA355792918AC302.job <--> c:\docume~1\villap~1\applic~1\gramvi~1\meetonegrim.exe

---------------[ Listing des dossiers dans C:\Program Files ]--------------

[01/11/2006|01:10] C:\Program Files\Acer WLAN 11g USB Dongle
[07/03/2008|08:26] C:\Program Files\Adobe
[23/04/2007|15:52] C:\Program Files\Alwil Software
[22/01/2007|17:53] C:\Program Files\ArcSoft
[24/12/2007|12:03] C:\Program Files\Ares
[22/01/2007|18:14] C:\Program Files\Canon
[22/01/2007|17:47] C:\Program Files\CanonBJ
[04/12/2007|19:46] C:\Program Files\CCleaner
[01/11/2006|01:10] C:\Program Files\commercial
[11/08/2006|19:27] C:\Program Files\ComPlus Applications
[17/02/2007|18:02] C:\Program Files\Controle Parental
[01/11/2006|01:10] C:\Program Files\CyberLink
[01/11/2006|01:10] C:\Program Files\DIFX
[22/01/2007|17:09] C:\Program Files\DivX
[13/05/2008|20:03] C:\Program Files\Everest Poker
[13/11/2007|20:08] C:\Program Files\Fichiers communs
[01/11/2006|01:10] C:\Program Files\FrenchOtto
[23/04/2007|16:09] C:\Program Files\GemMasterFrench
[14/11/2007|20:52] C:\Program Files\Google
[21/06/2008|15:29] C:\Program Files\Gram View 4
[07/07/2008|11:20] C:\Program Files\HiJackThis
[24/03/2008|11:16] C:\Program Files\InstallShield Installation Information
[11/06/2008|20:39] C:\Program Files\Internet Explorer
[29/01/2007|17:37] C:\Program Files\Inventel
[02/09/2007|12:16] C:\Program Files\Iteral
[11/11/2007|17:35] C:\Program Files\Java
[25/07/2007|18:44] C:\Program Files\Logitech
[01/11/2006|01:10] C:\Program Files\Messenger
[07/07/2008|11:11] C:\Program Files\Messenger Plus! Live
[13/11/2007|21:54] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[01/11/2006|01:10] C:\Program Files\microsoft frontpage
[13/11/2007|20:22] C:\Program Files\Microsoft SQL Server Compact Edition
[01/11/2006|01:10] C:\Program Files\Movie Maker
[02/12/2007|17:43] C:\Program Files\MP3
[30/01/2007|18:06] C:\Program Files\MSBuild
[22/01/2007|21:11] C:\Program Files\MSN
[01/11/2006|01:10] C:\Program Files\MSN Gaming Zone
[24/03/2008|11:19] C:\Program Files\MSN Messenger
[29/01/2007|21:41] C:\Program Files\MSXML 4.0
[17/08/2007|11:19] C:\Program Files\MSXML 6.0
[24/12/2007|11:40] C:\Program Files\MyMPxPlayer.org
[01/11/2006|01:10] C:\Program Files\NetMeeting
[01/11/2006|01:10] C:\Program Files\NewTech Infosystems
[01/11/2006|01:11] C:\Program Files\Oca History Tool
[01/11/2006|01:11] C:\Program Files\Online Services
[25/04/2007|09:31] C:\Program Files\OpenOffice.org 2.1
[25/04/2007|09:31] C:\Program Files\OpenOffice.org 2.2
[14/06/2007|07:06] C:\Program Files\Outlook Express
[25/09/2007|18:04] C:\Program Files\QuickTime
[01/11/2006|01:11] C:\Program Files\Realtek
[30/01/2007|18:03] C:\Program Files\Reference Assemblies
[22/01/2007|17:54] C:\Program Files\ScanSoft
[01/11/2006|01:11] C:\Program Files\Services en ligne
[03/08/2007|11:33] C:\Program Files\Skype
[12/11/2007|20:49] C:\Program Files\Spybot - Search & Destroy
[03/07/2008|08:24] C:\Program Files\Spyware Doctor
[24/03/2008|11:16] C:\Program Files\ToniArts
[11/08/2006|19:40] C:\Program Files\Uninstall Information
[07/07/2008|10:19] C:\Program Files\Wanadoo
[27/02/2008|18:45] C:\Program Files\Windows Live
[24/03/2008|11:19] C:\Program Files\Windows Live Safety Center
[30/01/2007|17:59] C:\Program Files\Windows Media Connect 2
[30/01/2007|17:59] C:\Program Files\Windows Media Player
[01/11/2006|01:11] C:\Program Files\Windows NT
[01/11/2006|01:11] C:\Program Files\Windows Plus
[11/08/2006|19:28] C:\Program Files\WindowsUpdate
[01/11/2006|01:11] C:\Program Files\xerox
[14/11/2007|17:05] C:\Program Files\Yahoo!

------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------

[07/03/2008|08:26] C:\Program Files\Fichiers communs\Adobe
[29/01/2007|17:37] C:\Program Files\Fichiers communs\FDEUnInstaller.exe
[22/01/2007|17:55] C:\Program Files\Fichiers communs\InstallShield
[19/01/2007|17:14] C:\Program Files\Fichiers communs\Java
[01/11/2006|01:10] C:\Program Files\Fichiers communs\LightScribe
[25/07/2007|18:45] C:\Program Files\Fichiers communs\Logitech
[13/11/2007|20:12] C:\Program Files\Fichiers communs\Microsoft Shared
[01/11/2006|01:10] C:\Program Files\Fichiers communs\MSSoap
[01/11/2006|01:10] C:\Program Files\Fichiers communs\muvee Technologies
[01/11/2006|01:10] C:\Program Files\Fichiers communs\NewTech Infosystems
[01/11/2006|01:10] C:\Program Files\Fichiers communs\ODBC
[22/01/2007|17:55] C:\Program Files\Fichiers communs\ScanSoft Shared
[01/11/2006|01:10] C:\Program Files\Fichiers communs\Services
[03/08/2007|11:33] C:\Program Files\Fichiers communs\Skype
[01/11/2006|01:10] C:\Program Files\Fichiers communs\SpeechEngines
[23/04/2007|15:50] C:\Program Files\Fichiers communs\Symantec Shared
[14/06/2007|07:06] C:\Program Files\Fichiers communs\System
[13/11/2007|20:12] C:\Program Files\Fichiers communs\WindowsLiveInstaller

---------------------------[ Process ]--------------------------

... 68

iexplore.exe ~ [2068]
iexplore.exe ~ [2736]
iexplore.exe ~ [2776]
iexplore.exe ~ [5432]

----------------------[ Recherche avec S_Lop ]---------------------

Aucun fichier / dossier Lop trouvé !

-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------

C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\augiwrum.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\emocgvia.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\jxnipmeb.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\meetonegrim.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\mpeg heck.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\nahlmgeh.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\otmagokm.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\Gram View 4\uploadsettingsfacehole.exe
C:\Program Files\Gram View 4
C:\DOCUME~1\ALLUSE~1\APPLIC~1\third lies itch ford
C:\DOCUME~1\ALLUSE~1\APPLIC~1\third lies itch ford\Deaf soft.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\augiwrum.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\emocgvia.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\jxnipmeb.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\meetonegrim.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\mpeg heck.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\nahlmgeh.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\otmagokm.exe
C:\DOCUME~1\VILLAP~1\APPLIC~1\gramvi~1\uploadsettingsfacehole.exe
C:\Program Files\gramvi~1
C:\WINDOWS\Prefetch\MEETONEGRIM.EXE-00F90FAC.pf
C:\WINDOWS\Prefetch\MPEG HECK.EXE-158C54C5.pf
C:\WINDOWS\Prefetch\DEAF SOFT.EXE-30A8BB4A.pf
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@www.adserver5[1].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@bigpoint[1].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@fr1.seafight.bigpoint[1].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@banner.cotedazurpalace[2].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@cotedazurpalace[2].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@adopt.euroclick[1].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@fr1.seafight.bigpoint[1].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@2xmoinscher[1].txt
C:\DOCUME~1\VILLAP~1\Cookies\villa_patrick@www.2xmoinscher[2].txt
C:\WINDOWS\Tasks\AA355792918AC302.job

----------------------[ Verification du Registre ]----------------------

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"morewin"="C:\\DOCUME~1\\VILLAP~1\\APPLIC~1\\GRAMVI~1\\mpeg heck.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Itch ford four knob"="C:\\Documents and Settings\\All Users\\Application Data\\third lies itch ford\\Deaf soft.exe"

--------------------[ Verification du fichier Hosts ]---------------------

Fichier Hosts MODIFIE

127.0.0.1 bin.errorprotector.com ## added by CiD
127.0.0.1 br.errorsafe.com ## added by CiD
127.0.0.1 br.winantivirus.com ## added by CiD
127.0.0.1 br.winfixer.com ## added by CiD
127.0.0.1 cdn.drivecleaner.com ## added by CiD
127.0.0.1 cdn.errorsafe.com ## added by CiD
127.0.0.1 cdn.winsoftware.com ## added by CiD
127.0.0.1 de.errorsafe.com ## added by CiD
127.0.0.1 de.winantivirus.com ## added by CiD
127.0.0.1 download.cdn.drivecleaner.com ## added by CiD
127.0.0.1 download.cdn.errorsafe.com ## added by CiD
127.0.0.1 download.cdn.winsoftware.com ## added by CiD
127.0.0.1 download.errorsafe.com ## added by CiD
127.0.0.1 download.systemdoctor.com ## added by CiD
127.0.0.1 download.winantispyware.com ## added by CiD
127.0.0.1 download.windrivecleaner.com ## added by CiD
127.0.0.1 download.winfixer.com ## added by CiD
127.0.0.1 drivecleaner.com ## added by CiD
127.0.0.1 dynamique.drivecleaner.com ## added by CiD
127.0.0.1 errorprotector.com ## added by CiD
127.0.0.1 errorsafe.com ## added by CiD
127.0.0.1 es.winantivirus.com ## added by CiD
127.0.0.1 fr.winantivirus.com ## added by CiD
127.0.0.1 fr.winfixer.com ## added by CiD
127.0.0.1 go.drivecleaner.com ## added by CiD
127.0.0.1 go.errorsafe.com ## added by CiD
127.0.0.1 go.winantispyware.com ## added by CiD
127.0.0.1 go.winantivirus.com ## added by CiD
127.0.0.1 hk.winantivirus.com ## added by CiD
127.0.0.1 instlog.errorsafe.com ## added by CiD
127.0.0.1 instlog.winantivirus.com ## added by CiD
127.0.0.1 instlog.winfixer.com ## added by CiD
127.0.0.1 jsp.drivecleaner.com ## added by CiD
127.0.0.1 kb.errorsafe.com ## added by CiD
127.0.0.1 kb.winantivirus.com ## added by CiD
127.0.0.1 nl.errorsafe.com ## added by CiD
127.0.0.1 se.errorsafe.com ## added by CiD
127.0.0.1 secure.drivecleaner.com ## added by CiD
127.0.0.1 secure.errorsafe.com ## added by CiD
127.0.0.1 secure.winantispam.com ## added by CiD
127.0.0.1 secure.winantispy.com ## added by CiD
127.0.0.1 secure.winantivirus.com ## added by CiD
127.0.0.1 support.winantivirus.com ## added by CiD
127.0.0.1 trial.updates.winsoftware.com ## added by CiD
127.0.0.1 ulog.winantivirus.com ## added by CiD
127.0.0.1 utils.errorsafe.com ## added by CiD
127.0.0.1 utils.winantivirus.com ## added by CiD
127.0.0.1 utils.winfixer.com ## added by CiD
127.0.0.1 winantispyware.com ## added by CiD
127.0.0.1 winantivirus.com ## added by CiD
127.0.0.1 winfixer.com ## added by CiD
127.0.0.1 winfixer2006.com ## added by CiD
127.0.0.1 winsoftware.com ## added by CiD
127.0.0.1 [i]ww/iw.drivecleaner.com ## added by CiD
127.0.0.1 [i]ww/iw.errorprotector.com ## added by CiD
127.0.0.1 [i]ww/iw.errorsafe.com ## added by CiD
127.0.0.1 [i]ww/iw.systemdoctor.com ## added by CiD
127.0.0.1 [i]ww/iw.utils.winfixer.com ## added by CiD
127.0.0.1 [i]ww/iw.win-anti-virus-pro.com ## added by CiD
127.0.0.1 [i]ww/iw.win-virus-pro.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispam.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispy.com ## added by CiD
127.0.0.1 [i]ww/iw.winantispyware.com ## added by CiD
127.0.0.1 [i]ww/iw.winantivirus.com ## added by CiD
127.0.0.1 [i]ww/iw.winantiviruspro.com ## added by CiD
127.0.0.1 [i]ww/iw.windrivecleaner.com ## added by CiD
127.0.0.1 [i]ww/iw.windrivesafe.com ## added by CiD
127.0.0.1 [i]ww/iw.winfixer.com ## added by CiD
127.0.0.1 [i]ww/iw.winfixer2006.com ## added by CiD
127.0.0.1 [i]ww/iw.winsoftware.com ## added by CiD

-> 7455 ( 70 ## added by CiD )

/!\ 1 Not 127.0.0.1 !!

----------------[ Recherche de fichiers avec Catchme ]-----------------

catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-07-07 13:21:17
Windows 5.1.2600 Service Pack 2 NTFS
detected NTDLL code modification:
ZwClose
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0

--------------------[ Recherche d'autres infections ]---------------------

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Acer Empowering Technology Monitor"="C:\\WINDOWS\\system32\\SysMonitor.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"eDataSecurity Loader"="C:\\Acer\\Empowering Technology\\eDataSecurity\\eDSloader.exe 0"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"eRecoveryService"="C:\\Acer\\Empowering Technology\\eRecovery\\eRAgent.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"eDataSecurity Loader"="C:\\Acer\\Empowering Technology\\eDataSecurity\\eDSloader.exe 0"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PHIME2002ASync"="C:\\WINDOWS\\system32\\IME\\TINTLGNT\\TINTSETP.EXE /SYNC"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"PHIME2002A"="C:\\WINDOWS\\system32\\IME\\TINTLGNT\\TINTSETP.EXE /IMEName"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"eDataSecurity Loader"="C:\\Acer\\Empowering Technology\\eDataSecurity\\eDSloader.exe 0"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"eRecoveryService"="C:\\Acer\\Empowering Technology\\eRecovery\\eRAgent.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SSBkgdUpdate"="\"C:\\Program Files\\Fichiers communs\\Scansoft Shared\\SSBkgdUpdate\\SSBkgdupdate.exe\" -Embedding -boot"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"OpwareSE4"="\"C:\\Program Files\\ScanSoft\\OmniPageSE4.0\\OpwareSE4.exe\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LogitechCameraService(E)"="C:\\WINDOWS\\system32\\ElkCtrl.exe /automation"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TalkAndWrite"="C:\\Documents and Settings\\All Users\\Application Data\\Skype\\Plugins\\Plugins\\1163D2B46CC742E5A3CC9E4157887751\\TalkAndWrite.exe /run"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ScanSoft OmniPage SE 4.0-reminder"="\"C:\\Program Files\\ScanSoft\\OmniPageSE4.0\\Ereg\\Ereg.exe\" -r \"C:\\Documents and Settings\\All Users\\Application Data\\ScanSoft\\OmniPageSE4.0\\Ereg\\ereg.ini\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Itch ford four knob"="C:\\Documents and Settings\\All Users\\Application Data\\third lies itch ford\\Deaf soft.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Itch ford four knob"="C:\\Documents and Settings\\All Users\\Application Data\\third lies itch ford\\Deaf soft.exe"

[b]! EGDACCESS !/b



[F:500][D:8]-> C:\DOCUME~1\VILLAP~1\LOCALS~1\Temp
[F:199][D:0]-> C:\DOCUME~1\VILLAP~1\Cookies
[F:15233][D:18]-> C:\DOCUME~1\VILLAP~1\LOCALS~1\TEMPOR~1\content.IE5

--------------------[ Fin du rapport a 13:21:56,85 ]----------------------


et le second

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:43:26, on 07/07/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\system32\SysMonitor.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\CameraAssistant.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\WINDOWS\system32\ElkCtrl.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\System32\FTRTSVC.exe
c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\Program Files\Spyware Doctor\svcntaux.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\alg.exe
C:\PROGRA~1\Wanadoo\Watch.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Spyware Doctor\swdsvc.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\WINDOWS\system32\drwtsn32.exe
C:\WINDOWS\system32\taskmgr.exe
C:\WINDOWS\system32\cmd.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\HiJackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.fr.acer.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\WINDOWS\system32\eDStoolbar.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [ntiMUI] c:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\WINDOWS\system32\SysMonitor.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe 0
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe"
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechCameraAssistant] C:\Program Files\Logitech\Video\CameraAssistant.exe
O4 - HKLM\..\Run: [LogitechVideo[inspector]] C:\Program Files\Logitech\Video\InstallHelper.exe /inspect
O4 - HKLM\..\Run: [LogitechCameraService(E)] C:\WINDOWS\system32\ElkCtrl.exe /automation
O4 - HKLM\..\Run: [TalkAndWrite] C:\Documents and Settings\All Users\Application Data\Skype\Plugins\Plugins\1163D2B46CC742E5A3CC9E4157887751\TalkAndWrite.exe /run
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [ScanSoft OmniPage SE 4.0-reminder] "C:\Program Files\ScanSoft\OmniPageSE4.0\Ereg\Ereg.exe" -r "C:\Documents and Settings\All Users\Application Data\ScanSoft\OmniPageSE4.0\Ereg\ereg.ini"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 2.2.lnk = C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe
O4 - Global Startup: Acer Empowering Technology.lnk = ?
O4 - Global Startup: Acer WLAN 11g USB Dongle.lnk = C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O8 - Extra context menu item: Add to AMV Convert Tool... - C:\Program Files\MP3 Player Utilities 4.00\AMVConverter\grab.html
O8 - Extra context menu item: Add to AMV Converter... - C:\Program Files\MP3 Player Utilities 4.05\AMVConverter\grab.html
O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 4.00\MediaManager\grab.html
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.orange.fr (file missing) (HKCU)
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/...
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} (GoPetsWeb Control) - https://secure.gopetslive.com/dev/GoPetsWeb.cab
O18 - Protocol: bw+0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {FEDEC81D-56F6-4336-8C87-0FE958109B3E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Control Parental (OPTENET_FILTER) - Contrôle Parental - C:\Program Files\Controle Parental\bin\optproxy.exe
O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe

Miguel374,

Ce n'est pas le bon rapport. TU as posté le rapport de la 1ere fois.
Dans le rapport d'Hijackthis, je vois que l'infection a été nettoyée.

1) Tu vas nettoyer le rapport d'Hijackthis.
Pour cela, tu fermes ton navigateur.
Lance Hijackthis et tu choisis " Do a system scan only ".
Tu sélectionnes les lignes suivantes :

R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user'
O4 - Global Startup: Acer Empowering Technology.lnk = ?
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.orange.fr (file missing) (HKCU)
et toutes les lignes en 018 sauf la dernière qui concerne skype.

Tu choisis l'option " Fixchecked" en bas de la page.

2) On va vérifier la présence d'autres infections.
Télécharges MalwareBytes.
http://www.malwarebytes.org/mbam/program/mbam-setup.exe

Tu l'installes. Choisis les options par défaut.
A la fin de l’installation, il te sera demandé de mettre à jour MalwareBytes et de l’éxecuter .
Après la, mise à jour, le logiciel va s’ouvrir.
Dans l’onglet Recherche, sélectionne Exécuter un examen complet.
Clique sur recherche. Tu ne sélectionnes que les disques durs de l’ordinateur.
Clique sur lancer l’examen.
Comme il est demandé, clique sur afficher les résultats pour obtenir le rapport.
Tu postes le rapport dans ton prochain message.

Ainsi qu'un rapport Hijackthis.

A+

voivi le premier rapport

Malwarebytes' Anti-Malware 1.19
Version de la base de données: 929
Windows 5.1.2600 Service Pack 2

15:14:18 07/07/2008
mbam-log-7-7-2008 (15-14-13).txt

Type de recherche: Examen complet (C:\|D:\|)
Eléments examinés: 113172
Temps écoulé: 26 minute(s), 47 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 2
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
HKEY_CLASSES_ROOT\CLSID\{9afb8248-617f-460d-9366-d71cdeda3179} (Adware.MyWebSearch) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> No action taken.

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)


et le second

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:15:37, on 07/07/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\System32\FTRTSVC.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\system32\SysMonitor.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\CameraAssistant.exe
C:\WINDOWS\system32\ElkCtrl.exe
C:\Documents and Settings\All Users\Application Data\Skype\Plugins\Plugins\1163D2B46CC742E5A3CC9E4157887751\TalkAndWrite.exe
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe
C:\Program Files\Spyware Doctor\SDTrayApp.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Acer\Empowering Technology\Acer.Empowering.Framework.Launcher.exe
C:\PROGRA~1\Wanadoo\ComComp.exe
C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
C:\PROGRA~1\Wanadoo\Toaster.exe
C:\Program Files\Spyware Doctor\svcntaux.exe
C:\PROGRA~1\Wanadoo\Inactivity.exe
C:\PROGRA~1\Wanadoo\PollingModule.exe
C:\Program Files\Spyware Doctor\swdsvc.exe
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\ehome\mcrdsvc.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\alg.exe
C:\PROGRA~1\Wanadoo\Watch.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Ares\Ares.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\HiJackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.fr.acer.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\WINDOWS\system32\eDStoolbar.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [ntiMUI] c:\Program Files\NewTech Infosystems\NTI CD & DVD-Maker 7\ntiMUI.exe
O4 - HKLM\..\Run: [IMEKRMIG6.1] C:\WINDOWS\ime\imkr6_1\IMEKRMIG.EXE
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [Acer Empowering Technology Monitor] C:\WINDOWS\system32\SysMonitor.exe
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe 0
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\eRAgent.exe
O4 - HKLM\..\Run: [SSBkgdUpdate] "C:\Program Files\Fichiers communs\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe" -Embedding -boot
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe"
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechCameraAssistant] C:\Program Files\Logitech\Video\CameraAssistant.exe
O4 - HKLM\..\Run: [LogitechVideo[inspector]] C:\Program Files\Logitech\Video\InstallHelper.exe /inspect
O4 - HKLM\..\Run: [LogitechCameraService(E)] C:\WINDOWS\system32\ElkCtrl.exe /automation
O4 - HKLM\..\Run: [TalkAndWrite] C:\Documents and Settings\All Users\Application Data\Skype\Plugins\Plugins\1163D2B46CC742E5A3CC9E4157887751\TalkAndWrite.exe /run
O4 - HKLM\..\Run: [ScanSoft OmniPage SE 4.0-reminder] "C:\Program Files\ScanSoft\OmniPageSE4.0\Ereg\Ereg.exe" -r "C:\Documents and Settings\All Users\Application Data\ScanSoft\OmniPageSE4.0\Ereg\ereg.ini"
O4 - HKLM\..\Run: [SDTray] "C:\Program Files\Spyware Doctor\SDTrayApp.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|PARAM= cnx
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ares] "C:\Program Files\Ares\Ares.exe" -h
O4 - Startup: OpenOffice.org 2.2.lnk = C:\Program Files\OpenOffice.org 2.2\program\quickstart.exe
O4 - Global Startup: Acer WLAN 11g USB Dongle.lnk = C:\Program Files\Acer WLAN 11g USB Dongle\ZDWlan.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O8 - Extra context menu item: Add to AMV Convert Tool... - C:\Program Files\MP3 Player Utilities 4.00\AMVConverter\grab.html
O8 - Extra context menu item: Add to AMV Converter... - C:\Program Files\MP3 Player Utilities 4.05\AMVConverter\grab.html
O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 4.00\MediaManager\grab.html
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/...
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} (GoPetsWeb Control) - https://secure.gopetslive.com/dev/GoPetsWeb.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: Memory Check Service (AcerMemUsageCheckService) - Acer Inc. - C:\Acer\Empowering Technology\ePerformance\MemCheck.exe
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - c:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Control Parental (OPTENET_FILTER) - Contrôle Parental - C:\Program Files\Controle Parental\bin\optproxy.exe
O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe (file missing)
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\svcntaux.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\swdsvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe

penses à desinstaller le liveupdate de norton si il ne t ai plus utile.

merci je ne le savais pas
je ne le trouve pas dans suppression des programmes, ou puis je le trouver pour le désinstaller?

super , ca marche parfaitement bien, merci beaucoup de votre intervention.