Tizou

Ca y est, je les ai uploadés.

Merci ! Voila les rapports : Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 18:53:29, on 24/11/2008 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16735) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Philips ToUcam Camera\VProperty.exe C:\WINDOWS\system32\RunDll32.exe C:\Program Files\HP\HP Software Update\HPWuSchd2.exe C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\PROGRA~1\Wanadoo\CnxMon.exe C:\PROGRA~1\MESSAG~1\Demon.exe C:\Program Files\Alcatel\SpeedTouch USB\Dragdiag.exe C:\PROGRA~1\Wanadoo\TaskbarIcon.exe C:\PROGRA~1\Grisoft\AVG7\avgcc.exe C:\WINDOWS\system32\kigi.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\MSN Messenger\MsnMsgr.Exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\Registry Mechanic\RegMech.exe C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe C:\Program Files\Philips ToUcam Camera\GameCam SE\Program\RFTray.exe C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe C:\Program Files\MSN Messenger\usnsvc.exe C:\Program Files\Wanadoo\EspaceWanadoo.exe C:\Program Files\Wanadoo\ComComp.exe C:\Program Files\Wanadoo\Watch.exe C:\Program Files\MSN Messenger\livecall.exe C:\WINDOWS\system32\Notepad.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Documents and Settings\thierry\Bureau\RSIT.exe C:\Documents and Settings\thierry\Bureau\thierry.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.msn.fr/spbasic.htm R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/home R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll R3 - URLSearchHook: myBabylon English Toolbar - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - C:\Program Files\myBabylon_English\tbmyBa.dll O1 - Hosts: 213.186.42.74 keumdial.net O1 - Hosts: 217.151.1.115 dialh.com O1 - Hosts: 83.98.143.10 gayromeo.com O1 - Hosts: 217.146.176.104 fr.f265.mail.yahoo.com O1 - Hosts: 193.138.90.45 kelma.org O1 - Hosts: 193.252.149.20 orange.fr O1 - Hosts: 213.251.175.143 livemec.com O1 - Hosts: 209.67.240.80 manhunt.net O1 - Hosts: 81.252.54.46 videoposte.com O1 - Hosts: 193.201.77.15 meteofrance.com O1 - Hosts: 217.12.6.37 fr.weather.yahoo.com O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\BitComet\tools\BitCometBHO.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\3.1.807.1746\swg.dll O2 - BHO: myBabylon English Toolbar - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - C:\Program Files\myBabylon_English\tbmyBa.dll O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\msntb.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O3 - Toolbar: myBabylon English Toolbar - {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - C:\Program Files\myBabylon_English\tbmyBa.dll O4 - HKLM\..\Run: [ToUcamVProperty] C:\Program Files\Philips ToUcam Camera\VProperty.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\Wanadoo\CnxMon.exe O4 - HKLM\..\Run: [Demon] C:\PROGRA~1\MESSAG~1\Demon.exe O4 - HKLM\..\Run: [speedTouch USB Diagnostics] "C:\Program Files\Alcatel\SpeedTouch USB\Dragdiag.exe" /icon O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\TaskbarIcon.exe O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [gewufep] C:\WINDOWS\system32\kigi.exe O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [sacagoum] C:\WINDOWS\system32\gohu.exe O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [RegistryMechanic] C:\Program Files\Registry Mechanic\RegMech.exe /H O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-21-1547161642-746137067-854245398-500\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Administrateur') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user') O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe O4 - Global Startup: Reality Fusion GameCam SE.lnk = ? O8 - Extra context menu item: &D&ownload &with BitComet - res://D:\BitComet.exe/AddLink.htm O8 - Extra context menu item: &D&ownload all video with BitComet - res://D:\BitComet.exe/AddVideo.htm O8 - Extra context menu item: &D&ownload all with BitComet - res://D:\BitComet.exe/AddAllLink.htm O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000 O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU) O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://appldnld.apple.com.edgesuite.net/co...ex/qtplugin.cab O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://config.zebulon.fr/plugins/hardwaredetection.cab O16 - DPF: {88764F69-3831-4EC1-B40B-FF21D8381345} (AdVerifierADPCtrl Class) - https://static.impots.gouv.fr/tdir/static/a...gnerADP-1.0.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{741155DD-4578-4428-BFA8-A023653E6069}: NameServer = 80.10.246.1 81.253.149.2 O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: BsHelpCS (wkt5o5yxofha0a) - Unknown owner - C:\WINDOWS\system32\woopan.exe (file missing) O23 - Service: IMAPI CD-Burning COM Service (zueatq6u) - Unknown owner - C:\WINDOWS\system32\musenop.exe O24 - Desktop Component 0: (no name) - http://85.158.9.33/newphotos/48/40/4887540_770056.jpg O24 - Desktop Component 1: (no name) - http://www.manhunt.net/showpic.php?showuid...i=1&type=f_ -- End of file - 10488 byte Et le 2ème rapport Info.TXT : -->C:\PROGRA~1\Yahoo!\Common\UNYT_W~1.EXE -->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER -->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0 -->rundll32.exe setupapi.dll,InstallHinfSection DefaultUninstall 132 C:\WINDOWS\INF\PCHealth.inf 7-Zip 4.44 beta-->"C:\Program Files\7-Zip\Uninstall.exe" Adobe Acrobat and Reader 8.1.2 Security Update 1 (KB403742)-->MsiExec.exe /X{6846389C-BAC0-4374-808E-B120F86AF5D7} Adobe Flash Player 9 ActiveX-->C:\WINDOWS\System32\Macromed\Flash\FlashUtil9b.exe -uninstallDelete Adobe Reader 8.1.2 - Français-->MsiExec.exe /I{AC76BA86-7AD7-1036-7B44-A81200000003} Alcatel SpeedTouch USB Software-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D41FAAA9-8048-4906-86B2-9AADEA1FA0B7}\setup.exe" -Control_Panel Apple Software Update-->MsiExec.exe /I{6956856F-B6B3-4BE0-BA0B-8F495BE32033} Archiveur WinRAR-->C:\Program Files\WinRAR\uninstall.exe AVG 7.5-->C:\Program Files\Grisoft\AVG7\setup.exe /UNINSTALL Barre d'outils MSN-->C:\Program Files\MSN Apps\MSN Toolbar\01.02.5000.1021\fr\mtbs.exe c BitComet 0.80-->C:\BitComet\uninst.exe CCleaner (remove only)-->"C:\Program Files\CCleaner\uninst.exe" Clean Virus MSN-->"C:\Program Files\AxBx\Clean Virus MSN\unins000.exe" C-Media WDM Audio Driver-->C:\WINDOWS\system32\cmirmdrv.exe Correctif pour Lecteur Windows Media 11 (KB939683)-->"C:\WINDOWS\$NtUninstallKB939683$\spuninst\spuninst.exe" Correctif pour Windows Internet Explorer 7 (KB947864)-->"C:\WINDOWS\ie7updates\KB947864-IE7\spuninst\spuninst.exe" Correctif pour Windows XP (KB952287)-->"C:\WINDOWS\$NtUninstallKB952287$\spuninst\spuninst.exe" DivX Codec-->C:\Program Files\DivX\DivXCodecUninstall.exe /CODEC DivX Converter-->C:\Program Files\DivX\DivXConverterUninstall.exe /CONVERTER DivX Player-->C:\Program Files\DivX\DivXPlayerUninstall.exe /PLAYER DivX Web Player-->C:\Program Files\DivX\DivXWebPlayerUninstall.exe /PLUGIN EvilLyrics-->"C:\Program Files\EvilLyrics\uninst.exe" Google Earth-->MsiExec.exe /I{97C0EA4A-1A0B-4C53-ACEB-49984DA79C90} Google Toolbar for Internet Explorer-->MsiExec.exe /I{DBEA1034-5882-4A88-8033-81C4EF0CFA29} Google Toolbar for Internet Explorer-->regsvr32 /u /s "c:\program files\google\googletoolbar1.dll" HardwareDetection-->"C:\Program Files\HardwareDetection\Uninstall.exe" "C:\Program Files\HardwareDetection\install.log" -u HijackThis 2.0.2-->"C:\Documents and Settings\thierry\Bureau\HijackThis.exe" /uninstall Hotfix for Windows Media Format 11 SDK (KB929399)-->"C:\WINDOWS\$NtUninstallKB929399$\spuninst\spuninst.exe" HP Deskjet 3900 series-->C:\Program Files\HP\Digital Imaging\{3819891A-030B-4a4e-98ED-B28A649E48AB}\setup\hpzscr01.exe -datfile hpfscr05.dat HP Extended Capabilities 5.0-->C:\Program Files\HP\Digital Imaging\ExtCapUninstall\hpzscr01.exe -datfile hpqhsc01.dat HP Imaging Device Functions 5.0-->C:\Program Files\HP\Digital Imaging\DigitalImagingMonitor\hpzscr01.exe -datfile hpqbud01.dat HP Software Update-->MsiExec.exe /X{15EE79F4-4ED1-4267-9B0F-351009325D7D} HP Solution Center & Imaging Support Tools 5.0-->C:\Program Files\HP\Digital Imaging\eSupport\hpzscr01.exe -datfile hpqbud05.dat InCD (Ahead Software)-->C:\WINDOWS\NuNInst.exe /UNINSTALL Java 2 Runtime Environment Standard Edition v1.3.1_03-->C:\WINDOWS\IsUninst.exe -f"C:\Program Files\JavaSoft\JRE\1.3.1_03\Uninst.isu" Lecteur Windows Media 11-->"C:\Program Files\Windows Media Player\Setup_wm.exe" /Uninstall MapSend Lite-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{2F0200C6-9ACB-49F3-BC33-5BE9AA682D9F}\Setup.exe" -l0x40c Maxthon Browser (remove only)-->C:\Program Files\Maxthon\MaxthonUINST.exe Messager Wanadoo-->C:\PROGRA~1\MESSAG~1\UNWISE.EXE C:\PROGRA~1\MESSAG~1\INSTALL.LOG Microsoft Compression Client Pack 1.0 for Windows XP-->"C:\WINDOWS\$NtUninstallMSCompPackV1$\spuninst\spuninst.exe" Microsoft Internationalized Domain Names Mitigation APIs-->"C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$\spuninst\spuninst.exe" Microsoft National Language Support Downlevel APIs-->"C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$\spuninst\spuninst.exe" Microsoft Office Publisher 2003-->MsiExec.exe /I{90190409-6000-11D3-8CFE-0150048383C9} Microsoft Office XP Professional avec FrontPage-->MsiExec.exe /I{9028040C-6000-11D3-8CFE-0050048383C9} Microsoft User-Mode Driver Framework Feature Pack 1.0-->"C:\WINDOWS\$NtUninstallWudf01000$\spuninst\spuninst.exe" Mise à jour de sécurité pour Lecteur Windows Media 11 (KB936782)-->"C:\WINDOWS\$NtUninstallKB936782_WMP11$\spuninst\spuninst.exe" Mise à jour de sécurité pour Lecteur Windows Media 11 (KB954154)-->"C:\WINDOWS\$NtUninstallKB954154_WM11$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)-->"C:\WINDOWS\ie7updates\KB938127-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615)-->"C:\WINDOWS\ie7updates\KB942615-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533)-->"C:\WINDOWS\ie7updates\KB944533-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)-->"C:\WINDOWS\ie7updates\KB950759-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)-->"C:\WINDOWS\ie7updates\KB953838-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows Internet Explorer 7 (KB956390)-->"C:\WINDOWS\ie7updates\KB956390-IE7\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB938464)-->"C:\WINDOWS\$NtUninstallKB938464$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB941569)-->"C:\WINDOWS\$NtUninstallKB941569$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB946648)-->"C:\WINDOWS\$NtUninstallKB946648$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB950760)-->"C:\WINDOWS\$NtUninstallKB950760$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB950762)-->"C:\WINDOWS\$NtUninstallKB950762$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB950974)-->"C:\WINDOWS\$NtUninstallKB950974$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951066)-->"C:\WINDOWS\$NtUninstallKB951066$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951376)-->"C:\WINDOWS\$NtUninstallKB951376$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951376-v2)-->"C:\WINDOWS\$NtUninstallKB951376-v2$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951698)-->"C:\WINDOWS\$NtUninstallKB951698$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB951748)-->"C:\WINDOWS\$NtUninstallKB951748$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB952954)-->"C:\WINDOWS\$NtUninstallKB952954$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB953839)-->"C:\WINDOWS\$NtUninstallKB953839$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB954211)-->"C:\WINDOWS\$NtUninstallKB954211$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB954459)-->"C:\WINDOWS\$NtUninstallKB954459$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB955069)-->"C:\WINDOWS\$NtUninstallKB955069$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956391)-->"C:\WINDOWS\$NtUninstallKB956391$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956803)-->"C:\WINDOWS\$NtUninstallKB956803$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB956841)-->"C:\WINDOWS\$NtUninstallKB956841$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB957095)-->"C:\WINDOWS\$NtUninstallKB957095$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB957097)-->"C:\WINDOWS\$NtUninstallKB957097$\spuninst\spuninst.exe" Mise à jour de sécurité pour Windows XP (KB958644)-->"C:\WINDOWS\$NtUninstallKB958644$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB951072-v2)-->"C:\WINDOWS\$NtUninstallKB951072-v2$\spuninst\spuninst.exe" Mise à jour pour Windows XP (KB951978)-->"C:\WINDOWS\$NtUninstallKB951978$\spuninst\spuninst.exe" Mozilla Firefox (3.0.4)-->C:\Program Files\Mozilla Firefox\uninstall\helper.exe myBabylon_English Toolbar-->C:\PROGRA~1\MYBABY~1\UNWISE.EXE C:\PROGRA~1\MYBABY~1\INSTALL.LOG Nero-->MsiExec.exe /X{A4D7B764-4140-11D4-88EB-0050DA3579C0} NeroMediaPlayer-->C:\WINDOWS\UNNMP.exe /UNINSTALL NVIDIA WDM Drivers-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{B023185F-F1EF-4F97-B0BD-AE6D802226D1}\Setup.exe" NVIDIA Windows 2000/XP Display Drivers-->rundll32.exe C:\WINDOWS\System32\nvinstnt.dll,NvUninstallNT4 nv4_disp.inf PDF-XChange 3 Pro-->"C:\Program Files\Tracker Software\PDF-XChange 3 Pro\unins000.exe" PDF-XChange PDF Viewer-->"C:\Program Files\Tracker Software\PDF-XChange 3 Pro\PDF-XChange PDF Viewer\unins000.exe" Philips ToUcam Fun Camera-->C:\WINDOWS\IsUn040c.exe -f"C:\Program Files\Philips ToUcam Camera\ToUcamFun.isu" QuickTime-->MsiExec.exe /I{8DC42D05-680B-41B0-8878-6C14D24602DB} Radio Recorder v.1.4-->"C:\Program Files\Radio Recorder v.1.4\unins000.exe" Reality Fusion GameCam SE-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{524CA1A3-FA5E-11D3-8EB7-00500462F5BA}\setup.exe" Reality Fusion VBall-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{1C41FC6B-00C9-11D4-8EB7-00500462F5BA}\setup.exe" RealPlayer-->C:\Program Files\Fichiers communs\Real\Update_OB\r1puninst.exe RealNetworks|RealPlayer|6.0 Registry Mechanic 8.0-->"C:\Program Files\Registry Mechanic\unins000.exe" /Log Shockwave-->C:\WINDOWS\system32\Macromed\SHOCKW~1\UNWISE.EXE C:\WINDOWS\system32\Macromed\SHOCKW~1\Install.log SpotLife-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\Ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{84FA5EEA-32CE-47AE-9DF0-83CBCC2DED2C}\setup.exe" FreshInstall TBS WMP Plug-in-->C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\1050\INTEL3~1\IDriver.exe /M{13515135-48BB-4184-8C1F-2FAE0138E200} Ulead Photo Explorer 6.0-->RunDll32 C:\PROGRA~1\FICHIE~1\INSTAL~1\engine\6\INTEL3~1\ctor.dll,LaunchSetup "C:\Program Files\InstallShield Installation Information\{D0194539-8118-4FD7-8ABA-912B2D479B48}\setup.exe" VideoLink Mail-->C:\PROGRA~1\VIDEOL~1\UNWISE.EXE C:\PROGRA~1\VIDEOL~1\INSTALL.LOG Wanadoo-->C:\PROGRA~1\Wanadoo\Uninstall.exe Windows Live Messenger-->MsiExec.exe /I{F6326B60-1B1D-4ABF-BFCD-7B7404F44411} Windows Live Sign-in Assistant-->MsiExec.exe /I{49672EC2-171B-47B4-8CE7-50D7806360D7} Windows Media Format 11 runtime-->"C:\Program Files\Windows Media Player\wmsetsdk.exe" /UninstallAll Windows Media Format 11 runtime-->"C:\WINDOWS\$NtUninstallWMFDist11$\spuninst\spuninst.exe" Windows Media Player 11-->"C:\WINDOWS\$NtUninstallwmp11$\spuninst\spuninst.exe" Windows XP Service Pack 3-->"C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe" Yahoo! Toolbar-->C:\PROGRA~1\Yahoo!\Common\UNYT_W~1.EXE ======Hosts File====== 213.186.42.74 keumdial.net 217.151.1.115 dialh.com 83.98.143.10 gayromeo.com 217.146.176.104 fr.f265.mail.yahoo.com 193.138.90.45 kelma.org 193.252.149.20 orange.fr 213.251.175.143 livemec.com 209.67.240.80 manhunt.net 81.252.54.46 videoposte.com 193.201.77.15 meteofrance.com ======Security center information====== AV: AVG 7.5.549 ======Environment variables====== "ComSpec"=%SystemRoot%\system32\cmd.exe "Path"=%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;C:\Program Files\QuickTime\QTSystem\ "windir"=%SystemRoot% "OS"=Windows_NT "PROCESSOR_ARCHITECTURE"=x86 "PROCESSOR_LEVEL"=6 "PROCESSOR_IDENTIFIER"=x86 Family 6 Model 6 Stepping 2, AuthenticAMD "PROCESSOR_REVISION"=0602 "NUMBER_OF_PROCESSORS"=1 "PATHEXT"=.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH "TEMP"=%SystemRoot%\TEMP "TMP"=%SystemRoot%\TEMP "FP_NO_HOST_CHECK"=NO "CLASSPATH"=.;C:\Program Files\JavaSoft\JRE\1.3.1_03\lib\ext\QTJava.zip "QTJAVA"=C:\Program Files\JavaSoft\JRE\1.3.1_03\lib\ext\QTJava.zip

Bonjour, Je pense avoir chopé un virus via MSN. Un contact m'a envoyé il y a quelques jours des photos zippées que j'ai ouvertes. Depuis mes contacts reçoivent ces mêmes photos zippées automatiquement SANS QUE JE LES ENVOIE ! Autrement dit mon PC les envoie à mon insu. J'ai lançé AVG Antivirus, mais il ne détecte rien ! Comment identifier le virus ou autre saleté et ensuite le détruire. Merci de votre aide.

Ca y est. Je me suis servi d'une touche sur l'écran et l'image s'est recentrée. C'était aussi simple que ça. Merci encore !

[ Non, je n'ai pas essayé. Comment règle-t-on automatiquement son écran ?? quote name=Poloch' date='mardi 18 mars 2008 à 08h47' post='1194871] Bonjour, As-tu essayé de lancer un réglage automatique de ton écran ou de réinitialiser ton écran avec les paramètres usine ? Poloch

Bonjour ! L’image sur mon écran est décalée d’un centimètre vers la droite (bande noire d’un centimètre à gauche). Décalage sur le bureau et sur toutes les applications que j’ouvre. C’est très gênant, notamment pour la lecture des mails ! Comment corriger ça ? (j’ai Windows XP, même problème que je me serve d’IE ou de Firefox). Merci d'avance !

Bonjour ! J’ai installé la version 7 de MSN Messenger. Je l’ouvre mais pas moyen de me connecter ni d’ajouter de nouveaux contacts. Je suis passé en début de semaine de Windows 2000 à Windows XP, j’ai tout effacé puis réinstallé. Y a-t-il un rapport ? J’ai peut-être oublié d’installer certains trucs… Merci d'avance de votre aide

Bonjour ! J’ai récemment installé windows XP sur mon ordinateur (j'avais avant windows 2000). J’ai dû tout reformater et réinstaller. Maintenant je n’ai plus de son. J’ai donc recherché puis téléchargé un pilote pour ma carte son qui soit compatible avec Windows XP. Je crois que c’est le bon pilote. Mais une fois installé, je n’ai toujours pas de son. (matériel : K7S5A, codec audio AC’97) Help ! (j'ai lu quelque part que les pilotes devaient être installés dans le bon ordre ???)

Problème réglé ! Merci ! j'ai installé le driver manuellement sans aucun problème.

Mon imprimante fonctionne en USB

ma config : AMD Athlon Processor (1244 mhz) L1 : 128 k0oL2 : 256ko

D'après le site HP, l'imprimante est compatible avec Windows 2000. De plus, l'imprimante a été créée dans le dossier imprimante

D'après le site HP, j'utilise le pilote le plus récent... Que faire ? ;-(

J'ai windows 2000

Bonsoir ! Je n'arrive pas à installer ma nouvelle imprimante HP Deskjet 3940. J'ai le message suivant : "% 1 n'est pas une application Win32 valide". Pas moyen d'aller plus loin, l'envoi d'un rapport d'erreur dit qu'il s'agit d'un problème inconnu. Qui peut m'aider ? Merci d'avance !

De retour ! Voilà ce qui m'est arrivé depuis tout à l'heure : 1/ lorsque j’ai coché puis fixé dans hijackthis les lignes que tu m’as indiquées, j’ai eu, à un moment donné, le message suivant : “unexpected error occured. Error # 52 (nom du numéro de fichier incorrect) in SubGetLongPath (7.exe). Please send a report to merjin@spywareinfo.com mentionning what you were doing, and what version of windows you have.” Est-ce très embêtant ? Je viens de relire les instructions : il fallait les cocher puis passer à l’étape suivante. Est-ce que je me serais pas gourré en les fixant ??! 2/ Je n’ai pas supprimé le dossier -C:\PROGRA~1\PHILIP~1\GameCam SE car il s’agit d’un dossier faisant parti du logiciel de ma webcam. Dans highjackthis, par contre, j’ai « fixé » O4 - Global Startup: Reality Fusion GameCam SE.lnk = C:\PROGRA~1\PHILIP~1\GameCam SE\Program\RFTray.exe Je n’ai pas essayé ma cam après ça, mais j’espère que ça ne m’empêchera pas de l’ouvrir. J’essaierai un peu plus tard et te tiendrai au courant. Dans le cas où elle ne fonctionnerait pas, il y a moyen de restaurer avec Highjackthis, il me semble. 3/ J’ai lancé about : Buster 2 fois et ensuite Easycleaner. J’ai cliqué sur ‘Registre’ et j’ai eu le résultat suivant : Est-ce que je peux flinguer tout ça ? Dans le doute je me suis abstenu... Rapport de 'Registre' de Easycleaner : Racine Clé de Registre Modifié Valeur de chaîne Fichiers/réf. chemin HKEY_CURRENT_USER Software\Netscape\Netscape Navigator\User Trusted External Applications 14/09/2004 03:27:13 C:\PROGRA~1\QUICKT~1\QuickTimePlayer.exe Yes HKEY_USERS S-1-5-21-1292428093-813497703-1060284298-500\Software\Netscape\Netscape Navigator\User Trusted External Applications 14/09/2004 03:27:13 C:\PROGRA~1\QUICKT~1\QuickTimePlayer.exe Yes HKEY_CURRENT_USER Software\Philips ToUcam Camera\Data Source 17/12/2002 21:28:20 Capture Filename c:\winnt\temp\snapshot.jpg HKEY_USERS S-1-5-21-1292428093-813497703-1060284298-500\Software\Philips ToUcam Camera\Data Source 17/12/2002 21:28:20 Capture Filename c:\winnt\temp\snapshot.jpg HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\IE40.Controls 20/03/2003 18:16:27 InstallINFFile C:\WINNT\TEMP\RGI5.tmp HKEY_LOCAL_MACHINE Software\Classes\Software\Microsoft\Multimedia\Components\Informational\playback_Lyra\Files\File0 11/01/2003 17:11:24 C:\WINNT\System32\wmplenc.dll HKEY_LOCAL_MACHINE Software\Microsoft\Windows Media Device Manager 31/01/2165 15:12:13 Log.Filename C:\WINNT\System32\Wmdm.log HKEY_LOCAL_MACHINE Software\Microsoft\Shared Tools\MSInfo\ToolSets\MSInfo\wbemperm 11/01/2003 16:44:36 command C:\WINNT\System32\wbem\wbemperm.exe HKEY_LOCAL_MACHINE Software\Classes\CLSID\{CC2C83A6-9BE4-11D0-98E7-00C04FC2CAF5}\InprocServer32 11/01/2003 16:44:44 SystemDB C:\WINNT\System32\system.mdw HKEY_LOCAL_MACHINE Software\Microsoft\Shared Tools\MSInfo\ToolSets\MSInfo\sysmon 11/01/2003 16:44:36 param C:\WINNT\System32\sysmon.msc HKEY_LOCAL_MACHINE Software\Classes\Software\RealNetworks\RealPlayer\6.0\Preferences\SystemCookiesPath 04/06/2005 18:30:17 C:\WINNT\system32\syscookies.txt HKEY_LOCAL_MACHINE Software\Microsoft\Shared Tools\MSInfo\ToolSets\MSInfo\scandisk 11/01/2003 16:44:36 command C:\WINNT\System32\scandisk.exe HKEY_LOCAL_MACHINE Software\Apple Computer, Inc.\QuickTime\ActiveX 06/08/2005 10:06:08 QTTask C:\WINNT\system32\qttask.exe HKEY_LOCAL_MACHINE Software\Classes\CLSID\{F72BC3F0-6C20-4793-9DDA-258589D8A907}\InprocServer32 13/09/2004 20:51:07 C:\WINNT\system32\netslv32.dll HKEY_LOCAL_MACHINE Software\Microsoft\Shared Tools\MSInfo\ToolSets\MSInfo\netmon 11/01/2003 16:44:36 command C:\WINNT\System32\netmon\netmon.exe HKEY_LOCAL_MACHINE Software\Classes\Software\Microsoft\Multimedia\Components\Informational\playback_Lyra\Files\File1 11/01/2003 17:11:24 C:\WINNT\System32\lyrasp.dll HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{896E7419-3851-11D3-AA54-EDABFF2EB47D}\1.0\0\win32 11/01/2003 17:11:24 C:\WINNT\System32\lyrasp.dll HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic\5.0\{6D940288-9F11-11CE-83FD-02608C3EC08A}#1.0 11/01/2003 16:44:08 C:\WINNT\System32\IMGEDIT.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic\5.0\{6D940288-9F11-11CE-83FD-02608C3EC08A}#2.0 11/01/2003 16:44:08 C:\WINNT\System32\IMGEDIT.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic\5.0\{6D940288-9F11-11CE-83FD-02608C3EC08A}#2.1 11/01/2003 16:44:08 C:\WINNT\System32\IMGEDIT.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic\6.0\{6D940288-9F11-11CE-83FD-02608C3EC08A}#1.0 11/01/2003 16:44:08 C:\WINNT\System32\IMGEDIT.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic\6.0\{6D940288-9F11-11CE-83FD-02608C3EC08A}#2.0 11/01/2003 16:44:08 C:\WINNT\System32\IMGEDIT.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic\6.0\{6D940288-9F11-11CE-83FD-02608C3EC08A}#2.1 11/01/2003 16:44:08 C:\WINNT\System32\IMGEDIT.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic 4.0\{6D940288-9F11-11CE-83FD-02608C3EC08A}#1.0 11/01/2003 16:44:08 C:\WINNT\System32\IMGEDIT.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic 4.0\{6D940288-9F11-11CE-83FD-02608C3EC08A}#2.0 11/01/2003 16:44:08 C:\WINNT\System32\IMGEDIT.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic 4.0\{6D940288-9F11-11CE-83FD-02608C3EC08A}#2.1 11/01/2003 16:44:08 C:\WINNT\System32\IMGEDIT.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic 4.0\{6D940288-9F11-11CE-83FD-02608C3EC08A}#2.2 11/01/2003 16:44:08 C:\WINNT\System32\IMGEDIT.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic 5.0\{6D940288-9F11-11CE-83FD-02608C3EC08A}#1.0 11/01/2003 16:44:08 C:\WINNT\System32\IMGEDIT.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic 5.0\{6D940288-9F11-11CE-83FD-02608C3EC08A}#2.0 11/01/2003 16:44:08 C:\WINNT\System32\IMGEDIT.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic 5.0\{6D940288-9F11-11CE-83FD-02608C3EC08A}#2.1 11/01/2003 16:44:08 C:\WINNT\System32\IMGEDIT.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic 5.0\{6D940288-9F11-11CE-83FD-02608C3EC08A}#2.2 11/01/2003 16:44:08 C:\WINNT\System32\IMGEDIT.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic\5.0\{009541A3-3B81-101C-92F3-040224009C02}#1.0 11/01/2003 16:44:08 C:\WINNT\System32\IMGADMIN.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic\5.0\{009541A3-3B81-101C-92F3-040224009C02}#2.0 11/01/2003 16:44:08 C:\WINNT\System32\IMGADMIN.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic\5.0\{009541A3-3B81-101C-92F3-040224009C02}#2.1 11/01/2003 16:44:08 C:\WINNT\System32\IMGADMIN.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic\6.0\{009541A3-3B81-101C-92F3-040224009C02}#1.0 11/01/2003 16:44:08 C:\WINNT\System32\IMGADMIN.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic\6.0\{009541A3-3B81-101C-92F3-040224009C02}#2.0 11/01/2003 16:44:08 C:\WINNT\System32\IMGADMIN.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic\6.0\{009541A3-3B81-101C-92F3-040224009C02}#2.1 11/01/2003 16:44:08 C:\WINNT\System32\IMGADMIN.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic 4.0\{009541A3-3B81-101C-92F3-040224009C02}#1.0 11/01/2003 16:44:08 C:\WINNT\System32\IMGADMIN.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic 4.0\{009541A3-3B81-101C-92F3-040224009C02}#2.0 11/01/2003 16:44:08 C:\WINNT\System32\IMGADMIN.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic 4.0\{009541A3-3B81-101C-92F3-040224009C02}#2.1 11/01/2003 16:44:08 C:\WINNT\System32\IMGADMIN.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic 5.0\{009541A3-3B81-101C-92F3-040224009C02}#1.0 11/01/2003 16:44:08 C:\WINNT\System32\IMGADMIN.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic 5.0\{009541A3-3B81-101C-92F3-040224009C02}#2.0 11/01/2003 16:44:08 C:\WINNT\System32\IMGADMIN.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Visual Basic 5.0\{009541A3-3B81-101C-92F3-040224009C02}#2.1 11/01/2003 16:44:08 C:\WINNT\System32\IMGADMIN.OCA HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Setup\EncInst 18/08/2003 20:06:50 path c:\winnt\system32\export\updencin.exe HKEY_CURRENT_USER Software\Microsoft\Internet Explorer\Main 27/11/2005 17:23:49 Local Page C:\WINNT\System32\blank.htm HKEY_USERS S-1-5-21-1292428093-813497703-1060284298-500\Software\Microsoft\Internet Explorer\Main 27/11/2005 17:23:49 Local Page C:\WINNT\System32\blank.htm HKEY_LOCAL_MACHINE Software\Classes\CLSID\{598BCCF7-1913-4C44-B5CB-29BF1D94C8EC}\InProcServer32 09/11/2005 23:25:36 C:\WINNT\system32\bcgl.dll HKEY_LOCAL_MACHINE Software\Classes\CLSID\{860BC3EF-1DAD-41B2-8FB2-0533BC4D7E4D}\InProcServer32 14/11/2005 19:19:55 C:\WINNT\system32\bcgl.dll HKEY_LOCAL_MACHINE Software\Classes\CLSID\{FBCF4407-0B7B-42B2-AAC8-FF9F2E6AE051}\InProcServer32 25/11/2005 04:53:15 C:\WINNT\system32\bcgl.dll HKEY_LOCAL_MACHINE Software\Microsoft\Windows NT\CurrentVersion\SeCEdit 27/11/2005 05:22:41 TemplateUsed c:\winnt\softwaredistribution\download\934a44480e0d68e7a8d4d8fc6f177f12\\hfsecupd.inf HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Setup 16/10/2005 08:39:34 ServicePackCachePath c:\winnt\ServicePackFiles\ServicePackCache HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Explorer\VolumeCaches\Active Setup Temp Folders 03/01/2005 14:22:01 Folder C:\WINNT\msdownld.tmp|?:\msdownld.tmp HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\IEREADME 19/02/2003 18:51:13 InstallINFFile C:\WINNT\msdownld.tmp\AS1B94D1.tmp\iereadme.inf HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\OutlookExpress 19/02/2003 18:51:01 InstallINFFile C:\WINNT\msdownld.tmp\AS1B40D4.tmp\oeexcep.inf HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\IEEX 19/02/2003 18:50:51 InstallINFFile C:\WINNT\msdownld.tmp\AS1B3D1C.tmp\IEEX\ieexinst.inf HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\IE5BAK 19/02/2003 18:50:49 InstallINFFile C:\WINNT\msdownld.tmp\AS1A8CE1.tmp\iew2kuni.inf HKEY_LOCAL_MACHINE Software\Microsoft\Java VM 12/04/2004 09:36:59 LibsDirectory C:\WINNT\java\lib HKEY_CURRENT_USER Software\Gabest\vsfilter\DefTextPathes 01/04/2004 20:38:21 Path1 c:\subtitles HKEY_USERS S-1-5-21-1292428093-813497703-1060284298-500\Software\Gabest\vsfilter\DefTextPathes 01/04/2004 20:38:21 Path1 c:\subtitles HKEY_LOCAL_MACHINE Software\Microsoft\Multimedia\MPlayer2\MIME Types\audio/x-pn-realaudio 11/01/2003 16:45:19 RequiredFile C:\PROGRA~1\WINDOW~2\pnwrap.dll HKEY_LOCAL_MACHINE Software\C-Media Audio 30/09/2005 04:15:09 MUTILinkTemp133317 C:\PROGRA~1\Wanadoo\UTILIS~1\GAYVID~1\SUREST~1.RAM HKEY_CURRENT_USER Software\Microsoft\Internet Explorer\Main 27/11/2005 17:23:49 FavoritesExportFile C:\PROGRA~1\Wanadoo\Utilisateur1\bookmark.htm HKEY_USERS S-1-5-21-1292428093-813497703-1060284298-500\Software\Microsoft\Internet Explorer\Main 27/11/2005 17:23:49 FavoritesExportFile C:\PROGRA~1\Wanadoo\Utilisateur1\bookmark.htm HKEY_LOCAL_MACHINE Software\FRANCE TELECOM\WANADOO\V5.0\Installation 12/09/2004 10:48:21 NomExe C:\PROGRA~1\Wanadoo\kitwanadoo.exe HKEY_LOCAL_MACHINE Software\Clients\Media\QuickTime Player\shell\open\command 15/03/2003 14:03:24 C:\PROGRA~1\QUICKT~1\QuickTimePlayer.exe HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders 17/01/2003 19:57:25 Personal C:\Mydocs\ HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Setup\EncInst 18/08/2003 20:06:50 DebugFile c:\encinst.log HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\IE40.BrowseUI 20/03/2003 17:52:17 InstallINFFile C:\DOCUME~1\DONNAD~1\LOCALS~1\Temp\RGI6.tmp HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\IE.HKCUZoneInfo 20/03/2003 17:52:17 InstallINFFile C:\DOCUME~1\DONNAD~1\LOCALS~1\Temp\RGI4.tmp HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\ConnectionConfiguration 20/03/2003 17:52:17 InstallINFFile C:\DOCUME~1\DONNAD~1\LOCALS~1\Temp\RGI3.tmp HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\IE40.UserAgent 20/03/2003 17:52:17 InstallINFFile C:\DOCUME~1\DONNAD~1\LOCALS~1\Temp\RGI2.tmp HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\IE5SETUP 11/01/2003 17:39:23 InstallINFFile C:\DOCUME~1\DONNAD~1\LOCALS~1\Temp\IXP000.TMP\IESetup.inf HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{AA1CE5CF-998C-40A9-8613-D36D5641E12B}\2.0\0\win32 21/04/2003 11:30:26 C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Word8.0\MSForms.exd HKEY_CURRENT_USER Software\Microsoft\MediaPlayer\Setup\FileMoveCache\Source 23/07/2005 07:08:34 9 C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\setb9.tmp HKEY_USERS S-1-5-21-1292428093-813497703-1060284298-500\Software\Microsoft\MediaPlayer\Setup\FileMoveCache\Source 23/07/2005 07:08:34 9 C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\setb9.tmp HKEY_CURRENT_USER Software\Microsoft\MediaPlayer\Setup\FileMoveCache\Source 23/07/2005 07:08:34 8 C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\setb8.tmp HKEY_USERS S-1-5-21-1292428093-813497703-1060284298-500\Software\Microsoft\MediaPlayer\Setup\FileMoveCache\Source 23/07/2005 07:08:34 8 C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\setb8.tmp HKEY_CURRENT_USER Software\Microsoft\MediaPlayer\Setup\FileMoveCache\Source 23/07/2005 07:08:34 7 C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\setb7.tmp HKEY_USERS S-1-5-21-1292428093-813497703-1060284298-500\Software\Microsoft\MediaPlayer\Setup\FileMoveCache\Source 23/07/2005 07:08:34 7 C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\setb7.tmp HKEY_CURRENT_USER Software\Microsoft\MediaPlayer\Setup\FileMoveCache\Source 23/07/2005 07:08:34 6 C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\setb6.tmp HKEY_USERS S-1-5-21-1292428093-813497703-1060284298-500\Software\Microsoft\MediaPlayer\Setup\FileMoveCache\Source 23/07/2005 07:08:34 6 C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\setb6.tmp HKEY_CURRENT_USER Software\Microsoft\MediaPlayer\Setup\FileMoveCache\Source 23/07/2005 07:08:34 5 C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\setb5.tmp HKEY_USERS S-1-5-21-1292428093-813497703-1060284298-500\Software\Microsoft\MediaPlayer\Setup\FileMoveCache\Source 23/07/2005 07:08:34 5 C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\setb5.tmp HKEY_CURRENT_USER Software\Microsoft\MediaPlayer\Setup\FileMoveCache\Source 23/07/2005 07:08:34 4 C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\setb4.tmp HKEY_USERS S-1-5-21-1292428093-813497703-1060284298-500\Software\Microsoft\MediaPlayer\Setup\FileMoveCache\Source 23/07/2005 07:08:34 4 C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\setb4.tmp HKEY_CURRENT_USER Software\Microsoft\MediaPlayer\Setup\FileMoveCache\Source 23/07/2005 07:08:34 3 C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\setb3.tmp HKEY_USERS S-1-5-21-1292428093-813497703-1060284298-500\Software\Microsoft\MediaPlayer\Setup\FileMoveCache\Source 23/07/2005 07:08:34 3 C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\setb3.tmp HKEY_CURRENT_USER Software\Microsoft\MediaPlayer\Setup\FileMoveCache\Source 23/07/2005 07:08:34 2 C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\setb2.tmp HKEY_USERS S-1-5-21-1292428093-813497703-1060284298-500\Software\Microsoft\MediaPlayer\Setup\FileMoveCache\Source 23/07/2005 07:08:34 2 C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\setb2.tmp HKEY_CURRENT_USER Software\Microsoft\MediaPlayer\Setup\FileMoveCache\Source 23/07/2005 07:08:34 10 C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\setb10.tmp HKEY_USERS S-1-5-21-1292428093-813497703-1060284298-500\Software\Microsoft\MediaPlayer\Setup\FileMoveCache\Source 23/07/2005 07:08:34 10 C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\setb10.tmp HKEY_CURRENT_USER Software\Microsoft\MediaPlayer\Setup\FileMoveCache\Source 23/07/2005 07:08:34 1 C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\setb1.tmp HKEY_USERS S-1-5-21-1292428093-813497703-1060284298-500\Software\Microsoft\MediaPlayer\Setup\FileMoveCache\Source 23/07/2005 07:08:34 1 C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\setb1.tmp HKEY_CURRENT_USER Software\Microsoft\MediaPlayer\Setup\FileMoveCache\Source 23/07/2005 07:08:34 0 C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\setb0.tmp HKEY_USERS S-1-5-21-1292428093-813497703-1060284298-500\Software\Microsoft\MediaPlayer\Setup\FileMoveCache\Source 23/07/2005 07:08:34 0 C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\setb0.tmp HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\IE40.Shell 24/03/2004 21:39:29 InstallINFFile C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\RGI7AE.tmp HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\IE40.Browser 24/03/2004 21:39:29 InstallINFFile C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\RGI7AC.tmp HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\IE40.Assoc 24/03/2004 21:39:29 InstallINFFile C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\RGI7AB.tmp HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\MSIEFTP 19/02/2003 19:14:27 InstallINFFile C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\RGI3B.tmp HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\IE.HKLMZoneInfo 19/02/2003 19:14:27 InstallINFFile C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\RGI39.tmp HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\IEContentAdvisor.Assoc 19/02/2003 19:14:11 InstallINFFile C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\RGI11.tmp HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\mshtml.DllReg 19/02/2003 19:14:11 InstallINFFile C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\RGI10.tmp HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\IE40.Comctl32 19/02/2003 19:14:03 InstallINFFile C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\RGI1.tmp HKEY_CURRENT_USER Software\MediaLoads\Prefs 08/08/2003 17:16:28 Filename C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\rem975.tmp HKEY_USERS S-1-5-21-1292428093-813497703-1060284298-500\Software\MediaLoads\Prefs 08/08/2003 17:16:28 Filename C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\rem975.tmp HKEY_CURRENT_USER Software\Ahead\Nero BackItUp\Options\LogFileOPtions 08/11/2004 19:47:29 LogFileName C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\NeroBackItUp.txt HKEY_USERS S-1-5-21-1292428093-813497703-1060284298-500\Software\Ahead\Nero BackItUp\Options\LogFileOPtions 08/11/2004 19:47:29 LogFileName C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\NeroBackItUp.txt HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\Q903235 14/07/2005 18:17:53 InstallINFFile C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\IXP000.TMP\Q903235.inf HKEY_LOCAL_MACHINE Software\Microsoft\Advanced INF Setup\IE6SETUP 11/04/2004 12:47:50 InstallINFFile C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\IXP000.TMP\IESetup.inf HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\C838BEBA7A1AD5C47B1EB83441068061\SourceList\Net 21/10/2005 05:33:45 1 C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\IXP000.TMP\ HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\C838BEBA7A1AD5C47B1EB83441068061\InstallProperties 21/10/2005 05:33:40 InstallSource C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\IXP000.TMP\ HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{ABEB838C-A1A7-4C5D-B7E1-8B4314600816} 21/10/2005 05:33:40 InstallSource C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\IXP000.TMP\ HKEY_LOCAL_MACHINE Software\C-Media Audio 30/09/2005 04:15:09 MUTILinkTemp1333bf C:\DOCUME~1\ADMINI~1\LOCALS~1\TEMPOR~1\Content.IE5\R3BL60UK\ZZEJAC~1.MPE 4/ Logfile of HijackThis v1.99.1 Scan saved at 19:19:38, on 27/11/2005 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\system32\svchost.exe C:\WINNT\system32\spoolsv.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe C:\WINNT\System32\svchost.exe C:\WINNT\System32\nvsvc32.exe C:\WINNT\system32\regsvc.exe C:\WINNT\system32\MSTask.exe C:\WINNT\system32\stisvc.exe C:\WINNT\System32\WBEM\WinMgmt.exe C:\WINNT\System32\mspmspsv.exe C:\WINNT\system32\svchost.exe C:\WINNT\Explorer.EXE C:\Program Files\Microsoft Hardware\Keyboard\type32.exe C:\WINNT\system32\RunDll32.exe C:\PROGRA~1\MESSAG~1\StartMessager.exe C:\PROGRA~1\PHILIP~1\VProperty.exe C:\PROGRA~1\MESSAG~1\Demon.exe C:\Program Files\Alcatel\SpeedTouch USB\Dragdiag.exe C:\PROGRA~1\Wanadoo\taskbaricon.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe C:\WINNT\system32\internat.exe C:\PROGRA~1\Wanadoo\EspaceWanadoo.exe C:\PROGRA~1\Wanadoo\ComComp.exe C:\PROGRA~1\Wanadoo\Watch.exe C:\Program Files\HijackThis.exe R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll O2 - BHO: (no name) - {FFFFFEF0-5B30-21D4-945D-000000000000} - C:\PROGRA~1\STARDO~1\SDIEInt.dll O3 - Toolbar: @msdxmLC.dll,-1@1036,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O4 - HKLM\..\Run: [synchronization Manager] mobsync.exe /logon O4 - HKLM\..\Run: [intelliType] "C:\Program Files\Microsoft Hardware\Keyboard\type32.exe" O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [LoadQM] loadqm.exe O4 - HKLM\..\Run: [MessagerStarter Messager] C:\PROGRA~1\MESSAG~1\StartMessager.exe Messager Wanadoo O4 - HKLM\..\Run: [ToUcamVProperty] C:\PROGRA~1\PHILIP~1\VProperty.exe O4 - HKLM\..\Run: [Demon] C:\PROGRA~1\MESSAG~1\Demon.exe O4 - HKLM\..\Run: [speedTouch USB Diagnostics] "C:\Program Files\Alcatel\SpeedTouch USB\Dragdiag.exe" /icon O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\taskbaricon.exe O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe O4 - HKCU\..\Run: [internat.exe] internat.exe O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html O8 - Extra context menu item: Download with Star Downloader - C:\Program Files\Star Downloader\sdie.htm O8 - Extra context menu item: Envoyer l'image sur mon Téléphone avec PhotoCapt - res://C:\Program Files\PhotoCapt\PhotoCapt.exe/143 O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file) O9 - Extra button: PhotoCapt - {D4935849-9EBC-4eac-A3AF-0C861DDAF397} - C:\Program Files\PhotoCapt\PhotoCapt.exe O9 - Extra 'Tools' menuitem: PhotoCapt - {D4935849-9EBC-4eac-A3AF-0C861DDAF397} - C:\Program Files\PhotoCapt\PhotoCapt.exe O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe O17 - HKLM\System\CCS\Services\Tcpip\..\{F0E4410E-7457-43F0-A0FA-918E570E14E1}: NameServer = 80.10.246.130 80.10.246.3 O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINNT\System32\nvsvc32.exe Merci encore pour ton aide !

Ca y est, j'ai lancé Antivir puis Hijackthis. Voici le rapport : Logfile of HijackThis v1.99.1 Scan saved at 14:36:35, on 27/11/2005 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\system32\svchost.exe C:\WINNT\System32\WBEM\WinMgmt.exe C:\WINNT\Explorer.EXE C:\Program Files\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\se.dll/space.html R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\se.dll/space.html R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank R1 - HKLM\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll O2 - BHO: (no name) - {FF3BCDE4-5B8D-4F91-B71A-9D844524A5B4} - C:\WINNT\system32\bcgl.dll (file missing) O2 - BHO: (no name) - {FFFFFEF0-5B30-21D4-945D-000000000000} - C:\PROGRA~1\STARDO~1\SDIEInt.dll O3 - Toolbar: @msdxmLC.dll,-1@1036,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O4 - HKLM\..\Run: [synchronization Manager] mobsync.exe /logon O4 - HKLM\..\Run: [intelliType] "C:\Program Files\Microsoft Hardware\Keyboard\type32.exe" O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp3\winampa.exe" O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [LoadQM] loadqm.exe O4 - HKLM\..\Run: [MessagerStarter Messager] C:\PROGRA~1\MESSAG~1\StartMessager.exe Messager Wanadoo O4 - HKLM\..\Run: [ToUcamVProperty] C:\PROGRA~1\PHILIP~1\VProperty.exe O4 - HKLM\..\Run: [Demon] C:\PROGRA~1\MESSAG~1\Demon.exe O4 - HKLM\..\Run: [speedTouch USB Diagnostics] "C:\Program Files\Alcatel\SpeedTouch USB\Dragdiag.exe" /icon O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\taskbaricon.exe O4 - HKLM\..\Run: [install_BlueDSL] D:\Install.exe wifi O4 - HKLM\..\Run: [NeroCheck] C:\WINNT\system32\NeroCheck.exe O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [AVGCtrl] C:\Program Files\AVPersonal\AVGNT.EXE /min O4 - HKCU\..\Run: [internat.exe] internat.exe O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [aupd] C:\WINNT\system32\sywsvcs.exe O4 - Global Startup: Ask Harrap's Shorter.lnk = ? O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O4 - Global Startup: Reality Fusion GameCam SE.lnk = C:\PROGRA~1\PHILIP~1\GameCam SE\Program\RFTray.exe O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html O8 - Extra context menu item: Download with Star Downloader - C:\Program Files\Star Downloader\sdie.htm O8 - Extra context menu item: Envoyer l'image sur mon Téléphone avec PhotoCapt - res://C:\Program Files\PhotoCapt\PhotoCapt.exe/143 O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file) O9 - Extra button: PhotoCapt - {D4935849-9EBC-4eac-A3AF-0C861DDAF397} - C:\Program Files\PhotoCapt\PhotoCapt.exe O9 - Extra 'Tools' menuitem: PhotoCapt - {D4935849-9EBC-4eac-A3AF-0C861DDAF397} - C:\Program Files\PhotoCapt\PhotoCapt.exe O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU) O16 - DPF: {2ABE804B-4D3A-41BF-A172-304627874B45} - http://akamai.downloadv3.com/binaries/DialHTML/EGDHTML.cab O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/200305...meInstaller.exe O16 - DPF: {45E83043-1F6F-4D22-A5E7-0138EA171B49} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com/AppD...sharingctrl.cab O16 - DPF: {7DBFDA8E-D33B-11D4-9269-00600868E56E} (WWWInstall Class) - http://www.edipole.fr/kits/WebInstall.dll O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://charon777.free.fr/plugins/hardwaredetection.cab O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://geotoo.mkm-wpe.net/activex/AxisCamControl.ocx O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/SSC/SharedCon...n/bin/cabsa.cab O16 - DPF: {C6760A07-A574-4705-B113-7856315922C3} - http://akamai.downloadv3.com/binaries/IA/sysnetsvc32_FR.cab O18 - Filter: text/html - {FBCF4407-0B7B-42B2-AAC8-FF9F2E6AE051} - C:\WINNT\system32\bcgl.dll O18 - Filter: text/plain - {FBCF4407-0B7B-42B2-AAC8-FF9F2E6AE051} - C:\WINNT\system32\bcgl.dll O21 - SSODL: IjUKSbtWf - {DC6796B4-76CD-3C1E-3D9F-07A8B7C9CE2C} - C:\WINNT\system32\uwdzs.dll (file missing) O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - C:\Program Files\AVPersonal\AVGUARD.EXE O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXE O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINNT\System32\nvsvc32.exe

Zut ! Ca commence mal. J'ai bien désinstallé new.net en passant par le panneau de configuration. Par contre je ne trouve pas C:\PROGRA~1\NEWDOT~1. (Ni à la racine de C ni dans program files). Où est donc C:\PROGRA~1 ? Je continue quand même la procédure quitte à revenir en arrière par la suite.

J'ai chopé depuis quelques jours ce cheval de Troie. Besoin d'aide pour m'en débarasser. Je poste ici le rapport hijackthis. Merci de m'indiquer ce que je dois supprimer et autres manips nécessaires. Logfile of HijackThis v1.99.1 Scan saved at 07:15:24, on 25/11/2005 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\system32\svchost.exe C:\WINNT\system32\spoolsv.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe C:\WINNT\System32\svchost.exe C:\WINNT\System32\nvsvc32.exe C:\WINNT\system32\regsvc.exe C:\WINNT\system32\MSTask.exe C:\WINNT\system32\stisvc.exe C:\WINNT\System32\WBEM\WinMgmt.exe C:\WINNT\System32\mspmspsv.exe C:\WINNT\system32\svchost.exe C:\WINNT\Explorer.EXE C:\Program Files\Microsoft Hardware\Keyboard\type32.exe C:\WINNT\system32\RunDll32.exe C:\Program Files\Winamp3\winampa.exe C:\PROGRA~1\MESSAG~1\StartMessager.exe C:\PROGRA~1\PHILIP~1\VProperty.exe C:\PROGRA~1\MESSAG~1\Demon.exe C:\Program Files\Alcatel\SpeedTouch USB\Dragdiag.exe C:\PROGRA~1\Wanadoo\taskbaricon.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\WINNT\system32\rundll32.exe C:\WINNT\system32\internat.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\Program Files\Harrap's Multimédia\Shorter\bin\HiHarrapsTray.exe C:\PROGRA~1\PHILIP~1\GameCam SE\Program\RFTray.exe C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe C:\PROGRA~1\Wanadoo\EspaceWanadoo.exe C:\PROGRA~1\Wanadoo\ComComp.exe C:\PROGRA~1\Wanadoo\Watch.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Maxthon\Maxthon.exe C:\Documents and Settings\administrateur\Bureau\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\se.dll/space.html R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\se.dll/space.html R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll O2 - BHO: (no name) - {FF3BCDE4-5B8D-4F91-B71A-9D844524A5B4} - C:\WINNT\system32\bcgl.dll O2 - BHO: (no name) - {FFFFFEF0-5B30-21D4-945D-000000000000} - C:\PROGRA~1\STARDO~1\SDIEInt.dll O3 - Toolbar: @msdxmLC.dll,-1@1036,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O4 - HKLM\..\Run: [synchronization Manager] mobsync.exe /logon O4 - HKLM\..\Run: [intelliType] "C:\Program Files\Microsoft Hardware\Keyboard\type32.exe" O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp3\winampa.exe" O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [LoadQM] loadqm.exe O4 - HKLM\..\Run: [MessagerStarter Messager] C:\PROGRA~1\MESSAG~1\StartMessager.exe Messager Wanadoo O4 - HKLM\..\Run: [ToUcamVProperty] C:\PROGRA~1\PHILIP~1\VProperty.exe O4 - HKLM\..\Run: [Demon] C:\PROGRA~1\MESSAG~1\Demon.exe O4 - HKLM\..\Run: [speedTouch USB Diagnostics] "C:\Program Files\Alcatel\SpeedTouch USB\Dragdiag.exe" /icon O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\taskbaricon.exe O4 - HKLM\..\Run: [install_BlueDSL] D:\Install.exe wifi O4 - HKLM\..\Run: [NeroCheck] C:\WINNT\system32\NeroCheck.exe O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [New.net Startup] rundll32 C:\PROGRA~1\NEWDOT~1\NEWDOT~2.DLL,ClientStartup -s O4 - HKCU\..\Run: [internat.exe] internat.exe O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [aupd] C:\WINNT\system32\sywsvcs.exe O4 - Global Startup: Ask Harrap's Shorter.lnk = ? O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE O4 - Global Startup: Reality Fusion GameCam SE.lnk = C:\PROGRA~1\PHILIP~1\GameCam SE\Program\RFTray.exe O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html O8 - Extra context menu item: Download with Star Downloader - C:\Program Files\Star Downloader\sdie.htm O8 - Extra context menu item: Envoyer l'image sur mon Téléphone avec PhotoCapt - res://C:\Program Files\PhotoCapt\PhotoCapt.exe/143 O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file) O9 - Extra button: PhotoCapt - {D4935849-9EBC-4eac-A3AF-0C861DDAF397} - C:\Program Files\PhotoCapt\PhotoCapt.exe O9 - Extra 'Tools' menuitem: PhotoCapt - {D4935849-9EBC-4eac-A3AF-0C861DDAF397} - C:\Program Files\PhotoCapt\PhotoCapt.exe O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU) O10 - Hijacked Internet access by New.Net O10 - Hijacked Internet access by New.Net O10 - Hijacked Internet access by New.Net O10 - Hijacked Internet access by New.Net O10 - Hijacked Internet access by New.Net O16 - DPF: {2ABE804B-4D3A-41BF-A172-304627874B45} - http://akamai.downloadv3.com/binaries/DialHTML/EGDHTML.cab O16 - DPF: {41F17733-B041-4099-A042-B518BB6A408C} - http://a1540.g.akamai.net/7/1540/52/200305...meInstaller.exe O16 - DPF: {45E83043-1F6F-4D22-A5E7-0138EA171B49} (FileSharingCtrl Class) - http://appdirectory.messenger.msn.com/AppD...sharingctrl.cab O16 - DPF: {7DBFDA8E-D33B-11D4-9269-00600868E56E} (WWWInstall Class) - http://www.edipole.fr/kits/WebInstall.dll O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://charon777.free.fr/plugins/hardwaredetection.cab O16 - DPF: {917623D1-D8E5-11D2-BE8B-00104B06BDE3} (CamImage Class) - http://geotoo.mkm-wpe.net/activex/AxisCamControl.ocx O16 - DPF: {C2FCEF52-ACE9-11D3-BEBD-00105AA9B6AE} (Symantec RuFSI Registry Information Class) - http://security.symantec.com/SSC/SharedCon...n/bin/cabsa.cab O16 - DPF: {C6760A07-A574-4705-B113-7856315922C3} - http://akamai.downloadv3.com/binaries/IA/sysnetsvc32_FR.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{F0E4410E-7457-43F0-A0FA-918E570E14E1}: NameServer = 80.10.246.1 80.10.246.132 O18 - Filter: text/html - {FBCF4407-0B7B-42B2-AAC8-FF9F2E6AE051} - C:\WINNT\system32\bcgl.dll O18 - Filter: text/plain - {FBCF4407-0B7B-42B2-AAC8-FF9F2E6AE051} - C:\WINNT\system32\bcgl.dll O21 - SSODL: IjUKSbtWf - {DC6796B4-76CD-3C1E-3D9F-07A8B7C9CE2C} - C:\WINNT\system32\uwdzs.dll (file missing) O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINNT\System32\nvsvc32.exe