

sunshine17
Membres-
Compteur de contenus
23 -
Inscription
-
Dernière visite
Autres informations
-
Mes langues
francais
sunshine17's Achievements

Member (4/12)
0
Réputation sur la communauté
-
"édité" : Je suis aussi infecté par "MagicControl.Agent
sunshine17 a répondu à un(e) sujet de sunshine17 dans Analyses et éradication malwares
Salut charles ingals Tout est ok et une fois de plus, tes conseils se sont révélés très constructifs Merci encore et à bientôt. Alain -
"édité" : Je suis aussi infecté par "MagicControl.Agent
sunshine17 a répondu à un(e) sujet de sunshine17 dans Analyses et éradication malwares
RE : Voili, voila, j'ai fixé les lignes qui "vont bien".. Logfile of HijackThis v1.99.1 Scan saved at 15:21:10, on 13/05/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\CyberLink\PowerCinema\PCMService.exe C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe C:\Program Files\Winamp\winampa.exe C:\Program Files\Roxio\MyDVD\MyDVD\DetectorApp.exe C:\WINDOWS\system32\LVCOMSX.EXE C:\Program Files\Logitech\Video\LogiTray.exe C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\QuickTime\qttask.exe C:\PROGRA~1\Grisoft\AVG7\avgcc.exe C:\Program Files\Soft4Ever\looknstop\looknstop.exe C:\Program Files\eTrust Internet Security Suite\caissdt.exe C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe C:\PROGRA~1\MESSEN~1\Msmsgs.exe C:\Program Files\Microsoft ActiveSync\wcescomm.exe C:\Program Files\Logitech\Video\FxSvr2.exe C:\PROGRA~1\MI3AA1~1\rapimgr.exe C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe C:\Program Files\Logitech\SetPoint\SetPoint.exe C:\Program Files\TechSmith\SnagIt 7\SnagIt32.exe C:\Program Files\SpamPal\spampal.exe C:\Program Files\ewido anti-malware\ewidoctrl.exe C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE C:\WINDOWS\system32\svchost.exe C:\Program Files\Roxio\MyDVD\MyDVD\USBDeviceService.exe C:\Program Files\TechSmith\SnagIt 7\TSCHelp.exe C:\Program Files\Fichiers communs\Logitech\KHAL\KHALMNPR.EXE C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\Program Files\Real\RealPlayer\RealPlay.exe C:\Program Files\Outlook Express\msimn.exe C:\WINDOWS\system32\dllhost.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\Program Files\eMule\emule.exe C:\Program Files\eTrust Internet Security Suite\eTrust PestPatrol Anti-Spyware\PPActiveDetection.exe C:\Program Files\Real\RealPlayer\RealPlay.exe C:\Program Files\WS_FTP\ftp95pro.exe C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.yahoo.com/fsc/ R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com/fsc/ R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://fr.yahoo.com/fsc/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: HelperObject Class - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 7\SnagItBHO.dll O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 7\SnagItIEAddin.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe" O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe" O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe O4 - HKLM\..\Run: [DetectorApp] C:\Program Files\Roxio\MyDVD\MyDVD\DetectorApp.exe O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe O4 - HKLM\..\Run: [bluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP O4 - HKLM\..\Run: [Look 'n' Stop] "C:\Program Files\Soft4Ever\looknstop\looknstop.exe" -auto O4 - HKLM\..\Run: [CaISSDT] "C:\Program Files\eTrust Internet Security Suite\caissdt.exe" O4 - HKLM\..\Run: [eTrustPPAP] "C:\Program Files\eTrust Internet Security Suite\eTrust PestPatrol Anti-Spyware\PPActiveDetection.exe" O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe O4 - HKCU\..\Run: [MSMSGS] "c:\PROGRA~1\MESSEN~1\Msmsgs.exe" /background O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AdobeUpdateManager.exe" AcPro7_0_7 -reboot 1 O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe" O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Startup: SpamPal.lnk = C:\Program Files\SpamPal\spampal.exe O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe O4 - Global Startup: Lancement rapide d'Adobe Acrobat.lnk = ? O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe O4 - Global Startup: SnagIt 7.lnk = C:\Program Files\TechSmith\SnagIt 7\SnagIt32.exe O8 - Extra context menu item: &Traduire à partir de l'anglais - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html O8 - Extra context menu item: Convertir en Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convertir en un fichier PDF existant - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convertir la cible du lien en Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convertir la cible du lien en un fichier PDF existant - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convertir la sélection en Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convertir la sélection en un fichier PDF existant - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convertir les liens sélectionnés en fichier Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html O8 - Extra context menu item: Convertir les liens sélectionnés en un fichier PDF existant - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Pages liées - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html O8 - Extra context menu item: Pages similaires - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html O8 - Extra context menu item: Recherche &Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll O9 - Extra button: Capturer ! - {47055D63-DFCD-11d3-8406-00500445A7D0} - C:\Program Files\Goto\MemoWeb 4\IEBtn\Launcher (file missing) O9 - Extra 'Tools' menuitem: Capturer ce web - {47055D63-DFCD-11d3-8406-00500445A7D0} - C:\Program Files\Goto\MemoWeb 4\IEBtn\Launcher (file missing) O9 - Extra button: @c:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: @c:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\Program Files\Messenger\msmsgs.exe O16 - DPF: {26CBF141-7D0F-46E1-AA06-718958B6E4D2} - http://download.ebay.com/turbo_lister/FR/install.cab O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/eB...l_v1-0-3-30.cab O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1141497783140 O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab O18 - Protocol: bw+0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw+0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw-0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw-0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw00 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw00s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw10 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw10s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw20 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw20s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw30 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw30s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw40 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw40s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw50 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw50s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw60 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw60s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw70 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw70s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw80 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw80s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw90 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw90s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwa0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwa0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwb0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwb0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwc0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwc0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwd0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwd0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwe0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwe0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwf0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwf0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll O18 - Protocol: bwg0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwg0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwh0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwh0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwi0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwi0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwj0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwj0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwk0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwk0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwl0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwl0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwm0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwm0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwn0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwn0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwo0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwo0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwp0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwp0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwq0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwq0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwr0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwr0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bws0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bws0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwt0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwt0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwu0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwu0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwv0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwv0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bww0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bww0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwx0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwx0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwy0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwy0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwz0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwz0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O18 - Protocol: offline-8876480 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing) O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: USBDeviceService - Unknown owner - C:\Program Files\Roxio\MyDVD\MyDVD\USBDeviceService.exe Alain -
"édité" : Je suis aussi infecté par "MagicControl.Agent
sunshine17 a répondu à un(e) sujet de sunshine17 dans Analyses et éradication malwares
Salut charles ingals Voici le résultat de PANDA : Aucun virus ou autre logiciel malveillant n'a été détecté ! Encore un très grand merci poir ton efficacité ! Alain -
"édité" : Je suis aussi infecté par "MagicControl.Agent
sunshine17 a répondu à un(e) sujet de sunshine17 dans Analyses et éradication malwares
Salut charles ingals Sorry... Voici le rapport : 05/12/06 08:57:56 [info]: BlackLight Engine 1.0.36 initialized 05/12/06 08:57:56 [info]: OS: 5.1 build 2600 (Service Pack 2) 05/12/06 08:57:56 [Note]: 7019 4 05/12/06 08:57:56 [Note]: 7005 0 05/12/06 08:58:01 [Note]: 7006 0 05/12/06 08:58:01 [Note]: 7011 872 05/12/06 08:58:01 [Note]: 7026 0 05/12/06 08:58:01 [Note]: 7026 0 05/12/06 08:58:11 [Note]: FSRAW library version 1.7.1015 05/12/06 09:03:57 [Note]: 7007 0 Merci Alain PS: Tu bosses de nuit ?? PS2 : depuis mon, inscription, je n'arrives toujours pas à recevoir une alerte du forum des qu'un mess est posté sur mon fil. J'ai bien sur verifié que tout est ok dans mon profil. J'ai coché " Activer la 'Notification par email' par défaut ?" et comme parametre : "Notification par email immédiate". Une idée ? -
"édité" : Je suis aussi infecté par "MagicControl.Agent
sunshine17 a répondu à un(e) sujet de sunshine17 dans Analyses et éradication malwares
Salut charles ingals Oui avec plaisir Voili, voila : Logfile of HijackThis v1.99.1 Scan saved at 22:08:22, on 11/05/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\Program Files\CyberLink\PowerCinema\PCMService.exe C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe C:\Program Files\Winamp\winampa.exe C:\Program Files\Roxio\MyDVD\MyDVD\DetectorApp.exe C:\WINDOWS\system32\LVCOMSX.EXE C:\Program Files\Logitech\Video\LogiTray.exe C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\PROGRA~1\Grisoft\AVG7\avgcc.exe C:\Program Files\Soft4Ever\looknstop\looknstop.exe C:\Program Files\eTrust Internet Security Suite\caissdt.exe C:\Program Files\eTrust Internet Security Suite\eTrust PestPatrol Anti-Spyware\PPActiveDetection.exe C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe C:\PROGRA~1\MESSEN~1\Msmsgs.exe C:\Program Files\Microsoft ActiveSync\wcescomm.exe C:\Program Files\Logitech\Video\FxSvr2.exe C:\PROGRA~1\MI3AA1~1\rapimgr.exe C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe C:\Program Files\Logitech\SetPoint\SetPoint.exe C:\Program Files\TechSmith\SnagIt 7\SnagIt32.exe C:\Program Files\SpamPal\spampal.exe C:\Program Files\ewido anti-malware\ewidoctrl.exe C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE C:\WINDOWS\system32\svchost.exe C:\Program Files\Roxio\MyDVD\MyDVD\USBDeviceService.exe C:\Program Files\TechSmith\SnagIt 7\TSCHelp.exe C:\Program Files\Fichiers communs\Logitech\KHAL\KHALMNPR.EXE C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\Program Files\eMule\emule.exe C:\Program Files\Real\RealPlayer\RealPlay.exe C:\Program Files\Outlook Express\msimn.exe C:\PROGRA~1\MICROS~3\OFFICE11\OUTLOOK.EXE C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\WINDOWS\system32\dllhost.exe C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.yahoo.com/fsc/ R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com/fsc/ R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://fr.yahoo.com/fsc/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: HelperObject Class - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 7\SnagItBHO.dll O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 7\SnagItIEAddin.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe" O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe" O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe O4 - HKLM\..\Run: [DetectorApp] C:\Program Files\Roxio\MyDVD\MyDVD\DetectorApp.exe O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe O4 - HKLM\..\Run: [bluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP O4 - HKLM\..\Run: [Look 'n' Stop] "C:\Program Files\Soft4Ever\looknstop\looknstop.exe" -auto O4 - HKLM\..\Run: [CaISSDT] "C:\Program Files\eTrust Internet Security Suite\caissdt.exe" O4 - HKLM\..\Run: [eTrustPPAP] "C:\Program Files\eTrust Internet Security Suite\eTrust PestPatrol Anti-Spyware\PPActiveDetection.exe" O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe O4 - HKCU\..\Run: [MSMSGS] "c:\PROGRA~1\MESSEN~1\Msmsgs.exe" /background O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AdobeUpdateManager.exe" AcPro7_0_7 -reboot 1 O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe" O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Startup: SpamPal.lnk = C:\Program Files\SpamPal\spampal.exe O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe O4 - Global Startup: Lancement rapide d'Adobe Acrobat.lnk = ? O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe O4 - Global Startup: SnagIt 7.lnk = C:\Program Files\TechSmith\SnagIt 7\SnagIt32.exe O8 - Extra context menu item: &Traduire à partir de l'anglais - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html O8 - Extra context menu item: Convertir en Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convertir en un fichier PDF existant - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convertir la cible du lien en Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convertir la cible du lien en un fichier PDF existant - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convertir la sélection en Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convertir la sélection en un fichier PDF existant - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convertir les liens sélectionnés en fichier Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html O8 - Extra context menu item: Convertir les liens sélectionnés en un fichier PDF existant - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Pages liées - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html O8 - Extra context menu item: Pages similaires - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html O8 - Extra context menu item: Recherche &Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll O9 - Extra button: Capturer ! - {47055D63-DFCD-11d3-8406-00500445A7D0} - C:\Program Files\Goto\MemoWeb 4\IEBtn\Launcher (file missing) O9 - Extra 'Tools' menuitem: Capturer ce web - {47055D63-DFCD-11d3-8406-00500445A7D0} - C:\Program Files\Goto\MemoWeb 4\IEBtn\Launcher (file missing) O9 - Extra button: @c:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: @c:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\Program Files\Messenger\msmsgs.exe O16 - DPF: {26CBF141-7D0F-46E1-AA06-718958B6E4D2} - http://download.ebay.com/turbo_lister/FR/install.cab O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/eB...l_v1-0-3-30.cab O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1141497783140 O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab O18 - Protocol: bw+0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw+0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw-0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw-0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw00 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw00s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw10 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw10s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw20 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw20s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw30 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw30s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw40 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw40s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw50 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw50s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw60 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw60s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw70 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw70s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw80 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw80s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw90 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw90s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwa0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwa0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwb0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwb0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwc0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwc0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwd0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwd0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwe0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwe0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwf0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwf0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll O18 - Protocol: bwg0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwg0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwh0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwh0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwi0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwi0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwj0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwj0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwk0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwk0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwl0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwl0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwm0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwm0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwn0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwn0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwo0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwo0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwp0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwp0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwq0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwq0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwr0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwr0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bws0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bws0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwt0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwt0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwu0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwu0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwv0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwv0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bww0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bww0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwx0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwx0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwy0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwy0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwz0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwz0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O18 - Protocol: offline-8876480 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing) O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: USBDeviceService - Unknown owner - C:\Program Files\Roxio\MyDVD\MyDVD\USBDeviceService.exe Pour les applications qui tentent d'accéder à internet: je ne voit pas par contre ce que lssas va faire sur le net..?(faut que je me renseigne!) Sinon ta coonfig est bonne!Il y a peux être des réglages à faire au niveau firewall+ antivirus pour qu'ils protègent bien ton pc! Je te laisserai quelques consignes en fin de discussion si tu veux Ok...je suis tout ouie Merci encore Alain -
"édité" : Je suis aussi infecté par "MagicControl.Agent
sunshine17 a répondu à un(e) sujet de sunshine17 dans Analyses et éradication malwares
A priori, je n'ai plus de fenetres intempestives ! UN TRES GRAND MERCI pour la qualité de ton support sur mon PB :P Je me pose 2 questions : 1) que penses tu de ca ? je laisse passer ou pas ? 2) afin de ne pas rencontrer les memes déboire que ceux qui m'ont amenés vers toi, j'utilise : Antivirus : AVG 7.1 FireWall : Look n Stop Anti Spywares resident : Pest Patrol Que penses tu de cette config sécurité? Puis je l'améliorer ? Merci encore pour ton aide. Alain -
"édité" : Je suis aussi infecté par "MagicControl.Agent
sunshine17 a répondu à un(e) sujet de sunshine17 dans Analyses et éradication malwares
Ok voici les rapports : hijackthis : Logfile of HijackThis v1.99.1 Scan saved at 22:53:57, on 10/05/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\Program Files\CyberLink\PowerCinema\PCMService.exe C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe C:\Program Files\Winamp\winampa.exe C:\Program Files\Roxio\MyDVD\MyDVD\DetectorApp.exe C:\WINDOWS\system32\LVCOMSX.EXE C:\Program Files\Logitech\Video\LogiTray.exe C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\PROGRA~1\Grisoft\AVG7\avgcc.exe C:\Program Files\Soft4Ever\looknstop\looknstop.exe C:\Program Files\eTrust Internet Security Suite\caissdt.exe C:\Program Files\eTrust Internet Security Suite\eTrust PestPatrol Anti-Spyware\PPActiveDetection.exe C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe C:\PROGRA~1\MESSEN~1\Msmsgs.exe C:\Program Files\Microsoft ActiveSync\wcescomm.exe C:\Program Files\Logitech\Video\FxSvr2.exe C:\PROGRA~1\MI3AA1~1\rapimgr.exe C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe C:\Program Files\Logitech\SetPoint\SetPoint.exe C:\Program Files\TechSmith\SnagIt 7\SnagIt32.exe C:\Program Files\SpamPal\spampal.exe C:\Program Files\ewido anti-malware\ewidoctrl.exe C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE C:\WINDOWS\system32\svchost.exe C:\Program Files\Roxio\MyDVD\MyDVD\USBDeviceService.exe C:\Program Files\TechSmith\SnagIt 7\TSCHelp.exe C:\Program Files\Fichiers communs\Logitech\KHAL\KHALMNPR.EXE C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe C:\Program Files\Outlook Express\msimn.exe C:\Documents and Settings\alain\Bureau\blbeta.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\WINDOWS\system32\wbem\wmiapsrv.exe C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.yahoo.com/fsc/ R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com/fsc/ R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://fr.yahoo.com/fsc/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: HelperObject Class - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 7\SnagItBHO.dll O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 7\SnagItIEAddin.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe" O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe" O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe O4 - HKLM\..\Run: [DetectorApp] C:\Program Files\Roxio\MyDVD\MyDVD\DetectorApp.exe O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe O4 - HKLM\..\Run: [bluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [ovxgzpbtj] c:\windows\system32\ovxgzpbtj.exe ovxgzpbtj O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP O4 - HKLM\..\Run: [Look 'n' Stop] "C:\Program Files\Soft4Ever\looknstop\looknstop.exe" -auto O4 - HKLM\..\Run: [CaISSDT] "C:\Program Files\eTrust Internet Security Suite\caissdt.exe" O4 - HKLM\..\Run: [eTrustPPAP] "C:\Program Files\eTrust Internet Security Suite\eTrust PestPatrol Anti-Spyware\PPActiveDetection.exe" O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe O4 - HKCU\..\Run: [MSMSGS] "c:\PROGRA~1\MESSEN~1\Msmsgs.exe" /background O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AdobeUpdateManager.exe" AcPro7_0_7 -reboot 1 O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe" O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Startup: SpamPal.lnk = C:\Program Files\SpamPal\spampal.exe O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe O4 - Global Startup: Lancement rapide d'Adobe Acrobat.lnk = ? O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe O4 - Global Startup: SnagIt 7.lnk = C:\Program Files\TechSmith\SnagIt 7\SnagIt32.exe O8 - Extra context menu item: &Traduire à partir de l'anglais - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html O8 - Extra context menu item: Convertir en Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convertir en un fichier PDF existant - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convertir la cible du lien en Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convertir la cible du lien en un fichier PDF existant - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convertir la sélection en Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convertir la sélection en un fichier PDF existant - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convertir les liens sélectionnés en fichier Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html O8 - Extra context menu item: Convertir les liens sélectionnés en un fichier PDF existant - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Pages liées - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html O8 - Extra context menu item: Pages similaires - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html O8 - Extra context menu item: Recherche &Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll O9 - Extra button: Capturer ! - {47055D63-DFCD-11d3-8406-00500445A7D0} - C:\Program Files\Goto\MemoWeb 4\IEBtn\Launcher (file missing) O9 - Extra 'Tools' menuitem: Capturer ce web - {47055D63-DFCD-11d3-8406-00500445A7D0} - C:\Program Files\Goto\MemoWeb 4\IEBtn\Launcher (file missing) O9 - Extra button: @c:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: @c:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\Program Files\Messenger\msmsgs.exe O16 - DPF: {26CBF141-7D0F-46E1-AA06-718958B6E4D2} - http://download.ebay.com/turbo_lister/FR/install.cab O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/eB...l_v1-0-3-30.cab O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1141497783140 O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab O18 - Protocol: bw+0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw+0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw-0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw-0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw00 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw00s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw10 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw10s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw20 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw20s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw30 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw30s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw40 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw40s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw50 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw50s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw60 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw60s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw70 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw70s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw80 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw80s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw90 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw90s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwa0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwa0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwb0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwb0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwc0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwc0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwd0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwd0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwe0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwe0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwf0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwf0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll O18 - Protocol: bwg0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwg0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwh0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwh0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwi0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwi0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwj0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwj0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwk0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwk0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwl0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwl0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwm0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwm0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwn0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwn0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwo0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwo0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwp0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwp0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwq0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwq0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwr0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwr0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bws0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bws0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwt0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwt0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwu0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwu0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwv0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwv0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bww0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bww0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwx0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwx0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwy0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwy0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwz0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwz0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O18 - Protocol: offline-8876480 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing) O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: USBDeviceService - Unknown owner - C:\Program Files\Roxio\MyDVD\MyDVD\USBDeviceService.exe Blacklight : 05/10/06 22:50:23 [info]: BlackLight Engine 1.0.36 initialized 05/10/06 22:50:23 [info]: OS: 5.1 build 2600 (Service Pack 2) 05/10/06 22:50:23 [Note]: 7019 4 05/10/06 22:50:23 [Note]: 7005 0 05/10/06 22:50:31 [Note]: 7006 0 05/10/06 22:50:31 [Note]: 7011 872 05/10/06 22:50:31 [Note]: 7026 0 05/10/06 22:50:32 [Note]: 7026 0 05/10/06 22:50:38 [Note]: FSRAW library version 1.7.1015 Spybot : --- Search result list --- Félicitations!: Aucun mouchard n'a été trouvé. () Ton avis ?? Alain -
"édité" : Je suis aussi infecté par "MagicControl.Agent
sunshine17 a répondu à un(e) sujet de sunshine17 dans Analyses et éradication malwares
Ok dans l'ordre : Rapport de hijackthis : Logfile of HijackThis v1.99.1 Scan saved at 22:24:03, on 10/05/2006 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe C:\Program Files\ewido anti-malware\ewidoctrl.exe C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE C:\WINDOWS\SOUNDMAN.EXE C:\WINDOWS\system32\svchost.exe C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\Program Files\CyberLink\PowerCinema\PCMService.exe C:\Program Files\Roxio\MyDVD\MyDVD\USBDeviceService.exe C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe C:\Program Files\Winamp\winampa.exe C:\Program Files\Roxio\MyDVD\MyDVD\DetectorApp.exe C:\WINDOWS\system32\LVCOMSX.EXE C:\Program Files\Logitech\Video\LogiTray.exe C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe C:\WINDOWS\system32\rundll32.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\PROGRA~1\Grisoft\AVG7\avgcc.exe C:\Program Files\Soft4Ever\looknstop\looknstop.exe C:\Program Files\eTrust Internet Security Suite\caissdt.exe C:\Program Files\eTrust Internet Security Suite\eTrust PestPatrol Anti-Spyware\PPActiveDetection.exe C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe C:\PROGRA~1\MESSEN~1\Msmsgs.exe C:\Program Files\Microsoft ActiveSync\wcescomm.exe C:\PROGRA~1\MI3AA1~1\rapimgr.exe C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe C:\Program Files\Logitech\Video\FxSvr2.exe C:\Program Files\Logitech\SetPoint\SetPoint.exe C:\Program Files\TechSmith\SnagIt 7\SnagIt32.exe C:\Program Files\SpamPal\spampal.exe C:\Program Files\TechSmith\SnagIt 7\TSCHelp.exe C:\Program Files\Fichiers communs\Logitech\KHAL\KHALMNPR.EXE C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\WINDOWS\system32\NOTEPAD.EXE C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.yahoo.com/fsc/ R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com/fsc/ R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://fr.yahoo.com/fsc/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: HelperObject Class - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 7\SnagItBHO.dll O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 7\SnagItIEAddin.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [PCMService] "C:\Program Files\CyberLink\PowerCinema\PCMService.exe" O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe" O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe O4 - HKLM\..\Run: [DetectorApp] C:\Program Files\Roxio\MyDVD\MyDVD\DetectorApp.exe O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe O4 - HKLM\..\Run: [bluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [ovxgzpbtj] c:\windows\system32\ovxgzpbtj.exe ovxgzpbtj O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP O4 - HKLM\..\Run: [Look 'n' Stop] "C:\Program Files\Soft4Ever\looknstop\looknstop.exe" -auto O4 - HKLM\..\Run: [CaISSDT] "C:\Program Files\eTrust Internet Security Suite\caissdt.exe" O4 - HKLM\..\Run: [eTrustPPAP] "C:\Program Files\eTrust Internet Security Suite\eTrust PestPatrol Anti-Spyware\PPActiveDetection.exe" O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe O4 - HKCU\..\Run: [MSMSGS] "c:\PROGRA~1\MESSEN~1\Msmsgs.exe" /background O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AdobeUpdateManager.exe" AcPro7_0_7 -reboot 1 O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe" O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Startup: SpamPal.lnk = C:\Program Files\SpamPal\spampal.exe O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe O4 - Global Startup: Lancement rapide d'Adobe Acrobat.lnk = ? O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe O4 - Global Startup: SnagIt 7.lnk = C:\Program Files\TechSmith\SnagIt 7\SnagIt32.exe O8 - Extra context menu item: &Traduire à partir de l'anglais - res://C:\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html O8 - Extra context menu item: Convertir en Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convertir en un fichier PDF existant - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convertir la cible du lien en Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convertir la cible du lien en un fichier PDF existant - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convertir la sélection en Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convertir la sélection en un fichier PDF existant - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convertir les liens sélectionnés en fichier Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html O8 - Extra context menu item: Convertir les liens sélectionnés en un fichier PDF existant - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Pages liées - res://C:\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html O8 - Extra context menu item: Pages similaires - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html O8 - Extra context menu item: Recherche &Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmsearch.html O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://C:\Program Files\Google\GoogleToolbar1.dll/cmcache.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1\INetRepl.dll O9 - Extra button: Capturer ! - {47055D63-DFCD-11d3-8406-00500445A7D0} - C:\Program Files\Goto\MemoWeb 4\IEBtn\Launcher (file missing) O9 - Extra 'Tools' menuitem: Capturer ce web - {47055D63-DFCD-11d3-8406-00500445A7D0} - C:\Program Files\Goto\MemoWeb 4\IEBtn\Launcher (file missing) O9 - Extra button: @c:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: @c:\Program Files\Messenger\Msgslang.dll,-61144 - {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\Program Files\Messenger\msmsgs.exe O16 - DPF: {26CBF141-7D0F-46E1-AA06-718958B6E4D2} - http://download.ebay.com/turbo_lister/FR/install.cab O16 - DPF: {4C39376E-FA9D-4349-BACC-D305C1750EF3} (EPUImageControl Class) - http://tools.ebayimg.com/eps/wl/activex/eB...l_v1-0-3-30.cab O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1141497783140 O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab O18 - Protocol: bw+0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw+0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw-0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw-0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw00 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw00s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw10 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw10s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw20 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw20s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw30 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw30s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw40 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw40s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw50 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw50s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw60 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw60s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw70 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw70s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw80 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw80s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw90 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw90s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwa0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwa0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwb0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwb0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwc0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwc0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwd0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwd0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwe0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwe0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwf0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwf0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll O18 - Protocol: bwg0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwg0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwh0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwh0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwi0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwi0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwj0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwj0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwk0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwk0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwl0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwl0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwm0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwm0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwn0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwn0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwo0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwo0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwp0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwp0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwq0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwq0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwr0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwr0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bws0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bws0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwt0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwt0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwu0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwu0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwv0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwv0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bww0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bww0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwx0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwx0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwy0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwy0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwz0 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwz0s - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing) O18 - Protocol: offline-8876480 - {A1C9B9FC-64AB-4A6E-A5E4-9EFC1660A291} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing) O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe O23 - Service: CyberLink Media Library Service - Cyberlink - C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: USBDeviceService - Unknown owner - C:\Program Files\Roxio\MyDVD\MyDVD\USBDeviceService.exe Ensuite le log de Aproposfix: Log of AproposFix v1.1 ************ Running from directory: C:\Documents and Settings\alain\Bureau\aproposfix ************ Registry entries found: ************ No service found! Removing hidden folder: No folder found! Deleting files: Backing up files: Done! Removing registry entries: REGEDIT4 Done! Finished! C'est quoi ca ????? Et pour finir un rapport de Sypbot : --- Search result list --- MagicControl.Agent: Réglages utilisateur (Clé du registre, fixed) HKEY_USERS\S-1-5-21-447703775-2101651688-3811721814-1006\Software\LanConfig Toujours le magicControl.agent Ton avis ? Merci. Alain -
"édité" : Je suis aussi infecté par "MagicControl.Agent
sunshine17 a répondu à un(e) sujet de sunshine17 dans Analyses et éradication malwares
Ok.... je reste derrière le PC.. Alain -
"édité" : Je suis aussi infecté par "MagicControl.Agent
sunshine17 a répondu à un(e) sujet de sunshine17 dans Analyses et éradication malwares
Re: Je te confirme que ce service est bien desactivé. Voici le rapport de blbeta: 05/10/06 21:09:04 [info]: BlackLight Engine 1.0.36 initialized 05/10/06 21:09:04 [info]: OS: 5.1 build 2600 (Service Pack 2) 05/10/06 21:09:04 [Note]: 7019 4 05/10/06 21:09:04 [Note]: 7005 0 05/10/06 21:09:41 [Note]: 7006 0 05/10/06 21:09:41 [Note]: 7011 1712 05/10/06 21:09:41 [Note]: 7026 0 05/10/06 21:09:41 [Note]: 7026 0 05/10/06 21:09:41 [Note]: 7024 3 05/10/06 21:09:41 [info]: Hidden process: C:\windows\system32\ovxgzpbtj.exe 05/10/06 21:09:41 [Note]: FSRAW library version 1.7.1015 05/10/06 21:17:16 [info]: Hidden file: c:\WINDOWS\system32\ovxgzpbtj_nav.dat 05/10/06 21:17:16 [Note]: 10002 1 05/10/06 21:17:16 [info]: Hidden file: c:\WINDOWS\system32\ovxgzpbtj.dat 05/10/06 21:17:16 [Note]: 10002 1 05/10/06 21:17:17 [info]: Hidden file: C:\windows\system32\ovxgzpbtj.exe 05/10/06 21:17:17 [Note]: 10002 1 05/10/06 21:17:17 [info]: Hidden file: c:\WINDOWS\system32\ovxgzpbtj_navps.dat 05/10/06 21:17:17 [Note]: 10002 1 05/10/06 21:19:28 [Note]: 7007 0 Pas de contextPlus à l'horizon Voici le rapport de RegSearch REGEDIT4 ; Registry Search 2.0 by Bobbi Flekman © 2005 ; Version: 2.0.1.0 ; Results at 10/05/2006 21:23:45 for strings: ; 'adchannel' ; Strings excluded from search: ; (None) ; Search in: ; Registry Keys Registry Values Registry Data ; HKEY_LOCAL_MACHINE HKEY_USERS [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\adchannel.net] ; End Of The Log... Merci pour ta patience à la résolution de mon PB. Alain -
"édité" : Je suis aussi infecté par "MagicControl.Agent
sunshine17 a répondu à un(e) sujet de sunshine17 dans Analyses et éradication malwares
RE charles ingals, Ba c'est pas encore ca m'sieur J'ai tout bien fait dans l'ordre et j'ai toujours les fenetres qui s'ouvrent et Spybot me le detecte toujours.. A toi Alain --- Search result list --- MagicControl.Agent: Réglages utilisateur (Clé du registre, fixed) HKEY_USERS\S-1-5-21-447703775-2101651688-3811721814-1006\Software\LanConfig -
"édité" : Je suis aussi infecté par "MagicControl.Agent
sunshine17 a répondu à un(e) sujet de sunshine17 dans Analyses et éradication malwares
Re: Une indication supplementaire est que les fenetres de pub qui s'ouvrent sont 1 fois sur 3 ou 4 pour WinAntivirus 2006. Je n'ai bien sur JAMAIS installé cette appli ! A te lire Alain -
"édité" : Je suis aussi infecté par "MagicControl.Agent
sunshine17 a répondu à un(e) sujet de sunshine17 dans Analyses et éradication malwares
Bonjour charles ingals, Voici le rapport de Ewido... Pour infos, j'ai aussi refais un scan avec SpyBot et notre "copain" est toujours là ... Merci de ton aide Alain --------------------------------------------------------- ewido anti-malware - Rapport de scan --------------------------------------------------------- + Créé le: 10:56:13, 10/05/2006 + Somme de contrôle: 3C929523 + Résultats du scan: Pas de fichiers infectés trouvés! ::Fin du rapport ------------------------------------------- Et pour Spybot: --- Search result list --- MagicControl.Agent: Réglages utilisateur (Clé du registre, fixed) HKEY_USERS\S-1-5-21-447703775-2101651688-3811721814-1006\Software\LanConfig Bien sur les fenetres de pub continues à s'ouvrir -
"édité" : Je suis aussi infecté par "MagicControl.Agent
sunshine17 a répondu à un(e) sujet de sunshine17 dans Analyses et éradication malwares
Re... J'ai fais toutes les étapes dans l'ordre ( y compris les dernieres " DELDOMAINS de Mike Burgess" et "Ie-spyad2 d'Eric L. Howes.") mais spybot me trouve toujours MagicControl.Agent. Merci de ton aide. Voici le rapport : --- Search result list --- MagicControl.Agent: Réglages utilisateur (Clé du registre, fixed) HKEY_USERS\S-1-5-21-447703775-2101651688-3811721814-1006\Software\LanConfig CasinoPopupStuff: Cookie traceur (Internet Explorer: alain) (Cookie, fixed) CasinoPopupStuff: Cookie traceur (Internet Explorer: alain) (Cookie, fixed) -
"édité" : Je suis aussi infecté par "MagicControl.Agent
sunshine17 a répondu à un(e) sujet de sunshine17 dans Analyses et éradication malwares
Après avoir fait les manips, Spybot me detecte toujour MagicControl.agent. Une info supplémentaire, lors de l'ouverture d'IE, il m'ouvre très fréquement cette page: http://em.gad-network.com/eas?cu=122&login...&nums=N34_FRG4N (Je ne se sais pas si c'est une indication pour toi ?) Voici le nouveau rapport de Spybot : --- Search result list --- MagicControl.Agent: Réglages utilisateur (Clé du registre, fixed) HKEY_USERS\S-1-5-21-447703775-2101651688-3811721814-1006\Software\LanConfig --- Spybot - Search & Destroy version: 1.4 (build: 20050523) --- 2005-05-31 blindman.exe (1.0.0.1) 2005-05-31 SpybotSD.exe (1.4.0.3) 2005-05-31 TeaTimer.exe (1.4.0.2) 2006-04-05 unins000.exe (51.41.0.0) 2005-05-31 Update.exe (1.4.0.0) 2006-02-06 advcheck.dll (1.0.2.0) 2005-05-31 aports.dll (2.1.0.0) 2005-05-31 borlndmm.dll (7.0.4.453) 2005-05-31 delphimm.dll (7.0.4.453) 2005-05-31 SDHelper.dll (1.4.0.0) 2006-02-20 Tools.dll (2.0.0.2) 2005-05-31 UnzDll.dll (1.73.1.1) 2005-05-31 ZipDll.dll (1.73.2.0) 2006-05-05 Includes\Cookies.sbi (*) 2006-05-05 Includes\Dialer.sbi (*) 2006-05-05 Includes\Hijackers.sbi (*) 2006-05-05 Includes\Keyloggers.sbi (*) 2004-11-29 Includes\LSP.sbi (*) 2006-05-05 Includes\Malware.sbi (*) 2006-05-05 Includes\PUPS.sbi (*) 2006-05-05 Includes\Revision.sbi (*) 2006-05-05 Includes\Security.sbi (*) 2006-05-05 Includes\Spybots.sbi (*) 2005-02-17 Includes\Tracks.uti 2006-05-05 Includes\Trojans.sbi (*) --- System information --- Windows XP (Build: 2600) Service Pack 2 / .NETFramework / 1.1: Microsoft .NET Framework 1.1 Hotfix (KB886903) / .NETFramework / 1.1: Microsoft .NET Framework 1.1 Service Pack 1 (KB867460) / Step By Step Interactive Training / SP2: Mise à jour de sécurité pour Step by Step Interactive Training (KB898458) / Windows Media Player 10: Mise à jour de sécurité pour Lecteur Windows Media 10 (KB911565) / Windows XP / SP3: Correctif Windows XP - KB873339 / Windows XP / SP3: Correctif Windows XP - KB883529 / Windows XP / SP3: Correctif Windows XP - KB883667 / Windows XP / SP3: Correctif Windows XP - KB884575 / Windows XP / SP3: Correctif Windows XP - KB884883 / Windows XP / SP3: Correctif Windows XP - KB885250 / Windows XP / SP3: Correctif Windows XP - KB885523 / Windows XP / SP3: Correctif Windows XP - KB885835 / Windows XP / SP3: Correctif Windows XP - KB885836 / Windows XP / SP3: Correctif Windows XP - KB885855 / Windows XP / SP3: Correctif Windows XP - KB885894 / Windows XP / SP3: Correctif Windows XP - KB886677 / Windows XP / SP3: Correctif Windows XP - KB886716 / Windows XP / SP3: Correctif Windows XP - KB887742 / Windows XP / SP3: Correctif Windows XP - KB887797 / Windows XP / SP3: Correctif Windows XP - KB888113 / Windows XP / SP3: Correctif Windows XP - KB888302 / Windows XP / SP3: Correctif Windows XP - KB888402 / Windows XP / SP3: Correctif Windows XP - KB889016 / Windows XP / SP3: Correctif pour Windows XP (KB889527) / Windows XP / SP3: Correctif Windows XP - KB889673 / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB890046) / Windows XP / SP3: Correctif Windows XP - KB890831 / Windows XP / SP3: Correctif Windows XP - KB890859 / Windows XP / SP3: Correctif Windows XP - KB891781 / Windows XP / SP3: Correctif Windows XP - KB892627 / Windows XP / SP3: Correctif Windows XP - KB893056 / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB893066) / Windows XP / SP3: Correctif pour Windows XP (KB893357) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB893756) / Windows XP / SP3: Windows Installer 3.1 (KB893803) / Windows XP / SP3: Correctif pour Windows XP (KB896256) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896358) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896422) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896423) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896424) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896428) / Windows XP / SP3: Correctif Windows XP - KB896626 / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB896688) / Windows XP / SP3: Mise à jour pour Windows XP (KB897663) / Windows XP / SP3: Mise à jour pour Windows XP (KB898461) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB899587) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB899589) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB899591) / Windows XP / SP3: Mise à jour pour Windows XP (KB900485) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB900725) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB900930) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB901017) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB901214) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB902400) / Windows XP / SP3: Correctif pour Windows XP (KB903234) / Windows XP / SP3: Correctif pour Windows XP (KB904412) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB904706) / Windows XP / SP3: Mise à jour pour Windows XP (KB904942) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB905414) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB905749) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB905915) / Windows XP / SP3: Correctif pour Windows XP (KB906569) / Windows XP / SP3: Correctif pour Windows XP (KB907865) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB908519) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB908531) / Windows XP / SP3: Hotfix for Windows XP (KB909394) / Windows XP / SP3: Mise à jour pour Windows XP (KB910437) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB911562) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB911567) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB911927) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB912812) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB912919) / Windows XP / SP3: Mise à jour pour Windows XP (KB912945) / Windows XP / SP3: Mise à jour de sécurité pour Windows XP (KB913446) --- Startup entries list --- Located: HK_LM:Run, Acrobat Assistant 7.0 command: "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe" file: C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe size: 483328 MD5: 78ff388fd58ce0bae1f7c9670f5473c1 Located: HK_LM:Run, ATICCC command: "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime file: C:\Program Files\ATI Technologies\ATI.ACE\cli.exe size: 45056 MD5: 64c4c17bf6a40ff1cd21205e6fd415b8 Located: HK_LM:Run, AVG7_CC command: C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP file: C:\PROGRA~1\Grisoft\AVG7\avgcc.exe size: 347695 MD5: 849ce18226be5645f47d8079b07f162f Located: HK_LM:Run, BluetoothAuthenticationAgent command: rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent file: C:\WINDOWS\system32\rundll32.exe size: 33792 MD5: f5402cd47b7389ddc21f92119a906eee Located: HK_LM:Run, CaISSDT command: "C:\Program Files\eTrust Internet Security Suite\caissdt.exe" file: C:\Program Files\eTrust Internet Security Suite\caissdt.exe size: 165416 MD5: d236a482c9ae97b3bb9b9689a4a3796d Located: HK_LM:Run, DetectorApp command: C:\Program Files\Roxio\MyDVD\MyDVD\DetectorApp.exe file: C:\Program Files\Roxio\MyDVD\MyDVD\DetectorApp.exe size: 102400 MD5: cd5cadd587a5fcdd58a42618c52d4fc3 Located: HK_LM:Run, eTrustPPAP command: "C:\Program Files\eTrust Internet Security Suite\eTrust PestPatrol Anti-Spyware\PPActiveDetection.exe" file: C:\Program Files\eTrust Internet Security Suite\eTrust PestPatrol Anti-Spyware\PPActiveDetection.exe size: 258048 MD5: 0f0bf2db9ae8658220e832d9fcb5194f Located: HK_LM:Run, eTrustPPAP command: "C:\Program Files\eTrust Internet Security Suite\eTrust PestPatrol Anti-Spyware\PPActiveDetection.exe" file: C:\Program Files\eTrust Internet Security Suite\eTrust PestPatrol Anti-Spyware\PPActiveDetection.exe size: 258048 MD5: 0f0bf2db9ae8658220e832d9fcb5194f Located: HK_LM:Run, LogitechVideoRepair command: C:\Program Files\Logitech\Video\ISStart.exe file: C:\Program Files\Logitech\Video\ISStart.exe size: 458752 MD5: 3c0ee706ceb7e9a154bf8e7749ca5a91 Located: HK_LM:Run, LogitechVideoTray command: C:\Program Files\Logitech\Video\LogiTray.exe file: C:\Program Files\Logitech\Video\LogiTray.exe size: 217088 MD5: 2d3bcca5c7ca55fedd60e3336d3a92af Located: HK_LM:Run, Look 'n' Stop command: "C:\Program Files\Soft4Ever\looknstop\looknstop.exe" -auto file: C:\Program Files\Soft4Ever\looknstop\looknstop.exe size: 376900 MD5: ac5ae50b540c5cfe69a5bc85550bc378 Located: HK_LM:Run, LVCOMSX command: C:\WINDOWS\system32\LVCOMSX.EXE file: C:\WINDOWS\system32\LVCOMSX.EXE size: 221184 MD5: 5ba8a7da5d0573f7923e02b260aad2f1 Located: HK_LM:Run, NeroFilterCheck command: C:\WINDOWS\system32\NeroCheck.exe file: C:\WINDOWS\system32\NeroCheck.exe size: 155648 MD5: 3e4c03cefad8de135263236b61a49c90 Located: HK_LM:Run, PCMService command: "C:\Program Files\CyberLink\PowerCinema\PCMService.exe" file: C:\Program Files\CyberLink\PowerCinema\PCMService.exe size: 143360 MD5: 0ae4cc13324a7bf9254d5c09502e8070 Located: HK_LM:Run, QuickTime Task command: "C:\Program Files\QuickTime\qttask.exe" -atboottime file: C:\Program Files\QuickTime\qttask.exe size: 155648 MD5: c74c7963eec07af49dce44d64819b2bf Located: HK_LM:Run, RemoteControl command: "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" file: C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe size: 45056 MD5: 65384dfd2be8feafa4efc6bc8d419354 Located: HK_LM:Run, SoundMan command: SOUNDMAN.EXE file: C:\WINDOWS\SOUNDMAN.EXE size: 90112 MD5: 3996ab635b3f87d708bc9de4fe49adec Located: HK_LM:Run, SunJavaUpdateSched command: C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe file: C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe size: 36975 MD5: 61a3a9d5d98bf0331df5b716144a8100 Located: HK_LM:Run, TkBellExe command: "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot file: C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe size: 180269 MD5: 1ac2c58b587c70de64582ad41ee79fba Located: HK_LM:Run, WinampAgent command: C:\Program Files\Winamp\winampa.exe file: C:\Program Files\Winamp\winampa.exe size: 35328 MD5: ffaff01c4c38b538a183f104527240f7 Located: HK_LM:RunOnceEx, Register Homesite+.exe command: "C:\Program Files\Macromedia\HomeSite+\Homesite+.exe" /REGSERVER file: C:\Program Files\Macromedia\HomeSite+\Homesite+.exe size: 2137088 MD5: 6d5fccfdb6696b3f9be5d6ca286a693a Located: HK_CU:Run, H/PC Connection Agent command: "C:\Program Files\Microsoft ActiveSync\wcescomm.exe" file: C:\Program Files\Microsoft ActiveSync\wcescomm.exe size: 1204224 MD5: 3d3b3b4844a9d4b1b9d3e8c7bb013026 Located: HK_CU:Run, LDM command: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe file: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe size: 36864 MD5: c76c901f3d304c4d773e1bfdcb517798 Located: HK_CU:Run, LogitechSoftwareUpdate command: "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot file: C:\Program Files\Logitech\Video\ManifestEngine.exe size: 196608 MD5: d679346402cbf2330cad1fcf815c6524 Located: HK_CU:Run, MSMSGS command: "c:\PROGRA~1\MESSEN~1\Msmsgs.exe" /background file: c:\PROGRA~1\MESSEN~1\Msmsgs.exe size: 1658592 MD5: f125c0a696480f3d132b1bc736d871bf Located: HK_CU:Run, updateMgr command: "C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AdobeUpdateManager.exe" AcPro7_0_7 -reboot 1 file: C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AdobeUpdateManager.exe size: 307200 MD5: f5f0a43bdc828ff39fa44737b8cb385c Located: Démarrage (tous utilisateurs), ATI CATALYST System Tray.lnk command: C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe file: C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe size: 45056 MD5: 64c4c17bf6a40ff1cd21205e6fd415b8 Located: Démarrage (tous utilisateurs), Lancement rapide d'Adobe Acrobat.lnk command: C:\WINDOWS\Installer\{AC76BA86-1033-F400-7760-000000000002}\SC_Acrobat.exe file: C:\WINDOWS\Installer\{AC76BA86-1033-F400-7760-000000000002}\SC_Acrobat.exe size: 25214 MD5: d6294d59171ac375cd142003566aa89e Located: Démarrage (tous utilisateurs), Logitech Desktop Messenger.lnk command: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe file: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe size: 196608 MD5: 6f2e5108667bf1149d884e3cbeb9cdd1 Located: Démarrage (tous utilisateurs), Logitech SetPoint.lnk command: C:\Program Files\Logitech\SetPoint\SetPoint.exe file: C:\Program Files\Logitech\SetPoint\SetPoint.exe size: 450560 MD5: 57781b2d6c4ddbf753d820472462e445 Located: Démarrage (tous utilisateurs), SnagIt 7.lnk command: C:\Program Files\TechSmith\SnagIt 7\SnagIt32.exe file: C:\Program Files\TechSmith\SnagIt 7\SnagIt32.exe size: 3719168 MD5: 322c21b8729403c9f4af38e83c8fc58a Located: Démarrage (utilisateur), Adobe Gamma.lnk command: C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe file: C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe size: 113664 MD5: c2ff17734176cd15221c10044ef0ba1a Located: Démarrage (utilisateur), Public ShareFolder Server.lnk command: C:\Program Files\Public ShareFolder\Server\POL32ADM.exe file: C:\Program Files\Public ShareFolder\Server\POL32ADM.exe size: 421888 MD5: c0fdae96fb5a5370c69c8fb85cb4deb2 Located: Démarrage (utilisateur), SpamPal.lnk command: C:\Program Files\SpamPal\spampal.exe file: C:\Program Files\SpamPal\spampal.exe size: 387616 MD5: 12c358d7e2b3bfd478fa2833555f5df7 Located: System.ini, AtiExtEvent command: Ati2evxx.dll file: Ati2evxx.dll Located: System.ini, crypt32chain command: crypt32.dll file: crypt32.dll Located: System.ini, cryptnet command: cryptnet.dll file: cryptnet.dll Located: System.ini, cscdll command: cscdll.dll file: cscdll.dll Located: System.ini, ScCertProp command: wlnotify.dll file: wlnotify.dll Located: System.ini, Schedule command: wlnotify.dll file: wlnotify.dll Located: System.ini, sclgntfy command: sclgntfy.dll file: sclgntfy.dll Located: System.ini, SensLogn command: WlNotify.dll file: WlNotify.dll Located: System.ini, termsrv command: wlnotify.dll file: wlnotify.dll Located: System.ini, wlballoon command: wlnotify.dll file: wlnotify.dll --- Browser helper object list --- {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} (SSVHelper Class) BHO name: CLSID name: SSVHelper Class Path: C:\Program Files\Java\jre1.5.0_06\bin\ Long name: ssv.dll Short name: Date (created): 02/03/2006 14:53:00 Date (last access): 09/05/2006 18:51:36 Date (last write): 10/11/2005 14:22:12 Filesize: 184423 Attributes: archive MD5: F01726F7CA8538FDD4663C9DB8FEAEDC CRC32: 0111B892 Version: 5.0.60.5 {AA58ED58-01DD-4d91-8333-CF10577473F7} (Google Toolbar Helper) BHO name: CLSID name: Google Toolbar Helper description: Google toolbar classification: Open for discussion known filename: googletoolbar.dll<br>googletoolbar*.dll<br>(* = number)<br>googletoolbar_en_*.**-big.dll<br>Googletoolbar_en_*.*.**-deleon.dll info link: http://toolbar.google.com/ info source: TonyKlein Path: c:\program files\google\ Long name: GoogleToolbar1.dll Short name: GOOGLE~1.DLL Date (created): 04/03/2006 19:33:02 Date (last access): 09/05/2006 18:51:36 Date (last write): 27/03/2006 00:49:28 Filesize: 1204224 Attributes: readonly archive MD5: D91CB7361D7814035F543C7CCAE9DD60 CRC32: 16D568FF Version: 3.0.131.0 --- ActiveX list --- {26CBF141-7D0F-46E1-AA06-718958B6E4D2} () DPF name: CLSID name: Installer: C:\WINDOWS\Downloaded Program Files\Setup.inf Codebase: http://download.ebay.com/turbo_lister/FR/install.cab description: classification: Open for discussion known filename: info link: info source: Safer Networking Ltd. {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) DPF name: CLSID name: ActiveScan Installer Class Installer: C:\WINDOWS\Downloaded Program Files\asinst.inf Codebase: http://acs.pandasoftware.com/activescan/as5free/asinst.cab description: classification: Open for discussion known filename: ASINST.DLL info link: info source: Safer Networking Ltd. Path: C:\WINDOWS\Downloaded Program Files\ Long name: asinst.dll Short name: Date (created): 11/04/2006 17:10:10 Date (last access): 09/05/2006 18:49:12 Date (last write): 11/04/2006 17:10:10 Filesize: 135168 Attributes: archive MD5: 7267AE9C8DF527C30885DC29687D2A9B CRC32: 1B1733A3 Version: 58.5.0.0 {CAFEEFAC-0015-0000-0006-ABCDEFFEDCBA} (Java Runtime Environment 1.5.0) DPF name: Java Runtime Environment 1.5.0 CLSID name: Java Plug-in 1.5.0_06 Installer: Codebase: http://java.sun.com/update/1.5.0/jinstall-...indows-i586.cab Path: C:\Program Files\Java\jre1.5.0_06\bin\ Long name: NPJPI150_06.dll Short name: NPJPI1~1.DLL Date (created): 02/03/2006 14:52:58 Date (last access): 09/05/2006 17:38:46 Date (last write): 10/11/2005 14:22:12 Filesize: 69746 Attributes: archive MD5: D2CF6BB5E9020E6707B62575F8083954 CRC32: 7F39DC54 Version: 5.0.60.5 {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} (Java Runtime Environment 1.5.0) DPF name: Java Runtime Environment 1.5.0 CLSID name: Java Plug-in 1.5.0_06 Installer: Codebase: http://java.sun.com/update/1.5.0/jinstall-...indows-i586.cab Path: C:\Program Files\Java\jre1.5.0_06\bin\ Long name: NPJPI150_06.dll Short name: NPJPI1~1.DLL Date (created): 02/03/2006 14:52:58 Date (last access): 09/05/2006 18:54:22 Date (last write): 10/11/2005 14:22:12 Filesize: 69746 Attributes: archive MD5: D2CF6BB5E9020E6707B62575F8083954 CRC32: 7F39DC54 Version: 5.0.60.5 --- Process list --- PID: 0 ( 0) [system] PID: 1168 ( 4) \SystemRoot\System32\smss.exe PID: 1232 (1168) \??\C:\WINDOWS\system32\csrss.exe PID: 1264 (1168) \??\C:\WINDOWS\system32\winlogon.exe PID: 1312 (1264) C:\WINDOWS\system32\services.exe size: 108544 MD5: 732E0B1ABAACE15D80EC19056B0A2AF9 PID: 1324 (1264) C:\WINDOWS\system32\lsass.exe size: 13312 MD5: 9F3744A5C6F49291A7A685040A013399 PID: 1512 (1312) C:\WINDOWS\system32\Ati2evxx.exe size: 376832 MD5: B526ECD7FC8309AAFF61A5198671E480 PID: 1532 (1312) C:\WINDOWS\system32\svchost.exe size: 14336 MD5: 1BD6C2F707A275CB7C16FD99FE0F31CA PID: 1616 (1312) C:\WINDOWS\system32\svchost.exe size: 14336 MD5: 1BD6C2F707A275CB7C16FD99FE0F31CA PID: 1824 (1312) C:\WINDOWS\System32\svchost.exe size: 14336 MD5: 1BD6C2F707A275CB7C16FD99FE0F31CA PID: 244 (1312) C:\WINDOWS\system32\svchost.exe size: 14336 MD5: 1BD6C2F707A275CB7C16FD99FE0F31CA PID: 620 (1312) C:\WINDOWS\system32\spoolsv.exe size: 57856 MD5: DA81EC57ACD4CDC3D4C51CF3D409AF9F PID: 1124 (1264) C:\WINDOWS\system32\Ati2evxx.exe size: 376832 MD5: B526ECD7FC8309AAFF61A5198671E480 PID: 1244 ( 504) C:\WINDOWS\Explorer.EXE size: 1036288 MD5: 0BEE3B07ACE3303EE57698808E1D2DE3 PID: 200 (1312) C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe size: 330291 MD5: 9023309E63E3C808A359835460288264 PID: 228 (1312) C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe size: 39987 MD5: 0C07536704F29608E79A3561EB5F1039 PID: 280 (1312) C:\WINDOWS\system32\svchost.exe size: 14336 MD5: 1BD6C2F707A275CB7C16FD99FE0F31CA PID: 324 (1312) C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe size: 266338 MD5: 4847DABA785D2B8F668CCAEAE26DA9D9 PID: 340 (1312) C:\Program Files\CyberLink\PowerCinema\Kernel\CLML_NTService\CLMLServer.exe size: 1081344 MD5: 17CF439F02170CB7F4FA1B416B03EC8B PID: 404 (1312) C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE size: 322120 MD5: 11F714F85530A2BD134074DC30E99FCA PID: 464 (1312) C:\WINDOWS\system32\svchost.exe size: 14336 MD5: 1BD6C2F707A275CB7C16FD99FE0F31CA PID: 492 (1312) C:\WINDOWS\system32\wdfmgr.exe size: 38912 MD5: AB0A7CA90D9E3D6A193905DC1715DED0 PID: 568 (1312) C:\Program Files\Roxio\MyDVD\MyDVD\USBDeviceService.exe size: 90112 MD5: 3255611BDB4846754E4660F9ADD0BB95 PID: 1096 (1244) C:\WINDOWS\SOUNDMAN.EXE size: 90112 MD5: 3996AB635B3F87D708BC9DE4FE49ADEC PID: 1140 (1244) C:\Program Files\ATI Technologies\ATI.ACE\cli.exe size: 45056 MD5: 64C4C17BF6A40FF1CD21205E6FD415B8 PID: 1216 (1244) C:\Program Files\CyberLink\PowerCinema\PCMService.exe size: 143360 MD5: 0AE4CC13324A7BF9254D5C09502E8070 PID: 1400 (1244) C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe size: 45056 MD5: 65384DFD2BE8FEAFA4EFC6BC8D419354 PID: 1724 (1244) C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe size: 483328 MD5: 78FF388FD58CE0BAE1F7C9670F5473C1 PID: 1772 (1244) C:\Program Files\Winamp\winampa.exe size: 35328 MD5: FFAFF01C4C38B538A183F104527240F7 PID: 456 (1244) C:\Program Files\Roxio\MyDVD\MyDVD\DetectorApp.exe size: 102400 MD5: CD5CADD587A5FCDD58A42618C52D4FC3 PID: 1700 (1244) C:\WINDOWS\system32\LVCOMSX.EXE size: 221184 MD5: 5BA8A7DA5D0573F7923E02B260AAD2F1 PID: 1988 (1244) C:\Program Files\Logitech\Video\LogiTray.exe size: 217088 MD5: 2D3BCCA5C7CA55FEDD60E3336D3A92AF PID: 2028 (1244) C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe size: 36975 MD5: 61A3A9D5D98BF0331DF5B716144A8100 PID: 1560 (1244) C:\WINDOWS\system32\rundll32.exe size: 33792 MD5: F5402CD47B7389DDC21F92119A906EEE PID: 1552 (1244) C:\Program Files\QuickTime\qttask.exe size: 155648 MD5: C74C7963EEC07AF49DCE44D64819B2BF PID: 336 (1244) C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe size: 180269 MD5: 1AC2C58B587C70DE64582AD41EE79FBA PID: 832 (1244) C:\PROGRA~1\Grisoft\AVG7\avgcc.exe size: 347695 MD5: 849CE18226BE5645F47D8079B07F162F PID: 1376 (1244) C:\Program Files\Soft4Ever\looknstop\looknstop.exe size: 376900 MD5: AC5AE50B540C5CFE69A5BC85550BC378 PID: 2372 (1244) C:\Program Files\eTrust Internet Security Suite\caissdt.exe size: 165416 MD5: D236A482C9AE97B3BB9B9689A4A3796D PID: 2528 (1244) C:\Program Files\eTrust Internet Security Suite\eTrust PestPatrol Anti-Spyware\PPActiveDetection.exe size: 258048 MD5: 0F0BF2DB9AE8658220E832D9FCB5194F PID: 2696 (1244) C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe size: 36864 MD5: C76C901F3D304C4D773E1BFDCB517798 PID: 2724 (1244) C:\PROGRA~1\MESSEN~1\Msmsgs.exe size: 1658592 MD5: F125C0A696480F3D132B1BC736D871BF PID: 3220 (1244) C:\Program Files\Microsoft ActiveSync\wcescomm.exe size: 1204224 MD5: 3D3B3B4844A9D4B1B9D3E8C7BB013026 PID: 3560 (1532) C:\PROGRA~1\MI3AA1~1\rapimgr.exe size: 180224 MD5: 51CFAD6A4D26EE0F1F1AC17617F01562 PID: 3864 (1244) C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe size: 45056 MD5: 64C4C17BF6A40FF1CD21205E6FD415B8 PID: 3872 (1532) C:\Program Files\Logitech\Video\FxSvr2.exe size: 192512 MD5: 1B11C113DC4383C6C07A45BFFBDC7D63 PID: 1984 (1244) C:\Program Files\Logitech\SetPoint\SetPoint.exe size: 450560 MD5: 57781B2D6C4DDBF753D820472462E445 PID: 2084 (1244) C:\Program Files\TechSmith\SnagIt 7\SnagIt32.exe size: 3719168 MD5: 322C21B8729403C9F4AF38E83C8FC58A PID: 2100 (1244) C:\Program Files\Public ShareFolder\Server\POL32ADM.exe size: 421888 MD5: C0FDAE96FB5A5370C69C8FB85CB4DEB2 PID: 2108 (1244) C:\Program Files\SpamPal\spampal.exe size: 387616 MD5: 12C358D7E2B3BFD478FA2833555F5DF7 PID: 3476 (2100) C:\Program Files\Public ShareFolder\Server\pol32.exe size: 512041 MD5: 988A5507AEC468E2342C6DED0A7BBDC6 PID: 3484 (1984) C:\Program Files\Fichiers communs\Logitech\KHAL\KHALMNPR.EXE size: 28160 MD5: 60C2D0115B1B1FAC72A194CFF1A56494 PID: 3504 (2084) C:\Program Files\TechSmith\SnagIt 7\TSCHelp.exe size: 26112 MD5: 9E9CCBC84AE36CF4F3126CD7B5E5F1A1 PID: 1036 (1140) C:\Program Files\ATI Technologies\ATI.ACE\cli.exe size: 45056 MD5: 64C4C17BF6A40FF1CD21205E6FD415B8 PID: 3044 (1244) C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe size: 4393096 MD5: 09CA174A605B480318731E691DC98539 PID: 3348 (1532) C:\WINDOWS\system32\wbem\wmiprvse.exe size: 218112 MD5: DB493DD6BC2FA5B38811F2BCDCF03D2B PID: 756 (1312) C:\WINDOWS\System32\alg.exe size: 44544 MD5: 2FE681D10C5FC343DBBC0610B8DD4D24 PID: 892 (1312) C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe size: 114784 MD5: 60BE219D98808988FE3651907248D03D PID: 784 (1244) C:\Program Files\Internet Explorer\IEXPLORE.EXE size: 93184 MD5: 833E2B3F0E2484C0F2B804AE871B4381 PID: 2564 (1244) C:\Program Files\Internet Explorer\IEXPLORE.EXE size: 93184 MD5: 833E2B3F0E2484C0F2B804AE871B4381 PID: 2796 (1244) C:\WINDOWS\system32\notepad.exe size: 70656 MD5: 16F769BC1D37CC14E3093B9881CF1691 PID: 4 ( 0) System --- Browser start & search pages list --- Spybot - Search & Destroy browser pages report, 09/05/2006 18:54:22 HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Local Page C:\WINDOWS\system32\blank.htm HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Page http://www.google.com HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Search Bar http://www.google.com/ie HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page about:blank HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchUrl\@ http://www.google.com/keyword/%s HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Local Page %SystemRoot%\system32\blank.htm HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Search Page http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Start Page http://fr.yahoo.com/fsc/ HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Page_URL http://fr.yahoo.com/fsc/ HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main\Default_Search_URL http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\SearchAssistant http://www.google.com/ie HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Search\CustomizeSearch http://ie.search.msn.com/{SUB_RFC1766}/srchasst/srchcust.htm --- Winsock Layered Service Provider list --- --- Uninstall list --- Ad-Aware SE Personal 1.06 (Ad-Aware SE Personal) uninstall cmd: C:\PROGRA~1\AD-AWA~1\UNWISE.EXE C:\PROGRA~1\AD-AWA~1\INSTALL.LOG publisher: Lavasoft help link: http://www.lavasoft.com (AddressBook) Adobe Acrobat 7.0.7 Professional - English, Français, Deutsch 7.0.7 (Adobe Acrobat 7.0 Professional - EFG) version (major): 7 version (minor): 5 install date: 05/03/2006 install location: C:\Program Files\Adobe\Acrobat 7.0\ uninstall cmd: msiexec /I {AC76BA86-1033-F400-7760-000000000002} publisher: Adobe Systems contact: Customer Support help link: http://www.adobe.com/support/main.html help telephone: readme: C:\Program Files\Adobe\Acrobat 7.0\Readme.htm Adobe Illustrator CS2 12.000.000 (Adobe Illustrator CS2) version: 12 version (major): 12 install location: C:\Program Files\Adobe\Adobe Illustrator CS2\ uninstall cmd: msiexec /I {B2F5D08C-7E79-4FCD-AAF4-57AD35FF0601} publisher: Adobe Systems Inc. contact: Service support clientèle help link: http://www.adobe.fr/support/main.html help telephone: 1-206-675-6307 readme: C:\Program Files\Adobe\Adobe Illustrator CS2\ReadMe.pdf Adobe Photoshop CS2 9.0 (Adobe Photoshop CS2 - {236BB7C4-4419-42FD-040C-1E257A25E34D}) version: 9 version (major): 9 install location: C:\Program Files\Adobe\Adobe Photoshop CS2\ uninstall cmd: msiexec /I {236BB7C4-4419-42FD-040C-1E257A25E34D} publisher: Adobe Systems, Inc. comments: contact: Service support clientèle help link: http://www.adobe.fr/support/main.html help telephone: +1-555-555-4505 Adobe SVG Viewer 3.0 3.0 (Adobe SVG Viewer) version (major): 3 install location: C:\WINDOWS\system32\Adobe\SVG Viewer 3.0 uninstall cmd: C:\Program Files\Fichiers communs\Adobe\SVG Viewer 3.0\Uninstall\Winstall.exe -u -fC:\Program Files\Fichiers communs\Adobe\SVG Viewer 3.0\Uninstall\Install.log publisher: Adobe Systems, Inc. ATI Display Driver 8.18-050914a1-026979C-Fujitsu Siemens Computers (ATI Display Driver) uninstall cmd: rundll32 C:\WINDOWS\system32\atiiiexx.dll,_InfEngUnInstallINFFile_RunDLL@16 -force_restart -flags:0x2010001 -inf_class:DISPLAY -clean Système anti-virus AVG 7.1 (AVG7Uninstall) uninstall cmd: C:\Program Files\Grisoft\AVG7\setup.exe /UNINSTALL (Branding) CCleaner (remove only) (CCleaner) uninstall cmd: "C:\Program Files\CCleaner\uninst.exe" (Connection Manager) CopyRightLeft 0.4 Beta (CopyRightLeft_is1) uninstall cmd: "C:\Program Files\CopyRightLeft\unins000.exe" Cuisine et Salle de bains 3D 2006 (Cuisine et Salle de bains 3D 2006_is1) install location: C:\Program Files\Anuman Interactive\Cuisine et Salle de bains 3D 2006\ uninstall cmd: "C:\Program Files\Anuman Interactive\Cuisine et Salle de bains 3D 2006\unins000.exe" publisher: Anuman Interactive help link: http://www.anuman-interactive.com (DirectAnimation) (DirectDrawEx) (dlatray.exe) uninstall cmd: C:\WINDOWS\system32\\MSIEXEC.EXE /x {1206EF92-2E83-4859-ACCB-2048C3CB7DA6} DVD Audio Extractor 3.5.1 (DVD Audio Extractor_is1) install location: C:\Program Files\DVD Audio Extractor\ uninstall cmd: "C:\Program Files\DVD Audio Extractor\unins000.exe" publisher: Computer Application Studio help link: http://www.castudio.org DVD Shrink 3.2 (DVD Shrink_is1) install location: C:\Program Files\DVD Shrink\ uninstall cmd: "C:\Program Files\DVD Shrink\unins000.exe" publisher: DVD Shrink help link: http://www.dvdshrink.org (DXM_Runtime) eMule (eMule) uninstall cmd: "C:\Program Files\eMule\Uninstall.exe" (Fontcore) HijackThis 1.99.1 1.99.1 (HijackThis) uninstall cmd: C:\Documents and Settings\alain\Local Settings\Temporary Internet Files\Content.IE5\SHMJKPMN\HijackThis.exe /uninstall publisher: Soeperman Enterprises Ltd. Hijackthis Version Française (Hijackthis Version Française_is1) install location: C:\Program Files\Hijackthis Version Française\ uninstall cmd: "C:\Program Files\Hijackthis Version Française\unins000.exe" publisher: Pc-Help-Bordeaux help link: http://pchelpbordeaux.free.fr (ICW) (IE40) (IE4Data) (IE5BAKEX) (IEData) IKEA Home Planner Kitchen (IKEA Home Planner Kitchen) uninstall cmd: C:\PROGRA~1\IKEAHO~2\UNWISE.EXE C:\PROGRA~1\IKEAHO~2\INSTALL.LOG IKEA Home Planner Office (IKEA Home Planner Office) uninstall cmd: C:\PROGRA~1\IKEAHO~1\UNWISE.EXE C:\PROGRA~1\IKEAHO~1\INSTALL.LOG (InstallShield Uninstall Information) QuickTime 7.0.4 (InstallShield_{929408E6-D265-4174-805F-81D1D914E2A4}) version: 117440516 version (major): 7 estimated size: 66743 install date: 20060326 install location: C:\Program Files\QuickTime\ install source: C:\DOCUME~1\alain\LOCALS~1\Temp\_is1442\ uninstall cmd: C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\11\INTEL3~1\IDriver.exe /M{929408E6-D265-4174-805F-81D1D914E2A4} /l1036 publisher: Apple Computer, Inc. contact: Assistance AppleCare help link: http://www.apple.com/fr/support/ help telephone: (33) 0825 888 024 Turbo Lister 2.0.0 (InstallShield_{99CC78D1-2356-497C-84C1-F239884001EC}) version: 33554432 version (major): 2 estimated size: 27341 install date: 20060327 install location: C:\Program Files\eBay\Turbo Lister\ install source: http://download.ebay.com/turbo_lister/FR/ uninstall cmd: C:\PROGRA~1\FICHIE~1\INSTAL~1\Driver\9\INTEL3~1\IDriver.exe /M{99CC78D1-2356-497C-84C1-F239884001EC} publisher: eBay comments: eBay Turbo Lister contact: Service support clientèle help link: http://www.ebay.fr/help help telephone: readme: jv16 PowerTools 1.3 (jv16 PowerTools_is1) uninstall cmd: "C:\Program Files\jv16 PowerTools\unins000.exe" Correctif Windows XP - KB873339 20041117.092459 (KB873339) uninstall cmd: C:\WINDOWS\$NtUninstallKB873339$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=873339 Correctif Windows XP - KB883529 20040825.095422 (KB883529) uninstall cmd: C:\WINDOWS\$NtUninstallKB883529$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=883529 Correctif Windows XP - KB883667 20040812.104354 (KB883667) uninstall cmd: C:\WINDOWS\$NtUninstallKB883667$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=883667 (KB884016) Correctif Windows XP - KB884575 20040827.145237 (KB884575) uninstall cmd: C:\WINDOWS\$NtUninstallKB884575$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=884575 Correctif Windows XP - KB884883 8 (KB884883) install date: 20060125 uninstall cmd: "C:\WINDOWS\$NtUninstallKB884883$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=884883 Correctif Windows XP - KB885250 20050118.202711 (KB885250) uninstall cmd: C:\WINDOWS\$NtUninstallKB885250$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=885250 Correctif Windows XP - KB885523 20040923.190702 (KB885523) uninstall cmd: C:\WINDOWS\$NtUninstallKB885523$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=885523 Correctif Windows XP - KB885835 20041027.181713 (KB885835) uninstall cmd: C:\WINDOWS\$NtUninstallKB885835$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=885835 Correctif Windows XP - KB885836 20041028.173203 (KB885836) uninstall cmd: C:\WINDOWS\$NtUninstallKB885836$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=885836 Correctif Windows XP - KB885855 20040930.104104 (KB885855) uninstall cmd: C:\WINDOWS\$NtUninstallKB885855$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=885855 Correctif Windows XP - KB885894 20040923.185333 (KB885894) uninstall cmd: C:\WINDOWS\$NtUninstallKB885894$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=885894 Correctif Windows XP - KB886677 20041015.135028 (KB886677) uninstall cmd: C:\WINDOWS\$NtUninstallKB886677$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=886677 Correctif Windows XP - KB886716 2 (KB886716) install date: 20060125 uninstall cmd: "C:\WINDOWS\$NtUninstallKB886716$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=886716 Correctif Windows XP - KB887742 20041103.095002 (KB887742) uninstall cmd: C:\WINDOWS\$NtUninstallKB887742$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=887742 Correctif Windows XP - KB887797 20041018.133824 (KB887797) uninstall cmd: C:\WINDOWS\$NtUninstallKB887797$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=887797 High Definition Audio - KB888111 20040219.000000 (KB888111WXPSP2) uninstall cmd: "C:\WINDOWS\$NtUninstallKB888111WXPSP2$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=KB888111 Correctif Windows XP - KB888113 20041116.131036 (KB888113) uninstall cmd: C:\WINDOWS\$NtUninstallKB888113$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=888113 Correctif Windows XP - KB888302 20041207.111426 (KB888302) uninstall cmd: C:\WINDOWS\$NtUninstallKB888302$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=888302 Correctif Windows XP - KB888402 20041117.151732 (KB888402) uninstall cmd: C:\WINDOWS\$NtUninstallKB888402$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=888402 Windows Media Player 10 Hotfix - KB888656 (KB888656) install date: 20060125 uninstall cmd: "C:\WINDOWS\$NtUninstallKB888656$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=888656 Correctif Windows XP - KB889016 20041112.120732 (KB889016) uninstall cmd: C:\WINDOWS\$NtUninstallKB889016$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=889016 Correctif pour Windows XP (KB889527) 3 (KB889527) install date: 20060125 uninstall cmd: "C:\WINDOWS\$NtUninstallKB889527$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=889527 Correctif Windows XP - KB889673 20041116.085848 (KB889673) uninstall cmd: C:\WINDOWS\$NtUninstallKB889673$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=889673 Mise à jour de sécurité pour Windows XP (KB890046) 1 (KB890046) install date: 20060125 uninstall cmd: "C:\WINDOWS\$NtUninstallKB890046$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=890046 Correctif Windows XP - KB890831 20041206.145031 (KB890831) uninstall cmd: C:\WINDOWS\$NtUninstallKB890831$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=890831 Correctif Windows XP - KB890859 1 (KB890859) install date: 20060125 uninstall cmd: "C:\WINDOWS\$NtUninstallKB890859$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=890859 Hotfix for Windows XP (KB890927) 7 (KB890927) uninstall cmd: "C:\WINDOWS\$NtUninstallKB890927$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=890927 Windows Media Format SDK Hotfix - KB891122 (KB891122) install date: 20060125 uninstall cmd: "C:\WINDOWS\$NtUninstallKB891122$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=891122 Correctif Windows XP - KB891781 20050110.165439 (KB891781) uninstall cmd: C:\WINDOWS\$NtUninstallKB891781$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=891781 Correctif Windows XP - KB892627 20050201.181426 (KB892627) uninstall cmd: C:\WINDOWS\$NtUninstallKB892627$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=892627 Correctif Windows XP - KB893056 20050126.164313 (KB893056) uninstall cmd: C:\WINDOWS\$NtUninstallKB893056$\spuninst\spuninst.exe publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=893056 Mise à jour de sécurité pour Windows XP (KB893066) 2 (KB893066) install date: 20060125 uninstall cmd: "C:\WINDOWS\$NtUninstallKB893066$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=893066 Correctif pour Windows XP (KB893357) 2 (KB893357) install date: 20060125 uninstall cmd: "C:\WINDOWS\$NtUninstallKB893357$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=893357 Mise à jour de sécurité pour Windows XP (KB893756) 1 (KB893756) install date: 20060125 uninstall cmd: "C:\WINDOWS\$NtUninstallKB893756$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=893756 3.1 (KB893803) help link: http://go.microsoft.com/fwlink/?LinkId=42467 Windows Installer 3.1 (KB893803) (KB893803v2) uninstall cmd: "C:\WINDOWS\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://go.microsoft.com/fwlink/?LinkId=42467 Windows Media Player 10 Hotfix - KB894476 (KB894476) uninstall cmd: "C:\WINDOWS\$NtUninstallKB894476$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=894476 Correctif pour Windows XP (KB896256) 3 (KB896256) install date: 20060125 uninstall cmd: "C:\WINDOWS\$NtUninstallKB896256$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=896256 Mise à jour de sécurité pour Windows XP (KB896358) 1 (KB896358) install date: 20060125 uninstall cmd: "C:\WINDOWS\$NtUninstallKB896358$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=896358 Mise à jour de sécurité pour Windows XP (KB896422) 1 (KB896422) install date: 20060125 uninstall cmd: "C:\WINDOWS\$NtUninstallKB896422$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=896422 Mise à jour de sécurité pour Windows XP (KB896423) 1 (KB896423) install date: 20060125 uninstall cmd: "C:\WINDOWS\$NtUninstallKB896423$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=896423 Mise à jour de sécurité pour Windows XP (KB896424) 1 (KB896424) install date: 20060125 uninstall cmd: "C:\WINDOWS\$NtUninstallKB896424$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=896424 Mise à jour de sécurité pour Windows XP (KB896428) 1 (KB896428) install date: 20060125 uninstall cmd: "C:\WINDOWS\$NtUninstallKB896428$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=896428 Correctif Windows XP - KB896626 2 (KB896626) install date: 20060125 uninstall cmd: "C:\WINDOWS\$NtUninstallKB896626$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=896626 Mise à jour de sécurité pour Windows XP (KB896688) 1 (KB896688) install date: 20060125 uninstall cmd: "C:\WINDOWS\$NtUninstallKB896688$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=896688 Mise à jour pour Windows XP (KB897663) 1 (KB897663) install date: 20060125 uninstall cmd: "C:\WINDOWS\$NtUninstallKB897663$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=897663 Mise à jour de sécurité pour Step by Step Interactive Training (KB898458) 20050502.101010 (KB898458) uninstall cmd: "C:\WINDOWS\$NtUninstallKB898458$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com/kb/898458 Mise à jour pour Windows XP (KB898461) 1 (KB898461) install date: 20060125 uninstall cmd: "C:\WINDOWS\$NtUninstallKB898461$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=898461 Mise à jour de sécurité pour Windows XP (KB899587) 1 (KB899587) install date: 20060125 uninstall cmd: "C:\WINDOWS\$NtUninstallKB899587$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=899587 Mise à jour de sécurité pour Windows XP (KB899589) 1 (KB899589) install date: 20060125 uninstall cmd: "C:\WINDOWS\$NtUninstallKB899589$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=899589 Mise à jour de sécurité pour Windows XP (KB899591) 1 (KB899591) install date: 20060125 uninstall cmd: "C:\WINDOWS\$NtUninstallKB899591$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=899591 Mise à jour pour Windows XP (KB900485) 2 (KB900485) install date: 20060426 uninstall cmd: "C:\WINDOWS\$NtUninstallKB900485$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=900485 Mise à jour de sécurité pour Windows XP (KB900725) 1 (KB900725) install date: 20060125 uninstall cmd: "C:\WINDOWS\$NtUninstallKB900725$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=900725 Mise à jour de sécurité pour Windows XP (KB900930) 1 (KB900930) install date: 20060125 uninstall cmd: "C:\WINDOWS\$NtUninstallKB900930$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=900930 Mise à jour de sécurité pour Windows XP (KB901017) 1 (KB901017) install date: 20060125 uninstall cmd: "C:\WINDOWS\$NtUninstallKB901017$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=901017 Mise à jour de sécurité pour Windows XP (KB901214) 1 (KB901214) install date: 20060125 uninstall cmd: "C:\WINDOWS\$NtUninstallKB901214$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=901214 Hotfix for Windows Media Format SDK (KB902344) (KB902344) uninstall cmd: "C:\WINDOWS\$NtUninstallKB902344$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=902344 Mise à jour de sécurité pour Windows XP (KB902400) 1 (KB902400) install date: 20060125 uninstall cmd: "C:\WINDOWS\$NtUninstallKB902400$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: http://support.microsoft.com?kbid=902400 Correctif pour Windows XP (KB903234) 1 (KB903234) install date: 20060125 uninstall cmd: "C:\WINDOWS\$NtUninstallKB903234$\spuninst\spuninst.exe" publisher: Microsoft Corporation help link: