bogalai

J'ai supprimé ces dossiers. Je te remercie vraiment sincèrement de la rapidité et surtout de l'efficacité de tes réponses. C'est rare de trouver des gens pour consacrer de leur temps gratuitement comme ça. A priori, tout fonctionne normalement, plus de pops-up. Par contre, j'ai un autre problème à soumettre, je ne sais pas si c'est de ta compétence. Je reçois environ 5 à 6 spams par jour, et malgré la proscription de l'expéditeur, il en arrive sans cesse de nouveaux provenant d'adresses mail bidon. Je travaille avec incredimail depuis maintenant plus de deux ans et je me demandais si le pb ne venait pas de là? Même si tu ne peux pas répondre, merci encore pour toute l'aide fournie. A +.

Voilà, je ne sais pas si j'ai tout compris. J'ai copié le chemin d'accès de ta citation que j'ai ensuite collé dans killbox et j'ai exécuté la procédure que tu m'as donné. J'espère ne pas m'être trompé. Voici le rapport: Pocket Killbox version 2.0.0.648 Running on Windows XP as Sylvain et Virginie(Administrator) was started @ lundi, janvier 15, 2007, 10:47 PM # 1 [Delete on Reboot] Path = c:\windows\downloaded program files\f3initialsetup1.0.0.15.inf I Rebooted @ 10:48:21 PM Killbox Closed(Exit) @ 10:48:28 PM __________________________________________________ Pocket Killbox version 2.0.0.648 Running on Windows XP as Sylvain et Virginie(Administrator) was started @ lundi, janvier 15, 2007, 10:52 PM

Aïe aïe aïe, moi qui croyait que c'était fini, apparemment il reste des infections. Voici le rapport: Incident Status Location Potentially unwanted tool:application/funweb Not disinfected c:\windows\downloaded program files\f3initialsetup1.0.0.15.inf Adware:adware/cydoor Not disinfected c:\windows\system32\AdCache Potentially unwanted tool:application/need2find Not disinfected c:\program files\Need2Find Potentially unwanted tool:application/mywebsearch Not disinfected hkey_classes_root\clsid\{147A976F-EEE1-4377-8EA7-4716E4CDD239} Spyware:Cookie/888 Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\sylvain et virginie@888[2].txt Spyware:Cookie/adultfriendfinder Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\sylvain et virginie@adultfriendfinder[2].txt Spyware:Cookie/Azjmp Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\sylvain et virginie@azjmp[2].txt Spyware:Cookie/Belnk Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\sylvain et virginie@belnk[1].txt Spyware:Cookie/BestOffersNetworks Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\sylvain et virginie@bestoffersnetworks[2].txt Spyware:Cookie/BurstNet Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\sylvain et virginie@burstnet[2].txt Spyware:Cookie/Cassava Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\sylvain et virginie@cassava[1].txt Spyware:Cookie/Twain-Tech Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\sylvain et virginie@cliks[2].txt Spyware:Cookie/Com.com Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\sylvain et virginie@com[1].txt Spyware:Cookie/Belnk Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\sylvain et [email protected][2].txt Spyware:Cookie/fe.lea.lycos Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\sylvain et [email protected][1].txt Spyware:Cookie/fe.lea.lycos Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\sylvain et [email protected][2].txt Spyware:Cookie/Go Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\sylvain et virginie@go[1].txt Spyware:Cookie/LinkExchange Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\sylvain et virginie@linkexchange[1].txt Spyware:Cookie/OfferOptimizer Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\sylvain et virginie@offeroptimizer[1].txt Spyware:Cookie/Rn11 Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\sylvain et virginie@rn11[2].txt Spyware:Cookie/WinFixer Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\sylvain et virginie@winfixer[2].txt Spyware:Cookie/Xiti Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\sylvain et virginie@xiti[1].txt Spyware:Cookie/RealMedia Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\sylvain_et_virginie@247realmedia[1].txt Spyware:Cookie/2o7 Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\sylvain_et_virginie@2o7[2].txt Spyware:Cookie/888 Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\sylvain_et_virginie@888[2].txt Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\[email protected][1].txt Spyware:Cookie/Hbmediapro Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\[email protected][2].txt Spyware:Cookie/Adtech Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\sylvain_et_virginie@adtech[2].txt Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\sylvain_et_virginie@advertising[1].txt Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\sylvain_et_virginie@atdmt[2].txt Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\[email protected][2].txt Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\sylvain_et_virginie@doubleclick[1].txt Spyware:Cookie/DriveCleaner Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\sylvain_et_virginie@drivecleaner[2].txt Spyware:Cookie/ErrorSafe Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\sylvain_et_virginie@errorsafe[1].txt Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\sylvain_et_virginie@fastclick[2].txt Spyware:Cookie/Comclick Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\[email protected][2].txt Spyware:Cookie/Hitbox Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\sylvain_et_virginie@hitbox[2].txt Spyware:Cookie/FastClick Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\[email protected][2].txt Spyware:Cookie/Mediaplex Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\sylvain_et_virginie@mediaplex[1].txt Spyware:Cookie/Serving-sys Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\sylvain_et_virginie@serving-sys[2].txt Spyware:Cookie/Statcounter Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\sylvain_et_virginie@statcounter[1].txt Spyware:Cookie/DriveCleaner Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\[email protected][2].txt Spyware:Cookie/Reliablestats Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\[email protected][2].txt Spyware:Cookie/WebtrendsLive Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\[email protected][2].txt Spyware:Cookie/Systemdoctor Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\sylvain_et_virginie@systemdoctor[1].txt Spyware:Cookie/Tradedoubler Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\sylvain_et_virginie@tradedoubler[2].txt Spyware:Cookie/Weborama Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\sylvain_et_virginie@weborama[1].txt Spyware:Cookie/Winantivirus Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\sylvain_et_virginie@winantivirus[2].txt Spyware:Cookie/DriveCleaner Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\[email protected][1].txt Spyware:Cookie/ErrorSafe Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\[email protected][2].txt Spyware:Cookie/Systemdoctor Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\[email protected][1].txt Spyware:Cookie/Winantivirus Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\[email protected][1].txt Spyware:Cookie/Zedo Not disinfected C:\Documents and Settings\Sylvain et Virginie\Cookies\sylvain_et_virginie@zedo[1].txt Spyware:Cookie/2o7 Not disinfected C:\Documents and Settings\Virginie\Cookies\[email protected][1].txt Spyware:Cookie/2o7 Not disinfected C:\Documents and Settings\Virginie\Cookies\virginie@2o7[1].txt Spyware:Cookie/YieldManager Not disinfected C:\Documents and Settings\Virginie\Cookies\[email protected][2].txt Spyware:Cookie/Hbmediapro Not disinfected C:\Documents and Settings\Virginie\Cookies\[email protected][2].txt Spyware:Cookie/Adtech Not disinfected C:\Documents and Settings\Virginie\Cookies\virginie@adtech[2].txt Spyware:Cookie/Advertising Not disinfected C:\Documents and Settings\Virginie\Cookies\virginie@advertising[1].txt Spyware:Cookie/Apmebf Not disinfected C:\Documents and Settings\Virginie\Cookies\virginie@apmebf[2].txt Spyware:Cookie/Atlas DMT Not disinfected C:\Documents and Settings\Virginie\Cookies\virginie@atdmt[2].txt Spyware:Cookie/Bluestreak Not disinfected C:\Documents and Settings\Virginie\Cookies\virginie@bluestreak[1].txt Spyware:Cookie/Cgi-bin Not disinfected C:\Documents and Settings\Virginie\Cookies\virginie@cgi-bin[4].txt Spyware:Cookie/Doubleclick Not disinfected C:\Documents and Settings\Virginie\Cookies\virginie@doubleclick[1].txt Spyware:Cookie/DriveCleaner Not disinfected C:\Documents and Settings\Virginie\Cookies\virginie@drivecleaner[1].txt Spyware:Cookie/Hitbox Not disinfected C:\Documents and Settings\Virginie\Cookies\[email protected][1].txt Spyware:Cookie/ErrorSafe Not disinfected C:\Documents and Settings\Virginie\Cookies\virginie@errorsafe[1].txt Spyware:Cookie/fe.lea.lycos Not disinfected C:\Documents and Settings\Virginie\Cookies\[email protected][1].txt Spyware:Cookie/Comclick Not disinfected C:\Documents and Settings\Virginie\Cookies\[email protected][1].txt Spyware:Cookie/Go Not disinfected C:\Documents and Settings\Virginie\Cookies\virginie@go[1].txt Spyware:Cookie/Mediaplex Not disinfected C:\Documents and Settings\Virginie\Cookies\virginie@mediaplex[1].txt Spyware:Cookie/Rn11 Not disinfected C:\Documents and Settings\Virginie\Cookies\virginie@rn11[2].txt Spyware:Cookie/Searchportal Not disinfected C:\Documents and Settings\Virginie\Cookies\[email protected][2].txt Spyware:Cookie/DriveCleaner Not disinfected C:\Documents and Settings\Virginie\Cookies\[email protected][2].txt Spyware:Cookie/Reliablestats Not disinfected C:\Documents and Settings\Virginie\Cookies\[email protected][1].txt Spyware:Cookie/WebtrendsLive Not disinfected C:\Documents and Settings\Virginie\Cookies\[email protected][1].txt Spyware:Cookie/Toplist Not disinfected C:\Documents and Settings\Virginie\Cookies\virginie@toplist[1].txt Spyware:Cookie/Tradedoubler Not disinfected C:\Documents and Settings\Virginie\Cookies\virginie@tradedoubler[1].txt Spyware:Cookie/Weborama Not disinfected C:\Documents and Settings\Virginie\Cookies\virginie@weborama[1].txt Spyware:Cookie/Winantivirus Not disinfected C:\Documents and Settings\Virginie\Cookies\virginie@winantivirus[1].txt Spyware:Cookie/DriveCleaner Not disinfected C:\Documents and Settings\Virginie\Cookies\[email protected][1].txt Spyware:Cookie/ErrorSafe Not disinfected C:\Documents and Settings\Virginie\Cookies\[email protected][2].txt Spyware:Cookie/Winantivirus Not disinfected C:\Documents and Settings\Virginie\Cookies\[email protected][1].txt Spyware:Cookie/Xiti Not disinfected C:\Documents and Settings\Virginie\Cookies\virginie@xiti[1].txt Spyware:Cookie/Zedo Not disinfected C:\Documents and Settings\Virginie\Cookies\virginie@zedo[1].txt Adware:Adware/NaviPromo Not disinfected C:\Program Files\WebMediaPlayer\uninst.exe[²ÜÇ\NSUtils.dll]

Merci beaucoup. Voici le dernier rapport. 01/15/07 00:26:42 [info]: BlackLight Engine 1.0.55 initialized 01/15/07 00:26:42 [info]: OS: 5.1 build 2600 (Service Pack 2) 01/15/07 00:26:42 [Note]: 7019 4 01/15/07 00:26:42 [Note]: 7005 0 01/15/07 00:26:44 [Note]: 7006 0 01/15/07 00:26:44 [Note]: 7011 1560 01/15/07 00:26:44 [Note]: 7026 0 01/15/07 00:26:44 [Note]: 7026 0 01/15/07 00:26:51 [Note]: FSRAW library version 1.7.1021 01/15/07 00:36:58 [Note]: 7007 0

OK, merci, je continue donc la procédure. Voici donc le rapport: 01/14/07 12:33:31 [info]: BlackLight Engine 1.0.55 initialized 01/14/07 12:33:31 [info]: OS: 5.1 build 2600 (Service Pack 2) 01/14/07 12:33:31 [Note]: 7019 4 01/14/07 12:33:31 [Note]: 7005 0 01/14/07 12:33:34 [Note]: 7006 0 01/14/07 12:33:34 [Note]: 7011 1576 01/14/07 12:33:34 [Note]: 7026 0 01/14/07 12:33:34 [Note]: 7026 0 01/14/07 12:33:34 [Note]: 7024 3 01/14/07 12:33:34 [info]: Hidden process: C:\windows\system32\kmupfdol.exe 01/14/07 12:33:41 [Note]: FSRAW library version 1.7.1021 01/14/07 12:42:23 [info]: Hidden file: c:\WINDOWS\system32\kmupfdol.dat 01/14/07 12:42:23 [Note]: 10002 1 01/14/07 12:42:23 [info]: Hidden file: C:\windows\system32\kmupfdol.exe 01/14/07 12:42:23 [Note]: 10002 1 01/14/07 12:42:26 [info]: Hidden file: c:\WINDOWS\system32\kmupfdol_navps.dat 01/14/07 12:42:26 [Note]: 10002 1 01/14/07 12:42:26 [info]: Hidden file: c:\WINDOWS\system32\kmupfdol_nav.dat 01/14/07 12:42:26 [Note]: 10002 1 01/14/07 12:44:54 [Note]: 7007 0

Bonjour, je viens de suivre les instructions concernant le rapport highjack (j'ai plusieurs spyware (driecleaner,winantispyware.....)qui ouvrent sans arret des fenetres publicitaire). Aussi, je poste le rapport ici afin de solliciter votre aide. Merci d'avance. Logfile of HijackThis v1.99.1 Scan saved at 19:24:52, on 13/01/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.5730.0011) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\Explorer.EXE C:\Program Files\AntiVir PersonalEdition Classic\sched.exe C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe C:\Program Files\Logitech\Video\LogiTray.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\ATI Technologies\ATI.ACE\cli.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\WINDOWS\system32\LVComS.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Windows Media Player\WMPNSCFG.exe C:\PROGRA~1\INCRED~1\bin\IMApp.exe C:\Program Files\iPod\bin\iPodService.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\msiexec.exe C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE C:\WINDOWS\system32\wuauclt.exe C:\Program Files\Hijackthis\hijackthis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.lequipe.fr/Football/index.html R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr.yahoo.com/fsc/ R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com/fsc/ R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.fujitsu-siemens.fr/home-services R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer avec Club-Internet R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = HTTP=proxy.club-internet.fr:8080 R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN O4 - HKLM\..\Run: [EPSON Stylus CX6400] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0L2.EXE /P19 "EPSON Stylus CX6400" /O6 "USB001" /M "Stylus CX6400" O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe" O4 - HKLM\..\Run: [Workflow] D:\install\Workflow.exe O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe" O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min O4 - HKCU\..\Run: [fsc-reminder.exe] C:\WINDOWS\reminder\fsc-reminder.exe 2453575 14 O4 - HKCU\..\Run: [incrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe O4 - Global Startup: Barre d'état système d'ATI CATALYST.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/...?p=ZNxpt119YYFR O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE O11 - Options group: [iNTERNATIONAL] International* O16 - DPF: {09C21411-B9A2-4DE6-8416-4E3B58577BE0} (France Telecom MDM ActiveX Control) - http://minitelweb.minitel.com/imin_data/ocx/MDM.cab O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/f...tup1.0.0.15.cab O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS...er.cab31267.cab O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedC...n/bin/cabsa.cab O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1122142649281 O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMesse...pDownloader.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/Solit...wn.cab31267.cab O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe