guillou

salut oGu.... tu vas bien j'espère... je sais , nous sommes le week-end, mais je me demandais si tu avais relu mon rapport et si tout est ok.... j'attends de tes nouvelles impatiemment bonne journée guillou

recoucou à toi grand chef , je te poste le 3 rapports que tu m'as demandé, et j'attends de tes nouvelles( en passant, j'ai enlevé limewire ... ) alors voilà: ComboFix 08-07-03.5 - guillaine 2008-07-04 10:06:53.4 - NTFSx86 Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.213 [GMT -4:00] Endroit: C:\Documents and Settings\guillaine.HOME-6620B39EBF\Bureau\ComboFix.exe Command switches used :: C:\Documents and Settings\guillaine.HOME-6620B39EBF\Bureau\CFScript.txt.txt * Création d'un nouveau point de restauration FILE :: C:\Documents and Settings\guillaine.HOME-6620B39EBF\Local Settings\Application DataKiweeToolbar1.3.118.msi C:\lucmp3.nr3 C:\WINDOWS\system32\bitsprx4.dll C:\WINDOWS\system32\dllcache\bitsprx4.dll . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . C:\Documents and Settings\All Users.WINDOWS\Application Data\Frag great bend logo C:\Documents and Settings\guillaine.HOME-6620B39EBF\Local Settings\Application DataKiweeToolbar1.3.118.msi C:\lucmp3.nr3 C:\WINDOWS\system32\bitsprx4.dll C:\WINDOWS\system32\dllcache\bitsprx4.dll . ((((((((((((((((((((((((((((( Fichiers cr‚‚s 2008-06-04 to 2008-07-04 )))))))))))))))))))))))))))))))))))) . 2008-07-04 08:50 . 2008-07-04 08:59 <REP> dr------- C:\Program Files\Alwil Software 2008-07-04 08:47 . 2008-07-04 08:49 24,354,672 --a------ C:\Program Files\setupfre.exe 2008-07-03 21:49 . 2008-07-03 21:49 857,664 --a------ C:\Program Files\ccsetup209_slim.exe 2008-07-02 09:54 . 2008-07-02 09:54 54,156 --ah----- C:\WINDOWS\QTFont.qfn 2008-07-02 09:54 . 2008-07-02 09:54 1,409 --a------ C:\WINDOWS\QTFont.for 2008-07-01 09:37 . 2008-07-04 08:56 <REP> dr------- C:\Program Files\Lavasoft 2008-07-01 09:13 . 2008-07-01 09:35 19,153,264 --a------ C:\Program Files\Lavasoft_Adaware_multi.exe 2008-07-01 05:39 . 2008-07-02 18:59 <REP> d-------- C:\Program Files\Notepad++ 2008-07-01 05:39 . 2008-07-01 05:49 <REP> d-------- C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\Notepad++ 2008-07-01 05:38 . 2008-07-01 05:38 2,077,269 --a------ C:\Program Files\npp.4.9.2.Installer.exe 2008-06-30 10:21 . 2008-06-30 10:21 <REP> d-------- C:\WINDOWS\ERUNT 2008-06-30 09:42 . 2008-06-30 14:20 <REP> d-------- C:\SDFix 2008-06-30 09:41 . 2008-06-30 09:42 1,443,354 --a------ C:\Program Files\SDFix.exe 2008-06-30 09:17 . 2008-07-01 08:02 2,919,360 --a------ C:\Program Files\ccsetup209.exe 2008-06-30 09:09 . 2008-07-04 08:58 <REP> dr------- C:\Program Files\Malwarebytes' Anti-Malware 2008-06-30 09:09 . 2008-06-28 14:16 34,296 --a------ C:\WINDOWS\system32\drivers\mbamcatchme.sys 2008-06-30 09:09 . 2008-06-28 14:16 17,144 --a------ C:\WINDOWS\system32\drivers\mbam.sys 2008-06-30 09:08 . 2008-06-30 09:08 1,705,000 --a------ C:\Program Files\mbam-setup.exe 2008-06-30 07:43 . 2008-06-30 07:43 7,599,856 --a------ C:\Program Files\Firefox Setup 3.0.exe 2008-06-30 06:18 . 2008-06-30 11:38 <REP> d-------- C:\hijackthis 2008-06-30 06:00 . 2008-06-30 06:00 <REP> d-------- C:\Program Files\Trend Micro 2008-06-29 09:38 . 2008-06-29 10:04 134,290,536 --a------ C:\Program Files\OOo_2.4.1_Win32Intel_install_wJRE_fr.exe 2008-06-22 10:38 . 2008-06-22 10:38 36,544 --ah----- C:\WINDOWS\system32\mlfcache.dat 2008-06-22 10:25 . 2006-10-04 22:42 2,560 --------- C:\WINDOWS\system32\drivers\cdralw2k.sys 2008-06-22 10:25 . 2006-10-04 22:42 2,432 --------- C:\WINDOWS\system32\drivers\cdr4_xp.sys 2008-06-20 07:19 . 2008-06-22 10:25 <REP> d-------- C:\Program Files\Picasa2 2008-06-20 07:17 . 2008-06-20 07:18 4,909,136 --a------ C:\Program Files\picasa2Setup.exe 2008-06-15 16:41 . 2008-06-15 16:42 <REP> d-------- C:\Documents and Settings\enfants\Application Data\OpenOffice.org2 2008-06-13 07:09 . 2008-06-13 07:09 <REP> d-------- C:\WINDOWS\system32\bits 2008-06-10 23:54 . 2008-06-14 13:59 272,768 --------- C:\WINDOWS\system32\drivers\bthport.sys 2008-06-10 23:54 . 2008-06-14 13:59 272,768 -----c--- C:\WINDOWS\system32\dllcache\bthport.sys 2008-06-04 07:32 . 2008-06-04 07:32 1,534,464 --a------ C:\Program Files\siw.exe . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-07-04 14:01 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy 2008-07-04 13:02 --------- d-----r C:\Program Files\Messenger Plus! Live 2008-07-04 13:00 --------- d-----r C:\Program Files\BellCanada 2008-07-04 12:57 --------- d-----r C:\Program Files\Windows Live Safety Center 2008-07-04 12:53 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\OpenOffice.org2 2008-07-04 12:52 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Avira 2008-07-04 12:45 --------- d-----r C:\Program Files\Spybot - Search & Destroy 2008-07-04 12:44 9,722,720 ----a-w C:\Program Files\spybotsd152.exe 2008-07-02 21:47 --------- d-----w C:\Program Files\Fichiers communs\Logishrd 2008-07-01 13:36 --------- d-----w C:\Program Files\Fichiers communs\Wise Installation Wizard 2008-06-30 13:14 --------- d-----w C:\Program Files\Logitech 2008-06-30 11:35 --------- d-----w C:\Program Files\Windows Live Toolbar 2008-06-30 11:35 --------- d-----r C:\Program Files\Canon 2008-06-29 14:19 --------- d-----w C:\Program Files\OpenOffice.org 2.4 (fr) Installation Files 2008-06-29 12:20 --------- d-----w C:\Program Files\OpenOffice.org 2.4 2008-06-29 12:10 --------- d-----w C:\Program Files\Java 2008-06-27 04:04 --------- d-----r C:\Program Files\EClea2_0 2008-06-27 03:59 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\LimeWire 2008-06-27 03:59 --------- d-----w C:\Documents and Settings\enfants\Application Data\LimeWire 2008-06-26 11:48 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-06-24 10:56 --------- d-----w C:\Program Files\MesPolices10 2008-06-15 21:51 --------- d-----w C:\Documents and Settings\enfants\Application Data\Arcsoft 2008-06-15 06:51 --------- d-----w C:\Program Files\Circle Developement 2008-06-15 06:51 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\programidle 2008-06-14 23:40 2,402,832 ----a-w C:\Program Files\WLinstaller.exe 2008-06-14 23:40 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\WLInstaller 2008-06-04 14:06 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\ESTsoft 2008-06-03 23:03 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Logitech 2008-06-03 23:03 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\LogiShrd 2008-06-01 18:17 1,491,365 ----a-w C:\Program Files\wlm.exe 2008-06-01 17:45 --------- d-----w C:\Documents and Settings\enfants\Application Data\GlarySoft 2008-05-28 11:08 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Lavasoft 2008-05-27 14:47 --------- d-----w C:\Program Files\ESTsoft 2008-05-24 01:22 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\Apple Computer 2008-05-22 13:32 2,869,264 ----a-w C:\Program Files\dotNetFx35setup.exe 2008-05-21 12:12 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\Malwarebytes 2008-05-21 12:12 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Malwarebytes 2008-05-19 16:53 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\DisplayTune 2008-05-15 23:35 --------- d-----w C:\Documents and Settings\enfants\Application Data\Logitech 2008-05-15 23:35 --------- d-----w C:\Documents and Settings\enfants\Application Data\Grisoft 2008-05-14 22:44 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\ArcSoft 2008-05-13 13:24 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\Logitech 2008-05-12 20:16 --------- dcsh--w C:\Program Files\Fichiers communs\WindowsLiveInstaller 2008-05-12 20:16 --------- d-----r C:\Program Files\Creative 2008-05-12 19:34 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\GlarySoft 2008-05-09 21:09 --------- d-----w C:\Program Files\ANI 2008-05-09 21:08 --------- d-----w C:\Program Files\D-Link 2008-05-08 12:28 202,752 ----a-w C:\WINDOWS\system32\drivers\rmcast.sys 2008-05-05 11:15 --------- d-----r C:\Program Files\Panasonic 2008-05-05 04:47 --------- d-----w C:\Documents and Settings\Marie\Application Data\Bell 2008-04-29 13:20 27,100,264 -c--a-w C:\Program Files\PowerPointViewer.exe 2008-04-20 20:30 1,338,384 -c--a-w C:\Program Files\SympaticoSecurityAdvisor_setupSSM.exe 2008-04-20 19:51 2,517 -c--a-w C:\Program Files\INSTALL.LOG 2008-04-08 06:52 119,479,710 -c--a-w C:\Program Files\OOo_2.4.0_Win32Intel_install_fr.exe 2008-04-08 06:27 1,664,591 -c--a-w C:\Program Files\pf-setup.exe 2008-04-05 16:33 9,309,624 -c--a-w C:\Program Files\Shockwave_Installer_Full.exe 2008-04-04 14:15 46,391,264 -c--a-w C:\Program Files\8-3_xp32_dd_ccc_wdm_enu_59746.exe 2008-04-03 23:50 57,144,896 -c--a-w C:\Program Files\setpoint440.exe 2008-04-02 17:45 2,751,368 -c--a-w C:\Program Files\ccsetup206.exe 2008-03-21 14:38 8,161,400 -c--a-w C:\Program Files\Windows-KB890830-V1.39.exe 2008-03-09 14:21 407,680 -c--a-w C:\Program Files\aswclnr.exe 2008-02-25 15:15 2,919,160 -c--a-w C:\Program Files\WindowsMedia-Q828026-x86-FRA.exe 2008-02-25 15:11 881,192 -c--a-w C:\Program Files\WGAPluginInstall.exe 2008-02-24 01:22 1,491,592 -c--a-w C:\Program Files\install_flash_player.exe 2008-02-17 17:42 1,729 -c--a-w C:\Program Files\Adobe Reader 8.lnk 2008-02-12 16:50 95 -csh--w C:\Program Files\desktop.ini 2008-02-12 16:50 15,086 -csh--w C:\Program Files\ShedkoFolderico3_0627.ico 2007-12-09 00:04 12,413,440 -c--a-w C:\Program Files\avgas-setup-7.5.1.43.exe . (((((((((((((((((((((((((((((((((((((((((((( Look ))))))))))))))))))))))))))))))))))))))))))))))))))))))))) . ---- Directory of C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\programidle ---- 2008-04-25 22:28 256512 --a--c--- C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\programidle\acidbuildadmin.exe 2008-04-25 22:28 1060 --ahsc--- C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\programidle\0 ---- Directory of C:\Program Files\Incomplete ---- 2007-12-05 13:10 6512 --a--c--- C:\Program Files\Incomplete\downloads.dat ---- Directory of C:\WINDOWS\system32\bits ---- 2007-03-29 08:58 409600 --------- C:\WINDOWS\system32\bits\qmgr.dll ((((((((((((((((((((((((((((( snapshot@2008-06-29_14.18.18.00 ))))))))))))))))))))))))))))))))))))))))) . - 2008-06-29 18:03:34 2,048 --s-a-w C:\WINDOWS\bootstat.dat + 2008-07-04 14:10:51 2,048 --s-a-w C:\WINDOWS\bootstat.dat + 2008-07-01 07:23:42 163,328 ----a-w C:\WINDOWS\ERUNT\SDFIX\ERDNT.EXE + 2008-06-30 17:33:52 9,691,136 ----a-w C:\WINDOWS\ERUNT\SDFIX\Users\00000001\ntuser.dat + 2008-06-30 17:33:52 200,704 ----a-w C:\WINDOWS\ERUNT\SDFIX\Users\00000002\UsrClass.dat + 2008-07-01 07:23:42 163,328 ----a-w C:\WINDOWS\ERUNT\SDFIX_First_Run\ERDNT.EXE + 2008-06-30 14:21:43 9,691,136 ----a-w C:\WINDOWS\ERUNT\SDFIX_First_Run\Users\00000001\ntuser.dat + 2008-06-30 14:21:43 200,704 ----a-w C:\WINDOWS\ERUNT\SDFIX_First_Run\Users\00000002\UsrClass.dat - 2008-03-29 18:45:49 1,146,232 ----a-w C:\WINDOWS\system32\aswBoot.exe + 2008-05-15 23:24:43 1,152,888 ----a-w C:\WINDOWS\system32\aswBoot.exe - 2008-03-29 18:23:22 95,608 ----a-w C:\WINDOWS\system32\AVASTSS.scr + 2008-05-15 23:12:36 95,608 ----a-w C:\WINDOWS\system32\AvastSS.scr - 2008-06-22 06:04:54 3,472 ----a-w C:\WINDOWS\system32\d3d9caps.dat + 2008-06-30 17:32:54 4,132 ----a-w C:\WINDOWS\system32\d3d9caps.dat - 2008-03-29 18:26:52 26,944 ----a-w C:\WINDOWS\system32\drivers\aavmker4.sys + 2008-05-15 23:13:26 26,944 ----a-w C:\WINDOWS\system32\drivers\aavmker4.sys - 2008-03-29 18:35:49 20,560 ----a-w C:\WINDOWS\system32\drivers\aswFsBlk.sys + 2008-05-15 23:16:06 20,560 ----a-w C:\WINDOWS\system32\drivers\aswFsBlk.sys - 2008-01-17 15:34:01 93,264 ----a-w C:\WINDOWS\system32\drivers\aswmon.sys + 2008-01-17 16:34:01 93,264 ----a-w C:\WINDOWS\system32\drivers\aswmon.sys - 2008-03-29 18:35:21 94,544 ----a-w C:\WINDOWS\system32\drivers\aswmon2.sys + 2008-05-15 23:18:33 94,416 ----a-w C:\WINDOWS\system32\drivers\aswmon2.sys - 2008-03-29 18:29:08 23,152 ----a-w C:\WINDOWS\system32\drivers\aswRdr.sys + 2008-05-15 23:15:29 23,152 ----a-w C:\WINDOWS\system32\drivers\aswRdr.sys - 2008-03-29 18:31:34 75,856 ----a-w C:\WINDOWS\system32\drivers\aswSP.sys + 2008-05-15 23:20:32 78,416 ----a-w C:\WINDOWS\system32\drivers\aswSP.sys - 2008-03-29 18:27:33 42,912 ----a-w C:\WINDOWS\system32\drivers\aswTdi.sys + 2008-05-15 23:14:11 42,912 ----a-w C:\WINDOWS\system32\drivers\aswTdi.sys + 2008-07-04 14:11:01 16,384 ----atw C:\WINDOWS\TEMP\Perflib_Perfdata_57c.dat . -- Snapshot reset to current date -- . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Note* les ‚l‚ments vides & les ‚l‚ments initiaux l‚gitimes ne sont pas list‚s [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 08:00 15360] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2008-05-15 19:19 79224] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer] "NoStrCmpLogical"= 1 (0x1) "NoResolveSearch"= 1 (0x1) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon] "UIHost"="C:\\Documents and Settings\\All Users.WINDOWS\\Application Data\\TuneUp Software\\TuneUp Utilities\\WinStyler\\tu_logonui.exe" [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "VIDC.MJPG"= pvmjpg21.dll [HKLM\~\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Menu Démarrer^Programmes^Démarrage^Logitech SetPoint.lnk] path=C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Démarrage\Logitech SetPoint.lnk backup=C:\WINDOWS\pss\Logitech SetPoint.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Menu Démarrer^Programmes^Démarrage^LUMIX Simple Viewer.lnk] backup=C:\WINDOWS\pss\LUMIX Simple Viewer.lnkCommon Startup HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mmtask HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MMTray [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StandardInstall] [X] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] --a--c--- 2008-01-11 23:16 39792 C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ANIWZCS2Service] --a------ 2008-05-28 11:05 49152 C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ArcSoft Connection Service] --a--c--- 2007-11-13 15:24 72192 C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ACDaemon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATIPTA] --a--c--- 2004-02-24 22:10 335872 C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BellCanada_McciTrayApp] --a--c--- 2007-11-19 10:33 1468928 C:\Program Files\BellCanada\McciTrayApp.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe] --a------ 2004-08-05 08:00 15360 C:\WINDOWS\system32\ctfmon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\D-Link Wireless G WDA-1320] --a------ 2005-12-14 15:56 2711552 C:\Program Files\D-Link\Wireless G WDA-1320\AirGCFG.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IMJPMIG8.1] --a--c--- 2004-08-05 08:00 208952 C:\WINDOWS\ime\imjp8_1\imjpmig.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper] --a--c--- 2008-02-04 15:18 267048 C:\Program Files\iTunes\iTunesHelper.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechCommunicationsManager] --a------ 2007-10-25 16:33 563984 C:\Program Files\Fichiers communs\Logishrd\LComMgr\Communications_Helper.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechQuickCamRibbon] --a------ 2007-10-25 16:37 2178832 C:\Program Files\Logitech\QuickCam\Quickcam.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] --a--c--- 2001-07-09 10:50 155648 C:\WINDOWS\system32\NeroCheck.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002A] --a--c--- 2004-08-05 08:00 455168 C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002ASync] --a--c--- 2004-08-05 08:00 455168 C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] --a--c--- 2008-02-01 00:13 385024 C:\Program Files\QuickTime\QTTask.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] --a--c--- 2008-02-22 04:25 144784 C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\zBrowser Launcher] --a--c--- 2003-12-01 12:38 892928 C:\Program Files\Logitech\iTouch\iTouch.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATIModeChange] --a--c--- 2001-09-04 04:24 28672 C:\WINDOWS\system32\Ati2mdxx.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Logitech Hardware Abstraction Layer] --a--c--- 2007-11-29 02:17 55824 C:\WINDOWS\KHALMNPR.Exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "WMPNetworkSvc"=3 (0x3) "WLSetupSvc"=3 (0x3) "WinDefend"=2 (0x2) "usnjsvc"=3 (0x3) "SPTISRV"=3 (0x3) "SoundMAX Agent Service (default)"=2 (0x2) "PACSPTISVR"=3 (0x3) "MSCSPTISRV"=3 (0x3) "McciCMService"=2 (0x2) "LVSrvLauncher"=2 (0x2) "LVPrcSrv"=2 (0x2) "LVCOMSer"=2 (0x2) "iPod Service"=3 (0x3) "idsvc"=3 (0x3) "gusvc"=3 (0x3) "DTSRVC"=2 (0x2) "CTDevice_Srv"=2 (0x2) "Creative Service for CDROM Access"=2 (0x2) "AVG Anti-Spyware Guard"=2 (0x2) "avast! Web Scanner"=3 (0x3) "avast! Mail Scanner"=3 (0x3) "avast! Antivirus"=2 (0x2) "ATI Smart"=2 (0x2) "Ati HotKey Poller"=2 (0x2) "aswUpdSv"=2 (0x2) "Apple Mobile Device"=2 (0x2) "ANIWZCSdService"=2 (0x2) "ACDaemon"=2 (0x2) "aawservice"=2 (0x2) [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-disabled] "D-Link Wireless G WDA-1320"=C:\Program Files\D-Link\Wireless G WDA-1320\AirGCFG.exe "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" -atboottime "LogitechQuickCamRibbon"="C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide "LogitechCommunicationsManager"="C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe" [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= "C:\\Program Files\\iTunes\\iTunes.exe"= R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-05-15 19:20] R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-05-15 19:16] S3 A3AB;D-Link AirPro 802.11a/b Wireless Adapter Service(A3AB);C:\WINDOWS\system32\DRIVERS\A3AB.sys [2005-08-25 15:00] S3 LCcfltr;Logitech USB Filter Driver;C:\WINDOWS\system32\Drivers\LCcFltr.Sys [2003-11-07 05:50] S3 LVPrcMon;Logitech LVPrcMon Driver;C:\WINDOWS\system32\drivers\LVPrcMon.sys [] S3 MREMP50;MREMP50 NDIS Protocol Driver;C:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS [2007-10-31 17:51] S3 MRESP50;MRESP50 NDIS Protocol Driver;C:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS [2007-10-31 17:51] S4 ACDaemon;ArcSoft Connect Daemon;C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ACService.exe [2007-11-14 13:04] S4 McciCMService;McciCMService;"C:\Program Files\Common Files\Motive\McciCMService.exe" [2007-11-01 11:59] . - - - - ORPHANS REMOVED - - - - Toolbar-{6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - (no file) WebBrowser-{6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - (no file) MSConfigStartUp-!AVG Anti-Spyware - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe MSConfigStartUp-LDM - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe MSConfigStartUp-Windows Defender - C:\Program Files\Windows Defender\MSASCui.exe MSConfigStartUp-Logitech Utility - Logi_MwX.Exe MSConfigStartUp-SSA - (no file) MSConfigStartUp-SsAAD - (no file) ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-07-04 10:13:15 Windows 5.1.2600 Service Pack 2 NTFS Balayage processus cach‚s ... Balayage cach‚ autostart entries ... Balayage des fichiers cach‚s ... Scan termin‚ avec succŠs Les fichiers cach‚s: 0 ************************************************************************** . --------------------- DLLs a charg‚ sous des processus courants --------------------- PROCESS: C:\WINDOWS\system32\winlogon.exe -> C:\WINDOWS\system32\Ati2evxx.dll . ------------------------ Other Running Processes ------------------------ . C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Program Files\OpenOffice.org 2.4\program\soffice.exe C:\Program Files\OpenOffice.org 2.4\program\soffice.bin . ************************************************************************** . Temps d'accomplissement: 2008-07-04 10:22:08 - machine was rebooted [guillaine] ComboFix-quarantined-files.txt 2008-07-04 14:22:02 ComboFix2.txt 2008-06-29 18:19:37 Pre-Run: 59,830,484,992 octets libres Post-Run: 59,813,019,648 octets libres 321 --- E O F --- 2008-06-26 11:25:56 ENSUITE: -----------------------[ Lop S&D 4.2.1-9 XP/Vista ]--------------------- [ Windows XP (NT 5.1) Build 2600, Service Pack 2 ] [ USER : guillaine ] [ "C:\Lop SD" ] [ Selection : 1 ] [ 2008-07-04 | 10:35:18,03 ] [ PC : SIMARD ] [ MAJ : 01-07-2008 | 00:25 ] -------------[ Listing des dossiers dans Application Data ]------------ [2006-11-04|15:48] C:\DOCUME~1\ADMINI~1\APPLIC~1\desktop.ini [2006-10-21|07:04] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft [2006-10-20|09:34] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini [2006-10-20|15:47] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft [2008-02-02|12:32] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\4D [2008-03-22|09:33] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\addr_file.html [2008-02-17|13:42] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Adobe [2007-12-24|13:53] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Apple [2007-01-05|17:52] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Apple Computer [2008-01-10|22:58] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\ArcSoft [2008-07-04|08:52] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Avira [2008-04-20|16:33] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Bell [2008-05-12|16:15] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Creative [2006-11-04|15:48] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\desktop.ini [2007-05-04|07:16] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Exetender [2008-01-21|10:22] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Google [2007-11-08|17:56] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Grisoft [2008-02-06|16:20] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\ISx34.avi [2007-09-05|12:42] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\JollyBear [2008-03-18|11:50] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Kiwee Toolbar2 [2008-05-28|07:08] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Lavasoft [2008-06-03|19:03] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\LogiShrd [2008-06-03|19:03] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Logitech [2007-09-26|13:49] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\MailFrontier [2008-05-21|08:12] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Malwarebytes [2008-02-15|18:39] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Messenger Plus! [2008-06-13|07:19] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Microsoft [2008-01-04|13:41] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Microsoft Help [2008-04-20|15:45] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Motive [2006-10-21|07:35] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\MotiveSysIDs [2007-11-21|15:54] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Mozilla [2007-08-11|09:33] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\QTSBandwidthCache [2006-11-20|09:05] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\QuickTime [2008-05-12|16:15] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Sandlot Games [2007-11-21|17:45] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Skype [2006-10-21|18:25] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Sony Corporation [2008-07-04|10:01] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Spybot - Search & Destroy [2008-02-20|12:09] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\TuneUp Software [2007-02-05|07:26] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\WholeSecurity [2006-10-21|12:06] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Windows Genuine Advantage [2008-04-27|11:38] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Windows Live Toolbar [2008-06-14|19:40] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\WLInstaller [2008-03-28|08:34] C:\DOCUME~1\ALLUSE~1.WIN\APPLIC~1\Zylom [2006-10-20|09:34] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini [2006-10-20|15:47] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft [2006-11-04|15:48] C:\DOCUME~1\DEFAUL~1.WIN\APPLIC~1\desktop.ini [2006-10-21|07:04] C:\DOCUME~1\DEFAUL~1.WIN\APPLIC~1\Microsoft [2008-05-30|21:54] C:\DOCUME~1\enfants\APPLIC~1\Adobe [2007-05-08|20:28] C:\DOCUME~1\enfants\APPLIC~1\Ahead [2008-05-12|16:15] C:\DOCUME~1\enfants\APPLIC~1\Apple Computer [2008-06-15|17:51] C:\DOCUME~1\enfants\APPLIC~1\Arcsoft [2008-05-02|20:38] C:\DOCUME~1\enfants\APPLIC~1\Bell [2008-04-28|11:53] C:\DOCUME~1\enfants\APPLIC~1\Chessmaster Challenge [2006-10-21|02:52] C:\DOCUME~1\enfants\APPLIC~1\desktop.ini [2007-02-25|17:29] C:\DOCUME~1\enfants\APPLIC~1\froggy_scorebox [2008-06-01|13:45] C:\DOCUME~1\enfants\APPLIC~1\GlarySoft [2008-05-15|19:35] C:\DOCUME~1\enfants\APPLIC~1\Grisoft [2008-05-12|16:15] C:\DOCUME~1\enfants\APPLIC~1\Identities [2007-12-30|12:39] C:\DOCUME~1\enfants\APPLIC~1\InstallShield Installation Information [2008-06-26|23:59] C:\DOCUME~1\enfants\APPLIC~1\LimeWire [2008-05-15|19:35] C:\DOCUME~1\enfants\APPLIC~1\Logitech [2008-02-24|18:00] C:\DOCUME~1\enfants\APPLIC~1\Macromedia [2008-05-12|16:15] C:\DOCUME~1\enfants\APPLIC~1\MailFrontier [2007-12-21|20:29] C:\DOCUME~1\enfants\APPLIC~1\Microsoft [2008-07-01|15:55] C:\DOCUME~1\enfants\APPLIC~1\Mozilla [2006-12-19|18:37] C:\DOCUME~1\enfants\APPLIC~1\OLYMPUS [2008-06-15|16:42] C:\DOCUME~1\enfants\APPLIC~1\OpenOffice.org2 [2007-02-25|17:29] C:\DOCUME~1\enfants\APPLIC~1\pl_accounts.pl_acc [2008-05-12|16:15] C:\DOCUME~1\enfants\APPLIC~1\PlayFirst [2008-05-12|16:15] C:\DOCUME~1\enfants\APPLIC~1\Sony Corporation [2008-01-27|10:31] C:\DOCUME~1\enfants\APPLIC~1\SpaceMonger [2006-10-21|22:25] C:\DOCUME~1\enfants\APPLIC~1\Sun [2008-02-22|21:55] C:\DOCUME~1\enfants\APPLIC~1\Talkback [2007-02-25|17:29] C:\DOCUME~1\enfants\APPLIC~1\Troll.options [2007-04-10|11:52] C:\DOCUME~1\enfants\APPLIC~1\Yahoo! [2006-10-20|09:34] C:\DOCUME~1\GUILLA~1\APPLIC~1\desktop.ini [2006-10-20|15:52] C:\DOCUME~1\GUILLA~1\APPLIC~1\Microsoft [2008-05-21|09:51] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\Adobe [2008-01-07|12:18] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\Ahead [2007-05-06|10:46] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\Alawar [2008-05-23|21:22] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\Apple Computer [2008-05-14|18:44] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\ArcSoft [2007-01-06|09:51] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\Beep Industries [2008-04-20|16:33] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\Bell [2008-04-28|11:53] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\Calendrier Xtra [2006-10-21|02:52] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\desktop.ini [2008-05-19|12:53] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\DisplayTune [2008-05-12|16:15] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\EoRezo [2008-05-12|16:15] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\ErrorSmart [2008-06-04|10:06] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\ESTsoft [2007-03-19|09:40] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\froggy_scorebox [2008-05-12|15:34] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\GlarySoft [2008-05-12|16:15] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\Google [2007-12-28|18:34] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\gtk-2.0 [2006-12-18|19:23] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\Help [2008-05-12|16:15] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\Identities [2008-06-26|23:59] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\LimeWire [2008-05-13|09:24] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\Logitech [2008-02-19|18:27] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\Macromedia [2007-09-06|07:02] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\Magic Academy [2008-05-21|08:12] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\Malwarebytes [2008-01-31|12:24] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\Memorex [2008-06-13|07:19] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\Microsoft [2007-05-06|11:46] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\Mind Control Software [2008-05-12|16:15] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\Motive [2008-06-20|05:09] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\Mozilla [2008-02-10|20:21] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\MSN Pictures Displayer [2006-11-09|15:35] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\MSNInstaller [2008-07-01|05:49] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\Notepad++ [2006-11-20|09:16] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\OLYMPUS [2008-07-04|10:14] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\OpenOffice.org2 [2008-04-22|20:08] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\Panasonic [2007-03-19|09:40] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\pl_accounts.pl_acc [2008-05-12|16:15] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\PlayFirst [2008-06-15|02:51] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\programidle [2007-05-06|15:47] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\PTV Game [2006-12-31|15:56] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\Ratbag [2008-04-16|01:41] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\Reallusion [2008-05-12|16:15] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\Sony Corporation [2007-12-10|13:14] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\SoundSpectrum [2006-10-21|17:33] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\Sun [2008-01-01|14:42] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\Talkback [2007-03-19|09:40] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\Troll.options [2008-02-20|10:15] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\TuneUp Software [2008-02-06|11:05] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\Uniblue [2008-05-12|16:15] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\Windows Live Writer [2008-03-29|12:13] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\XnView [2007-01-29|12:22] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\Zak&Jack [2008-05-12|16:15] C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\Zylom [2006-11-04|15:48] C:\DOCUME~1\INVIT~1\APPLIC~1\desktop.ini [2007-10-27|01:05] C:\DOCUME~1\INVIT~1\APPLIC~1\Macromedia [2007-10-27|01:04] C:\DOCUME~1\INVIT~1\APPLIC~1\Microsoft [2007-10-27|01:04] C:\DOCUME~1\INVIT~1\APPLIC~1\MusicNet [2006-10-20|15:47] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft [2007-08-17|02:40] C:\DOCUME~1\LOCALS~1.AUT\APPLIC~1\Microsoft [2008-05-12|16:15] C:\DOCUME~1\Marie\APPLIC~1\Adobe [2008-05-05|00:47] C:\DOCUME~1\Marie\APPLIC~1\Bell [2007-12-30|13:02] C:\DOCUME~1\Marie\APPLIC~1\Creative [2006-11-04|15:48] C:\DOCUME~1\Marie\APPLIC~1\desktop.ini [2007-12-30|14:11] C:\DOCUME~1\Marie\APPLIC~1\Macromedia [2008-05-05|00:47] C:\DOCUME~1\Marie\APPLIC~1\Microsoft [2008-03-12|06:47] C:\DOCUME~1\Marie\APPLIC~1\Mozilla [2008-03-12|06:48] C:\DOCUME~1\Marie\APPLIC~1\Talkback [2006-10-20|15:47] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft [2007-11-27|12:22] C:\DOCUME~1\NETWOR~1.AUT\APPLIC~1\Microsoft ----------------[ Tâches planifiées dans C:\WINDOWS\tasks ]--------------- [2008-07-04 10:11][--ah-c---] C:\WINDOWS\tasks\SA.DAT [2004-08-05 08:00][-r-h-c---] C:\WINDOWS\tasks\desktop.ini ---------------[ Listing des dossiers dans C:\Program Files ]-------------- [2008-04-04|10:15] C:\Program Files\8-3_xp32_dd_ccc_wdm_enu_59746.exe [2008-07-04|09:00] C:\Program Files\Adobe [2008-02-17|13:42] C:\Program Files\Adobe Reader 8.lnk [2008-07-04|08:59] C:\Program Files\Alwil Software [2006-10-21|15:31] C:\Program Files\Analog Devices [2008-05-09|17:09] C:\Program Files\ANI [2008-05-12|16:15] C:\Program Files\Apple Software Update [2008-02-27|11:50] C:\Program Files\ArcSoft [2008-03-09|10:21] C:\Program Files\aswclnr.exe [2008-01-16|14:01] C:\Program Files\ATI Technologies [2007-12-08|20:04] C:\Program Files\avgas-setup-7.5.1.43.exe [2008-07-04|09:00] C:\Program Files\BellCanada [2008-01-31|11:28] C:\Program Files\BootVisfr [2008-06-30|07:35] C:\Program Files\Canon [2008-01-21|10:53] C:\Program Files\CCleaner [2008-04-02|13:45] C:\Program Files\ccsetup206.exe [2008-07-01|08:02] C:\Program Files\ccsetup209.exe [2008-07-03|21:49] C:\Program Files\ccsetup209_slim.exe [2008-06-15|02:51] C:\Program Files\Circle Developement [2008-02-13|12:17] C:\Program Files\Common Files [2008-05-12|16:16] C:\Program Files\Creative [2008-02-12|12:50] C:\Program Files\desktop.ini [2008-01-21|10:56] C:\Program Files\DIFX [2008-05-09|17:08] C:\Program Files\D-Link [2008-05-22|09:32] C:\Program Files\dotNetFx35setup.exe [2008-06-27|00:04] C:\Program Files\EClea2_0 [2006-10-21|07:25] C:\Program Files\Efficient Networks [2008-05-27|10:47] C:\Program Files\ESTsoft [2008-05-12|16:16] C:\Program Files\Fichiers communs [2008-06-30|07:43] C:\Program Files\Firefox Setup 3.0.exe [2008-01-21|10:26] C:\Program Files\Folderico [2008-04-28|11:53] C:\Program Files\Incomplete [2008-04-20|15:51] C:\Program Files\INSTALL.LOG [2008-02-23|21:22] C:\Program Files\install_flash_player.exe [2008-06-26|07:48] C:\Program Files\InstallShield Installation Information [2008-06-11|05:55] C:\Program Files\Internet Explorer [2008-02-08|18:46] C:\Program Files\iPod [2008-02-08|18:46] C:\Program Files\iTunes [2008-06-29|08:10] C:\Program Files\Java [2008-07-04|08:56] C:\Program Files\Lavasoft [2008-07-01|09:35] C:\Program Files\Lavasoft_Adaware_multi.exe [2008-06-30|09:14] C:\Program Files\Logitech [2008-07-04|08:58] C:\Program Files\Malwarebytes' Anti-Malware [2008-06-30|09:08] C:\Program Files\mbam-setup.exe [2008-06-24|06:56] C:\Program Files\MesPolices10 [2008-07-04|09:02] C:\Program Files\Messenger Plus! Live [2007-05-10|03:02] C:\Program Files\Microsoft CAPICOM 2.1.0.2 [2006-10-20|15:47] C:\Program Files\microsoft frontpage [2008-05-05|07:13] C:\Program Files\Microsoft Office [2008-04-25|08:53] C:\Program Files\Microsoft Silverlight [2006-10-21|07:40] C:\Program Files\Motive [2008-01-31|11:26] C:\Program Files\Movie Maker [2008-07-04|09:05] C:\Program Files\Mozilla Firefox [2008-03-31|13:26] C:\Program Files\MSBuild [2008-04-28|09:43] C:\Program Files\MSECache [2008-01-16|13:50] C:\Program Files\MSN Gaming Zone [2008-03-31|13:19] C:\Program Files\MSXML 6.0 [2008-01-17|02:21] C:\Program Files\Nero [2008-04-20|15:45] C:\Program Files\NetAssistant [2006-10-20|15:45] C:\Program Files\NetMeeting [2008-07-04|10:29] C:\Program Files\Notepad++ [2008-07-01|05:38] C:\Program Files\npp.4.9.2.Installer.exe [2007-09-11|20:02] C:\Program Files\Nsasoft [2008-04-08|02:52] C:\Program Files\OOo_2.4.0_Win32Intel_install_fr.exe [2008-06-29|10:04] C:\Program Files\OOo_2.4.1_Win32Intel_install_wJRE_fr.exe [2008-06-29|08:20] C:\Program Files\OpenOffice.org 2.4 [2008-06-29|10:19] C:\Program Files\OpenOffice.org 2.4 (fr) Installation Files [2008-01-01|19:14] C:\Program Files\Outlook Express [2008-05-05|07:15] C:\Program Files\Panasonic [2008-04-08|02:27] C:\Program Files\pf-setup.exe [2008-04-08|02:39] C:\Program Files\PhotoFiltre [2008-06-22|10:25] C:\Program Files\Picasa2 [2008-06-20|07:18] C:\Program Files\picasa2Setup.exe [2008-04-17|22:11] C:\Program Files\Portrait Displays [2008-04-29|09:20] C:\Program Files\PowerPointViewer.exe [2008-03-07|18:20] C:\Program Files\QuickTime [2007-01-17|19:18] C:\Program Files\Real [2008-03-31|13:25] C:\Program Files\Reference Assemblies [2008-06-30|09:42] C:\Program Files\SDFix.exe [2006-10-20|15:45] C:\Program Files\Services en ligne [2008-04-03|19:50] C:\Program Files\setpoint440.exe [2008-07-04|08:49] C:\Program Files\setupfre.exe [2008-02-12|12:50] C:\Program Files\ShedkoFolderico3_0627.ico [2008-04-05|12:33] C:\Program Files\Shockwave_Installer_Full.exe [2008-03-28|14:31] C:\Program Files\Sierra On-Line [2008-06-04|07:32] C:\Program Files\siw.exe [2008-07-04|08:45] C:\Program Files\Spybot - Search & Destroy [2008-07-04|08:44] C:\Program Files\spybotsd152.exe [2008-04-20|16:30] C:\Program Files\SympaticoSecurityAdvisor_setupSSM.exe [2006-12-18|20:59] C:\Program Files\Thomson [2008-06-30|06:00] C:\Program Files\Trend Micro [2006-10-29|14:26] C:\Program Files\Trymedia [2006-10-20|15:51] C:\Program Files\Uninstall Information [2008-03-28|14:31] C:\Program Files\USB Disk Win98 Driver [2008-02-25|11:11] C:\Program Files\WGAPluginInstall.exe [2007-09-14|02:12] C:\Program Files\WinAVI MP4 Converter [2008-04-28|09:43] C:\Program Files\Windows Installer Clean Up [2008-04-26|13:30] C:\Program Files\Windows Live [2008-04-27|17:17] C:\Program Files\Windows Live Favorites [2008-07-04|08:57] C:\Program Files\Windows Live Safety Center [2008-06-30|07:35] C:\Program Files\Windows Live Toolbar [2008-03-28|14:31] C:\Program Files\Windows Media Connect 2 [2008-05-12|16:16] C:\Program Files\Windows Media Player [2006-10-20|15:43] C:\Program Files\Windows NT [2008-03-21|10:38] C:\Program Files\Windows-KB890830-V1.39.exe [2008-02-25|11:15] C:\Program Files\WindowsMedia-Q828026-x86-FRA.exe [2006-10-20|15:45] C:\Program Files\WindowsUpdate [2008-06-14|19:40] C:\Program Files\WLinstaller.exe [2008-06-01|14:17] C:\Program Files\wlm.exe [2006-10-23|23:45] C:\Program Files\WON [2006-10-20|15:47] C:\Program Files\xerox [2008-01-08|12:53] C:\Program Files\Yahoo! ------[ Listing des dossiers dans C:\Program Files\Fichiers communs ]------ [2008-02-17|13:42] C:\Program Files\Fichiers communs\Adobe [2006-10-21|12:53] C:\Program Files\Fichiers communs\Ahead [2007-12-21|11:56] C:\Program Files\Fichiers communs\Apple [2008-02-27|15:28] C:\Program Files\Fichiers communs\ArcSoft [2007-02-25|11:08] C:\Program Files\Fichiers communs\DirectX [2006-10-21|18:24] C:\Program Files\Fichiers communs\InstallShield [2006-10-21|12:53] C:\Program Files\Fichiers communs\Java [2008-07-02|17:47] C:\Program Files\Fichiers communs\Logishrd [2008-04-29|15:54] C:\Program Files\Fichiers communs\Logitech [2008-05-12|16:16] C:\Program Files\Fichiers communs\Microsoft Shared [2008-04-20|15:59] C:\Program Files\Fichiers communs\Motive [2006-10-20|15:44] C:\Program Files\Fichiers communs\MSSoap [2008-04-17|22:11] C:\Program Files\Fichiers communs\Portrait Displays [2008-01-27|17:29] C:\Program Files\Fichiers communs\Real [2008-04-16|01:40] C:\Program Files\Fichiers communs\Reallusion [2008-04-12|10:22] C:\Program Files\Fichiers communs\Services [2006-10-21|18:27] C:\Program Files\Fichiers communs\Sony Shared [2006-10-20|09:35] C:\Program Files\Fichiers communs\SpeechEngines [2007-06-13|03:02] C:\Program Files\Fichiers communs\System [2008-05-12|16:16] C:\Program Files\Fichiers communs\WindowsLiveInstaller [2008-07-01|09:36] C:\Program Files\Fichiers communs\Wise Installation Wizard ---------------------------[ Process ]-------------------------- ... 26 iexplore.exe ~ [3336] ----------------------[ Recherche avec S_Lop ]--------------------- Aucun fichier / dossier Lop trouvé ! -----------------[ Recherche de Fichiers / Dossiers Lop ]----------------- C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\programidle C:\DOCUME~1\GUILLA~1.HOM\APPLIC~1\programidle\acidbuildadmin.exe C:\Program Files\Circle Developement ----------------------[ Verification du Registre ]---------------------- [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] ..... OK ! --------------------[ Verification du fichier Hosts ]--------------------- Fichier Hosts PROPRE ----------------[ Recherche de fichiers avec Catchme ]----------------- catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-07-04 10:36:31 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden files ... scan completed successfully hidden processes: 0 hidden files: 0 --------------------[ Recherche d'autres infections ]--------------------- => C:\Documents and Settings\guillaine.HOME-6620B39EBF\Local Settings\Application Data\IM\Runtime\EmoticonCenter\cracker.gif [F:1][D:2]-> C:\DOCUME~1\GUILLA~1.HOM\LOCALS~1\Temp [F:14][D:0]-> C:\DOCUME~1\GUILLA~1.HOM\Cookies [F:248][D:4]-> C:\DOCUME~1\GUILLA~1.HOM\LOCALS~1\TEMPOR~1\content.IE5 --------------------[ Fin du rapport a 10:37:31,75 ]---------------------- ET POUR FINIR: Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 10:41:09, on 2008-07-04 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16674) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\svchost.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\OpenOffice.org 2.4\program\soffice.exe C:\Program Files\OpenOffice.org 2.4\program\soffice.BIN C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe C:\WINDOWS\explorer.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\explorer.exe C:\hijackthis\HijackThis.exe R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R3 - URLSearchHook: (no name) - {6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - (no file) O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - Startup: OpenOffice.org 2.4.lnk = C:\Program Files\OpenOffice.org 2.4\program\quickstart.exe O8 - Extra context menu item: Choisir comme avatar pour &Messenger - C:\Program Files\MSN Pictures Displayer\AddIEPicture.htm O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE (file missing) O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE (file missing) O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/dow...llerControl.cab O16 - DPF: {238F6F83-B8B4-11CF-8771-00A024541EE3} - http://a516.g.akamai.net/f/516/25175/7d/ru...cat-no-eula.cab O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - http://fichiers.touslesdrivers.com/fichier...on_2_0_4_12.cab O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe -- End of file - 5863 bytes j'attends de tes nouvelles oGu et bonne journée...

bonjour oGu.. tu vas bien j'espère ? bon je t'envoies mon rapport avast et ma console de récup est installée ;)en passant... pourquoi je ne reçois pas de mails ou d'alertes quand tu me réponds ? jai pourtant suivi toutes les indications ! ? ... a + * * Rapport avast! * Ce fichier est généré automatiquement * * Tâche utilisée 'Interface utilisateur simplifiée' * Débuté le mercredi 2 juillet 2008 11:47:02 * VPS : 080628-0, 2008-06-28 * C:\Documents and Settings\All Users.WINDOWS\Application Data\Lavasoft\MiniMessage\2 [E] Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus (32) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\AheadNeroBurningRom.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\AheadNeroBurningRom.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\AheadNeroBurningRom1.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\AheadNeroBurningRom1.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\AheadNeroBurningRom2.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\AheadNeroBurningRom2.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\AheadNeroBurningRom3.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\AheadNeroBurningRom3.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\AheadNeroBurningRom4.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\AheadNeroBurningRom4.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\AheadNeroBurningRom5.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\AheadNeroBurningRom5.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\AheadNeroBurningRom6.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\AheadNeroBurningRom6.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\AheadNeroBurningRom7.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\AheadNeroBurningRom7.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\AheadNeroBurningRom8.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\AheadNeroBurningRom8.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\AheadNeroBurningRom9.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\AheadNeroBurningRom9.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\CommonDialogs.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\CommonDialogs.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\CommonDialogs1.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\CommonDialogs1.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\CommonDialogs2.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\CommonDialogs2.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\ErrorSmart.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\ErrorSmart.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\ErrorSmart1.zip\2008 Feb 12 - 10_47_45 AM_953.log [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\ErrorSmart1.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\ErrorSmart2.zip\2008 Feb 12 - 10_47_52 AM_812.log [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\ErrorSmart2.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\FunWebProducts.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\FunWebProducts.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Informationdedsinstallationerrone.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Informationdedsinstallationerrone.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Informationdedsinstallationerrone1.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Informationdedsinstallationerrone1.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Informationdedsinstallationerrone2.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Informationdedsinstallationerrone2.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Informationdedsinstallationerrone3.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Informationdedsinstallationerrone3.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Informationdedsinstallationerrone4.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Informationdedsinstallationerrone4.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Informationdedsinstallationerrone5.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Informationdedsinstallationerrone5.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\InternetExplorer.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\InternetExplorer.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\InternetExplorer1.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\InternetExplorer1.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\InternetExplorer2.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\InternetExplorer2.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\InternetExplorer3.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\InternetExplorer3.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\InternetExplorer4.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\InternetExplorer4.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\InternetExplorer5.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\InternetExplorer5.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\InternetExplorer6.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\InternetExplorer6.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\InternetExplorer7.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\InternetExplorer7.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Localisationerrone.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Localisationerrone.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Localisationerrone1.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Localisationerrone1.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Localisationerrone10.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Localisationerrone10.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Localisationerrone11.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Localisationerrone11.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Localisationerrone12.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Localisationerrone12.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Localisationerrone13.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Localisationerrone13.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Localisationerrone14.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Localisationerrone14.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Localisationerrone15.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Localisationerrone15.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Localisationerrone16.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Localisationerrone16.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Localisationerrone17.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Localisationerrone17.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Localisationerrone2.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Localisationerrone2.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Localisationerrone3.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Localisationerrone3.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Localisationerrone4.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Localisationerrone4.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Localisationerrone5.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Localisationerrone5.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Localisationerrone6.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Localisationerrone6.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Localisationerrone7.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Localisationerrone7.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Localisationerrone8.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Localisationerrone8.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Localisationerrone9.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Localisationerrone9.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MessengerSkinnerrtk.zip\nvs2.inf [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MessengerSkinnerrtk.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MicrosoftWindowsSecurityCenterAntiVirusOverride.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MicrosoftWindowsSecurityCenterAntiVirusOverride.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MicrosoftWindowsSecurityInternetExplorer.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MicrosoftWindowsSecurityInternetExplorer.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MicrosoftWindowsSecurityInternetExplorer1.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MicrosoftWindowsSecurityInternetExplorer1.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MicrosoftWindowsSecurityInternetExplorer2.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MicrosoftWindowsSecurityInternetExplorer2.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MicrosoftWindowsSecurityInternetExplorer3.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MicrosoftWindowsSecurityInternetExplorer3.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSDirectD.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSDirectD.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSDirectD1.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSDirectD1.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSDirectD2.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSDirectD2.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSDirectD3.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSDirectD3.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSDirectDraw.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSDirectDraw.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSDirectDraw1.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSDirectDraw1.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSDirectDraw2.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSDirectDraw2.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSMediaPlayer.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSMediaPlayer.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSMediaPlayer1.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSMediaPlayer1.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSMediaPlayer10.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSMediaPlayer10.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSMediaPlayer11.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSMediaPlayer11.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSMediaPlayer12.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSMediaPlayer12.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSMediaPlayer13.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSMediaPlayer13.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSMediaPlayer14.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSMediaPlayer14.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSMediaPlayer15.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSMediaPlayer15.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSMediaPlayer16.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSMediaPlayer16.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSMediaPlayer2.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSMediaPlayer2.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSMediaPlayer3.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSMediaPlayer3.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSMediaPlayer4.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSMediaPlayer4.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSMediaPlayer5.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSMediaPlayer5.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSMediaPlayer6.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSMediaPlayer6.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSMediaPlayer7.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSMediaPlayer7.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSMediaPlayer8.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSMediaPlayer8.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSMediaPlayer9.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSMediaPlayer9.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSOffice.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSOffice.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSOffice1.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSOffice1.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSOffice2.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSOffice2.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSSearchAssistant.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MSSearchAssistant.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MyWayMyWebSearch.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MyWayMyWebSearch.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MyWayMyWebSearch1.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MyWayMyWebSearch1.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MyWayMyWebSearch2.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MyWayMyWebSearch2.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MyWebSearch.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MyWebSearch.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MyWebSearch1.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\MyWebSearch1.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\RegistrySmart.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\RegistrySmart.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\RegistrySmart1.zip\2008 Jan 13 - 05_25_35 PM_765.log [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\RegistrySmart1.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\RegistrySmart2.zip\2008 Jan 13 - 05_25_39 PM_546.log [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\RegistrySmart2.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumonde.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumonde.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumonde1.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumonde1.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumonde2.zip\removalfile.bat [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumonde2.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumonde3.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumonde3.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumonde4.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumonde4.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumonde5.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumonde5.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumonde6.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumonde6.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumonde7.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumonde7.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric1.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric1.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric10.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric10.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric11.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric11.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric12.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric12.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric13.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric13.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric14.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric14.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric15.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric15.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric16.zip\qomliii.dll [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric16.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric17.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric17.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric18.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric18.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric19.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric19.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric2.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric2.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric20.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric20.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric21.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric21.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric22.zip\qomliii.dll_old [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric22.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric23.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric23.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric24.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric24.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric3.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric3.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric4.zip\ddcbxww.dll [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric4.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric5.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric5.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric6.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric6.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric7.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric7.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric8.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric8.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric9.zip\ddcbxww.dll_old [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Virtumondegeneric9.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Windows.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\Windows.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsExplorer.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsExplorer.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsExplorer1.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsExplorer1.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsExplorer10.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsExplorer10.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsExplorer11.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsExplorer11.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsExplorer12.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsExplorer12.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsExplorer13.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsExplorer13.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsExplorer14.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsExplorer14.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsExplorer15.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsExplorer15.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsExplorer16.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsExplorer16.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsExplorer17.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsExplorer17.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsExplorer18.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsExplorer18.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsExplorer19.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsExplorer19.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsExplorer2.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsExplorer2.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsExplorer20.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsExplorer20.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsExplorer21.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsExplorer21.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsExplorer22.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsExplorer22.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsExplorer3.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsExplorer3.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsExplorer4.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsExplorer4.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsExplorer5.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsExplorer5.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsExplorer6.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsExplorer6.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsExplorer7.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsExplorer7.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsExplorer8.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsExplorer8.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsExplorer9.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsExplorer9.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsMediaSDK.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsMediaSDK.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsMediaSDK1.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsMediaSDK1.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsMediaSDK10.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsMediaSDK10.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsMediaSDK11.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsMediaSDK11.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsMediaSDK12.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsMediaSDK12.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsMediaSDK13.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsMediaSDK13.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsMediaSDK14.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsMediaSDK14.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsMediaSDK2.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsMediaSDK2.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsMediaSDK3.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsMediaSDK3.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsMediaSDK4.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsMediaSDK4.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsMediaSDK5.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsMediaSDK5.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsMediaSDK6.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsMediaSDK6.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsMediaSDK7.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsMediaSDK7.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsMediaSDK8.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsMediaSDK8.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsMediaSDK9.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsMediaSDK9.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsOpenWith.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsOpenWith.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsOpenWith1.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsOpenWith1.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsOpenWith10.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsOpenWith10.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsOpenWith11.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsOpenWith11.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsOpenWith2.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsOpenWith2.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsOpenWith3.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsOpenWith3.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsOpenWith4.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsOpenWith4.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsOpenWith5.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsOpenWith5.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsOpenWith6.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsOpenWith6.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsOpenWith7.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsOpenWith7.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsOpenWith8.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsOpenWith8.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsOpenWith9.zip\sbRecovery.reg [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy\Recovery\WindowsOpenWith9.zip\sbRecovery.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\enfants\ntuser.dat [E] Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus (32) C:\Documents and Settings\enfants\ntuser.dat.LOG [E] Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus (32) C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\GlarySoft\Glary Utilities\Backups\39617,8078956829\RegistryFile [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\GlarySoft\Glary Utilities\Backups\39617,8078956829\glary.ini [E] L'archive est protégée par mot de passe. (42056) C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\Mozilla\Firefox\Profiles\4pqone6p.default\parent.lock [E] Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus (32) C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\Mozilla\Firefox\Profiles\4pqone6p.default\places.sqlite-journal [E] Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus (32) C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\Mozilla\Firefox\Profiles\4pqone6p.default\places.sqlite-stmtjrnl [E] Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus (32) C:\Documents and Settings\guillaine.HOME-6620B39EBF\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat [E] Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus (32) C:\Documents and Settings\guillaine.HOME-6620B39EBF\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG [E] Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus (32) C:\Documents and Settings\guillaine.HOME-6620B39EBF\Local Settings\Application Data\Microsoft\Windows Live Mail\edb.log [E] Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus (32) C:\Documents and Settings\guillaine.HOME-6620B39EBF\Local Settings\Application Data\Microsoft\Windows Live Mail\edbtmp.log [E] Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus (32) C:\Documents and Settings\guillaine.HOME-6620B39EBF\Local Settings\Application Data\Microsoft\Windows Live Mail\Mail.MSMessageStore [E] Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus (32) C:\Documents and Settings\guillaine.HOME-6620B39EBF\Local Settings\Application Data\Microsoft\Windows Live Mail\tmp.edb [E] Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus (32) C:\Documents and Settings\guillaine.HOME-6620B39EBF\Local Settings\Application DataKiweeToolbar1.3.118.msi\_AB18C1B2C08CDE35AFB57346A4551D9A\_255311685EC0439E9B51F19CA2877AB9 [L] Win32:Trojan-gen {Other} (0) C:\Documents and Settings\guillaine.HOME-6620B39EBF\Local Settings\Application DataKiweeToolbar1.3.118.msi\_AB18C1B2C08CDE35AFB57346A4551D9A\_7A1701D526DE4C198A5FC9BC569751C4 [L] Win32:Agent-XIV [Trj] (0) C:\Documents and Settings\guillaine.HOME-6620B39EBF\Local Settings\Application DataKiweeToolbar1.3.118.msi\_AB18C1B2C08CDE35AFB57346A4551D9A\_AA4BAB219FC840C5937782E63C357871 [L] Win32:Agent-XIU [Trj] (0) Durant le transfert du fichier vers la zone de quarantaine, l'erreur suivante s'est produite : L'opération n'est pas supportée pour ce type d'archive. C:\Documents and Settings\guillaine.HOME-6620B39EBF\Local Settings\Temp\~DFF972.tmp [E] Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus (32) C:\Documents and Settings\guillaine.HOME-6620B39EBF\Local Settings\Temp\~DFF9B8.tmp [E] Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus (32) C:\Documents and Settings\guillaine.HOME-6620B39EBF\Local Settings\Temp\~DFFBBD.tmp [E] Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus (32) C:\Documents and Settings\guillaine.HOME-6620B39EBF\Local Settings\Temp\~DFFBD7.tmp [E] Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus (32) C:\Documents and Settings\guillaine.HOME-6620B39EBF\ntuser.dat [E] Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus (32) C:\Documents and Settings\guillaine.HOME-6620B39EBF\ntuser.dat.LOG [E] Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus (32) C:\Documents and Settings\LocalService.AUTORITE NT\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat [E] Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus (32) C:\Documents and Settings\LocalService.AUTORITE NT\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG [E] Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus (32) C:\Documents and Settings\LocalService.AUTORITE NT\ntuser.dat [E] Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus (32) C:\Documents and Settings\LocalService.AUTORITE NT\ntuser.dat.LOG [E] Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus (32) C:\Documents and Settings\NetworkService.AUTORITE NT\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat [E] Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus (32) C:\Documents and Settings\NetworkService.AUTORITE NT\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG [E] Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus (32) C:\Documents and Settings\NetworkService.AUTORITE NT\NTUSER.DAT [E] Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus (32) C:\Documents and Settings\NetworkService.AUTORITE NT\ntuser.dat.LOG [E] Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus (32) C:\pagefile.sys [E] Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus (32) C:\System Volume Information\_restore{1D206CF1-EA6F-40C4-97BF-C0FF88BB3FA2}\RP1\A0001021.msi\_AB18C1B2C08CDE35AFB57346A4551D9A\_255311685EC0439E9B51F19CA2877AB9 [L] Win32:Trojan-gen {Other} (0) C:\System Volume Information\_restore{1D206CF1-EA6F-40C4-97BF-C0FF88BB3FA2}\RP1\A0001021.msi\_AB18C1B2C08CDE35AFB57346A4551D9A\_7A1701D526DE4C198A5FC9BC569751C4 [L] Win32:Agent-XIV [Trj] (0) C:\System Volume Information\_restore{1D206CF1-EA6F-40C4-97BF-C0FF88BB3FA2}\RP1\A0001021.msi\_AB18C1B2C08CDE35AFB57346A4551D9A\_AA4BAB219FC840C5937782E63C357871 [L] Win32:Agent-XIU [Trj] (0) Durant le transfert du fichier vers la zone de quarantaine, l'erreur suivante s'est produite : L'opération n'est pas supportée pour ce type d'archive. Durant le transfert du fichier vers la zone de quarantaine, l'erreur suivante s'est produite : L'opération n'est pas supportée pour ce type d'archive. Durant le transfert du fichier vers la zone de quarantaine, l'erreur suivante s'est produite : L'opération n'est pas supportée pour ce type d'archive. C:\System Volume Information\_restore{1D206CF1-EA6F-40C4-97BF-C0FF88BB3FA2}\RP1\A0001120.exe [L] Win32:Trojan-gen {Other} (0) Fichier déplacé avec succès vers la zone de quarantaine... C:\System Volume Information\_restore{1D206CF1-EA6F-40C4-97BF-C0FF88BB3FA2}\RP5\A0003627.msi\_AB18C1B2C08CDE35AFB57346A4551D9A\_255311685EC0439E9B51F19CA2877AB9 [L] Win32:Trojan-gen {Other} (0) C:\System Volume Information\_restore{1D206CF1-EA6F-40C4-97BF-C0FF88BB3FA2}\RP5\A0003627.msi\_AB18C1B2C08CDE35AFB57346A4551D9A\_7A1701D526DE4C198A5FC9BC569751C4 [L] Win32:Agent-XIV [Trj] (0) C:\System Volume Information\_restore{1D206CF1-EA6F-40C4-97BF-C0FF88BB3FA2}\RP5\A0003627.msi\_AB18C1B2C08CDE35AFB57346A4551D9A\_AA4BAB219FC840C5937782E63C357871 [L] Win32:Agent-XIU [Trj] (0) Durant le transfert du fichier vers la zone de quarantaine, l'erreur suivante s'est produite : L'opération n'est pas supportée pour ce type d'archive. Durant le transfert du fichier vers la zone de quarantaine, l'erreur suivante s'est produite : L'opération n'est pas supportée pour ce type d'archive. Durant le transfert du fichier vers la zone de quarantaine, l'erreur suivante s'est produite : L'opération n'est pas supportée pour ce type d'archive. C:\WINDOWS\system32\config\default [E] Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus (32) C:\WINDOWS\system32\config\DEFAULT.LOG [E] Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus (32) C:\WINDOWS\system32\config\sam [E] Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus (32) C:\WINDOWS\system32\config\SAM.LOG [E] Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus (32) C:\WINDOWS\system32\config\security [E] Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus (32) C:\WINDOWS\system32\config\SECURITY.LOG [E] Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus (32) C:\WINDOWS\system32\config\software [E] Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus (32) C:\WINDOWS\system32\config\SOFTWARE.LOG [E] Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus (32) C:\WINDOWS\system32\config\system [E] Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus (32) C:\WINDOWS\system32\config\SYSTEM.LOG [E] Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus (32) C:\WINDOWS\TEMP\Perflib_Perfdata_3e0.dat [E] Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus (32) C:\WINDOWS\TEMP\Perflib_Perfdata_530.dat [E] Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus (32) C:\WINDOWS\TEMP\_avast4_\Webshlock.txt [E] Le processus ne peut pas accéder au fichier car ce fichier est utilisé par un autre processus (32) Fichiers infectés : 10 Total des fichiers : 540785 Total des dossiers : 9761 Taille totale : 29,5 GB * * Tâche arrêtée : mercredi 2 juillet 2008 17:28:35 * Programme en exécution était 5 heure(s), 41 minute(s), 33 seconde(s) *

rebonjour oGu.... je croyais que tu ne m'avais pas encore répondu...suis pas très habituée au forum...mais j'ai lu ce que tu m'as envoyé.. merci ça va m'aider.... avant toute chose, je veux savoir pour la console de récupération, je la fais en mode normal ? et en passant tout à l'heure j'ai fait un scan avec avast et tout le long ( souvent etk..) c'était des alertes ... pour finalement voir dans le log ... impossible de ...bla bla.... je te le poste, au cas ou .. merci guillou

petite question en passant falkra de "travailler" ak oGu (s'il le veut bien ) suis nouvelle ici , puis-je avoir des des alertes directes d'ici pour les réponses ou c'est justes avec les emails ? merci à l'avance guillou

encore merci falkra et bonne journée

hey !!!!! ça marcé !! un gros merci ! vous êtes vraiment génials !!!!! et rapides !!!! wow !!!! vous savez , yé que 5h 44 du matin pour moi, tout le monde dors lolll ! merci encore ! guillou

ComboFix 08-06-20.4 - guillaine 2008-06-29 14:15:07.3 - NTFSx86 MINIMAL Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.232 [GMT -4:00] Endroit: C:\Documents and Settings\guillaine.HOME-6620B39EBF\Bureau\ComboFix.exe AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !! . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . . ---- Previous Run ------- . C:\WINDOWS\BM335ac9bc.xml C:\WINDOWS\pskt.ini C:\WINDOWS\system32\acbeg.ini C:\WINDOWS\system32\acbeg.ini2 C:\WINDOWS\system32\nqtss.ini C:\WINDOWS\system32\nqtss.ini2 C:\WINDOWS\system32\stvwa.ini C:\WINDOWS\system32\stvwa.ini2 C:\WINDOWS\system32\ttutv.ini C:\WINDOWS\system32\ttutv.ini2 C:\WINDOWS\system32\vycdd.ini C:\WINDOWS\system32\vycdd.ini2 . ((((((((((((((((((((((((((((( Fichiers créés 2008-05-28 to 2008-06-29 )))))))))))))))))))))))))))))))))))) . 2008-06-29 09:38 . 2008-06-29 10:04 134,290,536 --a------ C:\Program Files\OOo_2.4.1_Win32Intel_install_wJRE_fr.exe 2008-06-26 12:51 . 2008-06-26 16:09 51,755 --a------ C:\lucmp3.nr3 2008-06-22 10:38 . 2008-06-22 10:38 36,544 --ah----- C:\WINDOWS\system32\mlfcache.dat 2008-06-22 10:25 . 2006-10-04 22:42 2,560 --------- C:\WINDOWS\system32\drivers\cdralw2k.sys 2008-06-22 10:25 . 2006-10-04 22:42 2,432 --------- C:\WINDOWS\system32\drivers\cdr4_xp.sys 2008-06-20 07:19 . 2008-06-22 10:25 <REP> d-------- C:\Program Files\Picasa2 2008-06-20 07:17 . 2008-06-20 07:18 4,909,136 --a------ C:\Program Files\picasa2Setup.exe 2008-06-15 16:41 . 2008-06-15 16:42 <REP> d-------- C:\Documents and Settings\enfants\Application Data\OpenOffice.org2 2008-06-13 07:09 . 2008-06-13 07:09 <REP> d-------- C:\WINDOWS\system32\bits 2008-06-13 07:05 . 2007-03-29 08:58 7,168 -----c--- C:\WINDOWS\system32\dllcache\bitsprx4.dll 2008-06-13 07:05 . 2007-03-29 08:58 7,168 --------- C:\WINDOWS\system32\bitsprx4.dll 2008-06-10 23:54 . 2008-06-14 13:59 272,768 --------- C:\WINDOWS\system32\drivers\bthport.sys 2008-06-10 23:54 . 2008-06-14 13:59 272,768 -----c--- C:\WINDOWS\system32\dllcache\bthport.sys 2008-06-04 07:32 . 2008-06-04 07:32 1,534,464 --a------ C:\Program Files\siw.exe 2008-06-03 19:03 . 2008-06-03 19:03 <REP> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\Logitech 2008-06-01 14:17 . 2008-06-01 14:17 1,491,365 --a------ C:\Program Files\wlm.exe 2008-06-01 13:45 . 2008-06-01 13:45 <REP> d-------- C:\Documents and Settings\enfants\Application Data\GlarySoft . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-06-29 14:59 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\OpenOffice.org2 2008-06-29 14:19 --------- d-----w C:\Program Files\OpenOffice.org 2.4 (fr) Installation Files 2008-06-29 13:34 --------- d-----w C:\Program Files\Windows Defender 2008-06-29 12:20 --------- d-----w C:\Program Files\OpenOffice.org 2.4 2008-06-29 12:10 --------- d-----w C:\Program Files\Java 2008-06-27 04:04 --------- d-----r C:\Program Files\EClea2_0 2008-06-27 03:59 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\LimeWire 2008-06-27 03:59 --------- d-----w C:\Documents and Settings\enfants\Application Data\LimeWire 2008-06-26 11:48 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-06-24 10:56 --------- d-----w C:\Program Files\MesPolices10 2008-06-15 21:51 --------- d-----w C:\Documents and Settings\enfants\Application Data\Arcsoft 2008-06-15 06:51 --------- d-----w C:\Program Files\Circle Developement 2008-06-15 06:51 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\programidle 2008-06-15 06:51 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Frag great bend logo 2008-06-14 23:40 2,402,832 ----a-w C:\Program Files\WLinstaller.exe 2008-06-14 23:40 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\WLInstaller 2008-06-04 14:06 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\ESTsoft 2008-06-03 23:04 --------- d-----w C:\Program Files\Fichiers communs\Logishrd 2008-06-03 23:03 --------- d-----w C:\Program Files\Logitech 2008-06-03 23:03 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\LogiShrd 2008-06-01 00:18 --------- d-----w C:\Program Files\LimeWire 2008-05-28 11:09 --------- d-----w C:\Program Files\Lavasoft 2008-05-28 11:08 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Lavasoft 2008-05-28 11:06 --------- d-----w C:\Program Files\Fichiers communs\Wise Installation Wizard 2008-05-27 14:47 --------- d-----w C:\Program Files\ESTsoft 2008-05-27 14:41 19,153,264 ----a-w C:\Program Files\Lavasoft_Adaware_multi.exe 2008-05-24 01:22 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\Apple Computer 2008-05-22 13:32 2,869,264 ----a-w C:\Program Files\dotNetFx35setup.exe 2008-05-21 13:53 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy 2008-05-21 12:12 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\Malwarebytes 2008-05-21 12:12 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Malwarebytes 2008-05-19 16:53 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\DisplayTune 2008-05-16 15:58 12,632 ----a-w C:\WINDOWS\system32\lsdelete.exe 2008-05-15 23:35 --------- d-----w C:\Documents and Settings\enfants\Application Data\Logitech 2008-05-15 23:35 --------- d-----w C:\Documents and Settings\enfants\Application Data\Grisoft 2008-05-14 22:44 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\ArcSoft 2008-05-13 13:24 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\Logitech 2008-05-12 20:16 --------- dcsh--w C:\Program Files\Fichiers communs\WindowsLiveInstaller 2008-05-12 20:16 --------- d-----w C:\Program Files\Messenger Plus! Live 2008-05-12 20:16 --------- d-----r C:\Program Files\Creative 2008-05-12 19:34 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\GlarySoft 2008-05-09 21:09 --------- d-----w C:\Program Files\ANI 2008-05-09 21:08 --------- d-----w C:\Program Files\D-Link 2008-05-08 12:28 202,752 ----a-w C:\WINDOWS\system32\drivers\rmcast.sys 2008-05-07 05:15 1,293,824 ----a-w C:\WINDOWS\system32\quartz.dll 2008-05-05 11:15 --------- d-----r C:\Program Files\Panasonic 2008-05-05 11:07 --------- d-----r C:\Program Files\Alwil Software 2008-05-05 04:47 --------- d-----w C:\Documents and Settings\Marie\Application Data\Bell 2008-05-03 00:38 --------- d-----w C:\Documents and Settings\enfants\Application Data\Bell 2008-04-29 19:54 --------- d-----w C:\Program Files\Fichiers communs\Logitech 2008-04-29 15:20 15,648 ----a-w C:\WINDOWS\system32\drivers\NSDriver.sys 2008-04-29 15:19 15,648 ----a-w C:\WINDOWS\system32\drivers\Awrtrd.sys 2008-04-29 15:19 12,960 ----a-w C:\WINDOWS\system32\drivers\Awrtpd.sys 2008-04-29 13:20 27,100,264 -c--a-w C:\Program Files\PowerPointViewer.exe 2008-04-28 15:53 --------- d-----w C:\Program Files\Incomplete 2008-04-28 15:53 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\Calendrier Xtra 2008-04-28 15:53 --------- d-----w C:\Documents and Settings\enfants\Application Data\Chessmaster Challenge 2008-04-28 13:43 --------- d-----w C:\Program Files\Windows Installer Clean Up 2008-04-28 13:43 --------- d-----w C:\Program Files\MSECache 2008-04-23 04:16 826,368 ----a-w C:\WINDOWS\system32\wininet.dll 2008-04-20 20:30 1,338,384 -c--a-w C:\Program Files\SympaticoSecurityAdvisor_setupSSM.exe 2008-04-20 19:51 2,517 -c--a-w C:\Program Files\INSTALL.LOG 2008-04-08 06:52 119,479,710 -c--a-w C:\Program Files\OOo_2.4.0_Win32Intel_install_fr.exe 2008-04-08 06:27 1,664,591 -c--a-w C:\Program Files\pf-setup.exe 2008-04-05 16:33 9,309,624 -c--a-w C:\Program Files\Shockwave_Installer_Full.exe 2008-04-04 14:15 46,391,264 -c--a-w C:\Program Files\8-3_xp32_dd_ccc_wdm_enu_59746.exe 2008-04-03 23:50 57,144,896 -c--a-w C:\Program Files\setpoint440.exe 2008-04-02 17:45 2,751,368 -c--a-w C:\Program Files\ccsetup206.exe 2008-03-23 01:01 9,722,720 -c--a-w C:\Program Files\spybotsd152.exe 2008-03-21 14:38 8,161,400 -c--a-w C:\Program Files\Windows-KB890830-V1.39.exe 2008-03-09 14:21 407,680 -c--a-w C:\Program Files\aswclnr.exe 2008-02-25 15:15 2,919,160 -c--a-w C:\Program Files\WindowsMedia-Q828026-x86-FRA.exe 2008-02-25 15:11 881,192 -c--a-w C:\Program Files\WGAPluginInstall.exe 2008-02-24 01:22 1,491,592 -c--a-w C:\Program Files\install_flash_player.exe 2008-02-17 17:42 1,729 -c--a-w C:\Program Files\Adobe Reader 8.lnk 2008-02-12 16:50 95 -csh--w C:\Program Files\desktop.ini 2008-02-12 16:50 15,086 -csh--w C:\Program Files\ShedkoFolderico3_0627.ico 2007-12-09 00:04 12,413,440 -c--a-w C:\Program Files\avgas-setup-7.5.1.43.exe 2002-06-04 09:06 65,536 -c--a-w C:\WINDOWS\inf\copyinf.exe . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{3934F86C-2D84-4EAF-9065-65322C1AFE25}] [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{58FF5B3A-2CF6-4B72-919A-AE590AA7890D}] [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{f23bc38f-8d17-4211-9e42-0412ed74a192}] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 08:00 15360] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2008-03-29 14:37 79224] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784] C:\Documents and Settings\guillaine.HOME-6620B39EBF\Menu D‚marrer\Programmes\D‚marrage\ OpenOffice.org 2.4.lnk - C:\Program Files\OpenOffice.org 2.4\program\quickstart.exe [2008-01-21 16:41:28 393216] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer] "NoStrCmpLogical"= 1 (0x1) "NoResolveSearch"= 1 (0x1) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon] "UIHost"="C:\\Documents and Settings\\All Users.WINDOWS\\Application Data\\TuneUp Software\\TuneUp Utilities\\WinStyler\\tu_logonui.exe" [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ddcbxww] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\qomliii] qomliii.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "VIDC.MJPG"= pvmjpg21.dll [HKLM\~\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Menu Démarrer^Programmes^Démarrage^Logitech SetPoint.lnk] path=C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Démarrage\Logitech SetPoint.lnk backup=C:\WINDOWS\pss\Logitech SetPoint.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Menu Démarrer^Programmes^Démarrage^LUMIX Simple Viewer.lnk] backup=C:\WINDOWS\pss\LUMIX Simple Viewer.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\!AVG Anti-Spyware] C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] --a--c--- 2008-01-11 23:16 39792 C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ANIWZCS2Service] --a------ 2008-05-28 11:05 49152 C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ArcSoft Connection Service] --a--c--- 2007-11-13 15:24 72192 C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ACDaemon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATIModeChange] --a--c--- 2001-09-04 04:24 28672 C:\WINDOWS\system32\Ati2mdxx.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATIPTA] --a--c--- 2004-02-24 22:10 335872 C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BellCanada_McciTrayApp] --a--c--- 2007-11-19 10:33 1468928 C:\Program Files\BellCanada\McciTrayApp.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe] --a------ 2004-08-05 08:00 15360 C:\WINDOWS\system32\ctfmon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\D-Link Wireless G WDA-1320] --a------ 2005-12-14 15:56 2711552 C:\Program Files\D-Link\Wireless G WDA-1320\AirGCFG.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IMJPMIG8.1] --a--c--- 2004-08-05 08:00 208952 C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper] --a--c--- 2008-02-04 15:18 267048 C:\Program Files\iTunes\iTunesHelper.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LDM] --a------ 2008-05-11 08:43 32768 C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Logitech Hardware Abstraction Layer] --a--c--- 2007-11-29 02:17 55824 C:\WINDOWS\KHALMNPR.Exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Logitech Utility] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechCommunicationsManager] --a------ 2007-10-25 16:33 563984 C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechQuickCamRibbon] --a------ 2007-10-25 16:37 2178832 C:\Program Files\Logitech\QuickCam\Quickcam.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mmtask] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MMTray] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] --a--c--- 2001-07-09 10:50 155648 C:\WINDOWS\system32\NeroCheck.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002A] --a--c--- 2004-08-05 08:00 455168 C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002ASync] --a--c--- 2004-08-05 08:00 455168 C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] --a--c--- 2008-02-01 00:13 385024 C:\Program Files\QuickTime\qttask.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SSA.exe] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SsAAD.exe] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StandardInstall] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] --a--c--- 2008-02-22 04:25 144784 C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\zBrowser Launcher] --a--c--- 2003-12-01 12:38 892928 C:\Program Files\Logitech\iTouch\iTouch.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "WMPNetworkSvc"=3 (0x3) "WLSetupSvc"=3 (0x3) "WinDefend"=2 (0x2) "usnjsvc"=3 (0x3) "SPTISRV"=3 (0x3) "SoundMAX Agent Service (default)"=2 (0x2) "PACSPTISVR"=3 (0x3) "MSCSPTISRV"=3 (0x3) "McciCMService"=2 (0x2) "LVSrvLauncher"=2 (0x2) "LVPrcSrv"=2 (0x2) "LVCOMSer"=2 (0x2) "iPod Service"=3 (0x3) "idsvc"=3 (0x3) "gusvc"=3 (0x3) "DTSRVC"=2 (0x2) "CTDevice_Srv"=2 (0x2) "Creative Service for CDROM Access"=2 (0x2) "AVG Anti-Spyware Guard"=2 (0x2) "avast! Web Scanner"=3 (0x3) "avast! Mail Scanner"=3 (0x3) "avast! Antivirus"=2 (0x2) "ATI Smart"=2 (0x2) "Ati HotKey Poller"=2 (0x2) "aswUpdSv"=2 (0x2) "Apple Mobile Device"=2 (0x2) "ANIWZCSdService"=2 (0x2) "ACDaemon"=2 (0x2) "aawservice"=2 (0x2) [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-disabled] "D-Link Wireless G WDA-1320"=C:\Program Files\D-Link\Wireless G WDA-1320\AirGCFG.exe "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" -atboottime "LogitechQuickCamRibbon"="C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide "LogitechCommunicationsManager"="C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe" [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"= "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= "C:\\Program Files\\iTunes\\iTunes.exe"= S1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-03-29 14:31] S2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-03-29 14:35] S3 A3AB;D-Link AirPro 802.11a/b Wireless Adapter Service(A3AB);C:\WINDOWS\system32\DRIVERS\A3AB.sys [2005-08-25 15:00] S3 LCcfltr;Logitech USB Filter Driver;C:\WINDOWS\system32\Drivers\LCcFltr.Sys [2003-11-07 05:50] S3 LVPrcMon;Logitech LVPrcMon Driver;C:\WINDOWS\system32\drivers\LVPrcMon.sys [] S3 MREMP50;MREMP50 NDIS Protocol Driver;C:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS [2007-10-31 17:51] S3 MRESP50;MRESP50 NDIS Protocol Driver;C:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS [2007-10-31 17:51] S4 ACDaemon;ArcSoft Connect Daemon;C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ACService.exe [2007-11-14 13:04] S4 McciCMService;McciCMService;"C:\Program Files\Common Files\Motive\McciCMService.exe" [2007-11-01 11:59] . ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-06-29 14:16:50 Windows 5.1.2600 Service Pack 2 NTFS Balayage processus cachés ... Balayage caché autostart entries ... Balayage des fichiers cachés ... ************************************************************************** . --------------------- DLLs a chargé sous des processus courants --------------------- PROCESS: C:\WINDOWS\system32\winlogon.exe -> C:\WINDOWS\system32\Ati2evxx.dll . Temps d'accomplissement: 2008-06-29 14:19:36 ComboFix-quarantined-files.txt 2008-06-29 18:18:33 Pre-Run: 62,989,586,432 octets libres Post-Run: 62,975,143,936 octets libres 272 --- E O F --- 2008-06-26 11:25:56 ComboFix 08-06-20.4 - guillaine 2008-06-29 14:15:07.3 - NTFSx86 MINIMAL Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.232 [GMT -4:00] Endroit: C:\Documents and Settings\guillaine.HOME-6620B39EBF\Bureau\ComboFix.exe AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !! . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . . ---- Previous Run ------- . C:\WINDOWS\BM335ac9bc.xml C:\WINDOWS\pskt.ini C:\WINDOWS\system32\acbeg.ini C:\WINDOWS\system32\acbeg.ini2 C:\WINDOWS\system32\nqtss.ini C:\WINDOWS\system32\nqtss.ini2 C:\WINDOWS\system32\stvwa.ini C:\WINDOWS\system32\stvwa.ini2 C:\WINDOWS\system32\ttutv.ini C:\WINDOWS\system32\ttutv.ini2 C:\WINDOWS\system32\vycdd.ini C:\WINDOWS\system32\vycdd.ini2 . ((((((((((((((((((((((((((((( Fichiers créés 2008-05-28 to 2008-06-29 )))))))))))))))))))))))))))))))))))) . 2008-06-29 09:38 . 2008-06-29 10:04 134,290,536 --a------ C:\Program Files\OOo_2.4.1_Win32Intel_install_wJRE_fr.exe 2008-06-26 12:51 . 2008-06-26 16:09 51,755 --a------ C:\lucmp3.nr3 2008-06-22 10:38 . 2008-06-22 10:38 36,544 --ah----- C:\WINDOWS\system32\mlfcache.dat 2008-06-22 10:25 . 2006-10-04 22:42 2,560 --------- C:\WINDOWS\system32\drivers\cdralw2k.sys 2008-06-22 10:25 . 2006-10-04 22:42 2,432 --------- C:\WINDOWS\system32\drivers\cdr4_xp.sys 2008-06-20 07:19 . 2008-06-22 10:25 <REP> d-------- C:\Program Files\Picasa2 2008-06-20 07:17 . 2008-06-20 07:18 4,909,136 --a------ C:\Program Files\picasa2Setup.exe 2008-06-15 16:41 . 2008-06-15 16:42 <REP> d-------- C:\Documents and Settings\enfants\Application Data\OpenOffice.org2 2008-06-13 07:09 . 2008-06-13 07:09 <REP> d-------- C:\WINDOWS\system32\bits 2008-06-13 07:05 . 2007-03-29 08:58 7,168 -----c--- C:\WINDOWS\system32\dllcache\bitsprx4.dll 2008-06-13 07:05 . 2007-03-29 08:58 7,168 --------- C:\WINDOWS\system32\bitsprx4.dll 2008-06-10 23:54 . 2008-06-14 13:59 272,768 --------- C:\WINDOWS\system32\drivers\bthport.sys 2008-06-10 23:54 . 2008-06-14 13:59 272,768 -----c--- C:\WINDOWS\system32\dllcache\bthport.sys 2008-06-04 07:32 . 2008-06-04 07:32 1,534,464 --a------ C:\Program Files\siw.exe 2008-06-03 19:03 . 2008-06-03 19:03 <REP> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\Logitech 2008-06-01 14:17 . 2008-06-01 14:17 1,491,365 --a------ C:\Program Files\wlm.exe 2008-06-01 13:45 . 2008-06-01 13:45 <REP> d-------- C:\Documents and Settings\enfants\Application Data\GlarySoft . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-06-29 14:59 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\OpenOffice.org2 2008-06-29 14:19 --------- d-----w C:\Program Files\OpenOffice.org 2.4 (fr) Installation Files 2008-06-29 13:34 --------- d-----w C:\Program Files\Windows Defender 2008-06-29 12:20 --------- d-----w C:\Program Files\OpenOffice.org 2.4 2008-06-29 12:10 --------- d-----w C:\Program Files\Java 2008-06-27 04:04 --------- d-----r C:\Program Files\EClea2_0 2008-06-27 03:59 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\LimeWire 2008-06-27 03:59 --------- d-----w C:\Documents and Settings\enfants\Application Data\LimeWire 2008-06-26 11:48 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-06-24 10:56 --------- d-----w C:\Program Files\MesPolices10 2008-06-15 21:51 --------- d-----w C:\Documents and Settings\enfants\Application Data\Arcsoft 2008-06-15 06:51 --------- d-----w C:\Program Files\Circle Developement 2008-06-15 06:51 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\programidle 2008-06-15 06:51 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Frag great bend logo 2008-06-14 23:40 2,402,832 ----a-w C:\Program Files\WLinstaller.exe 2008-06-14 23:40 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\WLInstaller 2008-06-04 14:06 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\ESTsoft 2008-06-03 23:04 --------- d-----w C:\Program Files\Fichiers communs\Logishrd 2008-06-03 23:03 --------- d-----w C:\Program Files\Logitech 2008-06-03 23:03 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\LogiShrd 2008-06-01 00:18 --------- d-----w C:\Program Files\LimeWire 2008-05-28 11:09 --------- d-----w C:\Program Files\Lavasoft 2008-05-28 11:08 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Lavasoft 2008-05-28 11:06 --------- d-----w C:\Program Files\Fichiers communs\Wise Installation Wizard 2008-05-27 14:47 --------- d-----w C:\Program Files\ESTsoft 2008-05-27 14:41 19,153,264 ----a-w C:\Program Files\Lavasoft_Adaware_multi.exe 2008-05-24 01:22 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\Apple Computer 2008-05-22 13:32 2,869,264 ----a-w C:\Program Files\dotNetFx35setup.exe 2008-05-21 13:53 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy 2008-05-21 12:12 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\Malwarebytes 2008-05-21 12:12 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Malwarebytes 2008-05-19 16:53 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\DisplayTune 2008-05-16 15:58 12,632 ----a-w C:\WINDOWS\system32\lsdelete.exe 2008-05-15 23:35 --------- d-----w C:\Documents and Settings\enfants\Application Data\Logitech 2008-05-15 23:35 --------- d-----w C:\Documents and Settings\enfants\Application Data\Grisoft 2008-05-14 22:44 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\ArcSoft 2008-05-13 13:24 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\Logitech 2008-05-12 20:16 --------- dcsh--w C:\Program Files\Fichiers communs\WindowsLiveInstaller 2008-05-12 20:16 --------- d-----w C:\Program Files\Messenger Plus! Live 2008-05-12 20:16 --------- d-----r C:\Program Files\Creative 2008-05-12 19:34 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\GlarySoft 2008-05-09 21:09 --------- d-----w C:\Program Files\ANI 2008-05-09 21:08 --------- d-----w C:\Program Files\D-Link 2008-05-08 12:28 202,752 ----a-w C:\WINDOWS\system32\drivers\rmcast.sys 2008-05-07 05:15 1,293,824 ----a-w C:\WINDOWS\system32\quartz.dll 2008-05-05 11:15 --------- d-----r C:\Program Files\Panasonic 2008-05-05 11:07 --------- d-----r C:\Program Files\Alwil Software 2008-05-05 04:47 --------- d-----w C:\Documents and Settings\Marie\Application Data\Bell 2008-05-03 00:38 --------- d-----w C:\Documents and Settings\enfants\Application Data\Bell 2008-04-29 19:54 --------- d-----w C:\Program Files\Fichiers communs\Logitech 2008-04-29 15:20 15,648 ----a-w C:\WINDOWS\system32\drivers\NSDriver.sys 2008-04-29 15:19 15,648 ----a-w C:\WINDOWS\system32\drivers\Awrtrd.sys 2008-04-29 15:19 12,960 ----a-w C:\WINDOWS\system32\drivers\Awrtpd.sys 2008-04-29 13:20 27,100,264 -c--a-w C:\Program Files\PowerPointViewer.exe 2008-04-28 15:53 --------- d-----w C:\Program Files\Incomplete 2008-04-28 15:53 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\Calendrier Xtra 2008-04-28 15:53 --------- d-----w C:\Documents and Settings\enfants\Application Data\Chessmaster Challenge 2008-04-28 13:43 --------- d-----w C:\Program Files\Windows Installer Clean Up 2008-04-28 13:43 --------- d-----w C:\Program Files\MSECache 2008-04-23 04:16 826,368 ----a-w C:\WINDOWS\system32\wininet.dll 2008-04-20 20:30 1,338,384 -c--a-w C:\Program Files\SympaticoSecurityAdvisor_setupSSM.exe 2008-04-20 19:51 2,517 -c--a-w C:\Program Files\INSTALL.LOG 2008-04-08 06:52 119,479,710 -c--a-w C:\Program Files\OOo_2.4.0_Win32Intel_install_fr.exe 2008-04-08 06:27 1,664,591 -c--a-w C:\Program Files\pf-setup.exe 2008-04-05 16:33 9,309,624 -c--a-w C:\Program Files\Shockwave_Installer_Full.exe 2008-04-04 14:15 46,391,264 -c--a-w C:\Program Files\8-3_xp32_dd_ccc_wdm_enu_59746.exe 2008-04-03 23:50 57,144,896 -c--a-w C:\Program Files\setpoint440.exe 2008-04-02 17:45 2,751,368 -c--a-w C:\Program Files\ccsetup206.exe 2008-03-23 01:01 9,722,720 -c--a-w C:\Program Files\spybotsd152.exe 2008-03-21 14:38 8,161,400 -c--a-w C:\Program Files\Windows-KB890830-V1.39.exe 2008-03-09 14:21 407,680 -c--a-w C:\Program Files\aswclnr.exe 2008-02-25 15:15 2,919,160 -c--a-w C:\Program Files\WindowsMedia-Q828026-x86-FRA.exe 2008-02-25 15:11 881,192 -c--a-w C:\Program Files\WGAPluginInstall.exe 2008-02-24 01:22 1,491,592 -c--a-w C:\Program Files\install_flash_player.exe 2008-02-17 17:42 1,729 -c--a-w C:\Program Files\Adobe Reader 8.lnk 2008-02-12 16:50 95 -csh--w C:\Program Files\desktop.ini 2008-02-12 16:50 15,086 -csh--w C:\Program Files\ShedkoFolderico3_0627.ico 2007-12-09 00:04 12,413,440 -c--a-w C:\Program Files\avgas-setup-7.5.1.43.exe 2002-06-04 09:06 65,536 -c--a-w C:\WINDOWS\inf\copyinf.exe . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{3934F86C-2D84-4EAF-9065-65322C1AFE25}] [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{58FF5B3A-2CF6-4B72-919A-AE590AA7890D}] [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{f23bc38f-8d17-4211-9e42-0412ed74a192}] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 08:00 15360] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2008-03-29 14:37 79224] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784] C:\Documents and Settings\guillaine.HOME-6620B39EBF\Menu D‚marrer\Programmes\D‚marrage\ OpenOffice.org 2.4.lnk - C:\Program Files\OpenOffice.org 2.4\program\quickstart.exe [2008-01-21 16:41:28 393216] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer] "NoStrCmpLogical"= 1 (0x1) "NoResolveSearch"= 1 (0x1) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon] "UIHost"="C:\\Documents and Settings\\All Users.WINDOWS\\Application Data\\TuneUp Software\\TuneUp Utilities\\WinStyler\\tu_logonui.exe" [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ddcbxww] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\qomliii] qomliii.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "VIDC.MJPG"= pvmjpg21.dll [HKLM\~\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Menu Démarrer^Programmes^Démarrage^Logitech SetPoint.lnk] path=C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Démarrage\Logitech SetPoint.lnk backup=C:\WINDOWS\pss\Logitech SetPoint.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Menu Démarrer^Programmes^Démarrage^LUMIX Simple Viewer.lnk] backup=C:\WINDOWS\pss\LUMIX Simple Viewer.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\!AVG Anti-Spyware] C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] --a--c--- 2008-01-11 23:16 39792 C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ANIWZCS2Service] --a------ 2008-05-28 11:05 49152 C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ArcSoft Connection Service] --a--c--- 2007-11-13 15:24 72192 C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ACDaemon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATIModeChange] --a--c--- 2001-09-04 04:24 28672 C:\WINDOWS\system32\Ati2mdxx.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATIPTA] --a--c--- 2004-02-24 22:10 335872 C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BellCanada_McciTrayApp] --a--c--- 2007-11-19 10:33 1468928 C:\Program Files\BellCanada\McciTrayApp.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe] --a------ 2004-08-05 08:00 15360 C:\WINDOWS\system32\ctfmon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\D-Link Wireless G WDA-1320] --a------ 2005-12-14 15:56 2711552 C:\Program Files\D-Link\Wireless G WDA-1320\AirGCFG.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IMJPMIG8.1] --a--c--- 2004-08-05 08:00 208952 C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper] --a--c--- 2008-02-04 15:18 267048 C:\Program Files\iTunes\iTunesHelper.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LDM] --a------ 2008-05-11 08:43 32768 C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Logitech Hardware Abstraction Layer] --a--c--- 2007-11-29 02:17 55824 C:\WINDOWS\KHALMNPR.Exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Logitech Utility] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechCommunicationsManager] --a------ 2007-10-25 16:33 563984 C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechQuickCamRibbon] --a------ 2007-10-25 16:37 2178832 C:\Program Files\Logitech\QuickCam\Quickcam.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mmtask] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MMTray] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] --a--c--- 2001-07-09 10:50 155648 C:\WINDOWS\system32\NeroCheck.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002A] --a--c--- 2004-08-05 08:00 455168 C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002ASync] --a--c--- 2004-08-05 08:00 455168 C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] --a--c--- 2008-02-01 00:13 385024 C:\Program Files\QuickTime\qttask.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SSA.exe] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SsAAD.exe] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StandardInstall] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] --a--c--- 2008-02-22 04:25 144784 C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\zBrowser Launcher] --a--c--- 2003-12-01 12:38 892928 C:\Program Files\Logitech\iTouch\iTouch.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "WMPNetworkSvc"=3 (0x3) "WLSetupSvc"=3 (0x3) "WinDefend"=2 (0x2) "usnjsvc"=3 (0x3) "SPTISRV"=3 (0x3) "SoundMAX Agent Service (default)"=2 (0x2) "PACSPTISVR"=3 (0x3) "MSCSPTISRV"=3 (0x3) "McciCMService"=2 (0x2) "LVSrvLauncher"=2 (0x2) "LVPrcSrv"=2 (0x2) "LVCOMSer"=2 (0x2) "iPod Service"=3 (0x3) "idsvc"=3 (0x3) "gusvc"=3 (0x3) "DTSRVC"=2 (0x2) "CTDevice_Srv"=2 (0x2) "Creative Service for CDROM Access"=2 (0x2) "AVG Anti-Spyware Guard"=2 (0x2) "avast! Web Scanner"=3 (0x3) "avast! Mail Scanner"=3 (0x3) "avast! Antivirus"=2 (0x2) "ATI Smart"=2 (0x2) "Ati HotKey Poller"=2 (0x2) "aswUpdSv"=2 (0x2) "Apple Mobile Device"=2 (0x2) "ANIWZCSdService"=2 (0x2) "ACDaemon"=2 (0x2) "aawservice"=2 (0x2) [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-disabled] "D-Link Wireless G WDA-1320"=C:\Program Files\D-Link\Wireless G WDA-1320\AirGCFG.exe "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" -atboottime "LogitechQuickCamRibbon"="C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide "LogitechCommunicationsManager"="C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe" [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"= "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= "C:\\Program Files\\iTunes\\iTunes.exe"= S1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-03-29 14:31] S2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-03-29 14:35] S3 A3AB;D-Link AirPro 802.11a/b Wireless Adapter Service(A3AB);C:\WINDOWS\system32\DRIVERS\A3AB.sys [2005-08-25 15:00] S3 LCcfltr;Logitech USB Filter Driver;C:\WINDOWS\system32\Drivers\LCcFltr.Sys [2003-11-07 05:50] S3 LVPrcMon;Logitech LVPrcMon Driver;C:\WINDOWS\system32\drivers\LVPrcMon.sys [] S3 MREMP50;MREMP50 NDIS Protocol Driver;C:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS [2007-10-31 17:51] S3 MRESP50;MRESP50 NDIS Protocol Driver;C:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS [2007-10-31 17:51] S4 ACDaemon;ArcSoft Connect Daemon;C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ACService.exe [2007-11-14 13:04] S4 McciCMService;McciCMService;"C:\Program Files\Common Files\Motive\McciCMService.exe" [2007-11-01 11:59] . ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-06-29 14:16:50 Windows 5.1.2600 Service Pack 2 NTFS Balayage processus cachés ... Balayage caché autostart entries ... Balayage des fichiers cachés ... ************************************************************************** . --------------------- DLLs a chargé sous des processus courants --------------------- PROCESS: C:\WINDOWS\system32\winlogon.exe -> C:\WINDOWS\system32\Ati2evxx.dll . Temps d'accomplissement: 2008-06-29 14:19:36 ComboFix-quarantined-files.txt 2008-06-29 18:18:33 Pre-Run: 62,989,586,432 octets libres Post-Run: 62,975,143,936 octets libres 272 --- E O F --- 2008-06-26 11:25:56 ComboFix 08-06-20.4 - guillaine 2008-06-29 14:15:07.3 - NTFSx86 MINIMAL Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.232 [GMT -4:00] Endroit: C:\Documents and Settings\guillaine.HOME-6620B39EBF\Bureau\ComboFix.exe AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !! . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . . ---- Previous Run ------- . C:\WINDOWS\BM335ac9bc.xml C:\WINDOWS\pskt.ini C:\WINDOWS\system32\acbeg.ini C:\WINDOWS\system32\acbeg.ini2 C:\WINDOWS\system32\nqtss.ini C:\WINDOWS\system32\nqtss.ini2 C:\WINDOWS\system32\stvwa.ini C:\WINDOWS\system32\stvwa.ini2 C:\WINDOWS\system32\ttutv.ini C:\WINDOWS\system32\ttutv.ini2 C:\WINDOWS\system32\vycdd.ini C:\WINDOWS\system32\vycdd.ini2 . ((((((((((((((((((((((((((((( Fichiers créés 2008-05-28 to 2008-06-29 )))))))))))))))))))))))))))))))))))) . 2008-06-29 09:38 . 2008-06-29 10:04 134,290,536 --a------ C:\Program Files\OOo_2.4.1_Win32Intel_install_wJRE_fr.exe 2008-06-26 12:51 . 2008-06-26 16:09 51,755 --a------ C:\lucmp3.nr3 2008-06-22 10:38 . 2008-06-22 10:38 36,544 --ah----- C:\WINDOWS\system32\mlfcache.dat 2008-06-22 10:25 . 2006-10-04 22:42 2,560 --------- C:\WINDOWS\system32\drivers\cdralw2k.sys 2008-06-22 10:25 . 2006-10-04 22:42 2,432 --------- C:\WINDOWS\system32\drivers\cdr4_xp.sys 2008-06-20 07:19 . 2008-06-22 10:25 <REP> d-------- C:\Program Files\Picasa2 2008-06-20 07:17 . 2008-06-20 07:18 4,909,136 --a------ C:\Program Files\picasa2Setup.exe 2008-06-15 16:41 . 2008-06-15 16:42 <REP> d-------- C:\Documents and Settings\enfants\Application Data\OpenOffice.org2 2008-06-13 07:09 . 2008-06-13 07:09 <REP> d-------- C:\WINDOWS\system32\bits 2008-06-13 07:05 . 2007-03-29 08:58 7,168 -----c--- C:\WINDOWS\system32\dllcache\bitsprx4.dll 2008-06-13 07:05 . 2007-03-29 08:58 7,168 --------- C:\WINDOWS\system32\bitsprx4.dll 2008-06-10 23:54 . 2008-06-14 13:59 272,768 --------- C:\WINDOWS\system32\drivers\bthport.sys 2008-06-10 23:54 . 2008-06-14 13:59 272,768 -----c--- C:\WINDOWS\system32\dllcache\bthport.sys 2008-06-04 07:32 . 2008-06-04 07:32 1,534,464 --a------ C:\Program Files\siw.exe 2008-06-03 19:03 . 2008-06-03 19:03 <REP> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\Logitech 2008-06-01 14:17 . 2008-06-01 14:17 1,491,365 --a------ C:\Program Files\wlm.exe 2008-06-01 13:45 . 2008-06-01 13:45 <REP> d-------- C:\Documents and Settings\enfants\Application Data\GlarySoft . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-06-29 14:59 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\OpenOffice.org2 2008-06-29 14:19 --------- d-----w C:\Program Files\OpenOffice.org 2.4 (fr) Installation Files 2008-06-29 13:34 --------- d-----w C:\Program Files\Windows Defender 2008-06-29 12:20 --------- d-----w C:\Program Files\OpenOffice.org 2.4 2008-06-29 12:10 --------- d-----w C:\Program Files\Java 2008-06-27 04:04 --------- d-----r C:\Program Files\EClea2_0 2008-06-27 03:59 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\LimeWire 2008-06-27 03:59 --------- d-----w C:\Documents and Settings\enfants\Application Data\LimeWire 2008-06-26 11:48 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-06-24 10:56 --------- d-----w C:\Program Files\MesPolices10 2008-06-15 21:51 --------- d-----w C:\Documents and Settings\enfants\Application Data\Arcsoft 2008-06-15 06:51 --------- d-----w C:\Program Files\Circle Developement 2008-06-15 06:51 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\programidle 2008-06-15 06:51 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Frag great bend logo 2008-06-14 23:40 2,402,832 ----a-w C:\Program Files\WLinstaller.exe 2008-06-14 23:40 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\WLInstaller 2008-06-04 14:06 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\ESTsoft 2008-06-03 23:04 --------- d-----w C:\Program Files\Fichiers communs\Logishrd 2008-06-03 23:03 --------- d-----w C:\Program Files\Logitech 2008-06-03 23:03 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\LogiShrd 2008-06-01 00:18 --------- d-----w C:\Program Files\LimeWire 2008-05-28 11:09 --------- d-----w C:\Program Files\Lavasoft 2008-05-28 11:08 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Lavasoft 2008-05-28 11:06 --------- d-----w C:\Program Files\Fichiers communs\Wise Installation Wizard 2008-05-27 14:47 --------- d-----w C:\Program Files\ESTsoft 2008-05-27 14:41 19,153,264 ----a-w C:\Program Files\Lavasoft_Adaware_multi.exe 2008-05-24 01:22 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\Apple Computer 2008-05-22 13:32 2,869,264 ----a-w C:\Program Files\dotNetFx35setup.exe 2008-05-21 13:53 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy 2008-05-21 12:12 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\Malwarebytes 2008-05-21 12:12 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Malwarebytes 2008-05-19 16:53 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\DisplayTune 2008-05-16 15:58 12,632 ----a-w C:\WINDOWS\system32\lsdelete.exe 2008-05-15 23:35 --------- d-----w C:\Documents and Settings\enfants\Application Data\Logitech 2008-05-15 23:35 --------- d-----w C:\Documents and Settings\enfants\Application Data\Grisoft 2008-05-14 22:44 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\ArcSoft 2008-05-13 13:24 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\Logitech 2008-05-12 20:16 --------- dcsh--w C:\Program Files\Fichiers communs\WindowsLiveInstaller 2008-05-12 20:16 --------- d-----w C:\Program Files\Messenger Plus! Live 2008-05-12 20:16 --------- d-----r C:\Program Files\Creative 2008-05-12 19:34 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\GlarySoft 2008-05-09 21:09 --------- d-----w C:\Program Files\ANI 2008-05-09 21:08 --------- d-----w C:\Program Files\D-Link 2008-05-08 12:28 202,752 ----a-w C:\WINDOWS\system32\drivers\rmcast.sys 2008-05-07 05:15 1,293,824 ----a-w C:\WINDOWS\system32\quartz.dll 2008-05-05 11:15 --------- d-----r C:\Program Files\Panasonic 2008-05-05 11:07 --------- d-----r C:\Program Files\Alwil Software 2008-05-05 04:47 --------- d-----w C:\Documents and Settings\Marie\Application Data\Bell 2008-05-03 00:38 --------- d-----w C:\Documents and Settings\enfants\Application Data\Bell 2008-04-29 19:54 --------- d-----w C:\Program Files\Fichiers communs\Logitech 2008-04-29 15:20 15,648 ----a-w C:\WINDOWS\system32\drivers\NSDriver.sys 2008-04-29 15:19 15,648 ----a-w C:\WINDOWS\system32\drivers\Awrtrd.sys 2008-04-29 15:19 12,960 ----a-w C:\WINDOWS\system32\drivers\Awrtpd.sys 2008-04-29 13:20 27,100,264 -c--a-w C:\Program Files\PowerPointViewer.exe 2008-04-28 15:53 --------- d-----w C:\Program Files\Incomplete 2008-04-28 15:53 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\Calendrier Xtra 2008-04-28 15:53 --------- d-----w C:\Documents and Settings\enfants\Application Data\Chessmaster Challenge 2008-04-28 13:43 --------- d-----w C:\Program Files\Windows Installer Clean Up 2008-04-28 13:43 --------- d-----w C:\Program Files\MSECache 2008-04-23 04:16 826,368 ----a-w C:\WINDOWS\system32\wininet.dll 2008-04-20 20:30 1,338,384 -c--a-w C:\Program Files\SympaticoSecurityAdvisor_setupSSM.exe 2008-04-20 19:51 2,517 -c--a-w C:\Program Files\INSTALL.LOG 2008-04-08 06:52 119,479,710 -c--a-w C:\Program Files\OOo_2.4.0_Win32Intel_install_fr.exe 2008-04-08 06:27 1,664,591 -c--a-w C:\Program Files\pf-setup.exe 2008-04-05 16:33 9,309,624 -c--a-w C:\Program Files\Shockwave_Installer_Full.exe 2008-04-04 14:15 46,391,264 -c--a-w C:\Program Files\8-3_xp32_dd_ccc_wdm_enu_59746.exe 2008-04-03 23:50 57,144,896 -c--a-w C:\Program Files\setpoint440.exe 2008-04-02 17:45 2,751,368 -c--a-w C:\Program Files\ccsetup206.exe 2008-03-23 01:01 9,722,720 -c--a-w C:\Program Files\spybotsd152.exe 2008-03-21 14:38 8,161,400 -c--a-w C:\Program Files\Windows-KB890830-V1.39.exe 2008-03-09 14:21 407,680 -c--a-w C:\Program Files\aswclnr.exe 2008-02-25 15:15 2,919,160 -c--a-w C:\Program Files\WindowsMedia-Q828026-x86-FRA.exe 2008-02-25 15:11 881,192 -c--a-w C:\Program Files\WGAPluginInstall.exe 2008-02-24 01:22 1,491,592 -c--a-w C:\Program Files\install_flash_player.exe 2008-02-17 17:42 1,729 -c--a-w C:\Program Files\Adobe Reader 8.lnk 2008-02-12 16:50 95 -csh--w C:\Program Files\desktop.ini 2008-02-12 16:50 15,086 -csh--w C:\Program Files\ShedkoFolderico3_0627.ico 2007-12-09 00:04 12,413,440 -c--a-w C:\Program Files\avgas-setup-7.5.1.43.exe 2002-06-04 09:06 65,536 -c--a-w C:\WINDOWS\inf\copyinf.exe . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{3934F86C-2D84-4EAF-9065-65322C1AFE25}] [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{58FF5B3A-2CF6-4B72-919A-AE590AA7890D}] [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{f23bc38f-8d17-4211-9e42-0412ed74a192}] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 08:00 15360] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2008-03-29 14:37 79224] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784] C:\Documents and Settings\guillaine.HOME-6620B39EBF\Menu D‚marrer\Programmes\D‚marrage\ OpenOffice.org 2.4.lnk - C:\Program Files\OpenOffice.org 2.4\program\quickstart.exe [2008-01-21 16:41:28 393216] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer] "NoStrCmpLogical"= 1 (0x1) "NoResolveSearch"= 1 (0x1) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon] "UIHost"="C:\\Documents and Settings\\All Users.WINDOWS\\Application Data\\TuneUp Software\\TuneUp Utilities\\WinStyler\\tu_logonui.exe" [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ddcbxww] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\qomliii] qomliii.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "VIDC.MJPG"= pvmjpg21.dll [HKLM\~\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Menu Démarrer^Programmes^Démarrage^Logitech SetPoint.lnk] path=C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Démarrage\Logitech SetPoint.lnk backup=C:\WINDOWS\pss\Logitech SetPoint.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Menu Démarrer^Programmes^Démarrage^LUMIX Simple Viewer.lnk] backup=C:\WINDOWS\pss\LUMIX Simple Viewer.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\!AVG Anti-Spyware] C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] --a--c--- 2008-01-11 23:16 39792 C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ANIWZCS2Service] --a------ 2008-05-28 11:05 49152 C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ArcSoft Connection Service] --a--c--- 2007-11-13 15:24 72192 C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ACDaemon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATIModeChange] --a--c--- 2001-09-04 04:24 28672 C:\WINDOWS\system32\Ati2mdxx.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATIPTA] --a--c--- 2004-02-24 22:10 335872 C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BellCanada_McciTrayApp] --a--c--- 2007-11-19 10:33 1468928 C:\Program Files\BellCanada\McciTrayApp.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe] --a------ 2004-08-05 08:00 15360 C:\WINDOWS\system32\ctfmon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\D-Link Wireless G WDA-1320] --a------ 2005-12-14 15:56 2711552 C:\Program Files\D-Link\Wireless G WDA-1320\AirGCFG.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IMJPMIG8.1] --a--c--- 2004-08-05 08:00 208952 C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper] --a--c--- 2008-02-04 15:18 267048 C:\Program Files\iTunes\iTunesHelper.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LDM] --a------ 2008-05-11 08:43 32768 C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Logitech Hardware Abstraction Layer] --a--c--- 2007-11-29 02:17 55824 C:\WINDOWS\KHALMNPR.Exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Logitech Utility] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechCommunicationsManager] --a------ 2007-10-25 16:33 563984 C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechQuickCamRibbon] --a------ 2007-10-25 16:37 2178832 C:\Program Files\Logitech\QuickCam\Quickcam.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mmtask] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MMTray] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] --a--c--- 2001-07-09 10:50 155648 C:\WINDOWS\system32\NeroCheck.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002A] --a--c--- 2004-08-05 08:00 455168 C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002ASync] --a--c--- 2004-08-05 08:00 455168 C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] --a--c--- 2008-02-01 00:13 385024 C:\Program Files\QuickTime\qttask.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SSA.exe] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SsAAD.exe] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StandardInstall] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] --a--c--- 2008-02-22 04:25 144784 C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\zBrowser Launcher] --a--c--- 2003-12-01 12:38 892928 C:\Program Files\Logitech\iTouch\iTouch.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "WMPNetworkSvc"=3 (0x3) "WLSetupSvc"=3 (0x3) "WinDefend"=2 (0x2) "usnjsvc"=3 (0x3) "SPTISRV"=3 (0x3) "SoundMAX Agent Service (default)"=2 (0x2) "PACSPTISVR"=3 (0x3) "MSCSPTISRV"=3 (0x3) "McciCMService"=2 (0x2) "LVSrvLauncher"=2 (0x2) "LVPrcSrv"=2 (0x2) "LVCOMSer"=2 (0x2) "iPod Service"=3 (0x3) "idsvc"=3 (0x3) "gusvc"=3 (0x3) "DTSRVC"=2 (0x2) "CTDevice_Srv"=2 (0x2) "Creative Service for CDROM Access"=2 (0x2) "AVG Anti-Spyware Guard"=2 (0x2) "avast! Web Scanner"=3 (0x3) "avast! Mail Scanner"=3 (0x3) "avast! Antivirus"=2 (0x2) "ATI Smart"=2 (0x2) "Ati HotKey Poller"=2 (0x2) "aswUpdSv"=2 (0x2) "Apple Mobile Device"=2 (0x2) "ANIWZCSdService"=2 (0x2) "ACDaemon"=2 (0x2) "aawservice"=2 (0x2) [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-disabled] "D-Link Wireless G WDA-1320"=C:\Program Files\D-Link\Wireless G WDA-1320\AirGCFG.exe "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" -atboottime "LogitechQuickCamRibbon"="C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide "LogitechCommunicationsManager"="C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe" [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"= "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= "C:\\Program Files\\iTunes\\iTunes.exe"= S1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-03-29 14:31] S2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-03-29 14:35] S3 A3AB;D-Link AirPro 802.11a/b Wireless Adapter Service(A3AB);C:\WINDOWS\system32\DRIVERS\A3AB.sys [2005-08-25 15:00] S3 LCcfltr;Logitech USB Filter Driver;C:\WINDOWS\system32\Drivers\LCcFltr.Sys [2003-11-07 05:50] S3 LVPrcMon;Logitech LVPrcMon Driver;C:\WINDOWS\system32\drivers\LVPrcMon.sys [] S3 MREMP50;MREMP50 NDIS Protocol Driver;C:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS [2007-10-31 17:51] S3 MRESP50;MRESP50 NDIS Protocol Driver;C:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS [2007-10-31 17:51] S4 ACDaemon;ArcSoft Connect Daemon;C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ACService.exe [2007-11-14 13:04] S4 McciCMService;McciCMService;"C:\Program Files\Common Files\Motive\McciCMService.exe" [2007-11-01 11:59] . ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-06-29 14:16:50 Windows 5.1.2600 Service Pack 2 NTFS Balayage processus cachés ... Balayage caché autostart entries ... Balayage des fichiers cachés ... ************************************************************************** . --------------------- DLLs a chargé sous des processus courants --------------------- PROCESS: C:\WINDOWS\system32\winlogon.exe -> C:\WINDOWS\system32\Ati2evxx.dll . Temps d'accomplissement: 2008-06-29 14:19:36 ComboFix-quarantined-files.txt 2008-06-29 18:18:33 Pre-Run: 62,989,586,432 octets libres Post-Run: 62,975,143,936 octets libres 272 --- E O F --- 2008-06-26 11:25:56

bonjour à toi... et surtout ne me " disputes" pas , c'est un ami informaticien que je ne vois plus qui m'avait donné ce puissant nettoyeur ..... je t'envoie mon log correctement et merci de ta patience ... et je ferai attention aappel à tes connaissances la prochaine fois avant de faire des grands pas comme celui-là ... ComboFix 08-06-20.4 - guillaine 2008-06-29 14:15:07.3 - NTFSx86 MINIMAL Microsoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.232 [GMT -4:00] Endroit: C:\Documents and Settings\guillaine.HOME-6620B39EBF\Bureau\ComboFix.exe AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !! . (((((((((((((((((((((((((((((((((((( Autres suppressions )))))))))))))))))))))))))))))))))))))))))))))))) . . ---- Previous Run ------- . C:\WINDOWS\BM335ac9bc.xml C:\WINDOWS\pskt.ini C:\WINDOWS\system32\acbeg.ini C:\WINDOWS\system32\acbeg.ini2 C:\WINDOWS\system32\nqtss.ini C:\WINDOWS\system32\nqtss.ini2 C:\WINDOWS\system32\stvwa.ini C:\WINDOWS\system32\stvwa.ini2 C:\WINDOWS\system32\ttutv.ini C:\WINDOWS\system32\ttutv.ini2 C:\WINDOWS\system32\vycdd.ini C:\WINDOWS\system32\vycdd.ini2 . ((((((((((((((((((((((((((((( Fichiers créés 2008-05-28 to 2008-06-29 )))))))))))))))))))))))))))))))))))) . 2008-06-29 09:38 . 2008-06-29 10:04 134,290,536 --a------ C:\Program Files\OOo_2.4.1_Win32Intel_install_wJRE_fr.exe 2008-06-26 12:51 . 2008-06-26 16:09 51,755 --a------ C:\lucmp3.nr3 2008-06-22 10:38 . 2008-06-22 10:38 36,544 --ah----- C:\WINDOWS\system32\mlfcache.dat 2008-06-22 10:25 . 2006-10-04 22:42 2,560 --------- C:\WINDOWS\system32\drivers\cdralw2k.sys 2008-06-22 10:25 . 2006-10-04 22:42 2,432 --------- C:\WINDOWS\system32\drivers\cdr4_xp.sys 2008-06-20 07:19 . 2008-06-22 10:25 <REP> d-------- C:\Program Files\Picasa2 2008-06-20 07:17 . 2008-06-20 07:18 4,909,136 --a------ C:\Program Files\picasa2Setup.exe 2008-06-15 16:41 . 2008-06-15 16:42 <REP> d-------- C:\Documents and Settings\enfants\Application Data\OpenOffice.org2 2008-06-13 07:09 . 2008-06-13 07:09 <REP> d-------- C:\WINDOWS\system32\bits 2008-06-13 07:05 . 2007-03-29 08:58 7,168 -----c--- C:\WINDOWS\system32\dllcache\bitsprx4.dll 2008-06-13 07:05 . 2007-03-29 08:58 7,168 --------- C:\WINDOWS\system32\bitsprx4.dll 2008-06-10 23:54 . 2008-06-14 13:59 272,768 --------- C:\WINDOWS\system32\drivers\bthport.sys 2008-06-10 23:54 . 2008-06-14 13:59 272,768 -----c--- C:\WINDOWS\system32\dllcache\bthport.sys 2008-06-04 07:32 . 2008-06-04 07:32 1,534,464 --a------ C:\Program Files\siw.exe 2008-06-03 19:03 . 2008-06-03 19:03 <REP> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\Logitech 2008-06-01 14:17 . 2008-06-01 14:17 1,491,365 --a------ C:\Program Files\wlm.exe 2008-06-01 13:45 . 2008-06-01 13:45 <REP> d-------- C:\Documents and Settings\enfants\Application Data\GlarySoft . (((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))) . 2008-06-29 14:59 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\OpenOffice.org2 2008-06-29 14:19 --------- d-----w C:\Program Files\OpenOffice.org 2.4 (fr) Installation Files 2008-06-29 13:34 --------- d-----w C:\Program Files\Windows Defender 2008-06-29 12:20 --------- d-----w C:\Program Files\OpenOffice.org 2.4 2008-06-29 12:10 --------- d-----w C:\Program Files\Java 2008-06-27 04:04 --------- d-----r C:\Program Files\EClea2_0 2008-06-27 03:59 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\LimeWire 2008-06-27 03:59 --------- d-----w C:\Documents and Settings\enfants\Application Data\LimeWire 2008-06-26 11:48 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-06-24 10:56 --------- d-----w C:\Program Files\MesPolices10 2008-06-15 21:51 --------- d-----w C:\Documents and Settings\enfants\Application Data\Arcsoft 2008-06-15 06:51 --------- d-----w C:\Program Files\Circle Developement 2008-06-15 06:51 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\programidle 2008-06-15 06:51 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Frag great bend logo 2008-06-14 23:40 2,402,832 ----a-w C:\Program Files\WLinstaller.exe 2008-06-14 23:40 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\WLInstaller 2008-06-04 14:06 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\ESTsoft 2008-06-03 23:04 --------- d-----w C:\Program Files\Fichiers communs\Logishrd 2008-06-03 23:03 --------- d-----w C:\Program Files\Logitech 2008-06-03 23:03 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\LogiShrd 2008-06-01 00:18 --------- d-----w C:\Program Files\LimeWire 2008-05-28 11:09 --------- d-----w C:\Program Files\Lavasoft 2008-05-28 11:08 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Lavasoft 2008-05-28 11:06 --------- d-----w C:\Program Files\Fichiers communs\Wise Installation Wizard 2008-05-27 14:47 --------- d-----w C:\Program Files\ESTsoft 2008-05-27 14:41 19,153,264 ----a-w C:\Program Files\Lavasoft_Adaware_multi.exe 2008-05-24 01:22 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\Apple Computer 2008-05-22 13:32 2,869,264 ----a-w C:\Program Files\dotNetFx35setup.exe 2008-05-21 13:53 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy 2008-05-21 12:12 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\Malwarebytes 2008-05-21 12:12 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Malwarebytes 2008-05-19 16:53 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\DisplayTune 2008-05-16 15:58 12,632 ----a-w C:\WINDOWS\system32\lsdelete.exe 2008-05-15 23:35 --------- d-----w C:\Documents and Settings\enfants\Application Data\Logitech 2008-05-15 23:35 --------- d-----w C:\Documents and Settings\enfants\Application Data\Grisoft 2008-05-14 22:44 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\ArcSoft 2008-05-13 13:24 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\Logitech 2008-05-12 20:16 --------- dcsh--w C:\Program Files\Fichiers communs\WindowsLiveInstaller 2008-05-12 20:16 --------- d-----w C:\Program Files\Messenger Plus! Live 2008-05-12 20:16 --------- d-----r C:\Program Files\Creative 2008-05-12 19:34 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\GlarySoft 2008-05-09 21:09 --------- d-----w C:\Program Files\ANI 2008-05-09 21:08 --------- d-----w C:\Program Files\D-Link 2008-05-08 12:28 202,752 ----a-w C:\WINDOWS\system32\drivers\rmcast.sys 2008-05-07 05:15 1,293,824 ----a-w C:\WINDOWS\system32\quartz.dll 2008-05-05 11:15 --------- d-----r C:\Program Files\Panasonic 2008-05-05 11:07 --------- d-----r C:\Program Files\Alwil Software 2008-05-05 04:47 --------- d-----w C:\Documents and Settings\Marie\Application Data\Bell 2008-05-03 00:38 --------- d-----w C:\Documents and Settings\enfants\Application Data\Bell 2008-04-29 19:54 --------- d-----w C:\Program Files\Fichiers communs\Logitech 2008-04-29 15:20 15,648 ----a-w C:\WINDOWS\system32\drivers\NSDriver.sys 2008-04-29 15:19 15,648 ----a-w C:\WINDOWS\system32\drivers\Awrtrd.sys 2008-04-29 15:19 12,960 ----a-w C:\WINDOWS\system32\drivers\Awrtpd.sys 2008-04-29 13:20 27,100,264 -c--a-w C:\Program Files\PowerPointViewer.exe 2008-04-28 15:53 --------- d-----w C:\Program Files\Incomplete 2008-04-28 15:53 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\Calendrier Xtra 2008-04-28 15:53 --------- d-----w C:\Documents and Settings\enfants\Application Data\Chessmaster Challenge 2008-04-28 13:43 --------- d-----w C:\Program Files\Windows Installer Clean Up 2008-04-28 13:43 --------- d-----w C:\Program Files\MSECache 2008-04-23 04:16 826,368 ----a-w C:\WINDOWS\system32\wininet.dll 2008-04-20 20:30 1,338,384 -c--a-w C:\Program Files\SympaticoSecurityAdvisor_setupSSM.exe 2008-04-20 19:51 2,517 -c--a-w C:\Program Files\INSTALL.LOG 2008-04-08 06:52 119,479,710 -c--a-w C:\Program Files\OOo_2.4.0_Win32Intel_install_fr.exe 2008-04-08 06:27 1,664,591 -c--a-w C:\Program Files\pf-setup.exe 2008-04-05 16:33 9,309,624 -c--a-w C:\Program Files\Shockwave_Installer_Full.exe 2008-04-04 14:15 46,391,264 -c--a-w C:\Program Files\8-3_xp32_dd_ccc_wdm_enu_59746.exe 2008-04-03 23:50 57,144,896 -c--a-w C:\Program Files\setpoint440.exe 2008-04-02 17:45 2,751,368 -c--a-w C:\Program Files\ccsetup206.exe 2008-03-23 01:01 9,722,720 -c--a-w C:\Program Files\spybotsd152.exe 2008-03-21 14:38 8,161,400 -c--a-w C:\Program Files\Windows-KB890830-V1.39.exe 2008-03-09 14:21 407,680 -c--a-w C:\Program Files\aswclnr.exe 2008-02-25 15:15 2,919,160 -c--a-w C:\Program Files\WindowsMedia-Q828026-x86-FRA.exe 2008-02-25 15:11 881,192 -c--a-w C:\Program Files\WGAPluginInstall.exe 2008-02-24 01:22 1,491,592 -c--a-w C:\Program Files\install_flash_player.exe 2008-02-17 17:42 1,729 -c--a-w C:\Program Files\Adobe Reader 8.lnk 2008-02-12 16:50 95 -csh--w C:\Program Files\desktop.ini 2008-02-12 16:50 15,086 -csh--w C:\Program Files\ShedkoFolderico3_0627.ico 2007-12-09 00:04 12,413,440 -c--a-w C:\Program Files\avgas-setup-7.5.1.43.exe 2002-06-04 09:06 65,536 -c--a-w C:\WINDOWS\inf\copyinf.exe . ((((((((((((((((((((((((((((((((( Point de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))) . . REGEDIT4 *Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{3934F86C-2D84-4EAF-9065-65322C1AFE25}] [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{58FF5B3A-2CF6-4B72-919A-AE590AA7890D}] [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{f23bc38f-8d17-4211-9e42-0412ed74a192}] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 08:00 15360] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2008-03-29 14:37 79224] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784] C:\Documents and Settings\guillaine.HOME-6620B39EBF\Menu D‚marrer\Programmes\D‚marrage\ OpenOffice.org 2.4.lnk - C:\Program Files\OpenOffice.org 2.4\program\quickstart.exe [2008-01-21 16:41:28 393216] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer] "NoStrCmpLogical"= 1 (0x1) "NoResolveSearch"= 1 (0x1) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon] "UIHost"="C:\\Documents and Settings\\All Users.WINDOWS\\Application Data\\TuneUp Software\\TuneUp Utilities\\WinStyler\\tu_logonui.exe" [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ddcbxww] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\qomliii] qomliii.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "VIDC.MJPG"= pvmjpg21.dll [HKLM\~\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Menu Démarrer^Programmes^Démarrage^Logitech SetPoint.lnk] path=C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Démarrage\Logitech SetPoint.lnk backup=C:\WINDOWS\pss\Logitech SetPoint.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Menu Démarrer^Programmes^Démarrage^LUMIX Simple Viewer.lnk] backup=C:\WINDOWS\pss\LUMIX Simple Viewer.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\!AVG Anti-Spyware] C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher] --a--c--- 2008-01-11 23:16 39792 C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ANIWZCS2Service] --a------ 2008-05-28 11:05 49152 C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ArcSoft Connection Service] --a--c--- 2007-11-13 15:24 72192 C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ACDaemon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATIModeChange] --a--c--- 2001-09-04 04:24 28672 C:\WINDOWS\system32\Ati2mdxx.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATIPTA] --a--c--- 2004-02-24 22:10 335872 C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BellCanada_McciTrayApp] --a--c--- 2007-11-19 10:33 1468928 C:\Program Files\BellCanada\McciTrayApp.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe] --a------ 2004-08-05 08:00 15360 C:\WINDOWS\system32\ctfmon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\D-Link Wireless G WDA-1320] --a------ 2005-12-14 15:56 2711552 C:\Program Files\D-Link\Wireless G WDA-1320\AirGCFG.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IMJPMIG8.1] --a--c--- 2004-08-05 08:00 208952 C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper] --a--c--- 2008-02-04 15:18 267048 C:\Program Files\iTunes\iTunesHelper.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LDM] --a------ 2008-05-11 08:43 32768 C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Logitech Hardware Abstraction Layer] --a--c--- 2007-11-29 02:17 55824 C:\WINDOWS\KHALMNPR.Exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Logitech Utility] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechCommunicationsManager] --a------ 2007-10-25 16:33 563984 C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechQuickCamRibbon] --a------ 2007-10-25 16:37 2178832 C:\Program Files\Logitech\QuickCam\Quickcam.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mmtask] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MMTray] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] --a--c--- 2001-07-09 10:50 155648 C:\WINDOWS\system32\NeroCheck.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002A] --a--c--- 2004-08-05 08:00 455168 C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002ASync] --a--c--- 2004-08-05 08:00 455168 C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task] --a--c--- 2008-02-01 00:13 385024 C:\Program Files\QuickTime\qttask.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SSA.exe] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SsAAD.exe] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StandardInstall] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched] --a--c--- 2008-02-22 04:25 144784 C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\zBrowser Launcher] --a--c--- 2003-12-01 12:38 892928 C:\Program Files\Logitech\iTouch\iTouch.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "WMPNetworkSvc"=3 (0x3) "WLSetupSvc"=3 (0x3) "WinDefend"=2 (0x2) "usnjsvc"=3 (0x3) "SPTISRV"=3 (0x3) "SoundMAX Agent Service (default)"=2 (0x2) "PACSPTISVR"=3 (0x3) "MSCSPTISRV"=3 (0x3) "McciCMService"=2 (0x2) "LVSrvLauncher"=2 (0x2) "LVPrcSrv"=2 (0x2) "LVCOMSer"=2 (0x2) "iPod Service"=3 (0x3) "idsvc"=3 (0x3) "gusvc"=3 (0x3) "DTSRVC"=2 (0x2) "CTDevice_Srv"=2 (0x2) "Creative Service for CDROM Access"=2 (0x2) "AVG Anti-Spyware Guard"=2 (0x2) "avast! Web Scanner"=3 (0x3) "avast! Mail Scanner"=3 (0x3) "avast! Antivirus"=2 (0x2) "ATI Smart"=2 (0x2) "Ati HotKey Poller"=2 (0x2) "aswUpdSv"=2 (0x2) "Apple Mobile Device"=2 (0x2) "ANIWZCSdService"=2 (0x2) "ACDaemon"=2 (0x2) "aawservice"=2 (0x2) [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-disabled] "D-Link Wireless G WDA-1320"=C:\Program Files\D-Link\Wireless G WDA-1320\AirGCFG.exe "QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" -atboottime "LogitechQuickCamRibbon"="C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide "LogitechCommunicationsManager"="C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe" [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"= "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= "C:\\Program Files\\iTunes\\iTunes.exe"= S1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-03-29 14:31] S2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-03-29 14:35] S3 A3AB;D-Link AirPro 802.11a/b Wireless Adapter Service(A3AB);C:\WINDOWS\system32\DRIVERS\A3AB.sys [2005-08-25 15:00] S3 LCcfltr;Logitech USB Filter Driver;C:\WINDOWS\system32\Drivers\LCcFltr.Sys [2003-11-07 05:50] S3 LVPrcMon;Logitech LVPrcMon Driver;C:\WINDOWS\system32\drivers\LVPrcMon.sys [] S3 MREMP50;MREMP50 NDIS Protocol Driver;C:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS [2007-10-31 17:51] S3 MRESP50;MRESP50 NDIS Protocol Driver;C:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS [2007-10-31 17:51] S4 ACDaemon;ArcSoft Connect Daemon;C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ACService.exe [2007-11-14 13:04] S4 McciCMService;McciCMService;"C:\Program Files\Common Files\Motive\McciCMService.exe" [2007-11-01 11:59] . ************************************************************************** catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2008-06-29 14:16:50 Windows 5.1.2600 Service Pack 2 NTFS Balayage processus cachés ... Balayage caché autostart entries ... Balayage des fichiers cachés ... ************************************************************************** . --------------------- DLLs a chargé sous des processus courants --------------------- PROCESS: C:\WINDOWS\system32\winlogon.exe -> C:\WINDOWS\system32\Ati2evxx.dll . Temps d'accomplissement: 2008-06-29 14:19:36 ComboFix-quarantined-files.txt 2008-06-29 18:18:33 Pre-Run: 62,989,586,432 octets libres Post-Run: 62,975,143,936 octets libres 272 --- E O F --- 2008-06-26 11:25:56 guillou merci

bonjour, eh oui mon ordi est rendue lente, ferme sur l'écran de veille ( ou quand ça lui plait ) etc.. ne veut plus se restaurer ( que j'ai déd'ailleurs désactivée pour faire un combifix.. je vous fais parvenir des rapports de combofixfix et hijackthis ..en espérant de l'aide ... un très très grand merci en attendant impatiemment votre réponse... ComboFix 08-06-20.4 - guillaine 2008-06-29 14:15:07.3 - NTFSx86 MINIMALMicrosoft Windows XP Édition familiale 5.1.2600.2.1252.1.1036.18.232 [GMT -4:00]Endroit: C:\Documents and Settings\guillaine.HOME-6620B39EBF\Bureau\ComboFix.exeAVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!.(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))..---- Previous Run -------.C:\WINDOWS\BM335ac9bc.xmlC:\WINDOWS\pskt.iniC:\WINDOWS\system32\acbeg.iniC:\WINDOWS\system32\acbeg.ini2C:\WINDOWS\system32\nqtss.iniC:\WINDOWS\system32\nqtss.ini2C:\WINDOWS\system32\stvwa.iniC:\WINDOWS\system32\stvwa.ini2C:\WINDOWS\system32\ttutv.iniC:\WINDOWS\system32\ttutv.ini2C:\WINDOWS\system32\vycdd.iniC:\WINDOWS\system32\vycdd.ini2.((((((((((((((((((((((((((((( Fichiers créés 2008-05-28 to 2008-06-29 )))))))))))))))))))))))))))))))))))).2008-06-29 09:38 . 2008-06-29 10:04 134,290,536 --a------ C:\Program Files\OOo_2.4.1_Win32Intel_install_wJRE_fr.exe2008-06-26 12:51 . 2008-06-26 16:09 51,755 --a------ C:\lucmp3.nr32008-06-22 10:38 . 2008-06-22 10:38 36,544 --ah----- C:\WINDOWS\system32\mlfcache.dat2008-06-22 10:25 . 2006-10-04 22:42 2,560 --------- C:\WINDOWS\system32\drivers\cdralw2k.sys2008-06-22 10:25 . 2006-10-04 22:42 2,432 --------- C:\WINDOWS\system32\drivers\cdr4_xp.sys2008-06-20 07:19 . 2008-06-22 10:25 <REP> d-------- C:\Program Files\Picasa22008-06-20 07:17 . 2008-06-20 07:18 4,909,136 --a------ C:\Program Files\picasa2Setup.exe2008-06-15 16:41 . 2008-06-15 16:42 <REP> d-------- C:\Documents and Settings\enfants\Application Data\OpenOffice.org22008-06-13 07:09 . 2008-06-13 07:09 <REP> d-------- C:\WINDOWS\system32\bits2008-06-13 07:05 . 2007-03-29 08:58 7,168 -----c--- C:\WINDOWS\system32\dllcache\bitsprx4.dll2008-06-13 07:05 . 2007-03-29 08:58 7,168 --------- C:\WINDOWS\system32\bitsprx4.dll2008-06-10 23:54 . 2008-06-14 13:59 272,768 --------- C:\WINDOWS\system32\drivers\bthport.sys2008-06-10 23:54 . 2008-06-14 13:59 272,768 -----c--- C:\WINDOWS\system32\dllcache\bthport.sys2008-06-04 07:32 . 2008-06-04 07:32 1,534,464 --a------ C:\Program Files\siw.exe2008-06-03 19:03 . 2008-06-03 19:03 <REP> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\Logitech2008-06-01 14:17 . 2008-06-01 14:17 1,491,365 --a------ C:\Program Files\wlm.exe2008-06-01 13:45 . 2008-06-01 13:45 <REP> d-------- C:\Documents and Settings\enfants\Application Data\GlarySoft.(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M )))))))))))))))))))))))))))))))))))))))))))))))).2008-06-29 14:59 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\OpenOffice.org22008-06-29 14:19 --------- d-----w C:\Program Files\OpenOffice.org 2.4 (fr) Installation Files2008-06-29 13:34 --------- d-----w C:\Program Files\Windows Defender2008-06-29 12:20 --------- d-----w C:\Program Files\OpenOffice.org 2.42008-06-29 12:10 --------- d-----w C:\Program Files\Java2008-06-27 04:04 --------- d-----r C:\Program Files\EClea2_02008-06-27 03:59 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\LimeWire2008-06-27 03:59 --------- d-----w C:\Documents and Settings\enfants\Application Data\LimeWire2008-06-26 11:48 --------- d--h--w C:\Program Files\InstallShield Installation Information2008-06-24 10:56 --------- d-----w C:\Program Files\MesPolices102008-06-15 21:51 --------- d-----w C:\Documents and Settings\enfants\Application Data\Arcsoft2008-06-15 06:51 --------- d-----w C:\Program Files\Circle Developement2008-06-15 06:51 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\programidle2008-06-15 06:51 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Frag great bend logo2008-06-14 23:40 2,402,832 ----a-w C:\Program Files\WLinstaller.exe2008-06-14 23:40 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\WLInstaller2008-06-04 14:06 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\ESTsoft2008-06-03 23:04 --------- d-----w C:\Program Files\Fichiers communs\Logishrd2008-06-03 23:03 --------- d-----w C:\Program Files\Logitech2008-06-03 23:03 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\LogiShrd2008-06-01 00:18 --------- d-----w C:\Program Files\LimeWire2008-05-28 11:09 --------- d-----w C:\Program Files\Lavasoft2008-05-28 11:08 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Lavasoft2008-05-28 11:06 --------- d-----w C:\Program Files\Fichiers communs\Wise Installation Wizard2008-05-27 14:47 --------- d-----w C:\Program Files\ESTsoft2008-05-27 14:41 19,153,264 ----a-w C:\Program Files\Lavasoft_Adaware_multi.exe2008-05-24 01:22 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\Apple Computer2008-05-22 13:32 2,869,264 ----a-w C:\Program Files\dotNetFx35setup.exe2008-05-21 13:53 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Spybot - Search & Destroy2008-05-21 12:12 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\Malwarebytes2008-05-21 12:12 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\Malwarebytes2008-05-19 16:53 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\DisplayTune2008-05-16 15:58 12,632 ----a-w C:\WINDOWS\system32\lsdelete.exe2008-05-15 23:35 --------- d-----w C:\Documents and Settings\enfants\Application Data\Logitech2008-05-15 23:35 --------- d-----w C:\Documents and Settings\enfants\Application Data\Grisoft2008-05-14 22:44 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\ArcSoft2008-05-13 13:24 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\Logitech2008-05-12 20:16 --------- dcsh--w C:\Program Files\Fichiers communs\WindowsLiveInstaller2008-05-12 20:16 --------- d-----w C:\Program Files\Messenger Plus! Live2008-05-12 20:16 --------- d-----r C:\Program Files\Creative2008-05-12 19:34 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\GlarySoft2008-05-09 21:09 --------- d-----w C:\Program Files\ANI2008-05-09 21:08 --------- d-----w C:\Program Files\D-Link2008-05-08 12:28 202,752 ----a-w C:\WINDOWS\system32\drivers\rmcast.sys2008-05-07 05:15 1,293,824 ----a-w C:\WINDOWS\system32\quartz.dll2008-05-05 11:15 --------- d-----r C:\Program Files\Panasonic2008-05-05 11:07 --------- d-----r C:\Program Files\Alwil Software2008-05-05 04:47 --------- d-----w C:\Documents and Settings\Marie\Application Data\Bell2008-05-03 00:38 --------- d-----w C:\Documents and Settings\enfants\Application Data\Bell2008-04-29 19:54 --------- d-----w C:\Program Files\Fichiers communs\Logitech2008-04-29 15:20 15,648 ----a-w C:\WINDOWS\system32\drivers\NSDriver.sys2008-04-29 15:19 15,648 ----a-w C:\WINDOWS\system32\drivers\Awrtrd.sys2008-04-29 15:19 12,960 ----a-w C:\WINDOWS\system32\drivers\Awrtpd.sys2008-04-29 13:20 27,100,264 -c--a-w C:\Program Files\PowerPointViewer.exe2008-04-28 15:53 --------- d-----w C:\Program Files\Incomplete2008-04-28 15:53 --------- d-----w C:\Documents and Settings\guillaine.HOME-6620B39EBF\Application Data\Calendrier Xtra2008-04-28 15:53 --------- d-----w C:\Documents and Settings\enfants\Application Data\Chessmaster Challenge2008-04-28 13:43 --------- d-----w C:\Program Files\Windows Installer Clean Up2008-04-28 13:43 --------- d-----w C:\Program Files\MSECache2008-04-23 04:16 826,368 ----a-w C:\WINDOWS\system32\wininet.dll2008-04-20 20:30 1,338,384 -c--a-w C:\Program Files\SympaticoSecurityAdvisor_setupSSM.exe2008-04-20 19:51 2,517 -c--a-w C:\Program Files\INSTALL.LOG2008-04-08 06:52 119,479,710 -c--a-w C:\Program Files\OOo_2.4.0_Win32Intel_install_fr.exe2008-04-08 06:27 1,664,591 -c--a-w C:\Program Files\pf-setup.exe2008-04-05 16:33 9,309,624 -c--a-w C:\Program Files\Shockwave_Installer_Full.exe2008-04-04 14:15 46,391,264 -c--a-w C:\Program Files\8-3_xp32_dd_ccc_wdm_enu_59746.exe2008-04-03 23:50 57,144,896 -c--a-w C:\Program Files\setpoint440.exe2008-04-02 17:45 2,751,368 -c--a-w C:\Program Files\ccsetup206.exe2008-03-23 01:01 9,722,720 -c--a-w C:\Program Files\spybotsd152.exe2008-03-21 14:38 8,161,400 -c--a-w C:\Program Files\Windows-KB890830-V1.39.exe2008-03-09 14:21 407,680 -c--a-w C:\Program Files\aswclnr.exe2008-02-25 15:15 2,919,160 -c--a-w C:\Program Files\WindowsMedia-Q828026-x86-FRA.exe2008-02-25 15:11 881,192 -c--a-w C:\Program Files\WGAPluginInstall.exe2008-02-24 01:22 1,491,592 -c--a-w C:\Program Files\install_flash_player.exe2008-02-17 17:42 1,729 -c--a-w C:\Program Files\Adobe Reader 8.lnk2008-02-12 16:50 95 -csh--w C:\Program Files\desktop.ini2008-02-12 16:50 15,086 -csh--w C:\Program Files\ShedkoFolderico3_0627.ico2007-12-09 00:04 12,413,440 -c--a-w C:\Program Files\avgas-setup-7.5.1.43.exe2002-06-04 09:06 65,536 -c--a-w C:\WINDOWS\inf\copyinf.exe.((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))..REGEDIT4*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{3934F86C-2D84-4EAF-9065-65322C1AFE25}][HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{58FF5B3A-2CF6-4B72-919A-AE590AA7890D}][HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{f23bc38f-8d17-4211-9e42-0412ed74a192}][HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-05 08:00 15360][HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2008-03-29 14:37 79224]"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" [2008-02-22 04:25 144784]C:\Documents and Settings\guillaine.HOME-6620B39EBF\Menu D‚marrer\Programmes\D‚marrage\OpenOffice.org 2.4.lnk - C:\Program Files\OpenOffice.org 2.4\program\quickstart.exe [2008-01-21 16:41:28 393216][HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]"NoStrCmpLogical"= 1 (0x1)"NoResolveSearch"= 1 (0x1)[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]"UIHost"="C:\\Documents and Settings\\All Users.WINDOWS\\Application Data\\TuneUp Software\\TuneUp Utilities\\WinStyler\\tu_logonui.exe"[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ddcbxww][HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\qomliii]qomliii.dll[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]"VIDC.MJPG"= pvmjpg21.dll[HKLM\~\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Menu Démarrer^Programmes^Démarrage^Logitech SetPoint.lnk]path=C:\Documents and Settings\All Users.WINDOWS\Menu Démarrer\Programmes\Démarrage\Logitech SetPoint.lnkbackup=C:\WINDOWS\pss\Logitech SetPoint.lnkCommon Startup[HKLM\~\startupfolder\C:^Documents and Settings^All Users.WINDOWS^Menu Démarrer^Programmes^Démarrage^LUMIX Simple Viewer.lnk]backup=C:\WINDOWS\pss\LUMIX Simple Viewer.lnkCommon Startup[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\!AVG Anti-Spyware]C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]--a--c--- 2008-01-11 23:16 39792 C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ANIWZCS2Service]--a------ 2008-05-28 11:05 49152 C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ArcSoft Connection Service]--a--c--- 2007-11-13 15:24 72192 C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ACDaemon.exe[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATIModeChange]--a--c--- 2001-09-04 04:24 28672 C:\WINDOWS\system32\Ati2mdxx.exe[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ATIPTA]--a--c--- 2004-02-24 22:10 335872 C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BellCanada_McciTrayApp]--a--c--- 2007-11-19 10:33 1468928 C:\Program Files\BellCanada\McciTrayApp.exe[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]--a------ 2004-08-05 08:00 15360 C:\WINDOWS\system32\ctfmon.exe[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\D-Link Wireless G WDA-1320]--a------ 2005-12-14 15:56 2711552 C:\Program Files\D-Link\Wireless G WDA-1320\AirGCFG.exe[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IMJPMIG8.1]--a--c--- 2004-08-05 08:00 208952 C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]--a--c--- 2008-02-04 15:18 267048 C:\Program Files\iTunes\iTunesHelper.exe[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LDM]--a------ 2008-05-11 08:43 32768 C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Logitech Hardware Abstraction Layer]--a--c--- 2007-11-29 02:17 55824 C:\WINDOWS\KHALMNPR.Exe[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Logitech Utility][HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechCommunicationsManager]--a------ 2007-10-25 16:33 563984 C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechQuickCamRibbon]--a------ 2007-10-25 16:37 2178832 C:\Program Files\Logitech\QuickCam\Quickcam.exe[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\mmtask][HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MMTray][HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]--a--c--- 2001-07-09 10:50 155648 C:\WINDOWS\system32\NeroCheck.exe[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002A]--a--c--- 2004-08-05 08:00 455168 C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PHIME2002ASync]--a--c--- 2004-08-05 08:00 455168 C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]--a--c--- 2008-02-01 00:13 385024 C:\Program Files\QuickTime\qttask.exe[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SSA.exe][HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SsAAD.exe][HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StandardInstall][HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]--a--c--- 2008-02-22 04:25 144784 C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Windows Defender]C:\Program Files\Windows Defender\MSASCui.exe[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\zBrowser Launcher]--a--c--- 2003-12-01 12:38 892928 C:\Program Files\Logitech\iTouch\iTouch.exe[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]"WMPNetworkSvc"=3 (0x3)"WLSetupSvc"=3 (0x3)"WinDefend"=2 (0x2)"usnjsvc"=3 (0x3)"SPTISRV"=3 (0x3)"SoundMAX Agent Service (default)"=2 (0x2)"PACSPTISVR"=3 (0x3)"MSCSPTISRV"=3 (0x3)"McciCMService"=2 (0x2)"LVSrvLauncher"=2 (0x2)"LVPrcSrv"=2 (0x2)"LVCOMSer"=2 (0x2)"iPod Service"=3 (0x3)"idsvc"=3 (0x3)"gusvc"=3 (0x3)"DTSRVC"=2 (0x2)"CTDevice_Srv"=2 (0x2)"Creative Service for CDROM Access"=2 (0x2)"AVG Anti-Spyware Guard"=2 (0x2)"avast! Web Scanner"=3 (0x3)"avast! Mail Scanner"=3 (0x3)"avast! Antivirus"=2 (0x2)"ATI Smart"=2 (0x2)"Ati HotKey Poller"=2 (0x2)"aswUpdSv"=2 (0x2)"Apple Mobile Device"=2 (0x2)"ANIWZCSdService"=2 (0x2)"ACDaemon"=2 (0x2)"aawservice"=2 (0x2)[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-disabled]"D-Link Wireless G WDA-1320"=C:\Program Files\D-Link\Wireless G WDA-1320\AirGCFG.exe"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" -atboottime"LogitechQuickCamRibbon"="C:\Program Files\Logitech\QuickCam\Quickcam.exe" /hide"LogitechCommunicationsManager"="C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]"%windir%\\system32\\sessmgr.exe"="C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"="C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"="C:\\Program Files\\iTunes\\iTunes.exe"=S1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-03-29 14:31]S2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-03-29 14:35]S3 A3AB;D-Link AirPro 802.11a/b Wireless Adapter Service(A3AB);C:\WINDOWS\system32\DRIVERS\A3AB.sys [2005-08-25 15:00]S3 LCcfltr;Logitech USB Filter Driver;C:\WINDOWS\system32\Drivers\LCcFltr.Sys [2003-11-07 05:50]S3 LVPrcMon;Logitech LVPrcMon Driver;C:\WINDOWS\system32\drivers\LVPrcMon.sys []S3 MREMP50;MREMP50 NDIS Protocol Driver;C:\PROGRA~1\COMMON~1\Motive\MREMP50.SYS [2007-10-31 17:51]S3 MRESP50;MRESP50 NDIS Protocol Driver;C:\PROGRA~1\COMMON~1\Motive\MRESP50.SYS [2007-10-31 17:51]S4 ACDaemon;ArcSoft Connect Daemon;C:\Program Files\Fichiers communs\ArcSoft\Connection Service\Bin\ACService.exe [2007-11-14 13:04]S4 McciCMService;McciCMService;"C:\Program Files\Common Files\Motive\McciCMService.exe" [2007-11-01 11:59].************************************************************************* *catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.netRootkit scan 2008-06-29 14:16:50Windows 5.1.2600 Service Pack 2 NTFSBalayage processus cachés ...Balayage caché autostart entries ...Balayage des fichiers cachés ...**************************************************************************.--------------------- DLLs a chargé sous des processus courants ---------------------PROCESS: C:\WINDOWS\system32\winlogon.exe-> C:\WINDOWS\system32\Ati2evxx.dll.Temps d'accomplissement: 2008-06-29 14:19:36ComboFix-quarantined-files.txt 2008-06-29 18:18:33Pre-Run: 62,989,586,432 octets libresPost-Run: 62,975,143,936 octets libres272 --- E O F --- 2008-06-26 11:25:56 hijackthis Scan saved at 06:18:58, on 2008-06-30 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v7.00 (7.00.6000.16674) Boot mode: NormalRunning processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\Explorer.EXE C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\OpenOffice.org 2.4\program\soffice.exe C:\Program Files\OpenOffice.org 2.4\program\soffice.BIN C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\iPod\bin\iPodService.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Program Files\Internet Explorer\IEXPLORE.EXE C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe C:\hijackthis\HijackThis.exeR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R3 - URLSearchHook: (no name) - {6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - (no file) O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: (no name) - {3934F86C-2D84-4EAF-9065-65322C1AFE25} - (no file) O2 - BHO: (no name) - {58FF5B3A-2CF6-4B72-919A-AE590AA7890D} - (no file) O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: {291a47de-2140-24e9-1124-71d8f83cb32f} - {f23bc38f-8d17-4211-9e42-0412ed74a192} - (no file) O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll O3 - Toolbar: (no name) - {6638A9DE-0745-4292-8A2E-AE530E7B9B3F} - (no file) O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe" O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - Startup: OpenOffice.org 2.4.lnk = C:\Program Files\OpenOffice.org 2.4\program\quickstart.exe O8 - Extra context menu item: Choisir comme avatar pour &Messenger - C:\Program Files\MSN Pictures Displayer\AddIEPicture.htm O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE (file missing) O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE (file missing) O16 - DPF: CabBuilder - http://kiw.imgag.com/imgag/kiw/toolbar/dow...llerControl.cab O16 - DPF: {238F6F83-B8B4-11CF-8771-00A024541EE3} - http://a516.g.akamai.net/f/516/25175/7d/ru...cat-no-eula.cab O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - http://fichiers.touslesdrivers.com/fichier...on_2_0_4_12.cab O18 - Protocol: bw+0 - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw+0s - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw-0 - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw-0s - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw00 - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw00s - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw10 - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw10s - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw20 - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw20s - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw30 - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw30s - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw40 - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw40s - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw50 - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw50s - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw60 - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw60s - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw70 - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw70s - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw80 - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw80s - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw90 - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bw90s - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwa0 - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwa0s - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwb0 - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwb0s - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwc0 - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwc0s - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwd0 - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwd0s - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwe0 - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwe0s - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwf0 - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwf0s - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll O18 - Protocol: bwg0 - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwg0s - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwh0 - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwh0s - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwi0 - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwi0s - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwj0 - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwj0s - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwk0 - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwk0s - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwl0 - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwl0s - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwm0 - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwm0s - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwn0 - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwn0s - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwo0 - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwo0s - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwp0 - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwp0s - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwq0 - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwq0s - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwr0 - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwr0s - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bws0 - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bws0s - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwt0 - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwt0s - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwu0 - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwu0s - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwv0 - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwv0s - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bww0 - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bww0s - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwx0 - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwx0s - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwy0 - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwy0s - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwz0 - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: bwz0s - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O18 - Protocol: offline-8876480 - {58F83A18-CE50-4990-9251-CD9748361BDB} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll O20 - Winlogon Notify: ddcbxww - C:\WINDOWS\ O20 - Winlogon Notify: qomliii - qomliii.dll (file missing) O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe-- End of file - 17645 bytes merci encore guillou