Salut à tous
Suivant les directives de CHERCHEUR ET MORGANE QUE JE REMERCIE SINCEREMENT...
revoicie le message plus les rapports de HIJACKTHIS ET LopxpMH
comme la plupart d'entre vous je suis depuis peu assaillie de pub 'CiD' après mettre inscrit et lu pas mal de vos questions et réponses , je me suis dit qu'il fallait que je (moi aussi) mette mon rapport, alors le voilà, après avoir télécharger HijackThis et lancer comme vous le dites voici mon rapport, je vois pas bien ce que je dois en faire....
Bien sur j'ai , (je pense) tout essayer
je possede CCleaner, Spybot, blaklight, windows defender, spyware, avast fam....et norton ghost mais ma derniere image date de l'année dernière (quel con je suis) et je ne voudrais pas revenir a cette date.
voici le rapport....: si vous pouviez me donner un coup de main a virer ces saloperies de pub intempestives....
MERCI
RAPPORT HIJACKTHIS
Logfile of HijackThis v1.99.1
Scan saved at 21:53:16, on 13/03/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16414)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9HE.EXE
C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\Program Files\ASUSTek\ASUSDVD\PDVDServ.exe
C:\Program Files\Symantec\Norton Ghost\Agent\GhostTray.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9TE.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\vphc600.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
c:\progra~1\intern~1\iexplore.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Club-Internet\Lanceur\lanceur.exe
C:\Program Files\Fichiers communs\Logitech\KHAL\KHALMNPR.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\System32\GEARSec.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\Symantec\Norton Ghost\Agent\PQV2iSvc.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.club-internet.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer avec Club-Internet
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {64F56FC1-1272-44CD-BA6E-39723696E350} - (no file)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [EPSON Stylus Photo RX620 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9HE.EXE /P31 "EPSON Stylus Photo RX620 Series" /O6 "USB001" /M "Stylus Photo RX620"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\ASUSTek\ASUSDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [Norton Ghost 9.0] C:\Program Files\Symantec\Norton Ghost\Agent\GhostTray.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [HydraVisionDesktopManager] C:\Program Files\ATI Technologies\ATI HYDRAVISION\HydraDM.exe
O4 - HKLM\..\Run: [EPSON PictureMate 500] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATI9TE.EXE /P21 "EPSON PictureMate 500" /O6 "USB002" /M "PictureMate 500"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [phc650] C:\WINDOWS\vphc600.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [download one] C:\DOCUME~1\UTILIS~1\APPLIC~1\PROGRA~1\owns copy idol.exe
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: Club Internet.lnk = C:\Program Files\Club-Internet\Lanceur\lanceur.exe
O4 - Global Startup: Paramètres.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Ouvrir client sur le moniteur &1 - C:\WINDOWS\web\AOpenClient.htm
O8 - Extra context menu item: Ouvrir client sur le moniteur &2 - C:\WINDOWS\web\AOpenClient.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {2357B3CF-7F8D-4451-8D81-FD6097610AEE} (CamfrogWEB Advanced Unicode Control) - http://activex.camfrogweb.com/advanced/2.0.1.11/cfweb_activex.camfrogweb.com-advanced-2.0.1.11_instmodule.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://studiolec.spaces.live.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: bw+0 - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: MSNim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {9263288B-02C4-4702-AF36-1478C8EA9B12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: Skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: DirectX Service (DirectService) - Unknown owner - c:\windows\system32\directx.exe (file missing)
O23 - Service: GEARSecurity - GEAR Software - C:\WINDOWS\System32\GEARSec.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: MSCSPTISRV - Unknown owner - C:\Program Files\Fichiers communs\Sony Shared\AVLib\MSCSPTISRV.exe (file missing)
O23 - Service: Norton Ghost - Symantec Corporation - C:\Program Files\Symantec\Norton Ghost\Agent\PQV2iSvc.exe
O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files\Fichiers communs\Sony Shared\AVLib\PACSPTISVR.exe (file missing)
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Unknown owner - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exe (file missing)
RAPPORT LopxpMH
Rapport fait à 20:49:45,53 le 14/03/2007
******************************************
## Répertoires Application Data
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est 2056-FBB7
R‚pertoire de C:\Documents and Settings\Administrateur\Application Data
23/11/2005 17:20 <REP> .
23/11/2005 17:20 <REP> ..
23/11/2005 17:20 <REP> Microsoft
0 fichier(s) 0 octets
3 R‚p(s) 21ÿ840ÿ154ÿ624 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est 2056-FBB7
R‚pertoire de C:\Documents and Settings\Administrateur\Local Settings\Application Data
23/11/2005 17:20 <REP> .
23/11/2005 17:20 <REP> ..
23/11/2005 17:20 <REP> Microsoft
23/11/2005 17:24 3ÿ712ÿ656 IconCache.db
1 fichier(s) 3ÿ712ÿ656 octets
3 R‚p(s) 21ÿ840ÿ150ÿ528 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est 2056-FBB7
R‚pertoire de C:\Documents and Settings\All Users\Application Data
15/11/2005 19:41 <REP> .
15/11/2005 19:41 <REP> ..
25/11/2005 20:11 <REP> Adobe
30/11/2006 19:33 <REP> Adobe Systems
15/11/2005 14:15 <REP> Ahead
16/11/2005 15:14 <REP> Apple Computer
30/06/2006 18:28 <REP> CopyPod
15/11/2005 14:10 <REP> CyberLink
24/11/2006 21:42 <REP> EnterNHelp
02/11/2006 13:02 <REP> Google
05/03/2007 21:04 <REP> Google Updater
07/02/2007 22:50 <REP> Lionhead Studios
27/12/2005 22:49 <REP> Macrovision
15/11/2005 19:41 <REP> Microsoft
19/11/2006 10:52 <REP> Motive
18/02/2007 13:12 <REP> MotiveSysIDs
24/03/2006 18:53 <REP> nView_Profiles
13/01/2007 10:02 <REP> OrbNetworks
26/12/2005 11:43 <REP> PACE Anti-Piracy
28/11/2006 19:50 <REP> RoboForm
16/11/2005 17:04 <REP> SBT
02/07/2006 17:11 <REP> Skype
10/04/2006 16:12 <REP> Sony Corporation
29/12/2006 22:56 <REP> Spybot - Search & Destroy
07/04/2006 20:10 <REP> Symantec
05/03/2007 19:03 <REP> tons license platform book
16/11/2005 14:02 <REP> UDL
24/11/2006 21:42 <REP> Ultima_T15
09/06/2006 22:33 <REP> Vivendi Universal Games
15/11/2005 14:32 <REP> Windows Genuine Advantage
23/11/2006 18:47 <REP> Yahoo!
15/11/2005 19:42 62 desktop.ini
24/11/2006 21:42 20 PKP_DLbz.DAT
03/12/2005 09:08 1ÿ755 QTSBandwidthCache
3 fichier(s) 1ÿ837 octets
31 R‚p(s) 21ÿ840ÿ150ÿ528 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est 2056-FBB7
R‚pertoire de C:\Documents and Settings\Default User\Application Data
15/11/2005 19:41 <REP> .
15/11/2005 19:41 <REP> ..
15/11/2005 19:41 <REP> Microsoft
15/11/2005 19:42 62 desktop.ini
1 fichier(s) 62 octets
3 R‚p(s) 21ÿ840ÿ150ÿ528 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est 2056-FBB7
R‚pertoire de C:\Documents and Settings\Default User\Local Settings\Application Data
15/11/2005 19:42 <REP> .
15/11/2005 19:42 <REP> ..
15/11/2005 18:53 <REP> Microsoft
0 fichier(s) 0 octets
3 R‚p(s) 21ÿ840ÿ150ÿ528 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est 2056-FBB7
R‚pertoire de C:\Documents and Settings\LocalService\Application Data
15/11/2005 18:58 <REP> .
15/11/2005 18:58 <REP> ..
15/11/2005 18:58 <REP> Microsoft
02/06/2006 18:49 <REP> Webroot
0 fichier(s) 0 octets
4 R‚p(s) 21ÿ840ÿ146ÿ432 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est 2056-FBB7
R‚pertoire de C:\Documents and Settings\LocalService\Local Settings\Application Data
15/11/2005 18:58 <REP> .
15/11/2005 18:58 <REP> ..
15/11/2005 18:58 <REP> Microsoft
0 fichier(s) 0 octets
3 R‚p(s) 21ÿ840ÿ146ÿ432 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est 2056-FBB7
R‚pertoire de C:\Documents and Settings\NetworkService\Application Data
15/11/2005 18:56 <REP> .
15/11/2005 18:56 <REP> ..
15/11/2005 18:56 <REP> Microsoft
0 fichier(s) 0 octets
3 R‚p(s) 21ÿ840ÿ146ÿ432 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est 2056-FBB7
R‚pertoire de C:\Documents and Settings\NetworkService\Local Settings\Application Data
15/11/2005 18:56 <REP> .
15/11/2005 18:56 <REP> ..
15/11/2005 18:56 <REP> Microsoft
0 fichier(s) 0 octets
3 R‚p(s) 21ÿ840ÿ146ÿ432 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est 2056-FBB7
R‚pertoire de C:\Documents and Settings\SYSTEM
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est 2056-FBB7
R‚pertoire de C:\Documents and Settings\utilisateur\Application Data
15/11/2005 18:59 <REP> .
15/11/2005 18:59 <REP> ..
30/03/2006 19:05 <REP> 3M
16/11/2005 19:04 <REP> Adobe
20/03/2006 10:48 <REP> AdobeUM
16/12/2005 20:34 <REP> Ahead
16/11/2005 15:15 <REP> Apple Computer
18/11/2005 20:22 <REP> ArcSoft
05/03/2007 19:03 <REP> BitDownload
03/01/2007 22:31 <REP> CamfrogWEB
19/08/2006 20:34 <REP> CamTrack
16/11/2005 16:54 <REP> Canon
15/11/2005 16:49 <REP> CyberLink
02/02/2006 14:40 <REP> EoRezo
17/11/2005 11:05 <REP> EPSON
16/11/2005 15:18 <REP> Google
04/01/2006 11:45 <REP> Help
27/10/2006 22:48 <REP> ICQ Toolbar
15/11/2005 18:59 <REP> Identities
07/04/2006 20:19 <REP> IsolatedStorage
24/11/2006 09:18 <REP> iView
06/07/2006 22:19 <REP> Lionhead Studios
06/09/2006 17:37 <REP> Logitech
18/11/2005 22:42 <REP> Macromedia
10/03/2007 15:43 <REP> Media Player Classic
15/11/2005 18:59 <REP> Microsoft
16/11/2005 17:01 <REP> Microsoft Web Folders
20/11/2006 05:26 <REP> Motive
09/12/2005 21:53 <REP> Mozilla
18/02/2006 16:20 <REP> NetMedia Providers
24/11/2006 21:41 <REP> Nikon
18/04/2006 10:59 <REP> Nvu
18/04/2006 10:16 <REP> OpenOffice.org1.9.104
10/04/2006 17:02 <REP> OpenOffice.org2
30/11/2006 19:28 <REP> Opera
26/12/2005 11:43 <REP> PACE Anti-Piracy
05/03/2007 19:03 <REP> Program Ace
18/02/2006 16:20 <REP> Publish Providers
02/07/2006 17:11 <REP> Skype
18/02/2006 16:20 <REP> Sonic Foundry
10/04/2006 16:12 <REP> Sony Corporation
22/11/2005 15:18 <REP> Sun
11/03/2006 14:05 <REP> Talkback
09/12/2005 21:55 <REP> Thunderbird
12/04/2006 08:55 <REP> Wallpaper
15/11/2005 18:59 62 desktop.ini
06/06/2006 10:50 70ÿ568 GDIPFONTCACHEV1.DAT
2 fichier(s) 70ÿ630 octets
45 R‚p(s) 21ÿ840ÿ146ÿ432 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est 2056-FBB7
R‚pertoire de C:\Documents and Settings\utilisateur\Local Settings\Application Data
15/11/2005 18:59 <REP> .
15/11/2005 18:59 <REP> ..
20/03/2006 09:51 <REP> Adobe
20/11/2005 11:05 <REP> Ahead
16/11/2005 15:15 <REP> Apple Computer
07/04/2006 20:19 <REP> ApplicationHistory
09/12/2005 21:33 <REP> Google
26/12/2005 12:03 <REP> GuYs2Vdk
04/01/2006 11:45 <REP> Help
16/11/2005 14:16 <REP> Identities
14/02/2006 18:37 <REP> Mes Cr‚ations
15/11/2005 18:59 <REP> Microsoft
04/02/2006 20:44 <REP> Mon Livre Photo by CeWe
09/12/2005 21:53 <REP> Mozilla
24/11/2006 21:47 <REP> Nikon
26/12/2005 11:43 <REP> PACE Anti-Piracy
11/03/2006 14:05 <REP> Thunderbird
16/12/2005 20:29 33ÿ280 DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
07/04/2006 20:19 134 fusioncache.dat
21/11/2005 20:56 70ÿ568 GDIPFONTCACHEV1.DAT
15/11/2005 19:05 2ÿ112ÿ766 IconCache.db
4 fichier(s) 2ÿ216ÿ748 octets
17 R‚p(s) 21ÿ840ÿ142ÿ336 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est 2056-FBB7
R‚pertoire de C:\WINDOWS\system32\config\systemprofile\Application Data
15/11/2005 18:55 <REP> .
15/11/2005 18:55 <REP> ..
15/11/2005 18:55 <REP> Microsoft
15/11/2005 18:55 62 desktop.ini
1 fichier(s) 62 octets
3 R‚p(s) 21ÿ840ÿ142ÿ336 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est 2056-FBB7
R‚pertoire de C:\WINDOWS\system32\config\systemprofile\Local Settings\Application Data
15/11/2005 18:55 <REP> .
15/11/2005 18:55 <REP> ..
15/11/2005 18:55 <REP> Microsoft
0 fichier(s) 0 octets
3 R‚p(s) 21ÿ840ÿ142ÿ336 octets libres
******************************************
Recherche des taches planifiées dans C:\WINDOWS\tasks
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est 2056-FBB7
R‚pertoire de C:\WINDOWS\Tasks
13/03/2007 13:06 330 MP Scheduled Scan.job
05/03/2007 19:42 290 B1F2CC9093C54A14.job
21/12/2006 22:10 434 User_Feed_Synchronization-{FEA6444B-F0E6-4309-8662-D78225FAEBFA}.job
04/11/2006 23:35 284 AppleSoftwareUpdate.job
15/11/2005 18:58 6 SA.DAT
15/11/2005 18:51 65 desktop.ini
15/11/2005 18:51 <REP> ..
15/11/2005 18:51 <REP> .
6 fichier(s) 1ÿ409 octets
2 R‚p(s) 21ÿ840ÿ142ÿ336 octets libres
******************************************
## Répertoires de C:\Program Files
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est 2056-FBB7
R‚pertoire de C:\Program Files
13/03/2007 13:02 <REP> .
13/03/2007 13:02 <REP> ..
14/02/2007 22:01 <REP> Adobe
18/02/2007 22:40 <REP> adslTV
11/01/2006 12:24 <REP> Ahead
15/11/2005 20:55 <REP> Alwil Software
15/11/2005 19:09 <REP> Analog Devices
07/03/2007 13:15 <REP> Apple Software Update
13/03/2007 07:58 <REP> ArcadeRockstar
08/08/2006 17:34 <REP> ArcSoft
15/11/2005 14:10 <REP> ASUSTek
05/03/2007 19:58 <REP> BitDownload
07/02/2007 18:47 <REP> Canon
11/03/2007 11:13 <REP> Capturino 1.4
02/07/2006 13:46 <REP> CCleaner
02/07/2006 16:52 <REP> CDex_150
12/03/2007 14:05 <REP> CFWebAdvancedU
18/02/2007 13:13 <REP> Club-Internet
19/11/2006 10:52 <REP> Common Files
15/11/2005 18:50 <REP> ComPlus Applications
30/06/2006 18:28 <REP> CopyPod
15/11/2005 14:10 <REP> CyberLink
30/08/2006 14:42 <REP> directx
05/03/2007 20:35 <REP> Emoticons-plus.com
14/03/2007 17:55 <REP> eMule
01/02/2007 23:02 <REP> epson
11/03/2007 21:57 <REP> Fichiers communs
07/06/2006 22:38 <REP> FileZilla
10/11/2006 18:05 <REP> Futuremark
05/03/2007 21:04 <REP> Google
20/10/2006 08:46 <REP> ICQLite
01/02/2007 22:58 <REP> ICQToolbar
16/02/2007 09:52 <REP> Internet Explorer
07/03/2007 13:22 <REP> iPod
07/03/2007 13:22 <REP> iTunes
24/11/2006 09:18 <REP> iView MediaPro3
04/03/2007 11:02 <REP> Java
25/11/2005 20:06 <REP> Java(2)
07/02/2007 22:50 <REP> Lionhead Studios Ltd
19/01/2007 16:14 <REP> Logitech
25/08/2006 21:49 <REP> Macromedia
14/02/2006 18:37 <REP> Mes Cr‚ations
15/11/2005 16:44 <REP> Messenger
15/11/2006 22:00 <REP> microsoft frontpage
01/02/2007 23:09 <REP> Microsoft Office
18/02/2007 22:43 <REP> Motive
15/11/2005 18:50 <REP> Movie Maker
12/03/2007 13:05 <REP> Mozilla Firefox
02/03/2007 19:23 <REP> Mozilla Thunderbird
15/11/2005 18:49 <REP> MSN
15/11/2005 18:49 <REP> MSN Gaming Zone
11/02/2007 11:13 <REP> MSN Messenger
01/12/2006 14:01 <REP> MSXML 4.0
05/03/2007 20:42 <REP> Multi_Media_France
08/01/2006 22:47 <REP> NetMeeting
24/11/2006 21:40 <REP> Nikon
14/02/2007 22:21 <REP> Notepad++
10/04/2006 16:55 <REP> OpenOffice.org 2.0
18/02/2007 19:11 <REP> Opera
13/01/2007 10:02 <REP> Orb Networks
14/12/2006 18:55 <REP> Outlook Express
13/03/2007 21:36 <REP> PeerTV
11/03/2007 21:45 <REP> Philips
28/02/2007 21:02 <REP> Picasa2
05/03/2007 19:41 <REP> Program Ace
07/03/2007 13:17 <REP> QuickTime
02/07/2006 13:47 <REP> RegCleaner
26/05/2006 12:14 <REP> RescuePROT
10/03/2007 15:42 <REP> Satsuki Decoder Pack
07/04/2006 18:35 <REP> Screens
16/07/2006 09:43 <REP> SereneScreen
01/11/2006 23:13 <REP> SETI@home
28/11/2006 19:49 <REP> Siber Systems
29/12/2006 21:53 <REP> Skype
16/11/2005 17:04 <REP> Snapshot Viewer
18/02/2006 16:19 <REP> Sonic Foundry Setup
13/03/2007 13:17 <REP> Spybot - Search & Destroy
01/02/2007 22:59 <REP> Symantec
16/11/2006 23:16 <REP> Ubi Soft
15/11/2005 19:08 <REP> VIA
04/08/2006 12:01 <REP> VID_0E8F&PID_106F
29/07/2006 23:01 <REP> Videora
29/07/2006 16:38 <REP> VideoraiPodConverter
29/12/2006 23:30 <REP> Wallpaper
12/03/2007 14:26 <REP> Webroot
13/03/2007 13:02 <REP> Windows Defender
03/01/2007 21:01 <REP> Windows Media Connect 2
03/01/2007 21:17 <REP> Windows Media Player
15/11/2005 18:49 <REP> Windows NT
08/03/2007 14:10 <REP> WinRAR
25/11/2005 20:11 <REP> WinRar v2.80 vf
15/11/2005 18:53 <REP> xerox
16/11/2005 16:55 <REP> X-Press_4.00
22/02/2007 12:10 <REP> Yahoo!
02/06/2006 18:23 <REP> YourWare Solutions
0 fichier(s) 0 octets
95 R‚p(s) 21ÿ840ÿ138ÿ240 octets libres
******************************************
## Popups autorisées
* Internet Explorer
! REG.EXE VERSION 3.0
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows\Allow
www.01net.com REG_BINARY
www.gifs-animes.com REG_BINARY
www.driverguide.com REG_BINARY
www.emuleplus.tk REG_BINARY
netbios-wait.com REG_SZ
www.netbios-wait.com REG_SZ
netsearchsoft.com REG_SZ
www.netsearchsoft.com REG_SZ
* Mozilla Firefox (1 autorisé 2 interdit)
---------- C:\DOCUMENTS AND SETTINGS\UTILISATEUR\APPLICATION DATA\MOZILLA\FIREFOX\PROFILES\LY7DBK14.DEFAULT\HOSTPERM.1
host popup 1 www.01net.com
******************************************
## Registre
* [HKEY_CURRENT_USER\\Software\Microsoft\Internet Explorer\Main]
Search Bar REG_SZ http://www.google.com/ie
* [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
download one REG_SZ C:\DOCUME~1\UTILIS~1\APPLIC~1\PROGRA~1\owns copy idol.exe
* [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg]
command REG_SZ C:\DOCUME~1\UTILIS~1\APPLIC~1\PROGRA~1\owns copy idol.exe
command REG_SZ C:\Documents and Settings\All Users\Application Data\tons license platform book\Real third.exe
******************************************
## Zones de sécurité
* HKCU Domains (4)
* P3P History (5)
******************************************
## Recherche C:\WINDOWS\*.htm, "C:\WINDOWS\*.gif"
*************** Fin du rapport ****************
Pop-up CiD et pub intempestive
Astucien
À LA UNE
PRATIQUE
LOGITHÈQUE
TABLETTE ET MOBILE
BONS PLANS
FONDS D'ÉCRAN
JEUX
FORUM
