http://img228.imageshack.us/my.php?image=sdfsfdssa4.jpg
tien regard !!!!
ji suis arrivéééééééééééééééééééééééééééééé ![]()
-----------------------[ Lop S&D 4.2.0-8 XP/Vista ]---------------------
[ Windows 'Longhorn' (NT 6.0) Workstation Build 6000 ]
[ USER : jeremie ] [ "C:\Lop SD" ] [ Selection : 2 ]
[ 16/05/2008 | 2:51:00,42 ] [ PC : PC-DE-JEREMIE ]
[ MAJ : 11-05-2008 | 18:25 ]
[ UAC => 0 ]
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ SUPPRESSION /////////////////////////////
Supprimé! - C:\ProgramData\Time Dead Warn Default\Flaw army.exe
Supprimé! - C:\ProgramData\BYTE FRAG FRAG.3gk450
Supprimé! - C:\ProgramData\BYTE FRAG FRAG.7hx8k
Supprimé! - C:\ProgramData\lies each title.9z2xwu
Supprimé! - C:\ProgramData\Time Dead Warn Default
Restauré! - Fichier Hosts
//////////////////////////////////////-\\\\\\\\\\\
\\\\\\\\\\\\\\\\\\\\\\\\\\\\
-------------[ Listing des dossiers dans Application Data ]------------
[27/04/2008|14:54]
C:\Users\jeremie\AppData\Roaming\Adobe\Linguistics
[27/04/2008|14:53] C:\Users\jeremie\AppData\Roaming\Adobe\Acrobat
[24/04/2008|08:53]
C:\Users\jeremie\AppData\Roaming\CyberLink\MediaCa
che
[24/04/2008|08:53]
C:\Users\jeremie\AppData\Roaming\CyberLink\MagicSp
orts
[27/04/2008|03:32] C:\Users\jeremie\AppData\Roaming\Google\Local Search History
[15/05/2008|13:36]
C:\Users\jeremie\AppData\Roaming\GRETECH\GomPlayer
[24/04/2008|08:52]
C:\Users\jeremie\AppData\Roaming\Identities\{CC009
A59-DA4F-47A3-8C98-EA7F3C768F80}
[06/05/2008|22:37]
C:\Users\jeremie\AppData\Roaming\InstallShield\Upd
ateService
[16/05/2008|01:23]
C:\Users\jeremie\AppData\Roaming\LimeWire\library.
dat
[16/05/2008|01:22]
C:\Users\jeremie\AppData\Roaming\LimeWire\filters.
props
[16/05/2008|01:22]
C:\Users\jeremie\AppData\Roaming\LimeWire\question
s.props
[16/05/2008|01:22]
C:\Users\jeremie\AppData\Roaming\LimeWire\tables.p
rops
[16/05/2008|01:22]
C:\Users\jeremie\AppData\Roaming\LimeWire\installa
tion.props
[16/05/2008|01:22]
C:\Users\jeremie\AppData\Roaming\LimeWire\mojito.p
rops
[16/05/2008|01:22]
C:\Users\jeremie\AppData\Roaming\LimeWire\limewire
.props
[16/05/2008|01:15]
C:\Users\jeremie\AppData\Roaming\LimeWire\fileurns
.cache
[15/05/2008|04:26]
C:\Users\jeremie\AppData\Roaming\LimeWire\createti
mes.cache
[09/05/2008|08:58]
C:\Users\jeremie\AppData\Roaming\LimeWire\ttrees.c
ache
[09/05/2008|08:58]
C:\Users\jeremie\AppData\Roaming\LimeWire\ttroot.c
ache
[09/05/2008|08:58]
C:\Users\jeremie\AppData\Roaming\LimeWire\spam.dat
[09/05/2008|08:58]
C:\Users\jeremie\AppData\Roaming\LimeWire\gnutella
.net
[01/05/2008|02:32]
C:\Users\jeremie\AppData\Roaming\LimeWire\response
s.cache
[01/05/2008|02:26]
C:\Users\jeremie\AppData\Roaming\LimeWire\simpp.xm
l
[26/04/2008|05:26] C:\Users\jeremie\AppData\Roaming\LimeWire\xml
[26/04/2008|05:18]
C:\Users\jeremie\AppData\Roaming\LimeWire\fileurns
.bak
[26/04/2008|05:18]
C:\Users\jeremie\AppData\Roaming\LimeWire\.AppSpec
ialShare
[26/04/2008|05:17] C:\Users\jeremie\AppData\Roaming\LimeWire\themes
[24/04/2008|12:17] C:\Users\jeremie\AppData\Roaming\Macromedia\Flash Player
[11/05/2008|21:34]
C:\Users\jeremie\AppData\Roaming\Malwarebytes\Malw
arebytes' Anti-Malware
[15/05/2008|17:45] C:\Users\jeremie\AppData\Roaming\Microsoft\MSN Messenger
[15/05/2008|13:30]
C:\Users\jeremie\AppData\Roaming\Microsoft\Templat
es
[14/05/2008|03:07]
C:\Users\jeremie\AppData\Roaming\Microsoft\Windows
Photo Gallery
[10/05/2008|02:38] C:\Users\jeremie\AppData\Roaming\Microsoft\HTML Help
[09/05/2008|13:31]
C:\Users\jeremie\AppData\Roaming\Microsoft\UProof
[09/05/2008|13:31] C:\Users\jeremie\AppData\Roaming\Microsoft\Proof
[25/04/2008|13:00]
C:\Users\jeremie\AppData\Roaming\Microsoft\Office
[25/04/2008|13:00] C:\Users\jeremie\AppData\Roaming\Microsoft\Excel
[25/04/2008|02:56]
C:\Users\jeremie\AppData\Roaming\Microsoft\Speech
[24/04/2008|22:35]
C:\Users\jeremie\AppData\Roaming\Microsoft\Documen
t Building Blocks
[24/04/2008|22:35] C:\Users\jeremie\AppData\Roaming\Microsoft\Word
[24/04/2008|22:35]
C:\Users\jeremie\AppData\Roaming\Microsoft\AddIns
[24/04/2008|12:32]
C:\Users\jeremie\AppData\Roaming\Microsoft\Crypto
[24/04/2008|12:32]
C:\Users\jeremie\AppData\Roaming\Microsoft\Interne
t Explorer
[24/04/2008|12:24] C:\Users\jeremie\AppData\Roaming\Microsoft\MMC
[24/04/2008|12:23]
C:\Users\jeremie\AppData\Roaming\Microsoft\Identit
yCRL
[24/04/2008|12:15]
C:\Users\jeremie\AppData\Roaming\Microsoft\Windows
[24/04/2008|08:53] C:\Users\jeremie\AppData\Roaming\Microsoft\CLR Security Config
[24/04/2008|08:52]
C:\Users\jeremie\AppData\Roaming\Microsoft\SystemC
ertificates
[24/04/2008|08:52]
C:\Users\jeremie\AppData\Roaming\Microsoft\Protect
[24/04/2008|08:16]
C:\Users\jeremie\AppData\Roaming\Microsoft\Credent
ials
[26/04/2008|16:29] C:\Users\jeremie\AppData\Roaming\Mozilla\Firefox
[16/05/2008|02:27]
C:\Users\jeremie\AppData\Roaming\nvModes.001\nvMod
es.001
[14/05/2008|12:57]
C:\Users\jeremie\AppData\Roaming\nvModes.dat\nvMod
es.dat
[16/05/2008|02:30] C:\Users\jeremie\AppData\Roaming\Packard Bell\Setup my PC
[11/05/2008|22:20] C:\Users\jeremie\AppData\Roaming\Packard Bell\Smart Restore
[14/05/2008|02:15]
C:\Users\jeremie\AppData\Roaming\Roxio\MediaManage
r9
[06/05/2008|04:11]
C:\Users\jeremie\AppData\Roaming\SecuROM\UserData
[16/05/2008|02:32] C:\Users\jeremie\AppData\Roaming\Shareaza\Data
[16/05/2008|02:26]
C:\Users\jeremie\AppData\Roaming\Shareaza\Torrents
[16/05/2008|02:26]
C:\Users\jeremie\AppData\Roaming\Shareaza\Collecti
ons
[25/04/2008|14:40]
C:\Users\jeremie\AppData\Roaming\Symantec\Cleanup
[24/04/2008|08:55]
C:\Users\jeremie\AppData\Roaming\Talkback\MozillaO
rg
[16/05/2008|02:48] C:\Users\jeremie\AppData\Roaming\vlc\vlcrc
[24/04/2008|20:55] C:\Users\jeremie\AppData\Roaming\vlc\cache
----------------[ Tâches planifiées dans C:\Windows\tasks ]---------------
[10/05/2008 00:57][--a------] C:\Windows\tasks\HDReg.job
[16/05/2008 02:30][--a------] C:\Windows\tasks\Extension de garantie.job
[16/05/2008 02:30][--a------] C:\Windows\tasks\Recovery DVD Creator.job
[16/05/2008 02:25][--ah-----] C:\Windows\tasks\SA.DAT
[16/05/2008 02:23][--a------] C:\Windows\tasks\SCHEDLGU.TXT
------[ Listing des dossiers dans C:\ProgramData ]------
[24/04/2008|04:30]
C:\ProgramData\{174892B1-CBE7-44F5-86FF-AB555EFD73
A3}
[27/04/2008|15:01] C:\ProgramData\Adobe
[02/11/2006|15:02] C:\ProgramData\Application Data
[09/05/2008|22:21] C:\ProgramData\BMfb5537a1.txt
[11/05/2008|22:08] C:\ProgramData\BMfb5537a1.xml
[24/04/2008|08:10] C:\ProgramData\Bureau
[24/04/2008|04:20] C:\ProgramData\CyberLink
[02/11/2006|15:02] C:\ProgramData\Desktop
[02/11/2006|15:02] C:\ProgramData\Documents
[24/04/2008|08:10] C:\ProgramData\Favoris
[02/11/2006|15:02] C:\ProgramData\Favorites
[24/04/2008|04:19] C:\ProgramData\Google
[08/05/2008|21:03] C:\ProgramData\GRETECH
[24/04/2008|04:18] C:\ProgramData\InstallShield
[11/05/2008|21:34] C:\ProgramData\Malwarebytes
[24/04/2008|08:10] C:\ProgramData\Menu D‚marrer
[04/05/2008|18:57] C:\ProgramData\Messenger Plus!
[14/05/2008|21:41] C:\ProgramData\Microsoft
[14/05/2008|03:01] C:\ProgramData\Microsoft Help
[24/04/2008|08:10] C:\ProgramData\ModŠles
[25/04/2008|13:03] C:\ProgramData\NVIDIA
[12/05/2008|12:04] C:\ProgramData\pskt.ini
[24/04/2008|04:37] C:\ProgramData\Roxio
[24/04/2008|04:31] C:\ProgramData\Skype
[24/04/2008|04:18] C:\ProgramData\Sonic
[02/11/2006|15:02] C:\ProgramData\Start Menu
[11/05/2008|15:09] C:\ProgramData\Symantec
[10/05/2008|01:08] C:\ProgramData\TEMP
[02/11/2006|15:02] C:\ProgramData\Templates
[24/04/2008|12:16] C:\ProgramData\WLInstaller
---------------[ Listing des dossiers dans C:\Program Files ]--------------
[24/04/2008|04:30] C:\Program Files\Activation Assistant for the 2007 Microsoft Office suites
[27/04/2008|15:00] C:\Program Files\Adobe
[01/05/2008|01:09] C:\Program Files\Alldj_Video_Converter
[10/05/2008|01:33] C:\Program Files\Alwil Software
[06/05/2008|22:55] C:\Program Files\Camera Assistant Software Lite
[02/05/2008|16:42] C:\Program Files\CamStudio
[27/04/2008|15:00] C:\Program Files\Common Files
[25/04/2008|12:51] C:\Program Files\CONEXANT
[24/04/2008|04:20] C:\Program Files\CyberLink
[24/04/2008|03:55] C:\Program Files\desktop.ini
[25/04/2008|12:59] C:\Program Files\DIFX
[25/04/2008|12:24] C:\Program Files\EA GAMES
[04/05/2008|19:22] C:\Program Files\EA SPORTS
[14/05/2008|01:57] C:\Program Files\Fake Webcam
[24/04/2008|08:10] C:\Program Files\Fichiers communs [C:\Program Files\Common Files]
[25/04/2008|12:24] C:\Program Files\GameSpy Arcade
[24/04/2008|04:19] C:\Program Files\Google
[08/05/2008|21:02] C:\Program Files\GRETECH
[24/04/2008|04:10] C:\Program Files\HDReg
[06/05/2008|22:55] C:\Program Files\InstallShield Installation Information
[24/04/2008|13:20] C:\Program Files\Internet Explorer
[26/04/2008|03:49] C:\Program Files\Java
[26/04/2008|03:43] C:\Program Files\LimeWire
[24/04/2008|12:30] C:\Program Files\Messenger Plus! Live
[24/04/2008|13:11] C:\Program Files\Microsoft CAPICOM 2.1.0.2
[02/11/2006|14:37] C:\Program Files\Microsoft Games
[24/04/2008|04:29] C:\Program Files\Microsoft Office
[24/04/2008|04:34] C:\Program Files\Microsoft Works
[24/04/2008|04:28] C:\Program Files\Microsoft.NET
[24/04/2008|13:01] C:\Program Files\Movie Maker
[10/05/2008|16:35] C:\Program Files\Mozilla Firefox
[02/11/2006|14:37] C:\Program Files\MSBuild
[02/11/2006|14:37] C:\Program Files\MSN
[24/04/2008|12:52] C:\Program Files\MSXML 4.0
[24/04/2008|04:31] C:\Program Files\Packard Bell
[02/05/2008|03:31] C:\Program Files\PhotoFiltre
[02/11/2006|14:37] C:\Program Files\Reference Assemblies
[24/04/2008|04:18] C:\Program Files\Roxio
[24/04/2008|04:11] C:\Program Files\Seagate
[27/04/2008|05:03] C:\Program Files\Shareaza
[24/04/2008|04:31] C:\Program Files\Skype
[16/05/2008|02:20] C:\Program Files\SLD Codec Pack
[27/04/2008|06:29] C:\Program Files\Switch Off
[11/05/2008|03:09] C:\Program Files\Trend Micro
[02/11/2006|15:01] C:\Program Files\Uninstall Information
[16/05/2008|02:20] C:\Program Files\VideoLAN
[16/05/2008|02:31] C:\Program Files\VistaCodecPack
[24/04/2008|13:28] C:\Program Files\Windows Calendar
[24/04/2008|13:01] C:\Program Files\Windows Collaboration
[24/04/2008|13:10] C:\Program Files\Windows Defender
[24/04/2008|13:01] C:\Program Files\Windows Journal
[24/04/2008|12:26] C:\Program Files\Windows Live
[14/05/2008|03:01] C:\Program Files\Windows Mail
[24/04/2008|13:39] C:\Program Files\Windows Media Player
[24/04/2008|08:10] C:\Program Files\Windows NT
[24/04/2008|13:01] C:\Program Files\Windows Photo Gallery
[24/04/2008|13:20] C:\Program Files\Windows Sidebar
------[ Listing des dossiers dans C:\Program Files\Common Files ]------
[27/04/2008|15:01] C:\Program Files\Common Files\Adobe
[24/04/2008|04:29] C:\Program Files\Common Files\DESIGNER
[24/04/2008|04:20] C:\Program Files\Common Files\InstallShield
[26/04/2008|03:47] C:\Program Files\Common Files\Java
[24/04/2008|13:00] C:\Program Files\Common Files\microsoft shared
[24/04/2008|04:18] C:\Program Files\Common Files\Roxio Shared
[02/11/2006|13:18] C:\Program Files\Common Files\Services
[24/04/2008|04:31] C:\Program Files\Common Files\Skype
[24/04/2008|04:18] C:\Program Files\Common Files\Sonic Shared
[02/11/2006|13:18] C:\Program Files\Common Files\SpeechEngines
[24/04/2008|04:18] C:\Program Files\Common Files\SureThing Shared
[11/05/2008|15:17] C:\Program Files\Common Files\Symantec Shared
[24/04/2008|13:04] C:\Program Files\Common Files\System
[24/04/2008|12:22] C:\Program Files\Common Files\WindowsLiveInstaller
[24/04/2008|04:10] C:\Program Files\Common Files\Wise Installation Wizard
---------------------------[ Process ]--------------------------
... 59
... OK !
----------------------[ Recherche avec S_Lop ]---------------------
Aucun fichier / dossier Lop trouvé !
-----------------[ Recherche de Fichiers / Dossiers Lop ]-----------------
Aucun fichier / dossier Lop trouvé !
----------------------[ Verification du Registre ]----------------------
..... OK !
--------------------[ Verification du fichier Hosts ]---------------------
Fichier Hosts PROPRE
----------------[ Recherche de fichiers avec Catchme ]-----------------
catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-05-16 02:51:23
Windows 6.0.6000 NTFS
scanning hidden processes ...
scanning hidden files ...
scan completed successfully
hidden processes: 0
hidden files: 0
--------------------[ Recherche d'autres infections ]---------------------
Aucune autre infection trouvée !
/!\ [Fich:1615][Doss:15] C:\Users\jeremie\AppData\Local\Temp
/!\ [Fich:212][Doss:1]
C:\Users\jeremie\AppData\Roaming\MICROS~1\Windows\
Cookies
/!\ [Fich:2593][Doss:8]
C:\Users\jeremie\AppData\Local\MICROS~1\Windows\TE
MPOR~1\content.IE5
[ UAC => 1 ]
--------------------[ Fin du rapport a 2:52:08,53 ]----------
Tu te débrouilles bien
Ça s'améliore ?
Reposte un rapport HijackThis.
faut faire comment déja ?
Désinfections! Woohoo! ![]()
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:20:40, on 13/05/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16643)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktopCrawl.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Shareaza\Shareaza.exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\DllHost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://securityresponse.symantec.com/avcenter/fix_homepage
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Google\Google_BAE\BAE.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [MSPService] C:\Program
Files\CyberLink\MagicSports\Kernel\MagicSports\MSP
Mirage.exe
O4 - HKLM\..\Run: [toolbar_eula_launcher] C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SBI] C:\Users\jeremie\Downloads\install_sbd_fr.exe
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware Reboot] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [SmpcSys] C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [AIMLIST] "C:\ProgramData\BYTE FRAG FRAG.3gk450"
O4 - HKCU\..\Run: [warn default inter for] "C:\ProgramData\lies each title.9z2xwu"
O4 - HKCU\..\Run: [Shareaza] "C:\Program Files\Shareaza\Shareaza.exe" -tray
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKCU\..\Run: [BMfb5537a1] Rundll32.exe
"C:\Users\jeremie\AppData\Local\Temp\vqpcwkbj.dll"
,s
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: E&xporter vers Microsoft Excel -
res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: {BD8667B7-38D8-4C77-B580-18C3E146372C} (Creative Toolbox Plug-in) - http://bmm.imgag.com/imgamgag/cp/install/crusher-fr.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
--
End of file - 8379 bytes