Lord wrote:Ok. Téléchargez avec ce lien direct HijackThis (Lien direct) et exécutez-le, en cliquant sur le bouton "Do a system scan and save a logfile".
À la fin vous aurez une fenêtre du bloc-notes de Windows qui vous permettra de copier le résultat du log. Fermez ensuite "HijackThis" et dans un prochain message, postez-nous un "Coller" de ce log. On vous indiquera alors quelles-sont les lignes à corriger, s'il y a lieu?
[RÉSOLU] impossible de restaurer.....
[b][color=green]Gilles[/color][/b]
Windows XP-PRO, SP2.
Votre ordinateur est envahi par des intrus?
Sélectionnez l'un des "scans en ligne" :arrow: [url=http://forums.sosmonordi.com/viewtopic.php?t=69]ICI[/url]
Windows XP-PRO, SP2.
Votre ordinateur est envahi par des intrus?
Sélectionnez l'un des "scans en ligne" :arrow: [url=http://forums.sosmonordi.com/viewtopic.php?t=69]ICI[/url]
Si vous refaites un "Copier" du log de "HijackThis", et bien, le presse-papier devrait contenir la version du dernier document "Copier" que vous avez fait. Le "Coller" ne devrait plus contenir les images de "Photos Village".
[b][color=green]Gilles[/color][/b]
Windows XP-PRO, SP2.
Votre ordinateur est envahi par des intrus?
Sélectionnez l'un des "scans en ligne" :arrow: [url=http://forums.sosmonordi.com/viewtopic.php?t=69]ICI[/url]
Windows XP-PRO, SP2.
Votre ordinateur est envahi par des intrus?
Sélectionnez l'un des "scans en ligne" :arrow: [url=http://forums.sosmonordi.com/viewtopic.php?t=69]ICI[/url]
Logfile of HijackThis v1.99.1
Scan saved at 20:25:06, on 2006-06-21
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\System32\DVDRAMSV.exe
C:\WINDOWS\system32\LxrJD31s.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\ezSP_Px.exe
C:\WINDOWS\system32\TPWRTRAY.EXE
C:\Program Files\TOSHIBA\TouchED\TouchED.Exe
C:\Program Files\TOSHIBA\Wireless Hotkey\TosHKCW.exe
C:\WINDOWS\system32\TFNF5.exe
C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\HP Print Screen\PrnSys.exe
C:\Program Files\Analog Devices\SoundMAX\PmProxy.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
C:\Program Files\Toshiba\ConfigFree\NDSTray.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\ltmoh\Ltmoh.exe
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Drag'n Drop CD+DVD\BinFiles\DragDrop.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\WINDOWS\System32\00THotkey.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\PROGRA~1\PANICW~1\POP-UP~1\PSFREE.EXE
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Gadwin Systems\PrintScreen\PrintScreen.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
C:\WINDOWS\system32\RAMASST.exe
C:\RemindMe\REMINDME.EXE
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\PROGRA~1\Webshots\webshots.scr
C:\Program Files\IncrediMail\bin\IncMail.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Lise Savaria\Local Settings\Temporary Internet Files\Content.IE5\09IBGLUF\HijackThis[1].exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.distributel.net/distributel-portail_fr.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.distributel.net/distributel-portail_fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.votreportail.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.toshiba.ca/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.distributel.net/distributel-portail_fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.distributel.net/distributel-portail_fr.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Distributel
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - Default URLSearchHook is missing
F3 - REG:win.ini: load=???
?
F3 - REG:win.ini: run=???
?
F2 - REG:system.ini: UserInit=C:\WINDOWS\System32\Userinit.exe
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SkypeIEHelper - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\PROGRA~1\Skype\toolbars\SKYPEF~1\SKYPE_~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: NOW!Imaging - {9AA2F14F-E956-44B8-8694-A5B615CDF341} - C:\Program Files\Distributel Web Accelerator\components\NOWImaging.dll (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr-ca\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr-ca\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Skype Toolbar for Internet Explorer - {B13721C7-F507-4982-B2E5-502A71474FED} - C:\Program Files\Skype\toolbars\Skype for Internet Explorer\skype_toolbar.dll
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\System32\ezSP_Px.exe
O4 - HKLM\..\Run: [Tpwrtray] TPWRTRAY.EXE
O4 - HKLM\..\Run: [TouchED] C:\Program Files\TOSHIBA\TouchED\TouchED.Exe
O4 - HKLM\..\Run: [TosHKCW.exe] "C:\Program Files\TOSHIBA\Wireless Hotkey\TosHKCW.exe"
O4 - HKLM\..\Run: [TFNF5] TFNF5.exe
O4 - HKLM\..\Run: [TFncKy] TFncKy.exe /Type 28
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [PrnSys Executable] C:\Program Files\Hewlett-Packard\Digital Imaging\HP Print Screen\PrnSys.exe
O4 - HKLM\..\Run: [PmProxy] C:\Program Files\Analog Devices\SoundMAX\PmProxy.exe
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [NDSTray.exe] "C:\Program Files\Toshiba\ConfigFree\NDSTray.exe"
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb05.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [Drag'n Drop CD+DVD] C:\Program Files\Drag'n Drop CD+DVD\BinFiles\DragDrop.exe /StartUp
O4 - HKLM\..\Run: [CamMonitor] C:\Program Files\Hewlett-Packard\Digital Imaging\\Unload\hpqcmon.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [AQ3HelperStartUp] C:\PROGRA~1\AQUATI~1\AQ3HEL~1.EXE /partner AQ3
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [00THotkey] C:\WINDOWS\System32\00THotkey.exe
O4 - HKLM\..\Run: [000StTHK] 000StTHK.exe
O4 - HKCU\..\Run: [System Soap Pro] C:\PROGRA~1\SYSTEM~1\soap.exe min
O4 - HKCU\..\Run: [Spyware Cleaner] "C:\Program Files\Spyware Cleaner\SpywareCleaner.Exe" /boot
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRA~1\PANICW~1\POP-UP~1\PSFREE.EXE"
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Gadwin PrintScreen 3.1] C:\Program Files\Gadwin Systems\PrintScreen\PrintScreen.exe /nosplash
O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\Launcher.exe
O4 - Startup: RemindMe.lnk = C:\RemindMe\REMINDME.EXE
O4 - Startup: 42 AC Plug.lnk = C:\Program Files\iOpus-AC-Plug\acplug.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O4 - Global Startup: Mises à jour planifiées.lnk = C:\QUICKENW\bagent.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: RAMASST.lnk = C:\WINDOWS\system32\RAMASST.exe
O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\Program Files\IncrediMail\bin\resources\WebMenuImg.htm
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O8 - Extra context menu item: Télécharger Avec &BitSpirit
- C:\Program Files\BitSpirit\bsurl.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: ICQ Pro - {6224f700-cba3-4071-b251-47cb894244cd} - C:\PROGRA~1\ICQ\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - C:\PROGRA~1\ICQ\ICQ.exe
O9 - Extra button: Skype Toolbar for Internet Explorer - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\PROGRA~1\Skype\toolbars\SKYPEF~1\SKYPE_~1.DLL
O9 - Extra 'Tools' menuitem: Skype Toolbar for Internet Explorer - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\PROGRA~1\Skype\toolbars\SKYPEF~1\SKYPE_~1.DLL
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: ShopperReports - Compare travel rates - {946B3E9E-E21A-49c8-9F63-900533FAFE15} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.toshiba.ca/
O16 - DPF: TruePass EPF 7,0,100,684 - https://blrscr3.egs-seg.gc.ca/applets/e ... et-epf.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan8/oscan8.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMe ... loader.cab
O18 - Protocol: bw+0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: offline-8876480 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - C:\WINDOWS\System32\DVDRAMSV.exe
O23 - Service: Lexar JD31 (LxrJD31s) - Unknown owner - C:\WINDOWS\SYSTEM32\LxrJD31s.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
Scan saved at 20:25:06, on 2006-06-21
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\System32\DVDRAMSV.exe
C:\WINDOWS\system32\LxrJD31s.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\ezSP_Px.exe
C:\WINDOWS\system32\TPWRTRAY.EXE
C:\Program Files\TOSHIBA\TouchED\TouchED.Exe
C:\Program Files\TOSHIBA\Wireless Hotkey\TosHKCW.exe
C:\WINDOWS\system32\TFNF5.exe
C:\Program Files\TOSHIBA\Commandes TOSHIBA\TFncKy.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\HP Print Screen\PrnSys.exe
C:\Program Files\Analog Devices\SoundMAX\PmProxy.exe
C:\Program Files\Picasa2\PicasaMediaDetector.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
C:\Program Files\Toshiba\ConfigFree\NDSTray.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\ltmoh\Ltmoh.exe
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Drag'n Drop CD+DVD\BinFiles\DragDrop.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Apoint2K\Apoint.exe
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\WINDOWS\System32\00THotkey.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\PROGRA~1\PANICW~1\POP-UP~1\PSFREE.EXE
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Gadwin Systems\PrintScreen\PrintScreen.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Apoint2K\Apntex.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
C:\WINDOWS\system32\RAMASST.exe
C:\RemindMe\REMINDME.EXE
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\PROGRA~1\Webshots\webshots.scr
C:\Program Files\IncrediMail\bin\IncMail.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Lise Savaria\Local Settings\Temporary Internet Files\Content.IE5\09IBGLUF\HijackThis[1].exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.distributel.net/distributel-portail_fr.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.distributel.net/distributel-portail_fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.votreportail.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.toshiba.ca/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.distributel.net/distributel-portail_fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.distributel.net/distributel-portail_fr.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Distributel
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - Default URLSearchHook is missing
F3 - REG:win.ini: load=???
?
F3 - REG:win.ini: run=???
?
F2 - REG:system.ini: UserInit=C:\WINDOWS\System32\Userinit.exe
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SkypeIEHelper - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\PROGRA~1\Skype\toolbars\SKYPEF~1\SKYPE_~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: NOW!Imaging - {9AA2F14F-E956-44B8-8694-A5B615CDF341} - C:\Program Files\Distributel Web Accelerator\components\NOWImaging.dll (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr-ca\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr-ca\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Skype Toolbar for Internet Explorer - {B13721C7-F507-4982-B2E5-502A71474FED} - C:\Program Files\Skype\toolbars\Skype for Internet Explorer\skype_toolbar.dll
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\System32\ezSP_Px.exe
O4 - HKLM\..\Run: [Tpwrtray] TPWRTRAY.EXE
O4 - HKLM\..\Run: [TouchED] C:\Program Files\TOSHIBA\TouchED\TouchED.Exe
O4 - HKLM\..\Run: [TosHKCW.exe] "C:\Program Files\TOSHIBA\Wireless Hotkey\TosHKCW.exe"
O4 - HKLM\..\Run: [TFNF5] TFNF5.exe
O4 - HKLM\..\Run: [TFncKy] TFncKy.exe /Type 28
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [PrnSys Executable] C:\Program Files\Hewlett-Packard\Digital Imaging\HP Print Screen\PrnSys.exe
O4 - HKLM\..\Run: [PmProxy] C:\Program Files\Analog Devices\SoundMAX\PmProxy.exe
O4 - HKLM\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe
O4 - HKLM\..\Run: [NDSTray.exe] "C:\Program Files\Toshiba\ConfigFree\NDSTray.exe"
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb05.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [Drag'n Drop CD+DVD] C:\Program Files\Drag'n Drop CD+DVD\BinFiles\DragDrop.exe /StartUp
O4 - HKLM\..\Run: [CamMonitor] C:\Program Files\Hewlett-Packard\Digital Imaging\\Unload\hpqcmon.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [AQ3HelperStartUp] C:\PROGRA~1\AQUATI~1\AQ3HEL~1.EXE /partner AQ3
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [00THotkey] C:\WINDOWS\System32\00THotkey.exe
O4 - HKLM\..\Run: [000StTHK] 000StTHK.exe
O4 - HKCU\..\Run: [System Soap Pro] C:\PROGRA~1\SYSTEM~1\soap.exe min
O4 - HKCU\..\Run: [Spyware Cleaner] "C:\Program Files\Spyware Cleaner\SpywareCleaner.Exe" /boot
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRA~1\PANICW~1\POP-UP~1\PSFREE.EXE"
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Gadwin PrintScreen 3.1] C:\Program Files\Gadwin Systems\PrintScreen\PrintScreen.exe /nosplash
O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\Launcher.exe
O4 - Startup: RemindMe.lnk = C:\RemindMe\REMINDME.EXE
O4 - Startup: 42 AC Plug.lnk = C:\Program Files\iOpus-AC-Plug\acplug.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O4 - Global Startup: Mises à jour planifiées.lnk = C:\QUICKENW\bagent.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Adobe Gamma Loader.exe.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: RAMASST.lnk = C:\WINDOWS\system32\RAMASST.exe
O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\Program Files\IncrediMail\bin\resources\WebMenuImg.htm
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O8 - Extra context menu item: Télécharger Avec &BitSpirit
- C:\Program Files\BitSpirit\bsurl.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: ICQ Pro - {6224f700-cba3-4071-b251-47cb894244cd} - C:\PROGRA~1\ICQ\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - C:\PROGRA~1\ICQ\ICQ.exe
O9 - Extra button: Skype Toolbar for Internet Explorer - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\PROGRA~1\Skype\toolbars\SKYPEF~1\SKYPE_~1.DLL
O9 - Extra 'Tools' menuitem: Skype Toolbar for Internet Explorer - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\PROGRA~1\Skype\toolbars\SKYPEF~1\SKYPE_~1.DLL
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: ShopperReports - Compare travel rates - {946B3E9E-E21A-49c8-9F63-900533FAFE15} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.toshiba.ca/
O16 - DPF: TruePass EPF 7,0,100,684 - https://blrscr3.egs-seg.gc.ca/applets/e ... et-epf.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan8/oscan8.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMe ... loader.cab
O18 - Protocol: bw+0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: offline-8876480 - {EEC6C29C-EBBC-4567-B3BA-C01B92F4A83C} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: DVD-RAM_Service - Matsushita Electric Industrial Co., Ltd. - C:\WINDOWS\System32\DVDRAMSV.exe
O23 - Service: Lexar JD31 (LxrJD31s) - Unknown owner - C:\WINDOWS\SYSTEM32\LxrJD31s.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
compac presario
double coeur 3.00gb/500gb
Windows 7
Antivirue Norton
double coeur 3.00gb/500gb
Windows 7
Antivirue Norton
OK. Les lignes suivantes seront à corriger:
Redémarrez ensuite votre ordinateur en mode sans échec et recherchez les fichiers NDSTray.exe", AQ3HEL~1.EXE, soap.exe min, SpywareCleaner.Exe" et acplug.exe et supprimez-les si, ils existent encore. Profitez-en pour désactiver la restauration du système.
Redémarrez votre ordinateur en mode nornal, et réactivez la restauration du système.
Windows XP: Comment activer/désactiver la restauration du système
- R3 - Default URLSearchHook is missing
- F3 - REG:win.ini: load=???
? - F3 - REG:win.ini: run=???
? - F2 - REG:system.ini: UserInit=C:\WINDOWS\System32\Userinit.exe
- O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
- O2 - BHO: NOW!Imaging - {9AA2F14F-E956-44B8-8694-A5B615CDF341} - C:\Program Files\Distributel Web Accelerator\components\NOWImaging.dll (file missing)
- O4 - HKLM\..\Run: [NDSTray.exe] "C:\Program Files\Toshiba\ConfigFree\NDSTray.exe"
- O4 - HKLM\..\Run: [AQ3HelperStartUp] C:\PROGRA~1\AQUATI~1\AQ3HEL~1.EXE /partner AQ3
- O4 - HKCU\..\Run: [System Soap Pro] C:\PROGRA~1\SYSTEM~1\soap.exe min
- O4 - HKCU\..\Run: [Spyware Cleaner] "C:\Program Files\Spyware Cleaner\SpywareCleaner.Exe" /boot
- O4 - Startup: 42 AC Plug.lnk = C:\Program Files\iOpus-AC-Plug\acplug.exe
- O16 - DPF: TruePass EPF 7,0,100,684 - https://blrscr3.egs-seg.gc.ca/applets/e ... et-epf.cab
- O18 - Toutes les lignes, sans exception.
- O23 - Service: Lexar JD31 (LxrJD31s) - Unknown owner - C:\WINDOWS\SYSTEM32\LxrJD31s.exe
Redémarrez ensuite votre ordinateur en mode sans échec et recherchez les fichiers NDSTray.exe", AQ3HEL~1.EXE, soap.exe min, SpywareCleaner.Exe" et acplug.exe et supprimez-les si, ils existent encore. Profitez-en pour désactiver la restauration du système.
Redémarrez votre ordinateur en mode nornal, et réactivez la restauration du système.
Windows XP: Comment activer/désactiver la restauration du système
[b][color=green]Gilles[/color][/b]
Windows XP-PRO, SP2.
Votre ordinateur est envahi par des intrus?
Sélectionnez l'un des "scans en ligne" :arrow: [url=http://forums.sosmonordi.com/viewtopic.php?t=69]ICI[/url]
Windows XP-PRO, SP2.
Votre ordinateur est envahi par des intrus?
Sélectionnez l'un des "scans en ligne" :arrow: [url=http://forums.sosmonordi.com/viewtopic.php?t=69]ICI[/url]
Bonsoir!
Il y aurait aussi à se débarrasser de Incredimail!
Voici un copier/coller des archives de sosmonordi posté par "cstd", un des administrateurs de sosmonordi:
jaco43
Il y aurait aussi à se débarrasser de Incredimail!
Voici un copier/coller des archives de sosmonordi posté par "cstd", un des administrateurs de sosmonordi:
Comme dans n'importe quoi, le fait de voir le nom d'une grosse corporation sur la pub d'un produit fait vendre plus qu'autre chose. Chose certaine, le débat sur la viabilité d'Incredimail se fait partout:
Un article publié sur Planete Québec rapporte des problèmes connus. Ce qui y est écrit peut être considéré comme vrai dans l'ensemble. Les messages générés par Incredimail sont reconnus comme trop lourds, certaines pièces jointes envoyées avec IncrediMail ne peuvent être ouvertes par les utilisateurs d'autres logiciels, les images envoyées en pièce jointe avec Incredimail ne peuvent être sauvegardées directement à partir du volet d'affichage de Outlook.
Les récriminations sont nombreuses et fondées contre ce logiciel. L'article faisait, entre autres, référence au Contrat de licence de l'utilisateur final (CLUF en français et EULA en anglais) que personne ne lit. Le parcourir a de quoi faire dresser les cheveux sur la tête.
(Le exte de la licence présenté ici est en version anglaise originale. Même si ce texte est disponible en français, la version anglaise a le mérite de réfleter exactement les intentions originales de la compagnies. Contrairement au français, la langue de Shakespeare possède une certaine imprécision qui permet à la compagnie de jouer sur les termes).
Incredimail a écrit:
GENERAL USAGE PATTERNS
IncrediMail may gather information related generally to Users' use of the Software, Service, and Site including without limitation:
The number of Messages that a User sends;
The number of Messages that are read;
What elements of the Service are most often used;
User log-in dates and time; and
Message size data.
This information, which will only be collected and maintained in aggregate, anonymous form, will be used to, among other things:
Provide IncrediMail with a better understanding of how Users use the Service and the various features thereof;
Help IncrediMail to create and provide new services and offerings to Users; and
Conduct and publish aggregate, anonymous, market research results.
Incredimail se permet de rassembler de l'information sur votre utilisation du lociciel. Donc, la compagnie accumule de l'information sur le nombre de messages envoyés, le nombre de messages lus, quels éléments de Incredimail sont le plus souvent utilisés, les date et heure de votre connexion au service (Incredimail) ainsi que la taille des messages. Cette information est utilisée pour des fins marketing.
Incredimail a écrit:
COMPUTER SETTINGS
IncrediMail may collect settings, technical and other information from Users' computers, such as a computer's operating system, IncrediMail and browser versions used, connectivity, various communication parameters and other information related to the operation and interaction of the Software, subject to the provisions herein. This information will neither contain nor be linked to any personally identifiable information.
Selon la licence à laquelle l'utilisateur souscris, Incredimail peut acquérir de l'information technique sur son ordinateur. Cette information inclut:
Version du système d'exploitation, d'Incredimail et du navigateur utilisé; connectivité (i.e. connexion internet) et autres paramètres régissant la communication ainsi que toute autre information reliée à l'opération d'incredimail (c'est large pas à peu près).
incredimail a écrit:
COOKIES
"Cookies" are pieces of information that are placed on an individual's computer hard drive to enable the individual to more easily communicate and interact with the Service and Web Site. IncrediMail may use cookies to save certain information about a User and others who visit the IncrediMail Web Site, in order to facilitate and enhance future activities with the Service and/or Web Site. IncrediMail does not use cookies to retrieve information from a computer that is unrelated to the Service.
We may use an outside advertising company to display advertisements on the Site and Service. These ads may contain cookies. The advertisement company may collect cookies received with outside ad banners. We do not have access to information that would confirm the use of cookies by the advertising company.
Les cookies peuvent être utilisés pour acquérir de l'information sur les utilisateurs d'incredimail et sur toute autre personne visitant le site web du logiciel. Incredimail n'utilise pas les cookies pour acquérir de l'information sur un ordinateur qui n'est pas lié au service (quand il est lié cependant...). Incredimail peut faire appel à une tierce compagnie pour diffuser de la publicité sur son site web et ses autres services. Ces compagnies de publicité peuvent installer des cookies et chercher les cookies provenant de d'autres banières sur l'ordinateur où est installé le service. Incredimail se lave les mains en soutenant qu'elle n'a pas accès à cette information.
Incredimail a écrit:
CONSENT TO PROCESSING
Users, including without limitation, Users in the European Union, fully understand and unambiguously consent to the collection and processing of their personally identifiable and non-personally identifiable information, in the United States.
Tous les utilisateurs comprennent et acceptent le fait qu'Incredimail puisse collecter et traiter aux États-Unis de l'information qui peut permettre ou non d'identifier l'utilisateur.
Incredimail a écrit:
LEGAL DISCLOSURE OF INFORMATION
Notwithstanding anything to the contrary in this Agreement, IncrediMail shall, pursuant to valid legal process such as a search warrant, subpoena or court order, allow access to all available and relevant information, including Users' IP addresses, in order to comply with such valid legal process and to otherwise protect IncrediMail's rights and property. If warranted, IncrediMail may also allow access to this information in special emergencies where physical safety is at risk.
Incredimail peut, en tout temps, transmettre de l'information qui lui serait demandé par la voie légale (rôle qui devrait normalement revenir au fournisseur de service internet).
La dernière est vraiment la plus drôle:
Incredimail a écrit:
8. RISKS
THE SOFTWARE, SERVICE AND SITE MAY BE VULNERABLE TO VARIOUS SECURITY ISSUES AND SHOULD NOT BE CONSIDERED SECURE. BY USING THE SOFTWARE, SERVICE AND SITE YOU MAY BE SUBJECT TO VARIOUS RISKS, INCLUDING AMONG OTHERS:
Unauthorized exposure of information and material you post on or through the Service.
Exposure to objectionable material and/or parties, including without limitation, content and messages that may offend and which may contain contaminated files.
Unauthorized invasion of your privacy during, or as a result of, your or another's use of the Service.
Spoofing, eavesdropping, sniffing, spamming, breaking passwords, harassment, fraud, forgery, "imposturing", electronic trespassing, tampering, hacking, nuking, system contamination including without limitation use of viruses, worms and Trojan horses causing unauthorized, damaging or harmful access and/or retrieval of information and data on your computer and other forms of activity that may even be considered unlawful.
Le service Incredimail ne devrait pas être considéré comme sécuritaire. Outre les différentes failles et les virus auxquels le logiciel peut être soumis, le droit à la vie privée peut être sérieusement compromis: Courriels non sollicités, analyse des messages et des paquets, piratage, harcèlement, fraude, etc. L'histoire ne spécifie seulement pas la source de l'analyse mais l'avertissement dégage la compagnie de toute responsabilité face aux conséquences de ladite analyse.
Donc, le meilleur conseil sur l'utilisation de ce logiciel demeure le suivant:
Incredimail a écrit:
IF YOU DO NOT WISH TO BE SUBJECTED TO THESE RISKS, YOU ARE ADVISED NOT TO USE THE SOFTWARE OR SERVICE.
Si vous ne souhaitez pas être sujet aux risques ci-haut énumérés, vous ne devez pas utiliser ce logiciel
_________________
Avis: l'usage de la télévision amollit le cerveau.
Avis: l'écoute active de la radio comporte un risque grave d'élargissement de la connaissance et de développement de l'esprit critique...
jaco43
Informations complémentaires!
Bonne observation "jaco43".
Lorsque vous procéderez, avec "Ajout/Suppression de programmes", à la désinstallation de cette peste, l'on vous demandera pourquoi vous voulez désinstaller. La seule réponse que j'ai trouvé pour que ces "bandits" acceptent la désinstallation c'est: The owner of this computer is dead. !
Bonne observation "jaco43".
Lorsque vous procéderez, avec "Ajout/Suppression de programmes", à la désinstallation de cette peste, l'on vous demandera pourquoi vous voulez désinstaller. La seule réponse que j'ai trouvé pour que ces "bandits" acceptent la désinstallation c'est: The owner of this computer is dead. !
[b][color=green]Gilles[/color][/b]
Windows XP-PRO, SP2.
Votre ordinateur est envahi par des intrus?
Sélectionnez l'un des "scans en ligne" :arrow: [url=http://forums.sosmonordi.com/viewtopic.php?t=69]ICI[/url]
Windows XP-PRO, SP2.
Votre ordinateur est envahi par des intrus?
Sélectionnez l'un des "scans en ligne" :arrow: [url=http://forums.sosmonordi.com/viewtopic.php?t=69]ICI[/url]
Bonjour
Merci pour les judicieux conseils.
Devrais-je supprimer incredimail avant de faire la procédure
donnée par Lord
Tout mon carnet d'adresse se retrouve dans incredimail et je ne sais comment le récupérer.
Je veux être certain que je comprends bien la marche à suivre fournie par Lord.
Quand vous dites " avec le gestionnaire des tâches(ctrl+alt+suppr),fermez le maximum d'applications possibles"
dois-je appuyer sur les touches les 3 en même temps ou une après l'autre...
Je comprends que je dois conserver Hijack this et explorer.exe..
Dois-je aussi conserver inexplore.exe(toutes les fenêtres de internet explorer) ou les fermer.
Merci pour les judicieux conseils.
Devrais-je supprimer incredimail avant de faire la procédure
donnée par Lord
Tout mon carnet d'adresse se retrouve dans incredimail et je ne sais comment le récupérer.
Je veux être certain que je comprends bien la marche à suivre fournie par Lord.
Quand vous dites " avec le gestionnaire des tâches(ctrl+alt+suppr),fermez le maximum d'applications possibles"
dois-je appuyer sur les touches les 3 en même temps ou une après l'autre...

Je comprends que je dois conserver Hijack this et explorer.exe..
Dois-je aussi conserver inexplore.exe(toutes les fenêtres de internet explorer) ou les fermer.
compac presario
double coeur 3.00gb/500gb
Windows 7
Antivirue Norton
double coeur 3.00gb/500gb
Windows 7
Antivirue Norton
Commencez par "HijackThis", vous vous occuperez de "incredimail" après.
Un autre des bienfaits de celui-ci, c'est que vous ne pourrez pas exporter votre carnet d'adresses.
CTRL+ALT+DEL = Les trois (3) touches pesées simultanément.
Vous devez fermer toutes les fenêtres de internet explorer.
Un autre des bienfaits de celui-ci, c'est que vous ne pourrez pas exporter votre carnet d'adresses.
CTRL+ALT+DEL = Les trois (3) touches pesées simultanément.
Vous devez fermer toutes les fenêtres de internet explorer.
[b][color=green]Gilles[/color][/b]
Windows XP-PRO, SP2.
Votre ordinateur est envahi par des intrus?
Sélectionnez l'un des "scans en ligne" :arrow: [url=http://forums.sosmonordi.com/viewtopic.php?t=69]ICI[/url]
Windows XP-PRO, SP2.
Votre ordinateur est envahi par des intrus?
Sélectionnez l'un des "scans en ligne" :arrow: [url=http://forums.sosmonordi.com/viewtopic.php?t=69]ICI[/url]
Bon matin!
"Lord" a écrit:
jaco43
"Lord" a écrit:
À moins de me tromper, il semblerait que «oui», du moins d'après cette discussion.Un autre des bienfaits de celui-ci, c'est que vous ne pourrez pas exporter votre carnet d'adresses.
jaco43
Bonjour!
Quand vous appuyez sur les 3 touches...vous devriez arriver sur la page intitulée Gestionnaire des tâches de Windows...Alors, dans «applications» mettre en surbrillance chacune des tâches à supprimer (qui ne sont pas nécessaires comme vous l'a dit "Lord") et cliquez sur «fin de tâche», en bas.
jaco43
Quand vous appuyez sur les 3 touches...vous devriez arriver sur la page intitulée Gestionnaire des tâches de Windows...Alors, dans «applications» mettre en surbrillance chacune des tâches à supprimer (qui ne sont pas nécessaires comme vous l'a dit "Lord") et cliquez sur «fin de tâche», en bas.
jaco43
Si vous trouvez cela trop compliqué, contentez-vous de fermer toutes les fenêtres de internet explorer et de désactiver toutes les icônes dans la zone de notification de la barre des tâches (À coté de l'horloge).
Note: J'aurais plutôt dû spécifier de fermer le maximum de processus et non le maximum d'applications.
Note: J'aurais plutôt dû spécifier de fermer le maximum de processus et non le maximum d'applications.
[b][color=green]Gilles[/color][/b]
Windows XP-PRO, SP2.
Votre ordinateur est envahi par des intrus?
Sélectionnez l'un des "scans en ligne" :arrow: [url=http://forums.sosmonordi.com/viewtopic.php?t=69]ICI[/url]
Windows XP-PRO, SP2.
Votre ordinateur est envahi par des intrus?
Sélectionnez l'un des "scans en ligne" :arrow: [url=http://forums.sosmonordi.com/viewtopic.php?t=69]ICI[/url]