[Résolu]... - FORUMS 01net.

Logfile of HijackThis v1.99.1
Scan saved at 12:10:20, on 09.10.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ASWLSVC.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ATK0100\HControl.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ASUS\ASUS Live Update\ALU.exe
C:\Program Files\Wireless Console 2\wcourier.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ASUS\WLAN Card Utilities\Center.exe
C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe
C:\WINDOWS\ATK0100\ATKOSD.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\svchost.exe
c:\progra~1\intern~1\iexplore.exe
C:\Program Files\Asus\Asus ChkMail\ChkMail.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng1.exe
C:\WINDOWS\BricoPacks\Vista Inspirat\YzToolbar\YzToolBar.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Adobe\Adobe Acrobat 7.0\Distillr\acrotray.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Ad-Aware SE Personal\Ad-Aware.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Documents and Settings\Stéphane\Bureau\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Adobe Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: SnapFlash Class - {A44CBB0B-C77D-4BF5-87CC-B4EE79AD1B7E} - C:\Program Files\Fichiers communs\Justdo\Jd2002.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Save Flash - {4064EA35-578D-4073-A834-C96D82CBCF40} - C:\Program Files\Save Flash\SaveFlash.dll
O4 - HKLM\..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ASUS Live Update] C:\Program Files\ASUS\ASUS Live Update\ALU.exe
O4 - HKLM\..\Run: [Wireless Console 2] C:\Program Files\Wireless Console 2\wcourier.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Control Center] C:\Program Files\ASUS\WLAN Card Utilities\Center.exe
O4 - HKLM\..\Run: [Zshutdown] c:\sysprep\patch\sysprep.cmd
O4 - HKLM\..\Run: [Power_Gear] C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe 1
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [PowerDirector] C:\WINDOWS\Temp\TPDIR\setup.exe
O4 - HKLM\..\Run: [BootSkin Startup Jobs] "C:\PROGRA~1\STARDOCK\WINCUS~1\BOOTSKIN\BootSkin.exe" /StartupJobs
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Adobe Version Cue CS2] "C:\Program Files\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Adobe Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Pando] "C:\Program Files\Pando Networks\Pando\Pando.exe" /Automation
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [NameOnlineLogKnob] C:\Documents and Settings\All Users\Application Data\Skip bows name online\Memo Time.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent
O4 - HKCU\..\Run: [SIDEBAR] "C:\Program Files\Desktop Sidebar\dsidebar.exe"
O4 - HKCU\..\Run: [Warez] "C:\Documents and Settings\Stéphane\Bureau\Warez.exe" /minimized
O4 - HKCU\..\Run: [site rule] C:\DOCUME~1\STÉPHANE\APPLIC~1\ACIDTY~1\window locks.exe
O4 - Startup: Y'z ToolBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\YzToolbar\YzToolBar.exe
O4 - Global Startup: ASUS ChkMail.lnk = C:\Program Files\Asus\Asus ChkMail\ChkMail.exe
O4 - Global Startup: Bluetooth Manager.lnk = ?
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Lancement rapide d'Adobe Acrobat.lnk = ?
O8 - Extra context menu item: Convertir en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir la cible du lien en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la cible du lien en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir la sélection en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la sélection en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir les liens sélectionnés en fichier Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convertir les liens sélectionnés en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Get Flash by FlashKeeper - C:\Program Files\FlashKeeper\GetFlash.htm
O8 - Extra context menu item: Save Flash with Flash Catcher - res://C:\Program Files\Fichiers communs\Justdo\IECatcher.DLL/FlashCatcher.htm
O8 - Extra context menu item: Sothink SWF Catcher - C:\Program Files\Fichiers communs\SourceTec\SWF Catcher\InternetExplorer.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: FlashKeeper - {86301D40-94C1-4a5e-843B-7F43965E364A} - C:\Program Files\FlashKeeper\GetFlash.htm
O9 - Extra button: Flash Catcher - {90BAE0EF-F4BF-4FAC-B2EC-2C725C34AF12} - C:\Program Files\Fichiers communs\Justdo\IECatcher.DLL
O9 - Extra 'Tools' menuitem: Flash Catcher - {90BAE0EF-F4BF-4FAC-B2EC-2C725C34AF12} - C:\Program Files\Fichiers communs\Justdo\IECatcher.DLL
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Fichiers communs\SourceTec\SWF Catcher\InternetExplorer.htm
O9 - Extra 'Tools' menuitem: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Fichiers communs\SourceTec\SWF Catcher\InternetExplorer.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.asus.com
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Version Cue CS2 - Unknown owner - C:\Program Files\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe" -win32service (file missing)
O23 - Service: ASWLSVC - Unknown owner - C:\WINDOWS\system32\ASWLSVC.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

+ Créé à: 18:34:59 13.10.2006

+ Résultat de l'analyse:



HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Public Messenger ver 2.03 -> Adware.IntCodec : Ignoré.
HKU\S-1-5-21-122300894-2062132105-725487095-1005\Software\Internet Security -> Adware.IntCodec : Ignoré.
C:\Program Files\DAEMON Tools\SetupDTSB.exe -> Adware.SaveNow : Ignoré.
:mozilla.101:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Adbrite : Ignoré.
:mozilla.98:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Adbrite : Ignoré.
:mozilla.107:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Atdmt : Ignoré.
:mozilla.56:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Bluestreak : Ignoré.
C:\Documents and Settings\Stéphane\Cookies\stéphane@casinotropez[1].txt -> TrackingCookie.Casinotropez : Ignoré.
C:\Documents and Settings\Stéphane\Cookies\stéphane@www.casinotropez[2].txt -> TrackingCookie.Casinotropez : Ignoré.
:mozilla.140:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Comclick : Ignoré.
:mozilla.141:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Comclick : Ignoré.
:mozilla.142:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Comclick : Ignoré.
:mozilla.41:C:\Documents and Settings\Gene\Application Data\Mozilla\Firefox\Profiles\wg14n8kg.default\cookies.txt -> TrackingCookie.Comclick : Ignoré.
:mozilla.42:C:\Documents and Settings\Gene\Application Data\Mozilla\Firefox\Profiles\wg14n8kg.default\cookies.txt -> TrackingCookie.Comclick : Ignoré.
:mozilla.43:C:\Documents and Settings\Gene\Application Data\Mozilla\Firefox\Profiles\wg14n8kg.default\cookies.txt -> TrackingCookie.Comclick : Ignoré.
C:\Documents and Settings\Stéphane\Cookies\stéphane@fl01.ct2.comclick[1].txt -> TrackingCookie.Comclick : Ignoré.
:mozilla.15:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Doubleclick : Ignoré.
:mozilla.6:C:\Documents and Settings\Gene\Application Data\Mozilla\Firefox\Profiles\wg14n8kg.default\cookies.txt -> TrackingCookie.Doubleclick : Ignoré.
:mozilla.72:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Estat : Ignoré.
:mozilla.61:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Fastclick : Ignoré.
:mozilla.62:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Fastclick : Ignoré.
:mozilla.63:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Fastclick : Ignoré.
:mozilla.112:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Googleadservices : Ignoré.
:mozilla.152:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Googleadservices : Ignoré.
:mozilla.153:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Googleadservices : Ignoré.
:mozilla.154:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Googleadservices : Ignoré.
:mozilla.34:C:\Documents and Settings\Gene\Application Data\Mozilla\Firefox\Profiles\wg14n8kg.default\cookies.txt -> TrackingCookie.Googleadservices : Ignoré.
:mozilla.91:C:\Documents and Settings\Gene\Application Data\Mozilla\Firefox\Profiles\wg14n8kg.default\cookies.txt -> TrackingCookie.Googleadservices : Ignoré.
:mozilla.7:C:\Documents and Settings\Gene\Application Data\Mozilla\Firefox\Profiles\wg14n8kg.default\cookies.txt -> TrackingCookie.Mediaplex : Ignoré.
C:\Documents and Settings\Stéphane\Cookies\stéphane@ads.planetactive[1].txt -> TrackingCookie.Planetactive : Ignoré.
:mozilla.41:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Serving-sys : Ignoré.
:mozilla.42:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Serving-sys : Ignoré.
:mozilla.43:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Serving-sys : Ignoré.
:mozilla.44:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Serving-sys : Ignoré.
:mozilla.45:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Serving-sys : Ignoré.
:mozilla.89:C:\Documents and Settings\Gene\Application Data\Mozilla\Firefox\Profiles\wg14n8kg.default\cookies.txt -> TrackingCookie.Sitestat : Ignoré.
:mozilla.90:C:\Documents and Settings\Gene\Application Data\Mozilla\Firefox\Profiles\wg14n8kg.default\cookies.txt -> TrackingCookie.Sitestat : Ignoré.
:mozilla.6:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Smartadserver : Ignoré.
:mozilla.7:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Smartadserver : Ignoré.
:mozilla.8:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Smartadserver : Ignoré.
:mozilla.48:C:\Documents and Settings\Gene\Application Data\Mozilla\Firefox\Profiles\wg14n8kg.default\cookies.txt -> TrackingCookie.Tradedoubler : Ignoré.
:mozilla.49:C:\Documents and Settings\Gene\Application Data\Mozilla\Firefox\Profiles\wg14n8kg.default\cookies.txt -> TrackingCookie.Tradedoubler : Ignoré.
:mozilla.51:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Tradedoubler : Ignoré.
:mozilla.53:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Tradedoubler : Ignoré.
:mozilla.70:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Valueclick : Ignoré.
:mozilla.10:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Weborama : Ignoré.
:mozilla.11:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Weborama : Ignoré.
:mozilla.12:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Weborama : Ignoré.
:mozilla.75:C:\Documents and Settings\Gene\Application Data\Mozilla\Firefox\Profiles\wg14n8kg.default\cookies.txt -> TrackingCookie.Weborama : Ignoré.
:mozilla.9:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Weborama : Ignoré.
:mozilla.136:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Yieldmanager : Ignoré.
C:\Documents and Settings\Stéphane\Cookies\stéphane@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Ignoré.


Fin du rapport

Supprime les valeurs du registre suivantes et surtout rien d'autres :

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ Public Messenger ver 2.03 <= La valeur

HKU\S-1-5-21-122300894-2062132105-725487095-1005\Software\ Internet Security <= La valeur

Script clean par Malekal_morte - http://www.malekal.com

Microsoft Windows XP [version 5.1.2600]
Script execute en mode sans echec

*** Suppression de fichiers sur C:

*** Suppression des fichiers dans C:\WINDOWS\

*** Suppression des fichiers dans C:\WINDOWS\system32
C:\WINDOWS\impborl.dll FOUND
C:\WINDOWS\system32\drivers\etc\hosts.msn FOUND

"C:\Program Files\WinMediaCodec\" FOUND

*** Suppression des clefs du registre effectuee..

Logfile of HijackThis v1.99.1
Scan saved at 19:57:02, on 14.10.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\ASWLSVC.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\ATK0100\HControl.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ASUS\ASUS Live Update\ALU.exe
C:\Program Files\Wireless Console 2\wcourier.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ASUS\WLAN Card Utilities\Center.exe
C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\ATK0100\ATKOSD.exe
C:\Program Files\Adobe\Adobe Acrobat 7.0\Distillr\Acrotray.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Internet Explorer\iexplore.exe
c:\progra~1\intern~1\iexplore.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Asus\Asus ChkMail\ChkMail.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng1.exe
C:\WINDOWS\BricoPacks\Vista Inspirat\YzToolbar\YzToolBar.exe
C:\Program Files\Messenger\msmsgs.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Documents and Settings\Stéphane\Bureau\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Adobe Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: SnapFlash Class - {A44CBB0B-C77D-4BF5-87CC-B4EE79AD1B7E} - C:\Program Files\Fichiers communs\Justdo\Jd2002.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Save Flash - {4064EA35-578D-4073-A834-C96D82CBCF40} - C:\Program Files\Save Flash\SaveFlash.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O4 - HKLM\..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ASUS Live Update] C:\Program Files\ASUS\ASUS Live Update\ALU.exe
O4 - HKLM\..\Run: [Wireless Console 2] C:\Program Files\Wireless Console 2\wcourier.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Control Center] C:\Program Files\ASUS\WLAN Card Utilities\Center.exe
O4 - HKLM\..\Run: [Zshutdown] c:\sysprep\patch\sysprep.cmd
O4 - HKLM\..\Run: [Power_Gear] C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe 1
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [PowerDirector] C:\WINDOWS\Temp\TPDIR\setup.exe
O4 - HKLM\..\Run: [BootSkin Startup Jobs] "C:\PROGRA~1\STARDOCK\WINCUS~1\BOOTSKIN\BootSkin.exe" /StartupJobs
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Adobe Version Cue CS2] "C:\Program Files\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Adobe Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Pando] "C:\Program Files\Pando Networks\Pando\Pando.exe" /Automation
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [NameOnlineLogKnob] C:\Documents and Settings\All Users\Application Data\Skip bows name online\Memo Time.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - HKCU\..\Run: [SIDEBAR] "C:\Program Files\Desktop Sidebar\dsidebar.exe"
O4 - HKCU\..\Run: [Warez] "C:\Documents and Settings\Stéphane\Bureau\Warez.exe" /minimized
O4 - HKCU\..\Run: [site rule] C:\DOCUME~1\STÉPHANE\APPLIC~1\ACIDTY~1\window locks.exe
O4 - Startup: Y'z ToolBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\YzToolbar\YzToolBar.exe
O4 - Startup: MSN Pictures Displayer.lnk = C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe
O4 - Global Startup: ASUS ChkMail.lnk = C:\Program Files\Asus\Asus ChkMail\ChkMail.exe
O4 - Global Startup: Bluetooth Manager.lnk = ?
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Lancement rapide d'Adobe Acrobat.lnk = ?
O8 - Extra context menu item: Convertir en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir la cible du lien en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la cible du lien en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir la sélection en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la sélection en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir les liens sélectionnés en fichier Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convertir les liens sélectionnés en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Get Flash by FlashKeeper - C:\Program Files\FlashKeeper\GetFlash.htm
O8 - Extra context menu item: Save Flash with Flash Catcher - res://C:\Program Files\Fichiers communs\Justdo\IECatcher.DLL/FlashCatcher.htm
O8 - Extra context menu item: Sothink SWF Catcher - C:\Program Files\Fichiers communs\SourceTec\SWF Catcher\InternetExplorer.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: FlashKeeper - {86301D40-94C1-4a5e-843B-7F43965E364A} - C:\Program Files\FlashKeeper\GetFlash.htm
O9 - Extra button: Flash Catcher - {90BAE0EF-F4BF-4FAC-B2EC-2C725C34AF12} - C:\Program Files\Fichiers communs\Justdo\IECatcher.DLL
O9 - Extra 'Tools' menuitem: Flash Catcher - {90BAE0EF-F4BF-4FAC-B2EC-2C725C34AF12} - C:\Program Files\Fichiers communs\Justdo\IECatcher.DLL
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Fichiers communs\SourceTec\SWF Catcher\InternetExplorer.htm
O9 - Extra 'Tools' menuitem: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Fichiers communs\SourceTec\SWF Catcher\InternetExplorer.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.asus.com
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Version Cue CS2 - Unknown owner - C:\Program Files\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe" -win32service (file missing)
O23 - Service: ASWLSVC - Unknown owner - C:\WINDOWS\system32\ASWLSVC.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

Logfile of HijackThis v1.99.1
Scan saved at 19:57:02, on 14.10.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\ASWLSVC.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\ATK0100\HControl.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ASUS\ASUS Live Update\ALU.exe
C:\Program Files\Wireless Console 2\wcourier.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ASUS\WLAN Card Utilities\Center.exe
C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\ATK0100\ATKOSD.exe
C:\Program Files\Adobe\Adobe Acrobat 7.0\Distillr\Acrotray.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Internet Explorer\iexplore.exe
c:\progra~1\intern~1\iexplore.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Asus\Asus ChkMail\ChkMail.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng1.exe
C:\WINDOWS\BricoPacks\Vista Inspirat\YzToolbar\YzToolBar.exe
C:\Program Files\Messenger\msmsgs.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Documents and Settings\Stéphane\Bureau\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Adobe Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: SnapFlash Class - {A44CBB0B-C77D-4BF5-87CC-B4EE79AD1B7E} - C:\Program Files\Fichiers communs\Justdo\Jd2002.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Save Flash - {4064EA35-578D-4073-A834-C96D82CBCF40} - C:\Program Files\Save Flash\SaveFlash.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O4 - HKLM\..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ASUS Live Update] C:\Program Files\ASUS\ASUS Live Update\ALU.exe
O4 - HKLM\..\Run: [Wireless Console 2] C:\Program Files\Wireless Console 2\wcourier.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Control Center] C:\Program Files\ASUS\WLAN Card Utilities\Center.exe
O4 - HKLM\..\Run: [Zshutdown] c:\sysprep\patch\sysprep.cmd
O4 - HKLM\..\Run: [Power_Gear] C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe 1
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [PowerDirector] C:\WINDOWS\Temp\TPDIR\setup.exe
O4 - HKLM\..\Run: [BootSkin Startup Jobs] "C:\PROGRA~1\STARDOCK\WINCUS~1\BOOTSKIN\BootSkin.exe" /StartupJobs
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Adobe Version Cue CS2] "C:\Program Files\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Adobe Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Pando] "C:\Program Files\Pando Networks\Pando\Pando.exe" /Automation
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [NameOnlineLogKnob] C:\Documents and Settings\All Users\Application Data\Skip bows name online\Memo Time.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - HKCU\..\Run: [SIDEBAR] "C:\Program Files\Desktop Sidebar\dsidebar.exe"
O4 - HKCU\..\Run: [Warez] "C:\Documents and Settings\Stéphane\Bureau\Warez.exe" /minimized
O4 - HKCU\..\Run: [site rule] C:\DOCUME~1\STÉPHANE\APPLIC~1\ACIDTY~1\window locks.exe
O4 - Startup: Y'z ToolBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\YzToolbar\YzToolBar.exe
O4 - Startup: MSN Pictures Displayer.lnk = C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe
O4 - Global Startup: ASUS ChkMail.lnk = C:\Program Files\Asus\Asus ChkMail\ChkMail.exe
O4 - Global Startup: Bluetooth Manager.lnk = ?
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Lancement rapide d'Adobe Acrobat.lnk = ?
O8 - Extra context menu item: Convertir en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir la cible du lien en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la cible du lien en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir la sélection en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la sélection en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir les liens sélectionnés en fichier Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convertir les liens sélectionnés en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Get Flash by FlashKeeper - C:\Program Files\FlashKeeper\GetFlash.htm
O8 - Extra context menu item: Save Flash with Flash Catcher - res://C:\Program Files\Fichiers communs\Justdo\IECatcher.DLL/FlashCatcher.htm
O8 - Extra context menu item: Sothink SWF Catcher - C:\Program Files\Fichiers communs\SourceTec\SWF Catcher\InternetExplorer.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: FlashKeeper - {86301D40-94C1-4a5e-843B-7F43965E364A} - C:\Program Files\FlashKeeper\GetFlash.htm
O9 - Extra button: Flash Catcher - {90BAE0EF-F4BF-4FAC-B2EC-2C725C34AF12} - C:\Program Files\Fichiers communs\Justdo\IECatcher.DLL
O9 - Extra 'Tools' menuitem: Flash Catcher - {90BAE0EF-F4BF-4FAC-B2EC-2C725C34AF12} - C:\Program Files\Fichiers communs\Justdo\IECatcher.DLL
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Fichiers communs\SourceTec\SWF Catcher\InternetExplorer.htm
O9 - Extra 'Tools' menuitem: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Fichiers communs\SourceTec\SWF Catcher\InternetExplorer.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.asus.com
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Version Cue CS2 - Unknown owner - C:\Program Files\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe" -win32service (file missing)
O23 - Service: ASWLSVC - Unknown owner - C:\WINDOWS\system32\ASWLSVC.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

---------------------------------------------------------
AVG Anti-Spyware - Rapport d'analyse
---------------------------------------------------------

+ Créé à: 18:44:12 15.10.2006

+ Résultat de l'analyse:



HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Public Messenger ver 2.03 -> Adware.IntCodec : Aucune action entreprise.
HKU\S-1-5-21-122300894-2062132105-725487095-1005\Software\Internet Security -> Adware.IntCodec : Aucune action entreprise.
C:\Program Files\DAEMON Tools\SetupDTSB.exe -> Adware.SaveNow : Aucune action entreprise.
:mozilla.90:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.247realmedia : Aucune action entreprise.
:mozilla.92:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.247realmedia : Aucune action entreprise.
:mozilla.73:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.2o7 : Aucune action entreprise.
:mozilla.233:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Adbrite : Aucune action entreprise.
:mozilla.234:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Adbrite : Aucune action entreprise.
:mozilla.56:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Adtech : Aucune action entreprise.
:mozilla.57:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Adtech : Aucune action entreprise.
:mozilla.225:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Advertising : Aucune action entreprise.
:mozilla.226:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Advertising : Aucune action entreprise.
:mozilla.162:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Atdmt : Aucune action entreprise.
:mozilla.91:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Bluestreak : Aucune action entreprise.
:mozilla.47:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Burstnet : Aucune action entreprise.
:mozilla.48:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Burstnet : Aucune action entreprise.
:mozilla.49:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Burstnet : Aucune action entreprise.
:mozilla.40:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Casalemedia : Aucune action entreprise.
:mozilla.41:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Casalemedia : Aucune action entreprise.
:mozilla.42:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Casalemedia : Aucune action entreprise.
:mozilla.43:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Casalemedia : Aucune action entreprise.
:mozilla.44:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Casalemedia : Aucune action entreprise.
:mozilla.45:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Casalemedia : Aucune action entreprise.
:mozilla.46:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Casalemedia : Aucune action entreprise.
C:\Documents and Settings\Stéphane\Cookies\stéphane@casinotropez[1].txt -> TrackingCookie.Casinotropez : Aucune action entreprise.
:mozilla.287:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Comclick : Aucune action entreprise.
:mozilla.288:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Comclick : Aucune action entreprise.
:mozilla.289:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Comclick : Aucune action entreprise.
:mozilla.41:C:\Documents and Settings\Gene\Application Data\Mozilla\Firefox\Profiles\wg14n8kg.default\cookies.txt -> TrackingCookie.Comclick : Aucune action entreprise.
:mozilla.42:C:\Documents and Settings\Gene\Application Data\Mozilla\Firefox\Profiles\wg14n8kg.default\cookies.txt -> TrackingCookie.Comclick : Aucune action entreprise.
:mozilla.43:C:\Documents and Settings\Gene\Application Data\Mozilla\Firefox\Profiles\wg14n8kg.default\cookies.txt -> TrackingCookie.Comclick : Aucune action entreprise.
C:\Documents and Settings\Stéphane\Cookies\stéphane@fl01.ct2.comclick[1].txt -> TrackingCookie.Comclick : Aucune action entreprise.
:mozilla.6:C:\Documents and Settings\Gene\Application Data\Mozilla\Firefox\Profiles\wg14n8kg.default\cookies.txt -> TrackingCookie.Doubleclick : Aucune action entreprise.
:mozilla.96:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Doubleclick : Aucune action entreprise.
:mozilla.256:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Estat : Aucune action entreprise.
:mozilla.125:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Fastclick : Aucune action entreprise.
:mozilla.126:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Fastclick : Aucune action entreprise.
:mozilla.36:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Gamershell : Aucune action entreprise.
:mozilla.38:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Gamershell : Aucune action entreprise.
:mozilla.39:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Gamershell : Aucune action entreprise.
:mozilla.164:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Googleadservices : Aucune action entreprise.
:mozilla.300:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Googleadservices : Aucune action entreprise.
:mozilla.301:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Googleadservices : Aucune action entreprise.
:mozilla.302:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Googleadservices : Aucune action entreprise.
:mozilla.303:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Googleadservices : Aucune action entreprise.
:mozilla.34:C:\Documents and Settings\Gene\Application Data\Mozilla\Firefox\Profiles\wg14n8kg.default\cookies.txt -> TrackingCookie.Googleadservices : Aucune action entreprise.
:mozilla.91:C:\Documents and Settings\Gene\Application Data\Mozilla\Firefox\Profiles\wg14n8kg.default\cookies.txt -> TrackingCookie.Googleadservices : Aucune action entreprise.
:mozilla.203:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Hotlog : Aucune action entreprise.
:mozilla.189:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Mediaplex : Aucune action entreprise.
:mozilla.7:C:\Documents and Settings\Gene\Application Data\Mozilla\Firefox\Profiles\wg14n8kg.default\cookies.txt -> TrackingCookie.Mediaplex : Aucune action entreprise.
:mozilla.179:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Planetactive : Aucune action entreprise.
C:\Documents and Settings\Stéphane\Cookies\stéphane@ads.planetactive[1].txt -> TrackingCookie.Planetactive : Aucune action entreprise.
:mozilla.216:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.217:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.218:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.219:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.220:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
C:\Documents and Settings\Stéphane\Cookies\stéphane@serving-sys[1].txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
:mozilla.149:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Sexcounter : Aucune action entreprise.
:mozilla.150:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Sexcounter : Aucune action entreprise.
:mozilla.151:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Sexcounter : Aucune action entreprise.
:mozilla.152:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Sexcounter : Aucune action entreprise.
:mozilla.155:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Sexlist : Aucune action entreprise.
:mozilla.89:C:\Documents and Settings\Gene\Application Data\Mozilla\Firefox\Profiles\wg14n8kg.default\cookies.txt -> TrackingCookie.Sitestat : Aucune action entreprise.
:mozilla.90:C:\Documents and Settings\Gene\Application Data\Mozilla\Firefox\Profiles\wg14n8kg.default\cookies.txt -> TrackingCookie.Sitestat : Aucune action entreprise.
:mozilla.12:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.6:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.7:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
:mozilla.67:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Statcounter : Aucune action entreprise.
:mozilla.68:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Statcounter : Aucune action entreprise.
:mozilla.52:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Tacoda : Aucune action entreprise.
:mozilla.53:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Tacoda : Aucune action entreprise.
:mozilla.54:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Tacoda : Aucune action entreprise.
:mozilla.55:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Tacoda : Aucune action entreprise.
:mozilla.48:C:\Documents and Settings\Gene\Application Data\Mozilla\Firefox\Profiles\wg14n8kg.default\cookies.txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
:mozilla.49:C:\Documents and Settings\Gene\Application Data\Mozilla\Firefox\Profiles\wg14n8kg.default\cookies.txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
:mozilla.86:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
:mozilla.88:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
:mozilla.50:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Tribalfusion : Aucune action entreprise.
:mozilla.10:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Weborama : Aucune action entreprise.
:mozilla.11:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Weborama : Aucune action entreprise.
:mozilla.75:C:\Documents and Settings\Gene\Application Data\Mozilla\Firefox\Profiles\wg14n8kg.default\cookies.txt -> TrackingCookie.Weborama : Aucune action entreprise.
:mozilla.8:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Weborama : Aucune action entreprise.
:mozilla.9:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Weborama : Aucune action entreprise.
:mozilla.181:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Yadro : Aucune action entreprise.
:mozilla.64:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
:mozilla.65:C:\Documents and Settings\Stéphane\Application Data\Mozilla\Firefox\Profiles\idipu6da.default\cookies.txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
C:\Documents and Settings\Stéphane\Cookies\stéphane@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.


Fin du rapport

Logfile of HijackThis v1.99.1
Scan saved at 22:33:52, on 15.10.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\ASWLSVC.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ATK0100\HControl.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ASUS\ASUS Live Update\ALU.exe
C:\Program Files\Wireless Console 2\wcourier.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\ATK0100\ATKOSD.exe
C:\Program Files\ASUS\WLAN Card Utilities\Center.exe
C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Adobe\Adobe Acrobat 7.0\Distillr\Acrotray.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Internet Explorer\iexplore.exe
c:\progra~1\intern~1\iexplore.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Asus\Asus ChkMail\ChkMail.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng1.exe
C:\WINDOWS\BricoPacks\Vista Inspirat\YzToolbar\YzToolBar.exe
C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Documents and Settings\Stéphane\Bureau\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Adobe Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: SnapFlash Class - {A44CBB0B-C77D-4BF5-87CC-B4EE79AD1B7E} - C:\Program Files\Fichiers communs\Justdo\Jd2002.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: &Save Flash - {4064EA35-578D-4073-A834-C96D82CBCF40} - C:\Program Files\Save Flash\SaveFlash.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
O4 - HKLM\..\Run: [HControl] C:\WINDOWS\ATK0100\HControl.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [ASUS Live Update] C:\Program Files\ASUS\ASUS Live Update\ALU.exe
O4 - HKLM\..\Run: [Wireless Console 2] C:\Program Files\Wireless Console 2\wcourier.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Control Center] C:\Program Files\ASUS\WLAN Card Utilities\Center.exe
O4 - HKLM\..\Run: [Zshutdown] c:\sysprep\patch\sysprep.cmd
O4 - HKLM\..\Run: [Power_Gear] C:\Program Files\ASUS\Power4 Gear\BatteryLife.exe 1
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [PowerDirector] C:\WINDOWS\Temp\TPDIR\setup.exe
O4 - HKLM\..\Run: [BootSkin Startup Jobs] "C:\PROGRA~1\STARDOCK\WINCUS~1\BOOTSKIN\BootSkin.exe" /StartupJobs
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Adobe Version Cue CS2] "C:\Program Files\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe"
O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Adobe Acrobat 7.0\Distillr\Acrotray.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Pando] "C:\Program Files\Pando Networks\Pando\Pando.exe" /Automation
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [NameOnlineLogKnob] C:\Documents and Settings\All Users\Application Data\Skip bows name online\Memo Time.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - Startup: Y'z ToolBar.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\YzToolbar\YzToolBar.exe
O4 - Startup: MSN Pictures Displayer.lnk = C:\Program Files\MSN Pictures Displayer\MSN Pictures Displayer.exe
O4 - Global Startup: ASUS ChkMail.lnk = C:\Program Files\Asus\Asus ChkMail\ChkMail.exe
O4 - Global Startup: Bluetooth Manager.lnk = ?
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Lancement rapide d'Adobe Acrobat.lnk = ?
O8 - Extra context menu item: Convertir en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir la cible du lien en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la cible du lien en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir la sélection en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir la sélection en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir les liens sélectionnés en fichier Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convertir les liens sélectionnés en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Get Flash by FlashKeeper - C:\Program Files\FlashKeeper\GetFlash.htm
O8 - Extra context menu item: Save Flash with Flash Catcher - res://C:\Program Files\Fichiers communs\Justdo\IECatcher.DLL/FlashCatcher.htm
O8 - Extra context menu item: Sothink SWF Catcher - C:\Program Files\Fichiers communs\SourceTec\SWF Catcher\InternetExplorer.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: FlashKeeper - {86301D40-94C1-4a5e-843B-7F43965E364A} - C:\Program Files\FlashKeeper\GetFlash.htm
O9 - Extra button: Flash Catcher - {90BAE0EF-F4BF-4FAC-B2EC-2C725C34AF12} - C:\Program Files\Fichiers communs\Justdo\IECatcher.DLL
O9 - Extra 'Tools' menuitem: Flash Catcher - {90BAE0EF-F4BF-4FAC-B2EC-2C725C34AF12} - C:\Program Files\Fichiers communs\Justdo\IECatcher.DLL
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Fichiers communs\SourceTec\SWF Catcher\InternetExplorer.htm
O9 - Extra 'Tools' menuitem: Sothink SWF Catcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Fichiers communs\SourceTec\SWF Catcher\InternetExplorer.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.asus.com
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Adobe Version Cue CS2 - Unknown owner - C:\Program Files\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe" -win32service (file missing)
O23 - Service: ASWLSVC - Unknown owner - C:\WINDOWS\system32\ASWLSVC.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

St‚phane - 06-10-17 10:46:31.78 Service Pack 2
ComboFix 06.10.16 - Running from: "C:\Documents and Settings\St‚phane\Bureau"

((((((((((((((((((((((((((((((( Files Created from 2006-09-17 to 2006-10-17 ))))))))))))))))))))))))))))))))))


2006-10-16 15:12 51,072 --a------ C:\WINDOWS\system32\drivers\ikhlayer.sys
2006-10-16 15:12 30,592 --a------ C:\WINDOWS\system32\drivers\ikhfile.sys
2006-09-19 21:30 7,552 --a------ C:\WINDOWS\system32\drivers\SONYPVU1.SYS
2006-09-18 13:17 208,896 --a------ C:\WINDOWS\system32\NVUNINST.EXE
2006-09-17 14:28 82,432 --a------ C:\WINDOWS\system32\msxml4r.dll
2006-09-17 14:28 1,233,920 --a------ C:\WINDOWS\system32\msxml4.dll


(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))


2006-10-16 15:12 -------- d-------- C:\Program Files\Spyware Doctor
2006-10-16 15:12 -------- d-------- C:\Documents and Settings\St‚phane\Application Data\PC Tools
2006-10-13 16:45 -------- d-------- C:\Program Files\AVG Anti-Spyware 7.5
2006-10-10 21:15 -------- d-------- C:\Documents and Settings\St‚phane\Application Data\Ulead Systems
2006-10-10 21:04 -------- d-------- C:\Documents and Settings\St‚phane\Application Data\Help
2006-10-10 21:03 -------- d-------- C:\Program Files\GIF Animator
2006-10-10 18:38 -------- d-------- C:\Program Files\GifMovieGear 4
2006-10-09 13:25 -------- d-------- C:\Program Files\MSN Pictures Displayer
2006-10-09 13:25 -------- d-------- C:\Documents and Settings\St‚phane\Application Data\MSN Pictures Displayer
2006-10-09 11:35 -------- d-------- C:\Documents and Settings\St‚phane\Application Data\Lavasoft
2006-09-27 22:14 -------- d-------- C:\Program Files\SWF Decompiler
2006-09-27 22:14 -------- d-------- C:\Program Files\Fichiers communs\SourceTec
2006-09-27 21:13 -------- d-------- C:\Documents and Settings\St‚phane\Application Data\Eltima Software
2006-09-26 13:46 -------- d-------- C:\Program Files\Pando Networks
2006-09-25 17:45 666240 --a------ C:\WINDOWS\system32\aswBoot.exe
2006-09-25 17:40 87424 --a------ C:\WINDOWS\system32\drivers\aswmon2.sys
2006-09-25 17:40 85952 --a------ C:\WINDOWS\system32\drivers\aswmon.sys
2006-09-25 17:39 36176 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys
2006-09-25 17:39 16352 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys
2006-09-25 17:37 90112 --a------ C:\WINDOWS\system32\AVASTSS.scr
2006-09-25 17:37 24560 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys
2006-09-24 19:36 -------- d-------- C:\Documents and Settings\St‚phane\Application Data\Steganos VPN
2006-09-24 10:23 -------- d-------- C:\Documents and Settings\St‚phane\Application Data\Warez
2006-09-24 09:56 -------- d-------- C:\Program Files\FlashKeeper
2006-09-21 20:30 -------- d-------- C:\Program Files\AviSynth 2.5
2006-09-20 22:42 -------- d-------- C:\Program Files\Avi2Dvd
2006-09-17 23:13 -------- d-------- C:\Documents and Settings\St‚phane\Application Data\Desktop Sidebar
2006-09-17 22:46 -------- d-------- C:\Program Files\Micro Application
2006-09-17 21:56 -------- d-------- C:\Program Files\Steam
2006-09-17 21:24 -------- d-------- C:\Program Files\Save Flash
2006-09-17 21:18 -------- d-------- C:\Program Files\Justdo Software
2006-09-17 21:18 -------- d-------- C:\Program Files\Fichiers communs\Justdo
2006-09-14 20:02 -------- d-------- C:\Documents and Settings\St‚phane\Application Data\Opera
2006-09-13 17:48 -------- d-------- C:\Program Files\FLStudio5
2006-09-13 07:03 1084416 --a------ C:\WINDOWS\system32\msxml3.dll
2006-09-06 20:18 -------- d-------- C:\Program Files\TWIXTEL
2006-08-31 20:26 737280 --a------ C:\WINDOWS\iun6002.exe
2006-08-30 22:04 -------- d-------- C:\Documents and Settings\St‚phane\Application Data\AdobeUM
2006-08-30 21:27 -------- d-------- C:\Program Files\Fichiers communs\Adobe Systems Shared
2006-08-30 21:10 -------- d-------- C:\Documents and Settings\St‚phane\Application Data\Ahead
2006-08-30 21:02 -------- d-------- C:\Program Files\Fichiers communs\LightScribe
2006-08-30 21:00 -------- d-------- C:\Program Files\Fichiers communs\Nero
2006-08-30 20:56 -------- d-------- C:\Program Files\Nero
2006-08-30 20:56 -------- d-------- C:\Program Files\Fichiers communs\Ahead
2006-08-26 00:43 -------- d-------- C:\Program Files\Replay Converter
2006-08-25 20:02 -------- d-------- C:\Program Files\FusionSoft DVD Player XP
2006-08-25 17:51 617472 --a------ C:\WINDOWS\system32\comctl32.dll
2006-08-24 20:58 -------- d-------- C:\Program Files\Dev-Cpp
2006-08-24 20:58 -------- d-------- C:\Documents and Settings\St‚phane\Application Data\Dev-Cpp
2006-08-22 20:05 -------- d-------- C:\Program Files\Microsoft
2006-08-22 17:44 -------- d-------- C:\Documents and Settings\St‚phane\Application Data\Google
2006-08-22 17:42 -------- d-------- C:\Program Files\Google
2006-08-21 21:33 -------- d-------- C:\Documents and Settings\St‚phane\Application Data\NASA
2006-08-21 21:30 -------- d-------- C:\Program Files\NASA
2006-08-21 19:59 -------- d-------- C:\Program Files\FLVPlayer
2006-08-21 18:13 -------- d-------- C:\Program Files\Fichiers communs\SWF Studio
2006-08-21 17:35 -------- d-------- C:\Program Files\Flv converter
2006-08-21 14:26 16896 --a------ C:\WINDOWS\system32\fltlib.dll
2006-08-21 13:15 407047 --a------ C:\WINDOWS\system32\mioengine.exe
2006-08-21 13:15 -------- d-------- C:\Program Files\Mioplanet
2006-08-21 11:14 23040 --a------ C:\WINDOWS\system32\fltMc.exe
2006-08-21 11:14 128896 --a------ C:\WINDOWS\system32\drivers\fltMgr.sys
2006-08-21 10:17 -------- d-------- C:\Program Files\EasyPHP1-8
2006-08-20 22:49 163712 --a------ C:\WINDOWS\system32\drivers\vidstub.sys
2006-08-16 17:55 208896 --a------ C:\WINDOWS\system32\nvudisp.exe
2006-08-16 13:59 100352 --a------ C:\WINDOWS\system32\6to4svc.dll
2006-08-13 15:17 14 --a------ C:\WINDOWS\system32\systeminfo.dll
2006-08-07 19:48 46683 --a------ C:\WINDOWS\BricoPackUninst.cmd
2006-08-07 19:48 1730 --a------ C:\WINDOWS\BricoPackFoldersDelete.cmd
2006-08-02 23:23 4608 --a------ C:\WINDOWS\system32\w95inf32.dll
2006-08-02 23:23 2272 --a------ C:\WINDOWS\system32\w95inf16.dll
2006-07-29 19:32 48936 --a------ C:\WINDOWS\system32\sirenacm.dll
2006-07-27 15:26 679424 --a------ C:\WINDOWS\system32\inetcomm.dll
2006-07-27 04:05 109568 --------- C:\WINDOWS\system32\pxinsi64.exe
2006-07-27 04:05 108544 --------- C:\WINDOWS\system32\pxcpyi64.exe
2006-07-26 11:53 219648 --a------ C:\WINDOWS\system32\uxtheme.dll
2006-07-21 10:27 72704 --a------ C:\WINDOWS\system32\hlink.dll
2006-07-08 12:30 1161216 --a------ C:\Program Files\wbfhq.exe
2006-07-04 21:12 62 --ahs---- C:\Documents and Settings\St‚phane\Application Data\desktop.ini


(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))

*Note* empty entries are not shown

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"Skype"="\"C:\\Program Files\\Skype\\Phone\\Skype.exe\" /nosplash /minimized"
"MsnMsgr"="\"C:\\Program Files\\MSN Messenger\\MsnMsgr.Exe\" /background"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"HControl"="C:\\WINDOWS\\ATK0100\\HControl.exe"
"NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup"
"SoundMan"="SOUNDMAN.EXE"
"ASUS Live Update"="C:\\Program Files\\ASUS\\ASUS Live Update\\ALU.exe"
"Wireless Console 2"="C:\\Program Files\\Wireless Console 2\\wcourier.exe"
"SynTPEnh"="C:\\Program Files\\Synaptics\\SynTP\\SynTPEnh.exe"
"Control Center"="C:\\Program Files\\ASUS\\WLAN Card Utilities\\Center.exe"
"Zshutdown"="c:\\sysprep\\patch\\sysprep.cmd"
"Power_Gear"="C:\\Program Files\\ASUS\\Power4 Gear\\BatteryLife.exe 1"
"TkBellExe"="\"C:\\Program Files\\Fichiers communs\\Real\\Update_OB\\realsched.exe\" -osboot"
"DAEMON Tools"="\"C:\\Program Files\\DAEMON Tools\\daemon.exe\" -lang 1033"
"SunJavaUpdateSched"="C:\\Program Files\\Java\\jre1.5.0_06\\bin\\jusched.exe"
"BluetoothAuthenticationAgent"="rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent"
"iTunesHelper"="\"C:\\Program Files\\iTunes\\iTunesHelper.exe\""
"PowerDirector"="C:\\WINDOWS\\Temp\\TPDIR\\setup.exe"
"BootSkin Startup Jobs"="\"C:\\PROGRA~1\\STARDOCK\\WINCUS~1\\BOOTSKIN\\BootSkin.exe\" /StartupJobs"
"NeroFilterCheck"="C:\\WINDOWS\\system32\\NeroCheck.exe"
"Adobe Version Cue CS2"="\"C:\\Program Files\\Adobe\\Adobe Version Cue CS2\\ControlPanel\\VersionCueCS2Tray.exe\""
"Acrobat Assistant 7.0"="\"C:\\Program Files\\Adobe\\Adobe Acrobat 7.0\\Distillr\\Acrotray.exe\""
@=""
"avast!"="C:\\PROGRA~1\\ALWILS~1\\Avast4\\ashDisp.exe"
"Pando"="\"C:\\Program Files\\Pando Networks\\Pando\\Pando.exe\" /Automation"
"LanguageShortcut"="\"C:\\Program Files\\CyberLink\\PowerDVD\\Language\\Language.exe\""

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
"Installed"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
"Installed"="1"
"NoChange"="1"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
"Installed"="1"

[HKEY_CURRENT_USER\software\microsoft\internet explorer\desktop\components]
"DeskHtmlVersion"=dword:00000110
"DeskHtmlMinorVersion"=dword:00000005
"Settings"=dword:00000001
"GeneralFlags"=dword:00000004

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE"
"Spyware Doctor"=""

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run]
"CTFMON.EXE"="C:\\WINDOWS\\system32\\CTFMON.EXE"
"Spyware Doctor"=""

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\sharedtaskscheduler]
"{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Pré-chargeur Browseui"
"{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Démon de cache des catégories de composant"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{AEB6717E-7E19-11d0-97EE-00C04FD91972}"=""

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\Run]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"dontdisplaylastusername"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\policies\explorer]
"NoDriveTypeAutoRun"=dword:00000091

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
"PostBootReminder"="{7849596a-48ea-486e-8937-a2a3009f31a9}"
"CDBurn"="{fbeb8a05-beee-4442-804e-409d6c4515e9}"
"WebCheck"="{E6FB5E20-DE35-11CF-9C87-00AA005127ED}"
"SysTray"="{35CEC8A3-2BE6-11D2-8773-92E220524153}"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"Steam"="\"c:\\program files\\steam\\steam.exe\" -silent"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"nwiz"="nwiz.exe /install"
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"RemoteControl"="\"C:\\Program Files\\CyberLink\\PowerDVD\\PDVDServ.exe\""

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"

Completion time: 06-10-17 10:48:25.65
C:\ComboFix.txt ... 06-10-17 10:48