hijackthis

[djezzalain]

Bonsoir
Voilà le résultat de mon scan
Quelqu'un peut-il le déchiffrer
Merci


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:15:56, on 27/07/2008
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal

Running processes:
C:WINDOWSSYSTEMKERNEL32.DLL
C:WINDOWSSYSTEMMSGSRV32.EXE
C:WINDOWSSYSTEMmmtask.tsk
C:WINDOWSSYSTEMMPREXE.EXE
C:WINDOWSRUNDLL32.EXE
C:WINDOWSSYSTEMSTIMON.EXE
C:WINDOWSSYSTEMKB891711KB891711.EXE
C:WINDOWSSYSTEMKB918547KB918547.EXE
C:PROGRAM FILESALWIL SOFTWAREAVAST4ASHSERV.EXE
C:WINDOWSEXPLORER.EXE
C:WINDOWSSYSTEMRESTORESTMGR.EXE
C:WINDOWSSYSTEMRPCSS.EXE
C:WINDOWSSYSTEMCMMPU.EXE
C:WINDOWSSYSTEMSYSTRAY.EXE
C:WINDOWSLOADQM.EXE
C:PROGRAM FILESALWIL SOFTWAREAVAST4ASHMAISV.EXE
C:WINDOWSRUNDLL32.EXE
C:WINDOWSSYSTEMQTTASK.EXE
C:WINDOWSSYSTEMWMIEXE.EXE
C:WINDOWSSYSTEMDDHELP.EXE
C:PROGRAM FILESOUTLOOK EXPRESSMSIMN.EXE
C:WINDOWSSYSTEMPSTORES.EXE
C:PROGRAM FILESMOZILLA FIREFOXFIREFOX.EXE
C:PROGRAM FILESTREND MICROHIJACKTHISHIJACKTHIS.EXE
C:WINDOWSSYSTEMWBEMWINMGMT.EXE

R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://fr.msn.com/
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://home.free.fr/
R1 - HKCUSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch = http://minisearch.startnow.com
R1 - HKLMSoftwareMicrosoftInternet ExplorerSearch,Default_Search_URL = http://minisearch.startnow.com
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - - (no file)
F1 - win.ini: run=C:WINDOWSSYSTEMcmmpu.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:PROGRAM FILESADOBEACROBAT 5.0READERACTIVEXACROIEHELPER.OCX
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:PROGRAM FILESEPSONEPSON WEB-TO-PAGEEPSON WEB-TO-PAGE.DLL
O2 - BHO: Reactivator - {AC2E8306-D24E-4082-8669-7781499F4E03} - (no file)
O2 - BHO: (no name) - {9C91A46F-0D1C-F0C9-F4F0-7B9F534FA37D} - (no file)
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:PROGRAM FILESMSN APPSMSN TOOLBAR1.02.5000.1021FRMSNTB.DLL
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:PROGRAM FILESMSN APPSST1.03.0000.1005EN-XUSTMAIN.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:program filesgooglegoogletoolbar1.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:PROGRA~1SPYBOT~1SDHELPER.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program FilesJavajre1.6.0_03inssv.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:PROGRAM FILESEPSONEPSON WEB-TO-PAGEEPSON WEB-TO-PAGE.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:WINDOWSSYSTEMMSDXM.OCX
O3 - Toolbar: (no name) - {A20A76AD-7A29-4756-87FE-70C334CB40C0} - (no file)
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:PROGRAM FILESMSN APPSMSN TOOLBAR1.02.5000.1021FRMSNTB.DLL
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:program filesgooglegoogletoolbar1.dll
O4 - HKLM..Run: [SystemTray] SysTray.Exe
O4 - HKLM..Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM..Run: [LoadQM] loadqm.exe
O4 - HKLM..Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
O4 - HKLM..Run: [OWCCardbusTray] ocbtray.exe
O4 - HKLM..Run: [avast! Web Scanner] C:PROGRA~1ALWILS~1AVAST4ASHWEBSV.EXE
O4 - HKLM..Run: [ashMaiSv] C:PROGRA~1ALWILS~1AVAST4ashmaisv.exe
O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSSYSTEMNvCpl.dll,NvStartup
O4 - HKLM..Run: [nwiz] nwiz.exe /install
O4 - HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSSYSTEMNvMcTray.dll,NvTaskbarInit
O4 - HKLM..Run: [QuickTime Task] "C:WINDOWSSYSTEMQTTASK.EXE" -atboottime
O4 - HKLM..RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM..RunServices: [*StateMgr] C:WINDOWSSystemRestoreStateMgr.exe
O4 - HKLM..RunServices: [RNBOStart] C:WINDOWSSYSTEMRNBOSENTSENTSTRT.EXE
O4 - HKLM..RunServices: [LicCtrl] rundll32.exe C:WINDOWSMMFS.DLL,Service
O4 - HKLM..RunServices: [StillImageMonitor] C:WINDOWSSYSTEMSTIMON.EXE
O4 - HKLM..RunServices: [KB891711] C:WINDOWSSYSTEMKB891711KB891711.EXE
O4 - HKLM..RunServices: [KB918547] C:WINDOWSSYSTEMKB918547KB918547.EXE
O4 - HKLM..RunServices: [avast!] C:Program FilesAlwil SoftwareAvast4ashServ.exe
O4 - HKCU..Run: [SpybotSD TeaTimer] C:Program FilesSpybot - Search & DestroyTeaTimer.exe
O4 - HKUS.DEFAULT..Run: [SpybotSD TeaTimer] C:Program FilesSpybot - Search & DestroyTeaTimer.exe (User 'Default user')
O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.h ... xmk765YYFR
O8 - Extra context menu item: &Every Toolbar Search - res://C:PROGRA~1EVERYT~1.1EVERYCOM.DLL/GoRSDN.dll.htm
O8 - Extra context menu item: Recherche &Google - res://C:PROGRAM FILESGOOGLEGOOGLETOOLBAR1.DLL/cmsearch.html
O8 - Extra context menu item: &Traduire à partir de l'anglais - res://C:PROGRAM FILESGOOGLEGOOGLETOOLBAR1.DLL/cmwordtrans.html
O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://C:PROGRAM FILESGOOGLEGOOGLETOOLBAR1.DLL/cmcache.html
O8 - Extra context menu item: Pages similaires - res://C:PROGRAM FILESGOOGLEGOOGLETOOLBAR1.DLL/cmsimilar.html
O8 - Extra context menu item: Pages liées - res://C:PROGRAM FILESGOOGLEGOOGLETOOLBAR1.DLL/cmbacklinks.html
O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:Mes documentsmarion courstsendto_ie_ctx.htm
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:WINDOWSweb elated.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:WINDOWSweb elated.htm
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:Mes documentsmarion courstsendto_ie.htm (file missing)
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:Mes documentsmarion courstsendto_ie.htm (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:PROGRA~1SPYBOT~1SDHELPER.DLL
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:PROGRA~1SPYBOT~1SDHELPER.DLL
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:PROGRAM FILESJAVAJRE1.6.0_03BINSSV.DLL
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:PROGRAM FILESJAVAJRE1.6.0_03BINSSV.DLL
O12 - Plugin for .mus: C:PROGRA~1INTERN~1PluginsNPMyrMus.dll
O12 - Plugin for .myr: C:PROGRA~1INTERN~1PluginsNPMyrMus.dll
O12 - Plugin for .mu3: C:PROGRA~1INTERN~1PluginsNPMyrMus.dll
O12 - Plugin for .mut: C:PROGRA~1INTERN~1PluginsNPMyrMus.dll
O14 - IERESET.INF: START_PAGE_URL=http://home.free.fr/
O16 - DPF: Interface Chat Voila - http://chat10.x-echo.com/version2/Applet/vchatsign.cab
O16 - DPF: Interface Chat Wanadoo - http://chat14.x-echo.com/version3/Applet/wchatsign.cab
O16 - DPF: {5CA8D349-C6E7-11D4-8166-009027DF3BB2} (France Telecom MDDK ActiveX Control) - http://accueil.ava.serveur-ava.com/stki ... /mDKid.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b28578.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMe ... loader.cab
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZI ... b32846.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b31267.cab
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/ms ... b31267.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/Mi ... b31267.cab
O16 - DPF: {E6A3C1E2-F792-483E-9133-596215172BE9} (AcceptLang Class) - http://runonce.msn.com/setacceptlang.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://laurettelabretonne.spaces.live.c ... nPUpld.cab
O16 - DPF: {64D01C7F-810D-446E-A07E-365764235644} (AtlAtomadersCtlAttrib Class) - http://kraisoft.com/files/realone/atomaders.cab
O16 - DPF: {C4925E65-7A1E-11D2-8BB4-00A0C9CC72C3} (Virtools WebPlayer Class) - http://a532.g.akamai.net/f/532/6712/5m/ ... taller.exe
O16 - DPF: {0246ECA8-996F-11D1-BE2F-00A0C9037DFE} - http://www.ulg.ac.be/biogc/wfplayer/tdserver.cab
O16 - DPF: {1FF43AD5-2262-4C2F-81D4-26D710C3F305} (VB2S Mannequin Virtuel Control) - http://mannequin.redoute.fr/activex/Mannequin.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - http://go.divx.com/plugin/DivXBrowserPlugin.cab
O16 - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} (AxisMediaControlEmb Class) - http://camera1.mairie-brest.fr/activex/AMC.cab
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://charon777.free.fr/plugins/hardwa ... 0_4_12.cab
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) - http://www.nvidia.com/content/DriverDow ... eqlab3.cab
O16 - DPF: {74DBCB52-F298-4110-951D-AD2FF67BC8AB} (NVIDIA Smart Scan) - http://www.nvidia.com/content/DriverDow ... rtScan.cab
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://www.new2.foto.com/ImageUploader5.cab

--
End of file - 10217 bytes

[Skynet]

Salut,

il y a du ménage à faire effectivement :

R1 - HKCUSoftwareMicrosoftInternet ExplorerSearch,CustomizeSearch = http://minisearch.startnow.com

R1 - HKLMSoftwareMicrosoftInternet ExplorerSearch,Default_Search_URL = http://minisearch.startnow.com

R3 - URLSearchHook: (no name) - - (no file)

O2 - BHO: Reactivator - {AC2E8306-D24E-4082-8669-7781499F4E03} - (no file)

O2 - BHO: (no name) - {9C91A46F-0D1C-F0C9-F4F0-7B9F534FA37D} - (no file)

O3 - Toolbar: (no name) - {A20A76AD-7A29-4756-87FE-70C334CB40C0} - (no file)

O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.h ... xmk765YYFR

O8 - Extra context menu item: &Every Toolbar Search - res://C:PROGRA~1EVERYT~1.1EVERYCOM.DLL/GoRSDN.dll.htm

O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:Mes documentsmarion courstsendto_ie.htm (file missing)

O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:Mes documentsmarion courstsendto_ie.htm (file missing)

O16 - DPF: Interface Chat Voila - http://chat10.x-echo.com/version2/Applet/vchatsign.cab

O16 - DPF: Interface Chat Wanadoo - http://chat14.x-echo.com/version3/Applet/wchatsign.cab

O16 - DPF: {5CA8D349-C6E7-11D4-8166-009027DF3BB2} (France Telecom MDDK ActiveX Control) - http://accueil.ava.serveur-ava.com/stki ... /mDKid.cab

O16 - DPF: {64D01C7F-810D-446E-A07E-365764235644} (AtlAtomadersCtlAttrib Class) - http://kraisoft.com/files/realone/atomaders.cab

O16 - DPF: {C4925E65-7A1E-11D2-8BB4-00A0C9CC72C3} (Virtools WebPlayer Class) - http://a532.g.akamai.net/f/532/6712/5m/ ... 12/player/ install3.5/installer.exe

O16 - DPF: {0246ECA8-996F-11D1-BE2F-00A0C9037DFE} - http://www.ulg.ac.be/biogc/wfplayer/tdserver.cab

O16 - DPF: {1FF43AD5-2262-4C2F-81D4-26D710C3F305} (VB2S Mannequin Virtuel Control) - http://mannequin.redoute.fr/activex/Mannequin.cab

O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} (Image Uploader Control) - http://www.new2.foto.com/ImageUploader5.cab

[joedalton]

trop tard Sky est passé avant

[djezzalain]

Merci Sky
je comprends que je dois cocher les éléments que tu m'indiques afin de les supprimer ? C'est la 1ère fois que j'utilise hijackthis et en suivant un tuto , je préfère être prudent

[Skynet]

Oui c'est bien ça et tu cliques ensuite sur "Fix checked".

Ton navigateur internet ou toutes autres fenêtres doivent être fermés pour le faire.

[djezzalain]

Sky

J'ai suivi tes instructions . Ce qui m'a amené à utiliser hijackthis , c'est un problème de plantage lorsque je suis sur internet . Au bout d'un moment j'ai un rectangle blanc qui apparait à l'écran avec un seul choix "fermer" qui a pour effet de couper la connexion.

Bonne soirée

djezzalain

[Skynet]

Ok,

tiens-nous au courant si ça revient .

Sinon, tu peux utiliser Firefox comme navigateur :

http://www.pc-infopratique.com/telechar ... refox.html

[djezzalain]

J'utilise firefox mais je devrais peut-être désinstaller IE.
Sinon c'est OK je vous tiens au courant pour le rectangle blanc.
Merci encore

djezzalain

[NEO HYUGA]

salut,

juste pour preciser qu IE n est pas desinstallable

[Skynet]

Exact, on peut... Mais c'est du pipeau.

[djezzalain]

Bonjour à tous

Suite aux 2 dernières réponses d'hier soir , le mieux est de laisser IE alors.
Si pas de rectangle blanc d'ici 1 heure tout sera OK

[djezzalain]

Bonjour à tous

Hélas le rectangle blanc est revenu, donc quand je fait "fermer" , je n'arrive pas à me reconnecter sauf parfois quand je fait "ctrl alt supp et que je ferme ashwebsv !!! j'ai peut-être un petit soucis du côté d' Avast

[Skynet]

Tu as quoi comme pare-feu ?

[r@in | b0w]

Bonjour.

Désinstalles la barre d'outils My web search, elle est vérolée.

Après désinstallation, tu en profites pour nettoyer les points de restauration.

Pour cela, cliques sur Poste de travail puis Propriétés.
Onglet Restauration automatique du système, tu coches la ligne Désactiver la restauration du système puis tu valides par Ok.
Tu confirmes la suppression de tous les points de restauration, puis tu cliques sur Appliquer et/ou Ok.

Tu refais la manipulation pour relancer les propriétés du Poste de travail.
Tu décoches la ligne puis cliques sur Appliquer & Ok.

Tu auras créer un point de restauration propre.

Refais ensuite un scan HiJackThis puis postes-nous le rapport.

[djezzalain]

Bonsoir

Voilà le nouveau scan



Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:22:59, on 28/07/2008
Platform: Windows ME (Win9x 4.90.3000)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal

Running processes:
C:WINDOWSSYSTEMKERNEL32.DLL
C:WINDOWSSYSTEMMSGSRV32.EXE
C:WINDOWSSYSTEMmmtask.tsk
C:WINDOWSSYSTEMMPREXE.EXE
C:WINDOWSRUNDLL32.EXE
C:WINDOWSSYSTEMSTIMON.EXE
C:WINDOWSSYSTEMKB891711KB891711.EXE
C:WINDOWSSYSTEMKB918547KB918547.EXE
C:PROGRAM FILESALWIL SOFTWAREAVAST4ASHSERV.EXE
C:WINDOWSEXPLORER.EXE
C:WINDOWSSYSTEMRESTORESTMGR.EXE
C:WINDOWSSYSTEMRPCSS.EXE
C:WINDOWSSYSTEMCMMPU.EXE
C:WINDOWSSYSTEMSYSTRAY.EXE
C:WINDOWSLOADQM.EXE
C:PROGRAM FILESALWIL SOFTWAREAVAST4ASHWEBSV.EXE
C:PROGRAM FILESALWIL SOFTWAREAVAST4ASHMAISV.EXE
C:WINDOWSRUNDLL32.EXE
C:WINDOWSSYSTEMQTTASK.EXE
C:PROGRAM FILESSPYBOT - SEARCH & DESTROYTEATIMER.EXE
C:WINDOWSSYSTEMWMIEXE.EXE
C:WINDOWSSYSTEMDDHELP.EXE
C:PROGRAM FILESMOZILLA FIREFOXFIREFOX.EXE
C:PROGRAM FILESTREND MICROHIJACKTHISHIJACKTHIS.EXE
C:WINDOWSSYSTEMWBEMWINMGMT.EXE
C:WINDOWSNOTEPAD.EXE

R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://fr.msn.com/
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://home.free.fr/
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Liens
F1 - win.ini: run=C:WINDOWSSYSTEMcmmpu.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:PROGRAM FILESADOBEACROBAT 5.0READERACTIVEXACROIEHELPER.OCX
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:PROGRAM FILESEPSONEPSON WEB-TO-PAGEEPSON WEB-TO-PAGE.DLL
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:PROGRA~1SPYBOT~1SDHELPER.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program FilesJavajre1.6.0_03inssv.dll
O2 - BHO: (no name) - {AC2E8306-D24E-4082-8669-7781499F4E03} - (no file)
O2 - BHO: (no name) - {9C91A46F-0D1C-F0C9-F4F0-7B9F534FA37D} - (no file)
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:PROGRAM FILESEPSONEPSON WEB-TO-PAGEEPSON WEB-TO-PAGE.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:WINDOWSSYSTEMMSDXM.OCX
O4 - HKLM..Run: [SystemTray] SysTray.Exe
O4 - HKLM..Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM..Run: [LoadQM] loadqm.exe
O4 - HKLM..Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
O4 - HKLM..Run: [OWCCardbusTray] ocbtray.exe
O4 - HKLM..Run: [avast! Web Scanner] C:PROGRA~1ALWILS~1AVAST4ASHWEBSV.EXE
O4 - HKLM..Run: [ashMaiSv] C:PROGRA~1ALWILS~1AVAST4ashmaisv.exe
O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSSYSTEMNvCpl.dll,NvStartup
O4 - HKLM..Run: [nwiz] nwiz.exe /install
O4 - HKLM..Run: [NvMediaCenter] RUNDLL32.EXE C:WINDOWSSYSTEMNvMcTray.dll,NvTaskbarInit
O4 - HKLM..Run: [QuickTime Task] "C:WINDOWSSYSTEMQTTASK.EXE" -atboottime
O4 - HKLM..RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
O4 - HKLM..RunServices: [*StateMgr] C:WINDOWSSystemRestoreStateMgr.exe
O4 - HKLM..RunServices: [RNBOStart] C:WINDOWSSYSTEMRNBOSENTSENTSTRT.EXE
O4 - HKLM..RunServices: [LicCtrl] rundll32.exe C:WINDOWSMMFS.DLL,Service
O4 - HKLM..RunServices: [StillImageMonitor] C:WINDOWSSYSTEMSTIMON.EXE
O4 - HKLM..RunServices: [KB891711] C:WINDOWSSYSTEMKB891711KB891711.EXE
O4 - HKLM..RunServices: [KB918547] C:WINDOWSSYSTEMKB918547KB918547.EXE
O4 - HKLM..RunServices: [avast!] C:Program FilesAlwil SoftwareAvast4ashServ.exe
O4 - HKCU..Run: [SpybotSD TeaTimer] C:Program FilesSpybot - Search & DestroyTeaTimer.exe
O4 - HKUS.DEFAULT..Run: [SpybotSD TeaTimer] C:Program FilesSpybot - Search & DestroyTeaTimer.exe (User 'Default user')
O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:Mes documentsmarion courstsendto_ie_ctx.htm
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:WINDOWSweb elated.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:WINDOWSweb elated.htm
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:PROGRA~1SPYBOT~1SDHELPER.DLL
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:PROGRA~1SPYBOT~1SDHELPER.DLL
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:PROGRAM FILESJAVAJRE1.6.0_03BINSSV.DLL
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:PROGRAM FILESJAVAJRE1.6.0_03BINSSV.DLL
O12 - Plugin for .mus: C:PROGRA~1INTERN~1PluginsNPMyrMus.dll
O12 - Plugin for .myr: C:PROGRA~1INTERN~1PluginsNPMyrMus.dll
O12 - Plugin for .mu3: C:PROGRA~1INTERN~1PluginsNPMyrMus.dll
O12 - Plugin for .mut: C:PROGRA~1INTERN~1PluginsNPMyrMus.dll
O14 - IERESET.INF: START_PAGE_URL=http://home.free.fr/
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b28578.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMe ... loader.cab
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZI ... b32846.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Me ... b31267.cab
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/ms ... b31267.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/Mi ... b31267.cab
O16 - DPF: {E6A3C1E2-F792-483E-9133-596215172BE9} (AcceptLang Class) - http://runonce.msn.com/setacceptlang.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://laurettelabretonne.spaces.live.c ... nPUpld.cab
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - http://go.divx.com/plugin/DivXBrowserPlugin.cab
O16 - DPF: {DE625294-70E6-45ED-B895-CFFA13AEB044} (AxisMediaControlEmb Class) - http://camera1.mairie-brest.fr/activex/AMC.cab
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://charon777.free.fr/plugins/hardwa ... 0_4_12.cab
O16 - DPF: {1E54D648-B804-468d-BC78-4AFFED8E262E} (System Requirements Lab) - http://www.nvidia.com/content/DriverDow ... eqlab3.cab
O16 - DPF: {74DBCB52-F298-4110-951D-AD2FF67BC8AB} (NVIDIA Smart Scan) - http://www.nvidia.com/content/DriverDow ... rtScan.cab
O16 - DPF: Interface Chat Voila -
O16 - DPF: Interface Chat Wanadoo -
O16 - DPF: {5CA8D349-C6E7-11D4-8166-009027DF3BB2} -
O16 - DPF: {64D01C7F-810D-446E-A07E-365764235644} -
O16 - DPF: {C4925E65-7A1E-11D2-8BB4-00A0C9CC72C3} -
O16 - DPF: {0246ECA8-996F-11D1-BE2F-00A0C9037DFE} -
O16 - DPF: {1FF43AD5-2262-4C2F-81D4-26D710C3F305} -
O16 - DPF: {5D637FAD-E202-48D1-8F18-5B9C459BD1E3} -

--
End of file - 7574 bytes