Trojan.downloader.dyfuca.dn

david -  
balltrap34 Messages postés 16241 Statut Contributeur sécurité -
j'ai ce trojan dans c: \windows\system\mdslupd.dll, détecté par bitdefender et impossible de le virer. qqu'un peut m'aider. merci d'avance
j'ai également un fichier suspect avec behaveslike:trojan.hangup
Configuration: windows me

28 réponses

  • 1
  • 2
Résumé de la discussion

BitDefender signale Trojan.Downloader.Dyfuca.DN dans C:\WINDOWS\SYSTEM\msdlupd.dll et des éléments associés à C:\Program Files\Services en ligne\Netup.exe, avec des comportements suspectés de type Trojan.HangUp. Plusieurs réponses recommandent des scans en ligne via Rav Antivirus (ravonline.cab), l'activation d'Autoclean et le coller du rapport une fois l’analyse terminée. D'autres conseils utilisent HijackThis pour générer un log et identifier les entrées auto‑exécutables, ou promeuvent A² Free comme outil complémentaire, parfois mis à jour en raison d'une détection récente. En pratique, les résultats varient selon l’outil et la même menace peut échapper à certains scanners, d’où l’intérêt de combiner plusieurs solutions et de maintenir à jour les outils antivirus comme A² Free.

Bobot (l'IA à votre service)
  1. @bsinthe Messages postés 4 Statut Membre
     
    je l'ai chopper aussi mais norton antivirus la suprimer sans problème!!
    0
    1. sabine
       
      salut j'ai chopé le trojan.domcom et moi norton ne parvient pas a le supprimer comment as tu fais.
      aide moi stp j'en ai marre ca fais 4 jours que je cherche et rien ne fonctionne

      Merci
      0
  3. Neo-Nil@u Messages postés 1595 Statut Contributeur 96
     
    Salut david,

    lance un scan ici :
    http://www.ravantivirus.com/scan/

    Clique sur "To continue without subscribing click here" et
    attends que Ready soit affiché dans status.
    Ensuite, coche la case "Autoclean" puis clique sur Scan my PC.
    A la fin de l'analyse, copie/colle le rapport ici
    0
  4. david
     
    j'ai fait le scan : 0 virus trouvé, pourtant bitdefender me les trouve !
    merci d'avance
    0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. Neo-Nil@u Messages postés 1595 Statut Contributeur 96
     
    Es-tu sûr que RAV ne te trouve rien ?
    Vide tes caches internet :

    Panneau de Configuration, Options Internet :
    Supprimer les cookies, OK
    Supprimer les fichiers, coche la case, OK
    0
  7. david
     
    Scan started at 24/04/2005 20:09:38

    Scanning memory...

    Scanned
    ============================
    Objects: 27036
    Directories: 1957
    Archives: 652
    Size(Kb): -1108994
    Infected files: 0

    Found
    ============================
    Viruses found: 0
    Suspicious files: 0
    Disinfected files: 0
    Mail files: 53
    0
  8. david
     
    scan fait par bit defender
    C:\WINDOWS\SYSTEM\msdlupd.dll Infectés avec Trojan.Downloader.Dyfuca.DN
    0
  9. jean38 Messages postés 2534 Date d'inscription   Statut Contributeur Dernière intervention   47
     
    si tu as Hijackthis, lance un scan et colle le log resultat ici.

    si tu ne l'as pas,
    telecharge hijackthis:
    http://www.merijn.org/files/hijackthis.zip
    Dezippe le dans un dossier prévu a cet effet.
    Par exemple C:\hijackthis
    lance le puis:
    clic sur "do a system scan and save logfile" et pas autre chose
    fais un copier coller du log entier ici.
    0
    1. david
       
      Logfile of HijackThis v1.99.1
      Scan saved at 19:21:16, on 25/04/2005
      Platform: Windows ME (Win9x 4.90.3000)
      MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

      Running processes:
      C:\WINDOWS\SYSTEM\KERNEL32.DLL
      C:\WINDOWS\SYSTEM\MSGSRV32.EXE
      C:\WINDOWS\SYSTEM\mmtask.tsk
      C:\WINDOWS\SYSTEM\MPREXE.EXE
      C:\WINDOWS\SYSTEM\MSTASK.EXE
      C:\WINDOWS\SYSTEM\SSDPSRV.EXE
      C:\PROGRAM FILES\FICHIERS COMMUNS\SOFTWIN\BITDEFENDER SCAN SERVER\BDSS.EXE
      C:\PROGRAM FILES\FICHIERS COMMUNS\SOFTWIN\BITDEFENDER COMMUNICATOR\XCOMMSVR.EXE
      C:\WINDOWS\SYSTEM\STIMON.EXE
      C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
      C:\PROGRAM FILES\FICHIERS COMMUNS\SYMANTEC SHARED\CCSETMGR.EXE
      C:\PROGRAM FILES\FICHIERS COMMUNS\SYMANTEC SHARED\CCEVTMGR.EXE
      C:\PROGRAM FILES\NORTON ANTIVIRUS\IWP\NPFMNTOR.EXE
      C:\WINDOWS\EXPLORER.EXE
      C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
      C:\WINDOWS\TASKMON.EXE
      C:\WINDOWS\SYSTEM\SYSTRAY.EXE
      C:\WINDOWS\SYSTEM\ATI2EVXX.EXE
      C:\WINDOWS\SYSTEM\WMIEXE.EXE
      C:\WINDOWS\SYSTEM\ATIPTAXX.EXE
      C:\WINDOWS\SYSTEM\ATI2CWXX.EXE
      C:\PROGRAM FILES\EZBUTTON\CP51NBTN.EXE
      C:\WINDOWS\RUNDLL32.EXE
      C:\PROGRAM FILES\SOFTWIN\BITDEFENDER PROFESSIONAL EDITION\VSSERV.EXE
      C:\WINDOWS\LOADQM.EXE
      C:\PROGRAM FILES\EZBUTTON\CPHKCNT.EXE
      C:\WINDOWS\SYSTEM\QTTASK.EXE
      C:\WINDOWS\SYSTEM\LVCOMSX.EXE
      D:\LOGITRAY.EXE
      C:\WINDOWS\SYSTEM\WBEM\WINMGMT.EXE
      C:\PROGRAM FILES\MSN APPS\UPDATER\01.02.0002.1001\FR\MSNAPPAU.EXE
      C:\WINDOWS\SYSTEM\DDHELP.EXE
      C:\PROGRAM FILES\FICHIERS COMMUNS\SYMANTEC SHARED\CCPD-LC\SYMLCSVC.EXE
      C:\PROGRAM FILES\FICHIERS COMMUNS\SYMANTEC SHARED\CCAPP.EXE
      C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\LOGITECHDESKTOPMESSENGER.EXE
      C:\PROGRAM FILES\PALM\HOTSYNC.EXE
      D:\FXSVR2.EXE
      C:\PROGRAM FILES\FICHIERS COMMUNS\SYMANTEC SHARED\SNDSRVC.EXE
      C:\WINDOWS\SYSTEM\RNAAPP.EXE
      C:\WINDOWS\SYSTEM\TAPISRV.EXE
      C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
      C:\WINDOWS\TEMP\TD_0001.DIR\HIJACKTHIS.EXE

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.boursorama.com/portefeuille/portefeuille.phtml
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
      O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
      O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
      O3 - Toolbar: Barre d'outils MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\PROGRAM FILES\MSN TOOLBAR\01.01.1601.0\FR\MSNTB.DLL
      O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
      O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
      O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
      O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
      O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
      O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
      O4 - HKLM\..\Run: [ATIPOLAB] ati2evxx.exe
      O4 - HKLM\..\Run: [AtiPTA] Atiptaxx.exe
      O4 - HKLM\..\Run: [Ati2cwxx] Ati2cwxx.exe
      O4 - HKLM\..\Run: [CP51NBtn] C:\PROGRA~1\EZBUTTON\CP51NBtn.EXE
      O4 - HKLM\..\Run: [AdslTaskBar] rundll32.exe stmctrl.dll,TaskBar
      O4 - HKLM\..\Run: [BitDefender Virus Shield] C:\Program Files\Softwin\BitDefender Professional Edition\\vsserv.exe
      O4 - HKLM\..\Run: [BDNewsAgent] C:\PROGRAM FILES\SOFTWIN\BITDEFENDER PROFESSIONAL EDITION\bdnagent.exe
      O4 - HKLM\..\Run: [BDSwitchAgent] C:\PROGRAM FILES\SOFTWIN\BITDEFENDER PROFESSIONAL EDITION\bdswitch.exe
      O4 - HKLM\..\Run: [LoadQM] loadqm.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime
      O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\SYSTEM\LVCOMSX.EXE
      O4 - HKLM\..\Run: [LogitechVideoRepair] D:\ISStart.exe
      O4 - HKLM\..\Run: [LogitechVideoTray] D:\LogiTray.exe
      O4 - HKLM\..\Run: [NsUpdate] C:\WINDOWS\NsUpdate.exe UPDATE
      O4 - HKLM\..\Run: [Hot_Tarts_fr] C:\Program Files\Video1\Dialers\Hot_Tarts_fr\Hot_Tarts_fr.exe /dontdial
      O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.0002.1001\fr\msnappau.exe"
      O4 - HKLM\..\Run: [TrojanScanner] C:\Mes documents\Nouveau dossier\Trojan Remover\Trjscan.exe
      O4 - HKLM\..\Run: [Symantec Core LC] C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe start
      O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
      O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMON.EXE
      O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
      O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
      O4 - HKLM\..\RunServices: [SSDPSRV] C:\WINDOWS\SYSTEM\ssdpsrv.exe
      O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
      O4 - HKLM\..\RunServices: [BitDefender Scan Server] C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\\bdss.exe
      O4 - HKLM\..\RunServices: [BitDefender Communicator] C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\\xcommsvr.exe
      O4 - HKLM\..\RunServices: [BitDefender Live! Init] C:\Program Files\Softwin\BitDefender Professional Edition\\bdinit.exe
      O4 - HKLM\..\RunServices: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
      O4 - HKLM\..\RunServices: [KB891711] C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
      O4 - HKLM\..\RunServices: [ccSetMgr] "C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe"
      O4 - HKLM\..\RunServices: [ccEvtMgr] "C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe"
      O4 - HKLM\..\RunServices: [NPFMonitor] C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
      O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Fichiers communs\Symantec Shared\Script Blocking\SBServ.exe" -reg
      O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
      O4 - HKCU\..\Run: [LogitechSoftwareUpdate] D:\MANIFESTENGINE.EXE boot
      O4 - Startup: Microsoft Office.lnk = D:\Office\OSA9.EXE
      O4 - Startup: HotSync Manager.lnk = C:\Program Files\Palm\HOTSYNC.EXE
      O4 - Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
      O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
      O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
      O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} (PPSDKActiveXScanner.MainScreen) - http://69.44.122.156/scanner/axscanner.cab
      O16 - DPF: {205FF73B-CA67-11D5-99DD-444553540000} (CInstall Class) - http://www.spywarestormer.com/files2/Install.cab
      O16 - DPF: {DDF44FD9-749F-4761-89BB-E8A59339E459} - http://akamai.downloadv3.com/binaries/LiveService/LiveService_9_FR.cab
      O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - http://www.colorclub.fr/Components/PersitsSoftware/XUpload.ocx
      O16 - DPF: {92E7E45A-D8C8-480E-AF99-176E43997CAA} (Aurigma Image Uploader 3.0 Combo Control) - http://tele2internet.misterclic.fr/Components/Upload/ImageUploader3.cab
      O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.com/scan8/oscan8.cab
      O16 - DPF: {A3009861-330C-4E10-822B-39D16EC8829D} (CRAVOnline Object) - http://www.ravantivirus.com/scan/ravonline.cab
      O18 - Protocol: offline-8876480 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bw00 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bw00s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bw10 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bw10s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bw20 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bw20s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bw30 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bw30s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bw40 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bw40s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bw50 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bw50s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bw60 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bw60s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bw70 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bw70s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bw80 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bw80s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bw90 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bw90s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwa0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwa0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwb0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwb0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwc0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwc0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwd0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwd0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwe0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwe0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwf0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwf0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwg0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwg0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwh0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwh0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwi0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwi0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwj0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwj0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwk0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwk0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwl0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwl0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwm0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwm0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwn0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwn0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwo0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwo0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwp0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwp0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwq0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwq0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwr0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwr0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bws0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bws0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwt0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwt0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwu0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwu0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwv0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwv0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bww0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bww0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwx0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwx0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwy0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwy0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwz0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwz0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bw-0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bw-0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bw+0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bw+0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
      O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\GAPLUGPROTOCOL-8876480.DLL
      0
  10. david
     
    Logfile of HijackThis v1.99.1
    Scan saved at 19:21:16, on 25/04/2005
    Platform: Windows ME (Win9x 4.90.3000)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\SYSTEM\KERNEL32.DLL
    C:\WINDOWS\SYSTEM\MSGSRV32.EXE
    C:\WINDOWS\SYSTEM\mmtask.tsk
    C:\WINDOWS\SYSTEM\MPREXE.EXE
    C:\WINDOWS\SYSTEM\MSTASK.EXE
    C:\WINDOWS\SYSTEM\SSDPSRV.EXE
    C:\PROGRAM FILES\FICHIERS COMMUNS\SOFTWIN\BITDEFENDER SCAN SERVER\BDSS.EXE
    C:\PROGRAM FILES\FICHIERS COMMUNS\SOFTWIN\BITDEFENDER COMMUNICATOR\XCOMMSVR.EXE
    C:\WINDOWS\SYSTEM\STIMON.EXE
    C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
    C:\PROGRAM FILES\FICHIERS COMMUNS\SYMANTEC SHARED\CCSETMGR.EXE
    C:\PROGRAM FILES\FICHIERS COMMUNS\SYMANTEC SHARED\CCEVTMGR.EXE
    C:\PROGRAM FILES\NORTON ANTIVIRUS\IWP\NPFMNTOR.EXE
    C:\WINDOWS\EXPLORER.EXE
    C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
    C:\WINDOWS\TASKMON.EXE
    C:\WINDOWS\SYSTEM\SYSTRAY.EXE
    C:\WINDOWS\SYSTEM\ATI2EVXX.EXE
    C:\WINDOWS\SYSTEM\WMIEXE.EXE
    C:\WINDOWS\SYSTEM\ATIPTAXX.EXE
    C:\WINDOWS\SYSTEM\ATI2CWXX.EXE
    C:\PROGRAM FILES\EZBUTTON\CP51NBTN.EXE
    C:\WINDOWS\RUNDLL32.EXE
    C:\PROGRAM FILES\SOFTWIN\BITDEFENDER PROFESSIONAL EDITION\VSSERV.EXE
    C:\WINDOWS\LOADQM.EXE
    C:\PROGRAM FILES\EZBUTTON\CPHKCNT.EXE
    C:\WINDOWS\SYSTEM\QTTASK.EXE
    C:\WINDOWS\SYSTEM\LVCOMSX.EXE
    D:\LOGITRAY.EXE
    C:\WINDOWS\SYSTEM\WBEM\WINMGMT.EXE
    C:\PROGRAM FILES\MSN APPS\UPDATER\01.02.0002.1001\FR\MSNAPPAU.EXE
    C:\WINDOWS\SYSTEM\DDHELP.EXE
    C:\PROGRAM FILES\FICHIERS COMMUNS\SYMANTEC SHARED\CCPD-LC\SYMLCSVC.EXE
    C:\PROGRAM FILES\FICHIERS COMMUNS\SYMANTEC SHARED\CCAPP.EXE
    C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\LOGITECHDESKTOPMESSENGER.EXE
    C:\PROGRAM FILES\PALM\HOTSYNC.EXE
    D:\FXSVR2.EXE
    C:\PROGRAM FILES\FICHIERS COMMUNS\SYMANTEC SHARED\SNDSRVC.EXE
    C:\WINDOWS\SYSTEM\RNAAPP.EXE
    C:\WINDOWS\SYSTEM\TAPISRV.EXE
    C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
    C:\WINDOWS\TEMP\TD_0001.DIR\HIJACKTHIS.EXE

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.boursorama.com/portefeuille/portefeuille.phtml
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
    O3 - Toolbar: Barre d'outils MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\PROGRAM FILES\MSN TOOLBAR\01.01.1601.0\FR\MSNTB.DLL
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
    O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
    O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
    O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
    O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\Run: [ATIPOLAB] ati2evxx.exe
    O4 - HKLM\..\Run: [AtiPTA] Atiptaxx.exe
    O4 - HKLM\..\Run: [Ati2cwxx] Ati2cwxx.exe
    O4 - HKLM\..\Run: [CP51NBtn] C:\PROGRA~1\EZBUTTON\CP51NBtn.EXE
    O4 - HKLM\..\Run: [AdslTaskBar] rundll32.exe stmctrl.dll,TaskBar
    O4 - HKLM\..\Run: [BitDefender Virus Shield] C:\Program Files\Softwin\BitDefender Professional Edition\\vsserv.exe
    O4 - HKLM\..\Run: [BDNewsAgent] C:\PROGRAM FILES\SOFTWIN\BITDEFENDER PROFESSIONAL EDITION\bdnagent.exe
    O4 - HKLM\..\Run: [BDSwitchAgent] C:\PROGRAM FILES\SOFTWIN\BITDEFENDER PROFESSIONAL EDITION\bdswitch.exe
    O4 - HKLM\..\Run: [LoadQM] loadqm.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime
    O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\SYSTEM\LVCOMSX.EXE
    O4 - HKLM\..\Run: [LogitechVideoRepair] D:\ISStart.exe
    O4 - HKLM\..\Run: [LogitechVideoTray] D:\LogiTray.exe
    O4 - HKLM\..\Run: [NsUpdate] C:\WINDOWS\NsUpdate.exe UPDATE
    O4 - HKLM\..\Run: [Hot_Tarts_fr] C:\Program Files\Video1\Dialers\Hot_Tarts_fr\Hot_Tarts_fr.exe /dontdial
    O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.0002.1001\fr\msnappau.exe"
    O4 - HKLM\..\Run: [TrojanScanner] C:\Mes documents\Nouveau dossier\Trojan Remover\Trjscan.exe
    O4 - HKLM\..\Run: [Symantec Core LC] C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe start
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMON.EXE
    O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
    O4 - HKLM\..\RunServices: [SSDPSRV] C:\WINDOWS\SYSTEM\ssdpsrv.exe
    O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
    O4 - HKLM\..\RunServices: [BitDefender Scan Server] C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\\bdss.exe
    O4 - HKLM\..\RunServices: [BitDefender Communicator] C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\\xcommsvr.exe
    O4 - HKLM\..\RunServices: [BitDefender Live! Init] C:\Program Files\Softwin\BitDefender Professional Edition\\bdinit.exe
    O4 - HKLM\..\RunServices: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
    O4 - HKLM\..\RunServices: [KB891711] C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
    O4 - HKLM\..\RunServices: [ccSetMgr] "C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe"
    O4 - HKLM\..\RunServices: [ccEvtMgr] "C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe"
    O4 - HKLM\..\RunServices: [NPFMonitor] C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
    O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Fichiers communs\Symantec Shared\Script Blocking\SBServ.exe" -reg
    O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    O4 - HKCU\..\Run: [LogitechSoftwareUpdate] D:\MANIFESTENGINE.EXE boot
    O4 - Startup: Microsoft Office.lnk = D:\Office\OSA9.EXE
    O4 - Startup: HotSync Manager.lnk = C:\Program Files\Palm\HOTSYNC.EXE
    O4 - Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
    O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
    O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} (PPSDKActiveXScanner.MainScreen) - http://69.44.122.156/scanner/axscanner.cab
    O16 - DPF: {205FF73B-CA67-11D5-99DD-444553540000} (CInstall Class) - http://www.spywarestormer.com/files2/Install.cab
    O16 - DPF: {DDF44FD9-749F-4761-89BB-E8A59339E459} - http://akamai.downloadv3.com/binaries/LiveService/LiveService_9_FR.cab
    O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - http://www.colorclub.fr/Components/PersitsSoftware/XUpload.ocx
    O16 - DPF: {92E7E45A-D8C8-480E-AF99-176E43997CAA} (Aurigma Image Uploader 3.0 Combo Control) - http://tele2internet.misterclic.fr/Components/Upload/ImageUploader3.cab
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.com/scan8/oscan8.cab
    O16 - DPF: {A3009861-330C-4E10-822B-39D16EC8829D} (CRAVOnline Object) - http://www.ravantivirus.com/scan/ravonline.cab
    O18 - Protocol: offline-8876480 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw00 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw00s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw10 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw10s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw20 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw20s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw30 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw30s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw40 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw40s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw50 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw50s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw60 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw60s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw70 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw70s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw80 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw80s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw90 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw90s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwa0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwa0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwb0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwb0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwc0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwc0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwd0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwd0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwe0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwe0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwf0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwf0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwg0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwg0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwh0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwh0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwi0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwi0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwj0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwj0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwk0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwk0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwl0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwl0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwm0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwm0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwn0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwn0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwo0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwo0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwp0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwp0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwq0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwq0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwr0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwr0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bws0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bws0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwt0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwt0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwu0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwu0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwv0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwv0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bww0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bww0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwx0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwx0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwy0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwy0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwz0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwz0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw-0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw-0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw+0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw+0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\GAPLUGPROTOCOL-8876480.DLL
    0
  11. david
     
    Logfile of HijackThis v1.99.1
    Scan saved at 19:21:16, on 25/04/2005
    Platform: Windows ME (Win9x 4.90.3000)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\SYSTEM\KERNEL32.DLL
    C:\WINDOWS\SYSTEM\MSGSRV32.EXE
    C:\WINDOWS\SYSTEM\mmtask.tsk
    C:\WINDOWS\SYSTEM\MPREXE.EXE
    C:\WINDOWS\SYSTEM\MSTASK.EXE
    C:\WINDOWS\SYSTEM\SSDPSRV.EXE
    C:\PROGRAM FILES\FICHIERS COMMUNS\SOFTWIN\BITDEFENDER SCAN SERVER\BDSS.EXE
    C:\PROGRAM FILES\FICHIERS COMMUNS\SOFTWIN\BITDEFENDER COMMUNICATOR\XCOMMSVR.EXE
    C:\WINDOWS\SYSTEM\STIMON.EXE
    C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
    C:\PROGRAM FILES\FICHIERS COMMUNS\SYMANTEC SHARED\CCSETMGR.EXE
    C:\PROGRAM FILES\FICHIERS COMMUNS\SYMANTEC SHARED\CCEVTMGR.EXE
    C:\PROGRAM FILES\NORTON ANTIVIRUS\IWP\NPFMNTOR.EXE
    C:\WINDOWS\EXPLORER.EXE
    C:\WINDOWS\SYSTEM\RESTORE\STMGR.EXE
    C:\WINDOWS\TASKMON.EXE
    C:\WINDOWS\SYSTEM\SYSTRAY.EXE
    C:\WINDOWS\SYSTEM\ATI2EVXX.EXE
    C:\WINDOWS\SYSTEM\WMIEXE.EXE
    C:\WINDOWS\SYSTEM\ATIPTAXX.EXE
    C:\WINDOWS\SYSTEM\ATI2CWXX.EXE
    C:\PROGRAM FILES\EZBUTTON\CP51NBTN.EXE
    C:\WINDOWS\RUNDLL32.EXE
    C:\PROGRAM FILES\SOFTWIN\BITDEFENDER PROFESSIONAL EDITION\VSSERV.EXE
    C:\WINDOWS\LOADQM.EXE
    C:\PROGRAM FILES\EZBUTTON\CPHKCNT.EXE
    C:\WINDOWS\SYSTEM\QTTASK.EXE
    C:\WINDOWS\SYSTEM\LVCOMSX.EXE
    D:\LOGITRAY.EXE
    C:\WINDOWS\SYSTEM\WBEM\WINMGMT.EXE
    C:\PROGRAM FILES\MSN APPS\UPDATER\01.02.0002.1001\FR\MSNAPPAU.EXE
    C:\WINDOWS\SYSTEM\DDHELP.EXE
    C:\PROGRAM FILES\FICHIERS COMMUNS\SYMANTEC SHARED\CCPD-LC\SYMLCSVC.EXE
    C:\PROGRAM FILES\FICHIERS COMMUNS\SYMANTEC SHARED\CCAPP.EXE
    C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\LOGITECHDESKTOPMESSENGER.EXE
    C:\PROGRAM FILES\PALM\HOTSYNC.EXE
    D:\FXSVR2.EXE
    C:\PROGRAM FILES\FICHIERS COMMUNS\SYMANTEC SHARED\SNDSRVC.EXE
    C:\WINDOWS\SYSTEM\RNAAPP.EXE
    C:\WINDOWS\SYSTEM\TAPISRV.EXE
    C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
    C:\WINDOWS\TEMP\TD_0001.DIR\HIJACKTHIS.EXE

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.boursorama.com/portefeuille/portefeuille.phtml
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHELPER.DLL
    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
    O3 - Toolbar: Barre d'outils MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\PROGRAM FILES\MSN TOOLBAR\01.01.1601.0\FR\MSNTB.DLL
    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
    O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
    O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
    O4 - HKLM\..\Run: [PCHealth] C:\WINDOWS\PCHealth\Support\PCHSchd.exe -s
    O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
    O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\Run: [ATIPOLAB] ati2evxx.exe
    O4 - HKLM\..\Run: [AtiPTA] Atiptaxx.exe
    O4 - HKLM\..\Run: [Ati2cwxx] Ati2cwxx.exe
    O4 - HKLM\..\Run: [CP51NBtn] C:\PROGRA~1\EZBUTTON\CP51NBtn.EXE
    O4 - HKLM\..\Run: [AdslTaskBar] rundll32.exe stmctrl.dll,TaskBar
    O4 - HKLM\..\Run: [BitDefender Virus Shield] C:\Program Files\Softwin\BitDefender Professional Edition\\vsserv.exe
    O4 - HKLM\..\Run: [BDNewsAgent] C:\PROGRAM FILES\SOFTWIN\BITDEFENDER PROFESSIONAL EDITION\bdnagent.exe
    O4 - HKLM\..\Run: [BDSwitchAgent] C:\PROGRAM FILES\SOFTWIN\BITDEFENDER PROFESSIONAL EDITION\bdswitch.exe
    O4 - HKLM\..\Run: [LoadQM] loadqm.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\SYSTEM\QTTASK.EXE" -atboottime
    O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\SYSTEM\LVCOMSX.EXE
    O4 - HKLM\..\Run: [LogitechVideoRepair] D:\ISStart.exe
    O4 - HKLM\..\Run: [LogitechVideoTray] D:\LogiTray.exe
    O4 - HKLM\..\Run: [NsUpdate] C:\WINDOWS\NsUpdate.exe UPDATE
    O4 - HKLM\..\Run: [Hot_Tarts_fr] C:\Program Files\Video1\Dialers\Hot_Tarts_fr\Hot_Tarts_fr.exe /dontdial
    O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.0002.1001\fr\msnappau.exe"
    O4 - HKLM\..\Run: [TrojanScanner] C:\Mes documents\Nouveau dossier\Trojan Remover\Trjscan.exe
    O4 - HKLM\..\Run: [Symantec Core LC] C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe start
    O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
    O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMON.EXE
    O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
    O4 - HKLM\..\RunServices: [SSDPSRV] C:\WINDOWS\SYSTEM\ssdpsrv.exe
    O4 - HKLM\..\RunServices: [*StateMgr] C:\WINDOWS\System\Restore\StateMgr.exe
    O4 - HKLM\..\RunServices: [BitDefender Scan Server] C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\\bdss.exe
    O4 - HKLM\..\RunServices: [BitDefender Communicator] C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\\xcommsvr.exe
    O4 - HKLM\..\RunServices: [BitDefender Live! Init] C:\Program Files\Softwin\BitDefender Professional Edition\\bdinit.exe
    O4 - HKLM\..\RunServices: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
    O4 - HKLM\..\RunServices: [KB891711] C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
    O4 - HKLM\..\RunServices: [ccSetMgr] "C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe"
    O4 - HKLM\..\RunServices: [ccEvtMgr] "C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe"
    O4 - HKLM\..\RunServices: [NPFMonitor] C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
    O4 - HKLM\..\RunServices: [ScriptBlocking] "C:\Program Files\Fichiers communs\Symantec Shared\Script Blocking\SBServ.exe" -reg
    O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    O4 - HKCU\..\Run: [LogitechSoftwareUpdate] D:\MANIFESTENGINE.EXE boot
    O4 - Startup: Microsoft Office.lnk = D:\Office\OSA9.EXE
    O4 - Startup: HotSync Manager.lnk = C:\Program Files\Palm\HOTSYNC.EXE
    O4 - Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
    O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
    O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} (PPSDKActiveXScanner.MainScreen) - http://69.44.122.156/scanner/axscanner.cab
    O16 - DPF: {205FF73B-CA67-11D5-99DD-444553540000} (CInstall Class) - http://www.spywarestormer.com/files2/Install.cab
    O16 - DPF: {DDF44FD9-749F-4761-89BB-E8A59339E459} - http://akamai.downloadv3.com/binaries/LiveService/LiveService_9_FR.cab
    O16 - DPF: {E87F6C8E-16C0-11D3-BEF7-009027438003} (Persits Software XUpload) - http://www.colorclub.fr/Components/PersitsSoftware/XUpload.ocx
    O16 - DPF: {92E7E45A-D8C8-480E-AF99-176E43997CAA} (Aurigma Image Uploader 3.0 Combo Control) - http://tele2internet.misterclic.fr/Components/Upload/ImageUploader3.cab
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.com/scan8/oscan8.cab
    O16 - DPF: {A3009861-330C-4E10-822B-39D16EC8829D} (CRAVOnline Object) - http://www.ravantivirus.com/scan/ravonline.cab
    O18 - Protocol: offline-8876480 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw00 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw00s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw10 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw10s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw20 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw20s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw30 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw30s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw40 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw40s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw50 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw50s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw60 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw60s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw70 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw70s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw80 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw80s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw90 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw90s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwa0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwa0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwb0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwb0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwc0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwc0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwd0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwd0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwe0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwe0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwf0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwf0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwg0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwg0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwh0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwh0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwi0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwi0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwj0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwj0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwk0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwk0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwl0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwl0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwm0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwm0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwn0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwn0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwo0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwo0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwp0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwp0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwq0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwq0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwr0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwr0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bws0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bws0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwt0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwt0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwu0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwu0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwv0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwv0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bww0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bww0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwx0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwx0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwy0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwy0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwz0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwz0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw-0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw-0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw+0 - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw+0s - {4CE0C27D-A533-43D1-870D-596FD2F5CAFD} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\GAPLUGPROTOCOL-8876480.DLL
    0
  12. david
     
    j'ai trojan.downloader.dyfuca dans c:\windows\system\msdlupd.dll et il n'y a que bitdefender qui me le detecte : mis en quarantaine, envoyé au labo, toujours présent
    j'ai également un suspects dans c:\program files\services en ligne\netup.exe suspect avec behaveslike:trojan.hangup
    merci de votre aide
    0
  13. balltrap34 Messages postés 16241 Statut Contributeur sécurité 332
     
    salut
    bit defender ne la pas mis dans le dossier suspect ou infected
    0
  14. david
     
    si : il le met en quarantaine , mais quand je refais un scan il apparait à nouveau
    0
  15. david
     
    si : il le met en quarantaine , mais quand je refais un scan il apparait à nouveau
    de plus maintenant, quand je veux éteindre l'ordi ceci s'affiche : symlcsvs a provoqué une erreur dans 'inconnu'
    ccapp a provoqué une erreur dans 'inconnu'
    et pour ouvrir une piece joint a un mail : ceci s'affiche : microsoft visual basic : fichier introuvable : DVZAddin.dll
    encore merci pour votre aide
    0
  16. david
     
    salut, qqu'un sait ce que fait ce trojan ? svp
    merci d'avance
    0
  17. david
     
    je n'arrive toujours pas a supprimer trojan.dowbloader.dyfuca.dn
    merci d'avance
    0
  18. balltrap34 Messages postés 16241 Statut Contributeur sécurité 332
     
    Faite scan en ligne et coller le rapport ici sur le post
    utiliser l'antivirus en ligne suivant :
    http://www.ravantivirus.com/scan/
    Cliquer sur "To continue without subscribing click here" et attendre quelques minutes.

    Lorsque "Ready" est affiché dans "status", cocher la case "Autoclean" puis cliquer sur "Scan my PC"
    A la fin de l'analyse, copier/coller le rapport ici.
    0
  19. david
     
    Scan started at 02/05/2005 19:58:58

    Scanning memory...

    Scanned
    ============================
    Objects: 18487
    Directories: 2092
    Archives: 826
    Size(Kb): -1116587
    Infected files: 0

    Found
    ============================
    Viruses found: 0
    Suspicious files: 0
    Disinfected files: 0
    Mail files: 28

    seul bitdefender me le détecte
    merci d'avance
    0
  21. david
     
    salut, a2 ne détecte rien (san fait : 0 malware détecté), seul bitdefender le détecte
    merci
    0
  • 1
  • 2