Infection à éradiquer

miguel -  
Bonjour, j' ai été infecté par un trojan.Win32.P2E.by malgré la présence de deux antivirus sur mon PC dont f secure.
Que dois je faire pour l' éradiquer completement.
Ce virus a enlevé certaines fonctionnalités de mes programmes,doit je reinstaller ceux-ci en risquant de perdre mes fichiers ?mon adress miguel.dondon@wanadoo.fr

8 réponses

  1. métallian
    Salut,

    Impératif, seulement un seul antivirus sur ton pc !
    Conseil vires f-secure (payant + innefficace), prends en un gratuit voir là :
    http://www.inoculer.com/gratuits.php3

    Pour ton trojan, je pense que a2 devrais pouvoir s'en occuper.
    http://www.emsisoft.net/fr/software/download/

    Et ensuite, un autre conseil, ne pas mettre son adresse e-mail n'importe où, sur internet il n'y a pas que des gens biens intentionnés.

    @+
    0
    1. DONDON
      MERCI METALLIAN POUR TES CONSEILS QUE JE VAIS METTRE EN ROUTE D MAINTENANT QUE DOIS JE FAIRE POUR MES PROGRAMMES QUI NE FONCTIONNENT PLUS CORRECTEMENT
      0
  2. Utilisateur anonyme
    Salut mettalian,
    je voulais t apporter un ptit conseil
    as tu deja regarder ce que a² detecte, au moins tu connais ce qu il est capable etc, sinon va faire un tour sur le site

    a+
    0
    1. métallian
      Salut régis,

      Oui, j'ai déjà été voir dans la base de données de a2, mais c'est vrai j'ai pas pensé à aller la consultée avant de lui conseillé d'utiliser a2, il n'y est pas désolé...
      0
      1. fille_inquiete
        qui pourra m'aider? je vous en supplie!
        0
        2. fille_inquiete
          comment savoir si mon pc est infecté par un virus?
          0
          1. Utilisateur anonyme
            re,
            --------------------------------------------------------------------------
            lance un scan chez RAV :
            http://www.ravantivirus.com/scan/

            Clique sur "To continue without subscribing click here" et attends quelques minutes.
            Lorsque "Ready" est affiché dans "status", coche la case "Autoclean" puis clique sur "Scan my PC"
            A la fin de l'analyse, copie/colle le rapport ici
            -------------------------------------------------------------------------
            télécharge hijackthis ici:
            http://www.hijackthis.de/downloads/hijackthis_199.zip
            L'aide est ici:
            http://www.zebulon.fr/articles/HijackThis.php

            Dezippz le dans un dossier prévu a cet effet.
            Par exemple C:\hijackthis
            lancez le puis:
            clic sur "do a system scan and save logfile"
            faire un copier coller du log entier sur le forum

            a demain, moi jpense pas rester
            0
            1. dond
              salut regis Scan started at 26/06/2005 00:14:28

              Scanning memory...
              Scanning boot sectors...
              Scanning files...

              Scanned
              ============================
              Objects: 64276
              Directories: 4962
              Archives: 6740
              Size(Kb): 378855
              Infected files: 0

              Found
              ============================
              Viruses found: 0
              Suspicious files: 0
              Disinfected files: 0
              Mail files: 269

              voici mon analyse je fais le reste de la manip je crois que j' ai assaini ma situation par contre l' un de mes programmes très important cubase ne fonctionne pas correctement je crois malgré moi que je devrais le desinstaller big force mig de martinica
              0
            2. dond
              pour regis de la part de miguel
              C:\WINDOWS\system32\services.exe
              C:\WINDOWS\system32\lsass.exe
              C:\WINDOWS\System32\Ati2evxx.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\System32\svchost.exe
              C:\WINDOWS\system32\spoolsv.exe
              C:\WINDOWS\system32\drivers\CDAC11BA.EXE
              C:\WINDOWS\System32\CTsvcCDA.exe
              C:\Program Files\Securitoo\av_fw\fswsclds.exe
              C:\WINDOWS\System32\svchost.exe
              C:\WINDOWS\System32\MsPMSPSv.exe
              C:\WINDOWS\system32\fxssvc.exe
              C:\WINDOWS\system32\Ati2evxx.exe
              C:\WINDOWS\Explorer.EXE
              C:\PROGRA~1\WANADOO\TaskbarIcon.exe
              C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
              C:\Program Files\Trend Micro\PC-cillin 9\PCCClient.exe
              C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
              C:\WINDOWS\system32\RunDll32.exe
              C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
              C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe
              C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDet.EXE
              C:\WINDOWS\system32\CTHELPER.EXE
              C:\Program Files\Winamp\winampa.exe
              C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fr\msnappau.exe
              C:\WINDOWS\system32\LVCOMSX.EXE
              C:\Program Files\Logitech\Video\LogiTray.exe
              C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
              C:\Program Files\OFFICE ONE6.5\OFFICE One PDF Manager\OoPDFSettingsv6.exe
              C:\WINDOWS\system32\ctfmon.exe
              C:\Program Files\Creative\MediaSource\RemoteControl\RcMan.exe
              C:\Program Files\Creative\MediaSource\Go\CTCMSGo.exe
              C:\Program Files\MSN Messenger\MsnMsgr.Exe
              C:\DOCUME~1\DONDON~1\LOCALS~1\Temp\bwgo000d3875.exe
              C:\Program Files\Logitech\Video\FxSvr2.exe
              C:\PROGRA~1\LIVECOM\APPLIC~1\EXE\LIVECOM.EXE
              C:\Program Files\OFFICE ONE6.5\OFFICE One Notes\oonotesv65.exe
              C:\Program Files\OFFICE ONE6.5\OFFICE One Clock\ooneclockv65.exe
              C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
              C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
              C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
              C:\Program Files\Booster Wanadoo\wanadoo_booster.exe
              C:\Program Files\OFFICE ONE6.5\program\soffice.exe
              C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE
              C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
              C:\PROGRA~1\LIVECOM\Toaster\Toaster.exe
              C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
              C:\PROGRA~1\LIVECOM\APPLIC~1\eConfv4\ftplayer.exe
              C:\Program Files\AVPersonal\AVWUPSRV.EXE
              C:\Program Files\AVPersonal\AVGUARD.EXE
              C:\Program Files\AVPersonal\AVGNT.EXE
              C:\WINDOWS\system32\wscntfy.exe
              C:\Program Files\Securitoo\av_fw\Common\FSLAUNCH.EXE
              C:\Program Files\AVPersonal\AVSCHED32.EXE
              C:\Program Files\Fichiers communs\Real\Update_OB\rnathchk.exe
              C:\Program Files\Internet Explorer\iexplore.exe
              C:\DOCUME~1\DONDON~1\LOCALS~1\Temp\Répertoire temporaire 2 pour hijackthis_199.zip\HijackThis.exe

              R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.wanadoo.fr/go/page_recherche/
              R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wanadoo.fr
              R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
              R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
              R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\WANADOO\SEARCH~1.DLL
              O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
              O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
              O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
              O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll
              O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
              O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll
              O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\WANADOO\Watch.exe
              O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\WANADOO\TaskbarIcon.exe
              O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\WANADOO\CnxMon.exe
              O4 - HKLM\..\Run: [TkBellExe] C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe -osboot
              O4 - HKLM\..\Run: [pccguide.exe] "C:\Program Files\Trend Micro\PC-cillin 9\pccguide.exe"
              O4 - HKLM\..\Run: [PCCClient.exe] "C:\Program Files\Trend Micro\PC-cillin 9\PCCClient.exe"
              O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe
              O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
              O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
              O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
              O4 - HKLM\..\Run: [BOOT] C:\Program Files\ISSENDIS\ISSENDIS WebUpdate v6\issendiswebupdatev6.exe /BOOT
              O4 - HKLM\..\Run: [SBDrvDet] C:\Program Files\Creative\SB Drive Det\SBDrvDet.exe /r
              O4 - HKLM\..\Run: [CTSysVol] C:\Program Files\Creative\SBAudigy2ZS\Surround Mixer\CTSysVol.exe /r
              O4 - HKLM\..\Run: [CTDVDDET] C:\Program Files\Creative\SBAudigy2ZS\DVDAudio\CTDVDDet.EXE
              O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
              O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
              O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
              O4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fr\msnappau.exe"
              O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
              O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
              O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
              O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
              O4 - HKLM\..\Run: [oouserv6.exe] C:\Program Files\OFFICE ONE6.5\program\oouserv6.exe
              O4 - HKLM\..\Run: [OoPDFSettingsv6.exe] C:\Program Files\OFFICE ONE6.5\OFFICE One PDF Manager\OoPDFSettingsv6.exe
              O4 - HKLM\..\Run: [AVGCtrl] "C:\Program Files\AVPersonal\AVGNT.EXE" /min
              O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
              O4 - HKCU\..\Run: [Instant Access] rundll32.exe C:\WINDOWS\eg_auth_1042.dll,InstantAccess /L
              O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
              O4 - HKCU\..\Run: [SB Audigy 2 Startup Menu] "C:\Program Files\Creative\SBAudigy2ZS\Program\Startup Menu\ChkColor.EXE"
              O4 - HKCU\..\Run: [RemoteCenter] C:\Program Files\Creative\MediaSource\RemoteControl\RcMan.exe
              O4 - HKCU\..\Run: [Creative MediaSource Go] C:\Program Files\Creative\MediaSource\Go\CTCMSGo.exe /SYS
              O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
              O4 - HKCU\..\Run: [Livecom] "C:\PROGRA~1\LIVECOM\APPLIC~1\EXE\..\..\Launcher\Exe\SilentLauncher.exe"
              O4 - Startup: OFFICE One 6.5.lnk = C:\Program Files\OFFICE ONE6.5\program\quickstart.exe
              O4 - Global Startup: OFFICE One Notes v6.5.lnk = C:\Program Files\OFFICE ONE6.5\OFFICE One Notes\oonotesv65.exe
              O4 - Global Startup: OFFICE One Clock v6.5.lnk = C:\Program Files\OFFICE ONE6.5\OFFICE One Clock\ooneclockv65.exe
              O4 - Global Startup: Logitech Desktop Messenger Agent.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
              O4 - Global Startup: hpoddt01.exe.lnk = ?
              O4 - Global Startup: hp psc 1000 series.lnk = ?
              O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
              O4 - Global Startup: Booster Wanadoo.lnk = C:\Program Files\Booster Wanadoo\wanadoo_booster.exe
              O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
              O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
              O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
              O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
              O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe (file missing)
              O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe (file missing)
              O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU)
              O12 - Plugin for .mp3: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin4.dll
              O12 - Plugin for .mpg: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin3.dll
              O16 - DPF: Interface Chat Voila - http://chat7.x-echo.com/version5/Applet/vchatsign.cab
              O16 - DPF: PackageHtmlCab - http://acces.blonde.com/package/PackageHtmlCab.CAB
              O16 - DPF: {0A5FD7C5-A45C-49FC-ADB5-9952547D5715} (Creative Software AutoUpdate) - http://www.creative.com/su/ocx/15009/CTSUEng.cab
              O16 - DPF: {2AEEAC34-FD74-4142-B891-4B05C0C03C87} - http://akamai.downloadv3.com/binaries/DialHTML/EGCOMSERVICE_1053_pack_XP.cab
              O16 - DPF: {31DDC1FD-CEA3-4837-A6DC-87E67015ADC9} - http://akamai.downloadv3.com/binaries/IA/svcsysnet32_FR_XP.cab
              O16 - DPF: {3AEA6239-7D97-4B70-A342-A824B55E5A5B} (Adam Class) - http://htmldialer.parisvoyeur.com/CABSPOLY/cd/1,0,3,8/fr/Eve.cab
              O16 - DPF: {511F9316-771B-4953-A268-1C36DA667FE9} - http://ip.sponsoradulto.com/cab/3/fr/SysWebTelecomInt.cab
              O16 - DPF: {54C75FB0-6B8B-4278-BF7B-77036F15A69E} - http://akamai.downloadv3.com/binaries/P2EClient/EGAUTH_1041_FR_XP.cab
              O16 - DPF: {86EEF11E-FF16-48CE-B1A2-474B663041A9} - http://kit.carpediem.fr/10598/SEXE.exe
              O16 - DPF: {8EB3FF4E-86A1-4717-884D-7BA2D38272CB} (F-Secure Online Scanner) - http://www.securitoo.com/fra/pages/navol/fscax.cab
              O16 - DPF: {92ABACFE-EF6E-42C7-A824-D50A914B5B70} (MastaCash Loader Class) - http://dx.mastacash.com/loader.cab
              O16 - DPF: {A3009861-330C-4E10-822B-39D16EC8829D} (CRAVOnline Object) - http://www.ravantivirus.com/scan/ravonline.cab
              O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cab
              O16 - DPF: {B4E0F9CB-BC06-4A33-BBB3-F75F16B6FF5E} (Tristan Class) - http://htmldialer.parisvoyeur.com/CABSPOLY/cd/1,0,3,8/fr/Iseult.cab
              O16 - DPF: {C6760A07-A574-4705-B113-7856315922C3} - http://akamai.downloadv3.com/binaries/IA/sysnetsvc32_FR_XP.cab
              O16 - DPF: {C9269872-E3D6-4811-8E5E-835CA8CBD0B3} - http://akamai.downloadv3.com/binaries/P2EClient/EGAUTH_1042_FR_XP.cab
              O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} (Creative Software AutoUpdate Support Package) - http://www.creative.com/su/ocx/15010/CTPID.cab
              O16 - DPF: {F72BC3F0-6C20-4793-9DDA-258589D8A907} - http://akamai.downloadv3.com/binaries/IA/netslv32_FR_XP.cab
              O18 - Protocol: bw+0 - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw+0s - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw-0 - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw-0s - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw00 - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw00s - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw10 - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw10s - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw20 - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw20s - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw30 - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw30s - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw40 - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw40s - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw50 - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw50s - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw60 - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw60s - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw70 - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw70s - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw80 - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw80s - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw90 - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw90s - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwa0 - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwa0s - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwb0 - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwb0s - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwc0 - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwc0s - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwd0 - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwd0s - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwe0 - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwe0s - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwf0 - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwf0s - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
              O18 - Protocol: bwg0 - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwg0s - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwh0 - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwh0s - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwi0 - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwi0s - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwj0 - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwj0s - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwk0 - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwk0s - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwl0 - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwl0s - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwm0 - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwm0s - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwn0 - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwn0s - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwo0 - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwo0s - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwp0 - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwp0s - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwq0 - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwq0s - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwr0 - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwr0s - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bws0 - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bws0s - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwt0 - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwt0s - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwu0 - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwu0s - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwv0 - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwv0s - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bww0 - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bww0s - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwx0 - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwx0s - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwy0 - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwy0s - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwz0 - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwz0s - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: offline-8876480 - {DAAE5949-5F90-49AA-8EB9-ED0EE8F9127A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - C:\Program Files\AVPersonal\AVGUARD.EXE
              O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
              O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
              O23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXE
              O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
              O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
              O23 - Service: F-Secure Windows Security Center Legacy Detection Service (Fswsclds) - F-Secure Corporation - C:\Program Files\Securitoo\av_fw\fswsclds.exe
              O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
              0
          2. Utilisateur anonyme
            salut miguel,
            si je te l analyse, comme j ai un peu de retard sur ton message, ca servira a quelque chose ou pas?

            a+
            0
            1. miguel
              a regis54
              je pense que ma situation est redevenu à la normale,il me faut juste reinstaller certains logiciels qui ont été endommagé me semble t' il par le trojan.
              @+
              0
          3. Utilisateur anonyme
            re,
            sinon recolle un hijack this !!

            et quel logiciel ?

            Regis59 !! lol
            0

            Discussions similaires

            Infection par le virus "conficker"
            nelly

            42 réponses
            FBDowloader impossible à éradiquer
            Pseudonyme

            30 réponses
            Comment éradiquer totalav
            jack49

            2 réponses
            Infection
            toast3r

            44 réponses
            infection
            céline0034

            12 réponses