[TROJAN NEW MALWARE.U]

VERO91 Messages postés 7 Statut Membre -  
Real Mona Messages postés 1432 Statut Membre -
Bonsoir,
Je suis, moi aussi, infectée par un trojan qui se nomme NEW MALWARE.U, qui ne cesse de m'ouvrir des fenêtres intempestives et que McAfee n'arrive, ni à mettre en quarantaine, ni à supprimer. J'ai lu dans différents messages que je pouvais laisser mon "Hijackthis". Je me permets donc de vous l'éditer, en espérant qu'une âme charitable acceptera de me venir en aide. Je précise que j'ai ADOBE et SPYBOT.
D'avance, merci de me sortir de cet enfer ...

Logfile of HijackThis v1.99.1
Scan saved at 18:21:09, on 22/10/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\windows\system\hpsysdrv.exe
C:\Program Files\USB Storage RW\shwicon.exe
C:\HP\KBD\KBD.EXE
C:\Program Files\VERITAS Software\Update Manager\sgtray.exe
C:\PROGRA~1\LEXMAR~1\ACMonitor_X83.exe
C:\PROGRA~1\LEXMAR~1\AcBtnMgr_X83.exe
C:\Program Files\Messenger Plus! 3\MsgPlus.exe
C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
C:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
c:\progra~1\mcafee.com\vso\mcvsescn.exe
C:\PROGRA~1\Wanadoo\CnxMon.exe
C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\LogProtect\LogProtect.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
C:\WINDOWS\system32\rundll32.exe
c:\progra~1\intern~1\iexplore.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\CTsvcCDA.EXE
c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\LogProtect\lpwchdg.exe
C:\WINDOWS\System32\svchost.exe
c:\progra~1\mcafee.com\vso\mcvsftsn.exe
C:\Program Files\iPod\bin\iPodService.exe
c:\PROGRA~1\mcafee.com\vso\mcshield.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Wanadoo\EspaceWanadoo.exe
C:\Program Files\Wanadoo\ComComp.exe
C:\Program Files\Wanadoo\Watch.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Propriétaire\Mes documents\veronique.gougelet\Hijack this\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr7.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-fr7.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.tdrarlubkhollgqkpukhud.biz/I6TgIFCyhqjxuerYXouDBp0pjCQzmddqux_AVWYBlwgL4CO2TY9AWsCrMzyAt9eK.jsp
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.xgymieiqssp.net/I6TgIFCyhqiMgfAl9RJ8d6eGvpwHJ6KIQ0hJ7YCiVZk.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr7.hpwis.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.pcabbjopfs.uk/qs0E/KMlV0mCZ882eLcEy145VWK7eLB1G3e7/ToiOjQ.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - _{08C06D61-F1F3-4799-86F8-BE1A89362C85} - (no file)
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} - C:\Program Files\Shareaza\Plugins\RazaWebHook.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll
O2 - BHO: (no name) - {F433812B-65B2-8E48-6F5D-84B66E103150} - C:\DOCUME~1\PROPRI~1\APPLIC~1\COMPWI~1\FreeBalm.exe
O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [KYE_Showicon] "C:\Program Files\USB Storage RW\shwicon.exe" -t"KYE\USB Storage RW"
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\VERITAS Software\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [WCOLOREAL] "C:\Program Files\Coloreal\coloreal.exe"
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [Lexmark X83 Button Monitor] C:\PROGRA~1\LEXMAR~1\ACMonitor_X83.exe
O4 - HKLM\..\Run: [Lexmark X83 Button Manager] C:\PROGRA~1\LEXMAR~1\AcBtnMgr_X83.exe
O4 - HKLM\..\Run: [PrinTray] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\printray.exe
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
O4 - HKLM\..\Run: [VirusScan Online] "c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe"
O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\Wanadoo\CnxMon.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [LogProtect] "C:\Program Files\LogProtect\LogProtect.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Inter active jugs type] C:\Documents and Settings\All Users\Application Data\SiteShimInterActive\KEEPMEDIA.exe
O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\nbj.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Creative Detector] "C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe" /R
O4 - HKCU\..\Run: [Roam Flap] C:\DOCUME~1\PROPRI~1\APPLIC~1\OPENPH~1\SeekSign.exe
O4 - HKCU\..\Run: [Registry Cleaner] "C:\Program Files\TPT Registry_Cleaner (Trial)\regclean.exe"
O4 - Startup: Registration-Studio 8 LE.lnk = C:\Program Files\Pinnacle\Studio 8\Register\RegTool.exe
O4 - Global Startup: hp center.lnk = C:\Program Files\hp center\137903\Program\BackWeb-137903.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Pense-bête.lnk = C:\Program Files\Broderbund\PrintMaster\PMREMIND.EXE
O8 - Extra context menu item: Download with &Shareaza - res://C:\Program Files\Shareaza\Plugins\RazaWebHook.dll/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU)
O16 - DPF: teleir_cert - https://static.ir.dgi.minefi.gouv.fr/secure/connexion/archives/ie4n4/teleir_cert.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {5DDCC37F-7C6B-48B8-9664-97C537920CA0} (aecviz Class) - http://www.maisonfamiliale.com/AECVIZ/npaecviz.cab
O16 - DPF: {6DB731A3-B074-4118-8B1C-32511C65D836} (FotovistaPhotoUploader.ctrFpu) - http://www.mypixmania.com/fr/fr/tools/activex/fpu.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{D68B7D7B-CBE6-4ADE-AC0E-77DBD253011C}: NameServer = 80.10.246.1 80.10.246.132
O18 - Protocol: bw+0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Filter: text/html - {C6F62B7A-5450-4A2F-8687-6CEEC3AEB055} - C:\WINDOWS\system32\controlkids2.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O23 - Service: AutoComplete Service (Autocomplete) - Acesoft - C:\Program Files\Acesoft\Tracks Eraser Pro\autocomp.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: McAfee.com McShield (McShield) - Unknown owner - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
O23 - Service: McAfee.com VirusScan Online Realtime Engine (MCVSRte) - McAfee, Inc - c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
Configuration: Matériel : HPK Pavilion
Système : WINDOWS XP édition familiale (version 2002)

7 réponses

  1.
    Real Mona Messages postés 1432 Statut Membre 94
     
    Tout d'abord, désinstalle msn+.

    Ensuite, fais ces deux scans en ligne :

    http://webscanner.kaspersky.fr/
    Copie/colle le rapport ici
    et
    http://www.ewido.net/fr/download/
    Tu l'installes et tu le mets à jour.
    Fais un scan en mode complet.
    Sauvegardes le rapport et copie le ici

    Dans la foulée copie un autre log HT avec.

    As tu un pare feu ? si oui, lequel ?

    A+
    M.
    0
    1. VERO91 Messages postés 7 Statut Membre
       
      Tout d'abord, merci de t'être occupé si rapidement de mon cas.
      Je fais tout ce que tu m'as demandé et je te recontacte, si tu le veux bien.
      Pour répondre à ta question, je n'ai pas de pare feu.
      A bientôt ...
      0
  2. Real Mona Messages postés 1432 Statut Membre 94
     
    Alors installe de toute urgence ZoneAlarm http://download.zonelabs.com/bin/free/fr/download/comparison.html
    Il faut désactiver ton parefeu Windows XP, tu fais la chose suivante :
    clique sur le bouton Démarrer, sur Paramètres, puis double clique sur Connexion Réseau. Sélectionne ta connexion puis clique dessus avec le bouton droit de la souris. Choisis la commande Propriétés. Dans l'onglet Avancé, décoche la case Protéger mon ordinateur et le réseau... Valide par OK

    A+
    M.
    0
    1. VERO91 Messages postés 7 Statut Membre
       
      OK pour ZoneAlarm, mais désolé, le 1er scan avec KASPERSKY a fonctionné mais il ne m'a pas laissé la main pour que je copie le rapport.
      En ce qui concerne EWIDO, il a été parfait.
      Voici son rapport :
      ---------------------------------------------------------
      ewido security suite - Rapport de scan
      ---------------------------------------------------------

      + Créé le: 22:47:39, 22/10/2005
      + Somme de contrôle: D65717D1

      + Résultats du scan:

      HKU\S-1-5-21-1682329366-2085001298-1268086394-1003\Software\Microsoft\Internet Explorer\Extensions\CmdMapping\\{10E42047-DEB9-4535-A118-B3F6EC39B807} -> Spyware.SideFind : Nettoyer et sauvegarder
      [1472] C:\DOCUME~1\PROPRI~1\APPLIC~1\COMPWI~1\FreeBalm.exe -> TrojanDownloader.Swizzor.bo : Nettoyer et sauvegarder
      [1128] C:\DOCUME~1\PROPRI~1\APPLIC~1\COMPWI~1\FreeBalm.exe -> TrojanDownloader.Swizzor.bo : Erreur durant le nettoyage
      :mozilla.16:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Doubleclick : Nettoyer et sauvegarder
      :mozilla.26:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.2o7 : Nettoyer et sauvegarder
      :mozilla.32:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Nettoyer et sauvegarder
      :mozilla.33:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Nettoyer et sauvegarder
      :mozilla.34:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Nettoyer et sauvegarder
      :mozilla.35:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Nettoyer et sauvegarder
      :mozilla.36:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Tradedoubler : Nettoyer et sauvegarder
      :mozilla.41:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Overture : Nettoyer et sauvegarder
      :mozilla.42:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Overture : Nettoyer et sauvegarder
      :mozilla.47:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Hitbox : Nettoyer et sauvegarder
      :mozilla.49:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Hitbox : Nettoyer et sauvegarder
      :mozilla.50:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Hitbox : Nettoyer et sauvegarder
      :mozilla.52:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Advertising : Nettoyer et sauvegarder
      :mozilla.53:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Advertising : Nettoyer et sauvegarder
      :mozilla.54:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Advertising : Nettoyer et sauvegarder
      :mozilla.55:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Advertising : Nettoyer et sauvegarder
      :mozilla.58:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Estat : Nettoyer et sauvegarder
      :mozilla.61:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Smartadserver : Nettoyer et sauvegarder
      :mozilla.62:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Smartadserver : Nettoyer et sauvegarder
      :mozilla.63:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Smartadserver : Nettoyer et sauvegarder
      :mozilla.64:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Bluestreak : Nettoyer et sauvegarder
      :mozilla.89:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Mediaplex : Nettoyer et sauvegarder
      :mozilla.98:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Valueclick : Nettoyer et sauvegarder
      :mozilla.99:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Valueclick : Nettoyer et sauvegarder
      :mozilla.110:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Googleadservices : Nettoyer et sauvegarder
      :mozilla.112:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Atdmt : Nettoyer et sauvegarder
      :mozilla.117:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Valueclick : Nettoyer et sauvegarder
      :mozilla.129:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Comclick : Nettoyer et sauvegarder
      :mozilla.130:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Comclick : Nettoyer et sauvegarder
      :mozilla.131:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Comclick : Nettoyer et sauvegarder
      :mozilla.142:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Googleadservices : Nettoyer et sauvegarder
      :mozilla.168:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Adtech : Nettoyer et sauvegarder
      :mozilla.169:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Adtech : Nettoyer et sauvegarder
      :mozilla.180:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Sitestat : Nettoyer et sauvegarder
      :mozilla.186:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Spylog : Nettoyer et sauvegarder
      :mozilla.188:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Onestat : Nettoyer et sauvegarder
      :mozilla.189:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Onestat : Nettoyer et sauvegarder
      :mozilla.190:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Onestat : Nettoyer et sauvegarder
      :mozilla.191:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Onestat : Nettoyer et sauvegarder
      :mozilla.204:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Overture : Nettoyer et sauvegarder
      :mozilla.213:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Casalemedia : Nettoyer et sauvegarder
      :mozilla.214:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Fastclick : Nettoyer et sauvegarder
      :mozilla.215:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Adserver : Nettoyer et sauvegarder
      :mozilla.216:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Adserver : Nettoyer et sauvegarder
      :mozilla.220:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Nettoyer et sauvegarder
      :mozilla.221:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Nettoyer et sauvegarder
      :mozilla.222:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Nettoyer et sauvegarder
      :mozilla.223:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Nettoyer et sauvegarder
      :mozilla.224:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Yieldmanager : Nettoyer et sauvegarder
      :mozilla.239:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Weborama : Nettoyer et sauvegarder
      :mozilla.240:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Weborama : Nettoyer et sauvegarder
      :mozilla.241:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Weborama : Nettoyer et sauvegarder
      :mozilla.242:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Weborama : Nettoyer et sauvegarder
      :mozilla.247:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Hitbox : Nettoyer et sauvegarder
      :mozilla.249:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.247realmedia : Nettoyer et sauvegarder
      :mozilla.261:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Hitbox : Nettoyer et sauvegarder
      :mozilla.268:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Hitbox : Nettoyer et sauvegarder
      :mozilla.269:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Hitbox : Nettoyer et sauvegarder
      :mozilla.272:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Hitbox : Nettoyer et sauvegarder
      :mozilla.273:C:\Documents and Settings\Propriétaire\Application Data\Mozilla\Firefox\Profiles\oscvyysr.default\cookies.txt -> Spyware.Cookie.Hitbox : Nettoyer et sauvegarder
      C:\Documents and Settings\Propriétaire\Cookies\propriétaire@247realmedia[1].txt -> Spyware.Cookie.247realmedia : Nettoyer et sauvegarder
      C:\Documents and Settings\Propriétaire\Cookies\propriétaire@ayb.lop[1].txt -> Spyware.Cookie.Lop : Nettoyer et sauvegarder
      C:\Documents and Settings\Propriétaire\Cookies\propriétaire@bluestreak[2].txt -> Spyware.Cookie.Bluestreak : Nettoyer et sauvegarder
      C:\Documents and Settings\Propriétaire\Cookies\propriétaire@tradedoubler[1].txt -> Spyware.Cookie.Tradedoubler : Nettoyer et sauvegarder
      C:\Program Files\SurfAccuracy -> Adware.SurfAccuracy : Nettoyer et sauvegarder
      C:\Program Files\SurfAccuracy\SAcc.cfg -> Adware.SurfAccuracy : Nettoyer et sauvegarder
      C:\Program Files\WinFixer 2005 -> Spyware.WinFixer : Nettoyer et sauvegarder
      C:\Program Files\WinFixer 2005\lock.dat -> Spyware.WinFixer : Nettoyer et sauvegarder
      C:\WINDOWS\system32\drivers\df_kmd.sys -> Trojan.Rootkit.Agent.af : Nettoyer et sauvegarder


      ::Fin du rapport

      Que voulez-vous dire par "dans la foulée, copie un autre log HT avec" ?
      0
      1. bernie61 > VERO91 Messages postés 7 Statut Membre
         
        salut
        Mona souhaitait que tu copie ici un autre rapport de Hijackthis
        a+
        0
      2. Real Mona Messages postés 1432 Statut Membre 94 > bernie61
         
        ;) merci Bernie !
        0
      3. VERO91 Messages postés 7 Statut Membre > bernie61
         
        Merci Bernie61 !
        A+ peut-être ...
        0
    2. VERO91 Messages postés 7 Statut Membre
       
      Salut Mona,


      Voici ce qu'à donner mon "Hijackthis" après un scan de EWIDO :

      Logfile of HijackThis v1.99.1
      Scan saved at 08:38:35, on 23/10/2005
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\Explorer.EXE
      C:\windows\system\hpsysdrv.exe
      C:\Program Files\USB Storage RW\shwicon.exe
      C:\HP\KBD\KBD.EXE
      C:\PROGRA~1\LEXMAR~1\ACMonitor_X83.exe
      C:\PROGRA~1\LEXMAR~1\AcBtnMgr_X83.exe
      C:\PROGRA~1\mcafee.com\vso\mcvsshld.exe
      C:\PROGRA~1\mcafee.com\agent\mcagent.exe
      c:\progra~1\mcafee.com\vso\mcvsescn.exe
      C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
      C:\PROGRA~1\Wanadoo\CnxMon.exe
      C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
      C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
      C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\Program Files\LogProtect\LogProtect.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
      C:\Program Files\Skype\Phone\Skype.exe
      C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
      C:\WINDOWS\system32\rundll32.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe
      C:\WINDOWS\system32\drivers\CDAC11BA.EXE
      C:\WINDOWS\system32\CTsvcCDA.EXE
      C:\Program Files\ewido\security suite\ewidoctrl.exe
      c:\progra~1\intern~1\iexplore.exe
      C:\Program Files\ewido\security suite\ewidoguard.exe
      C:\Program Files\LogProtect\lpwchdg.exe
      c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
      C:\WINDOWS\System32\nvsvc32.exe
      c:\progra~1\mcafee.com\vso\mcvsftsn.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\ZoneLabs\vsmon.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\Program Files\Wanadoo\EspaceWanadoo.exe
      C:\Program Files\Wanadoo\ComComp.exe
      c:\PROGRA~1\mcafee.com\vso\mcshield.exe
      C:\Program Files\Wanadoo\Watch.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Documents and Settings\Propriétaire\Mes documents\veronique.gougelet\Hijack this\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr7.hpwis.com/
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-fr7.hpwis.com/
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.zsmyxjtgdsznvgnplmrtkfxc.info/I6TgIFCyhqjxuerYXouDBp0pjCQzmddqux_AVWYBlwhjpi506XILS8CrMzyAt9eK.jsp
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mkkfqnqsjljxy.com/I6TgIFCyhqiMgfAl9RJ8d4hwFTm8nk0QQ0hJ7YCiVZk.html
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr7.hpwis.com/
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.pcabbjopfs.uk/qs0E/KMlV0mCZ882eLcEy145VWK7eLB1G3e7/ToiOjQ.html
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: (no name) - _{08C06D61-F1F3-4799-86F8-BE1A89362C85} - (no file)
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
      O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} - C:\Program Files\Shareaza\Plugins\RazaWebHook.dll (file missing)
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
      O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll
      O2 - BHO: (no name) - {F433812B-65B2-8E48-6F5D-84B66E103150} - C:\DOCUME~1\PROPRI~1\APPLIC~1\COMPWI~1\FreeBalm.exe (file missing)
      O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
      O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll
      O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
      O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\System32\igfxtray.exe
      O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
      O4 - HKLM\..\Run: [KYE_Showicon] "C:\Program Files\USB Storage RW\shwicon.exe" -t"KYE\USB Storage RW"
      O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
      O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\VERITAS Software\Update Manager\sgtray.exe" /r
      O4 - HKLM\..\Run: [WCOLOREAL] "C:\Program Files\Coloreal\coloreal.exe"
      O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded
      O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
      O4 - HKLM\..\Run: [Lexmark X83 Button Monitor] C:\PROGRA~1\LEXMAR~1\ACMonitor_X83.exe
      O4 - HKLM\..\Run: [Lexmark X83 Button Manager] C:\PROGRA~1\LEXMAR~1\AcBtnMgr_X83.exe
      O4 - HKLM\..\Run: [PrinTray] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\printray.exe
      O4 - HKLM\..\Run: [VSOCheckTask] "c:\PROGRA~1\mcafee.com\vso\mcmnhdlr.exe" /checktask
      O4 - HKLM\..\Run: [VirusScan Online] "c:\PROGRA~1\mcafee.com\vso\mcvsshld.exe"
      O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
      O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
      O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
      O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
      O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\PSDrvCheck.exe -CheckReg
      O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\Wanadoo\CnxMon.exe
      O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
      O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_04\bin\jusched.exe
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [LogProtect] "C:\Program Files\LogProtect\LogProtect.exe"
      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKLM\..\Run: [Inter active jugs type] C:\Documents and Settings\All Users\Application Data\SiteShimInterActive\KEEPMEDIA.exe
      O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
      O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
      O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
      O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
      O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\nbj.exe"
      O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
      O4 - HKCU\..\Run: [Creative Detector] "C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe" /R
      O4 - HKCU\..\Run: [Roam Flap] C:\DOCUME~1\PROPRI~1\APPLIC~1\OPENPH~1\SeekSign.exe
      O4 - HKCU\..\Run: [Registry Cleaner] "C:\Program Files\TPT Registry_Cleaner (Trial)\regclean.exe"
      O4 - Startup: Registration-Studio 8 LE.lnk = C:\Program Files\Pinnacle\Studio 8\Register\RegTool.exe
      O4 - Global Startup: hp center.lnk = C:\Program Files\hp center\137903\Program\BackWeb-137903.exe
      O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O4 - Global Startup: Pense-bête.lnk = C:\Program Files\Broderbund\PrintMaster\PMREMIND.EXE
      O8 - Extra context menu item: Download with &Shareaza - res://C:\Program Files\Shareaza\Plugins\RazaWebHook.dll/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_04\bin\npjpi150_04.dll
      O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
      O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe
      O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU)
      O16 - DPF: teleir_cert - https://static.ir.dgi.minefi.gouv.fr/secure/connexion/archives/ie4n4/teleir_cert.cab
      O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://webscanner.kaspersky.fr/kavwebscan_unicode.cab
      O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
      O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
      O16 - DPF: {5DDCC37F-7C6B-48B8-9664-97C537920CA0} (aecviz Class) - http://www.maisonfamiliale.com/AECVIZ/npaecviz.cab
      O16 - DPF: {6DB731A3-B074-4118-8B1C-32511C65D836} (FotovistaPhotoUploader.ctrFpu) - http://www.mypixmania.com/fr/fr/tools/activex/fpu.cab
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
      O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
      O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cab
      O17 - HKLM\System\CCS\Services\Tcpip\..\{D68B7D7B-CBE6-4ADE-AC0E-77DBD253011C}: NameServer = 80.10.246.1 80.10.246.132
      O18 - Protocol: bw+0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw+0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
      O18 - Protocol: bwg0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwg0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0s - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: offline-8876480 - {EB6308BA-6F31-4110-B9A2-1D8F99BC9610} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Filter: text/html - {C6F62B7A-5450-4A2F-8687-6CEEC3AEB055} - C:\WINDOWS\system32\controlkids2.dll
      O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
      O23 - Service: AutoComplete Service (Autocomplete) - Acesoft - C:\Program Files\Acesoft\Tracks Eraser Pro\autocomp.exe
      O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
      O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXE
      O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
      O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido\security suite\ewidoguard.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: McAfee.com McShield (McShield) - Unknown owner - c:\PROGRA~1\mcafee.com\vso\mcshield.exe
      O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
      O23 - Service: McAfee.com VirusScan Online Realtime Engine (MCVSRte) - McAfee, Inc - c:\PROGRA~1\mcafee.com\vso\mcvsrte.exe
      O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
      O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe


      Merci encore de ton aide ...
      A +
      0
  3. Utilisateur anonyme
     
    salut

    Télécharge lopxp ici:

    http://cjoint.com/?kumvZSxxY4

    2) dezippe le (clic droit dessus > extraire tout)
    et lance lopxp.bat
    le bloc note va s'ouvrir, copie et colle le contenu ici

    A+
    0
    1. VERO91 Messages postés 7 Statut Membre
       
      Salut Regis59,

      C'est sympa de m'aider Régis ...
      Comme convenu, j'ai fait ce que tu m'as demandé.
      Tu trouveras ci-joint le résultat de LOGXP


      Rapport fait à 8:46:33,42 le 23/10/2005

      Le volume dans le lecteur C s'appelle HP_PAVILION
      Le num‚ro de s‚rie du volume est 6430-4691

      R‚pertoire de C:\Documents and Settings\All Users\Application Data

      09/10/2005 12:31 <REP> SiteShimInterActive
      19/09/2005 14:07 1763 QTSBandwidthCache
      19/09/2005 13:47 <REP> Apple Computer
      04/08/2005 17:15 <REP> OD2
      01/05/2005 14:11 <REP> Macrovision
      08/02/2005 09:10 <REP> Spybot - Search & Destroy
      23/12/2004 15:57 <REP> SmartSound Software Inc
      20/12/2004 14:33 <REP> Pinnacle
      03/12/2004 22:14 <REP> MSN6
      21/11/2004 03:15 <REP> .
      21/11/2004 03:15 <REP> ..
      21/11/2004 00:39 <REP> McAfee.com
      20/11/2004 23:08 <REP> Skype
      20/11/2004 20:42 <REP> SBT
      20/11/2004 19:59 <REP> BVRP Software
      21/01/2003 23:02 <REP> Symantec
      21/01/2003 19:40 <REP> SBSI
      21/01/2003 19:26 62 desktop.ini
      21/01/2003 19:26 <REP> Microsoft
      2 fichier(s) 1825 octets
      17 R‚p(s) 92912295936 octets libres
      Le volume dans le lecteur C s'appelle HP_PAVILION
      Le num‚ro de s‚rie du volume est 6430-4691

      R‚pertoire de C:\Documents and Settings\Default User\Application Data

      21/11/2004 03:15 <REP> ..
      21/11/2004 03:15 <REP> .
      20/11/2004 19:38 <REP> Adobe
      20/11/2004 19:38 <REP> InterTrust
      20/11/2004 19:38 <REP> Symantec
      20/11/2004 19:38 <REP> VERITAS
      20/11/2004 19:38 <REP> SampleView
      21/01/2003 19:35 <REP> Identities
      21/01/2003 19:26 62 desktop.ini
      21/01/2003 19:26 <REP> Microsoft
      1 fichier(s) 62 octets
      9 R‚p(s) 92912295936 octets libres
      Le volume dans le lecteur C s'appelle HP_PAVILION
      Le num‚ro de s‚rie du volume est 6430-4691

      R‚pertoire de C:\Documents and Settings\Propri‚taire\Application Data

      21/10/2005 20:24 <REP> Prevx
      20/10/2005 13:44 <REP> Macromedia
      12/10/2005 09:32 <REP> CompWinBat
      09/10/2005 12:34 <REP> Registry Cleaner
      09/10/2005 12:31 <REP> Open Phone
      28/09/2005 17:31 <REP> LogProtect
      19/09/2005 13:51 <REP> Apple Computer
      04/08/2005 19:10 <REP> OD2
      04/08/2005 17:22 <REP> Creative
      24/07/2005 16:38 <REP> Sun
      22/07/2005 20:53 <REP> Mozilla
      09/12/2004 11:55 <REP> Real
      06/12/2004 17:56 <REP> Ahead
      05/12/2004 22:42 <REP> vlc
      05/12/2004 18:30 <REP> InterVideo
      03/12/2004 22:14 <REP> MSN6
      24/11/2004 16:23 <REP> FotoWire
      24/11/2004 15:58 <REP> Lavasoft
      22/11/2004 21:07 <REP> SolSuite
      21/11/2004 10:49 <REP> Help
      21/11/2004 03:15 <REP> ..
      21/11/2004 03:15 <REP> .
      20/11/2004 23:08 <REP> Skype
      20/11/2004 20:36 <REP> Microsoft Web Folders
      21/01/2003 23:03 <REP> Symantec
      21/01/2003 20:51 <REP> SampleView
      21/01/2003 20:43 <REP> Adobe
      21/01/2003 20:33 <REP> VERITAS
      21/01/2003 19:39 62 desktop.ini
      21/01/2003 19:39 <REP> Identities
      21/01/2003 19:39 <REP> Microsoft
      1 fichier(s) 62 octets
      30 R‚p(s) 92912295936 octets libres
      ******************************************
      Recherche des taches planifiées dans C:\WINDOWS\tasks

      Le volume dans le lecteur C s'appelle HP_PAVILION
      Le num‚ro de s‚rie du volume est 6430-4691

      R‚pertoire de C:\WINDOWS\Tasks

      15/10/2005 20:32 276 AD4FEF5891C862DC.job
      21/11/2004 00:39 490 McAfee.com Update Check (BRUNOVRO-Propri‚taire).job
      22/01/2003 03:21 65 desktop.ini
      21/01/2003 19:34 6 SA.DAT
      21/01/2003 19:32 <REP> ..
      21/01/2003 19:32 <REP> .
      4 fichier(s) 837 octets
      2 R‚p(s) 92ÿ912ÿ291ÿ840 octets libres

      ******************************************
      Recherche dans Program files

      Le dossier C:\Program Files\C2Media n'existe pas

      *************** Fin du rapport ****************
      0
  4. Real Mona Messages postés 1432 Statut Membre 94
     
    Bonjour,

    Je te laisse entre les mains de regis59.

    Tu as beaucoup (trop) de programmes qui se lancent au démarrage, ton pc doit être long au démarrage non ?
    Tu peux télécharger "starter" qui te donnera, de façon très explicite et détaillée, tous les renseignements sur ce qui est chargé au démarrage, ainsi que le détail des processus :
    http://www.clubic.com/telecharger-fiche12492-starter.html
    Ce programme permet de désactiver de façon réversible, le chargement de ce qui est inutile au démarrage (voir avec google, si l'exécutif est nécessaire au départ ou non)
    Ensuite, quand tu vois qu'il n'y a pas de problème, tu laisses comme ça ou tu effaces définitivement.

    Bonne chance,
    Mona

    0
    1. VERO91 Messages postés 7 Statut Membre
       
      Bonjour Mona,

      Contente de te retrouver. Je dois m'absenter mais avant je tenais très sincèrement à te remercier pour tes précieux conseils. Je te recontacterai au moindre problème que je n'arriverai pas à résoudre.
      A très bientôt. et bon dimanche ...
      0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. Utilisateur anonyme
     
    Par contre je dois m absenter
    Football oblige lol

    Donc si qqun passe et qui a le temps de faire la manip je lui en voudrais pas

    sinon a cet aprem

    bises

    bonne matinee
    0
  7. Real Mona Messages postés 1432 Statut Membre 94
     
    Bon ben, puis régis59 est oarti au foot, je vais essayer de t'envoyer la manip.
    Mais comme c'est la première fois que je la fais, et que je veux m'appliquer, ca va prendre du temps (quelques minutes, pas des heures).

    Tu veux que je m'en occcupe ou tu préfères attendre régis59 ?

    Mona
    0
  8. Real Mona Messages postés 1432 Statut Membre 94
     
    Véro,

    Tu me réponds pas, mais tu me souhaites un bon dimanche, c'est gentil!

    Voici quand même la manip à faire quand tu reviens :

    Télécharge CleanUp http://pageperso.aol.fr/balltrap34/CleanUp40.exe

    · Imprime, ou enregistre la manip dans le bloc note pour être sûre ne rien oublier et de tout faire dans l'ordre

    Déconnecte toi d'internet:

    Ferme tout les programmes en cours

    Lance cleanup encore une fois,

    Redémarre en mode sans échec :
    Redémarre le pc, laisse passer l'écran du bios, puis tapote sur la touche F8 avant qu'apparaisse l'écran de chargement de windows.
    Choisis le mode sans échec dans les options et valide avec entrée.

    Rend visible les fichiers cachés et système
    panneau de configuration > options des dossiers > onglet affichage
    Cocher la case devant "afficher les fichiers et dossiers cachés "
    Décocher la case devant "masquer les extensions des fichiers dont le type est connu"
    Décocher la case devant "masquer les fichiers protégés du système"
    clique sur [Appliquer] puis sur [ok] pour valider

    -_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_

    Lance hijackthis et clic sur [do a system scan only]
    coche la case au début des lignes suivantes: (sauf si un programme te parle alors oublie)

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.zsmyxjtgdsznvgnplmrtkfxc.info/I6TgIFCyhqjxuerYXouDBp0pjCQzmddqux_AVWY Blwhjpi506XILS8CrMzyAt9eK.jsp
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.mkkfqnqsjljxy.com/I6TgIFCyhqiMgfAl9RJ8d4hwFTm8nk0QQ0hJ7YCiVZk.html
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.pcabbjopfs.uk/qs0E/KMlV0mCZ882eLcEy145VWK7eLB1G3e7/ToiOjQ.html
    R3 - URLSearchHook: (no name) - _{08C06D61-F1F3-4799-86F8-BE1A89362C85} - (no file)
    O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} - C:\Program Files\Shareaza\Plugins\RazaWebHook.dll (file missing)
    O2 - BHO: (no name) - {F433812B-65B2-8E48-6F5D-84B66E103150} - C:\DOCUME~1\PROPRI~1\APPLIC~1\COMPWI~1\FreeBalm.exe (file missing)
    O4 - HKLM\..\Run: [LogProtect] "C:\Program Files\LogProtect\LogProtect.exe"
    O4 - HKCU\..\Run: [Roam Flap] C:\DOCUME~1\PROPRI~1\APPLIC~1\OPENPH~1\SeekSign.exe
    O4 - Global Startup: hp center.lnk = C:\Program Files\hp center\137903\Program\BackWeb-137903.exe

    valide en cliquant sur [fix checked]

    -_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_

    Recherche et supprime ces dossiers:

    C:\Program Files\LogProtect\LogProtect.exe
    C:\Program Files\LogProtect\lpwchdg.exe
    C:\DOCUME~1\PROPRI~1\APPLIC~1\COMPWI~1\FreeBalm.exe
    C:\DOCUME~1\PROPRI~1\APPLIC~1\OPENPH~1\SeekSign.exe
    C:\Program Files\hp center\137903\Program\BackWeb-137903.exe

    -_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_

    Ensuite, très important:

    :: Supprimer les fichiers temporaires ::

    vider tout le contenu des dossiers Temp:

    * C:\Documents and Settings\Proprietaire\Local Settings\Temp

    * C:\Windows\Temp

    :: Le contenu du dossier prefetch ::

    * C:\WINDOWS\Prefetch <= sauf le fichier layout.ini

    Ou avec Cleanup:
    http://pageperso.aol.fr/balltrap34/CleanUp40.exe

    * Ne pas oublier de vider la corbeille !

    -_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_

    ensuite, toujours en mode sans échec, fais:

    démarrer > exécuter et tape cmd
    dans la fenêtre dos, copie et colle ceci:

    del /a C:\WINDOWS\Tasks\ AD4FEF5891C862DC.job

    et valide

    toujours dans la fenetre dos, copie et colle ceci:

    del /a C:\WINDOWS\Tasks\ AD4FEF5891C862DC.job
    et valide

    redémarre normalement ton pc et reposte un hijackthis, plus un rapport de lopxp.bat

    Ne pas oublier après les manips de recacher les fichiers système dans les options des dossiers.

    Bon courage,
    Mona
    0

Discussions similaires

Connaissez-vous chrome://newtab
Morito50 -
MPMP10 -

1 réponse
Supprimer New Tab
tysaozon -
fabul -

8 réponses
Supprimer NEW TAB dans Google Chrome.
Rasta_Pocchollas -
bazfile -

45 réponses
Problème suite changement de CPU
gimi3354 -
Tanguy -

5 réponses
Aide pour un virus
cerise92700 -
MisteryBean -

41 réponses