Peut etre possesion dun virus

lina -  
bonsoir a tous,

Jai un gros probleme voila mon Pc se bloque completement a chaque fois que je me connecte sur internet et des fois il m'affiche un message d'erreur qui est un compte a rebours d'une minute.
Il faut que je l'eteint et redemarre plusieurs fois et sa menerve vraiment sa peut me prendre 3 heures jusqu'a que il soit normal.
Et aussi mon antivirus(F-Secure),a un probleme:son icone montre que il y a un dysfonctionnement lors des mises a jours et donc je dois redemarrer le Pc.Jai un windows XP edition familiale

Voila j'espere que quelqu'un pourra m'aider

Merci de votre attention

28 réponses

Résumé de la discussion

Le problème décrit concerne un PC sous Windows XP édition familiale qui se bloque à Internet et affiche parfois un compte à rebours d'une minute, avec un dysfonctionnement de l’antivirus F-Secure. Parmi les suggestions, des entrées suspectes de démarrage et des services inconnus (fichiers manquants) sont signalées et incitent à nettoyer le registre et supprimer des fichiers malveillants tels que notepaad.exe. D'autres conseils recommandent de patcher les services signalés (O23, O4, O20) et d'effectuer un scan avec des outils en ligne, puis d'utiliser Windows Update pour les mises à jour. En cas d'inspection, plusieurs éléments indiquent des fichiers manquants et des services réseau suspects, ce qui peut nécessiter une désinfection approfondie et une mise à jour sécurité régulière.

Bobot (l’IA à votre service)
  1. Kristopher Contributeur
    Bonsoir,

    Pour commencer :

    - Télécharge et scanne ton PC avec Ewido Security Suite : http://www.01net.com/telecharger/windows/Utilitaire/antivirus/fiches/31851.html
    Copie/colle le rapport sur le forum.

    Ensuite,

    - Télécharge HijackThis : http://www.01net.com/telecharger/windows/Internet/internet_utlitaire/fiches/29061.html
    - Installe le dans son propre dossier.
    Par exemple, C:\HijackThis
    Choisis l'option "do a scan and a logfile", il va te générer un rapport, copie et colle sur le forum.
    Regarde la démo : http://pageperso.aol.fr/balltrap34/demohijack.htm

    Bonne chance.

    ++
    0
    1. lina
      Bonjour,

      Voila le rapport fait par ewido:

      + Créé le: 14:40:55, 17/02/2006
      + Somme de contrôle: 88F91BA6

      + Résultats du scan:

      C:\WINDOWS\system32\MLJJH.0LL -> Downloader.ConHook.l : Nettoyer et sauvegarder

      ::Fin du rapport

      Et voila le rapport fait par hijackthis:

      Logfile of HijackThis v1.99.1
      Scan saved at 14:45:18, on 17/02/2006
      Platform: Windows XP SP1 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\System32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\Explorer.EXE
      C:\windows\system\hpsysdrv.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
      C:\WINDOWS\System32\hphmon05.exe
      C:\HP\KBD\KBD.EXE
      C:\WINDOWS\ALCXMNTR.EXE
      C:\Program Files\Pack Securite\Common\FSM32.EXE
      C:\Program Files\MessengerPlus! 3\MsgPlus.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\Program Files\iTunes\iTunesHelper.exe
      C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
      C:\WINDOWS\System32\LVCOMSX.EXE
      C:\Program Files\Logitech\Video\LogiTray.exe
      C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
      C:\WINDOWS\System32\rundll32.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
      C:\Program Files\MSN Messenger\msnmsgr.exe
      C:\Program Files\Logitech\Video\FxSvr2.exe
      C:\PROGRA~1\PACKSE~1\backweb\361343\Program\SERVIC~1.EXE
      C:\Program Files\ewido anti-malware\ewidoctrl.exe
      C:\Program Files\ewido anti-malware\ewidoguard.exe
      C:\Program Files\Pack Securite\backweb\361343\Program\fspex.exe
      C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
      C:\Program Files\Pack Securite\Anti-Virus\FSGK32.EXE
      C:\Program Files\Pack Securite\backweb\361343\program\fsbwsys.exe
      C:\Program Files\Pack Securite\Common\FSMA32.EXE
      C:\Program Files\Pack Securite\Anti-Virus\fssm32.exe
      C:\WINDOWS\System32\nvsvc32.exe
      C:\Program Files\Pack Securite\Common\FSMB32.EXE
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Pack Securite\Common\FCH32.EXE
      C:\Program Files\Pack Securite\Common\FAMEH32.EXE
      C:\Program Files\Pack Securite\FSPC\fspc.exe
      C:\Program Files\Pack Securite\Anti-Virus\fsrw.exe
      C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
      C:\Program Files\Pack Securite\Anti-Virus\fsav32.exe
      C:\Program Files\iPod\bin\iPodService.exe
      C:\PROGRA~1\PACKSE~1\ANTI-S~1\fsaw.exe
      C:\Program Files\Pack Securite\FSGUI\fsguidll.exe
      C:\Program Files\Internet Explorer\IEXPLORE.EXE
      C:\WINDOWS\System32\wuauclt.exe
      C:\Documents and Settings\Propriétaire\Mes documents\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr9.hpwis.com/
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-fr9.hpwis.com/
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-fr9.hpwis.com/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-fr9.hpwis.com/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-fr9.hpwis.com/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-fr9.hpwis.com/
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr9.hpwis.com/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
      O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
      O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpdtlk02.dll
      O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
      O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
      O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
      O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
      O4 - HKLM\..\Run: [CamMonitor] c:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
      O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
      O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
      O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
      O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
      O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
      O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
      O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"
      O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Pack Securite\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Pack Securite\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Pack Securite\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [notes] notepaad.exe
      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
      O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
      O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
      O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
      O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
      O4 - HKLM\..\RunServices: [notes] notepaad.exe
      O4 - HKCU\..\Run: [BackupNotify] c:\Program Files\Hewlett-Packard\Digital Imaging\bin\backupnotify.exe
      O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
      O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
      O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
      O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
      O4 - HKCU\..\Run: [WhenUSave] "C:\Program Files\Save\Save.exe"
      O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
      O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
      O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
      O4 - Global Startup: Pack Securite.lnk = C:\Program Files\Pack Securite\backweb\361343\Program\fspex.exe
      O8 - Extra context menu item: &Bloquer cette fenêtre publicitaire - C:\Program Files\Pack Securite\Anti-Spyware\blockpopups.htm
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
      O9 - Extra button: Filtre Web - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
      O9 - Extra 'Tools' menuitem: Filtre Web - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
      O9 - Extra button: Protection Internet Explorer - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Securite\Anti-Spyware\ieshield.dll
      O9 - Extra 'Tools' menuitem: Protection Internet Explorer... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Securite\Anti-Spyware\ieshield.dll
      O10 - Broken Internet access because of LSP provider 'winsflt.dll' missing
      O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
      O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/yinst/yinst_current.cab
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
      O17 - HKLM\System\CCS\Services\Tcpip\..\{8766FCFD-D5CF-4035-93C5-EAB77810A72F}: NameServer = 80.118.196.42 80.118.192.112
      O18 - Protocol: bw+0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw+0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
      O18 - Protocol: bwg0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwg0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
      O18 - Protocol: offline-8876480 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
      O20 - Winlogon Notify: mljjh - mljjh.dll (file missing)
      O23 - Service: Pack Securite (BackWeb Plug-in - 361343) - BackWeb Technologies Inc. - C:\PROGRA~1\PACKSE~1\backweb\361343\Program\SERVIC~1.EXE
      O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
      O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exe
      O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
      O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Pack Securite\backweb\361343\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
      O23 - Service: F-Secure HTTP Server (fshttps) - F-Secure Corporation - C:\Program Files\Pack Securite\FSPC\fshttps\fshttps.exe
      O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Pack Securite\Common\FSMA32.EXE
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
      O23 - Service: Win32Sr - Unknown owner - C:\WINDOWS\win32ssr.exe (file missing)
      O23 - Service: MS Dns Service (WinNet) - Unknown owner - C:\WINDOWS\system32\wincntrl.exe (file missing)

      Merciiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiii
      0
      1. lina
        Re

        J'ai oublié de precisé que des fois il me manque de la memoire virtuelle et ensuite une icone s'affiche dans la zone de notification et il m'affcihe un mesage en disant que windows augmente la memoire virtuelle quelque chose comme ca.Je ne sais pas si sa a voir avec mon probleme mais je le dit on sait jamais.

        Merciiiiiiiiiiiii de m'aider
        0
        1. ^^Marie^^
          Bonjour,

          N'as tu pas télécharger MSN+ avec les sponsors ???
          Si oui, supprime les dans ajout/supp des programmes, en faisant réparer sur msn+
          Bon courage
          A++
          0
          2. Kristopher Contributeur
            Bonjour mesdames,

            lina - Ton PC est toujours en danger :

            1/ Coche et fixe les lignes suivantes :

            O4 - HKLM\..\Run: [notes] notepaad.exe
            O4 - HKLM\..\RunServices: [notes] notepaad.exe
            O4 - HKCU\..\Run: [WhenUSave] "C:\Program Files\Save\Save.exe
            O20 - Winlogon Notify: mljjh - mljjh.dll (file missing)
            O23 - Service: Win32Sr - Unknown owner - C:\WINDOWS\win32ssr.exe (file missing)
            O23 - Service: MS Dns Service (WinNet) - Unknown owner - C:\WINDOWS\system32\wincntrl.exe (file missing)

            2/ Cherche et efface le fichier suivant :

            notepaad.exe

            3/ Désinstalle le programme (en gras) via le Panneau de configuration (Ajout/Suppression de programmes :

            C:\Program Files\Save

            Ensuite,

            4/ Scanne ton PC avec cet antivirus en ligne :
            http://www.bitdefender.fr/scan/license.php
            Copie/colle le rapport sur le forum.

            Si le premier scan ne fonctionne pas, essaie celui-là :
            http://www.secuser.com/antivirus/index.htm
            Coche la case "Auto Clean" et clique sur "Poste de travail".

            Enfin,

            5/ Remets un nouveau log HijackThis stp.

            Bonne chance ;)
            0
            1. aranjuez31 Contributeur
              hello
              cas interessant à suivre
              verrai ce soir, si personne ne prend
              0
              1. Kristopher Contributeur
                Salut aran,

                Ta compagnie sera toujours bienvenue mon ami ;)

                ++
                0
            2. lina
              Salut a tous,
              Merci Marie de ton aide mais pourquoi je devrait reparer MSN+ la je vais le faire si tu me le dis mais est ce qu'il a un proleme??

              Merci Kristopher de m'aider toutes tes etapes que tu m'as dit sont en cours,merci beaucoup.

              Et aranjuez31 pourquoi mon cas est interessant lol??

              MErci a tous de vos conseils c'est super simpa!!!

              ++++++++++
              0
              1. ^^Marie^^
                Lina,
                Les sponsors d'MSN+ remplissent ton pc de M*******. Donc, les sponsors tu les mets à la poubelle...
                Voilà
                Allez, Bon courage
                A+
                0
              2. aranjuez31 Contributeur
                re
                """Et aranjuez31 pourquoi mon cas est interessant lol?? """

                par la diversité des blems à traiter, lina

                0
            3. lina
              re Kristopher,

              quand je dois fixer c'est que je dois cliquer sur"Fix checked" c'est ca??

              2/Cherche et efface le fichier suivant :
              notepaad.exe
              ==> Je cherche le fichier dans hijackthis?

              Voila dsl j'y comprend pas grand choses a l'informatique merci de tes conseils precieux
              0
              1. Kristopher Contributeur
                Coucou,

                quand je dois fixer c'est que je dois cliquer sur"Fix checked" c'est ca??

                Tout à fait. Après avoir coché les lignes indiquées, tu cliques sur "Fix checked".

                2/Cherche et efface le fichier suivant :
                notepaad.exe
                ==> Je cherche le fichier dans hijackthis?

                Non, tu cliques sur "démarrer"-> "Exécuter" -> "Rechercher"
                Et tu cherches ce fichier.

                Si tu ne trouve pas, fais alors ceci :

                Affiche tous les fichiers et dossiers :
                Clique sur démarrer, panneau de configuration, outil, option des dossiers, affichage

                Coche: afficher les fichiers et dossiers cachés

                Décoche la case:
                -masquer les fichiers protégés du système d'exploitation (recommandé)
                -masquer les extensions dont le type est connu

                Appliquer, puis ok

                ~~ N'oublie pas de faire les étapes dans l'ordre ~~

                ++
                0
            4. lina
              Re Kristopher,

              J'ai fait tous ce que tu m'as dit mais mon PC ne trouve aucun fichier notepaad.exe.

              TU as une solution??

              Merci de m'aider
              0
              1. ^^Marie^^
                Kris,
                pourquoi ne pas supprimer tous les O18 - Protocol: bwx0s ce sont les merdes d'MSN+...

                LINA, regarde dans ajout/suppp des programmes si tu as
                MSN+
                open search web
                My web search
                Si oui supprimes tout
                A+
                0
                1. lina
                  coucou ^^Marie^^

                  J'ai messenger plus 3 mais je comprend pa quand tu me dit:

                  open search web
                  My web search
                  Si oui supprimes tout

                  Quand je clique sur "modifier/supprimer" sa maffiche que le programme de sponsor de mesenger plus ne semble pas etre installer.Seul plus va etre desinstallé.Ensuite je fait suivant sa maffiche de soit laisser cocher "effacer les preferences de messenger plus!" et "desinstaller tous les plugins de messenger plus!" et ou de les decocher.

                  Voila keske je fait s'il vous plait.

                  Merci a tous
                  0
                2. ^^Marie^^
                  @linaLina,

                  Si tu as ces 3 choses dans ton AJOUT/SUPP des programme tu les supprimes tous les 3 :

                  MSN+
                  open search web
                  My web search

                  ENSUITE fais ce que te demandes Aranjuez :
                  C'est à dire ceci :

                  merci d user de ceci pour y voir plus clair
                  ewido (dowload)
                  http://www.ewido.net/fr/download/
                  COLLE le rapport , stp
                  0
                3. Kristopher Contributeur
                  @^^Marie^^Re,

                  Juste pour dire que j'ai déjà conseillé de télécharger Ewido au poste < 1 > et le résultat est affiché au poste < 2 >...

                  jolie spam de Fred.
                  0
                4. ^^Marie^^
                  @Kristopheren effet, ewido est dans le HT... Faut que je change de lunettes !!! LOLHEU
                  0
                5. Kristopher Contributeur
                  @^^Marie^^ha ha ha
                  0
              3. Kristopher Contributeur
                Bonjour,

                Marie -

                pourquoi ne pas supprimer tous les O18 - Protocol: bwx0s ce sont les merdes d'MSN+...

                Et bien tout simplement, parce que j'ai vu que tu es intervenu juste avant mon message, et que tu as intelligemment conseillé lina de supprimer MSN+. Je t'en remercie d'ailleurs, cela m'a facilité la tâche ;)

                J'ai jugé donc inutile d'en rajouter, puisque apparemment tu es intervenu exprès pour régler l'histoire de MSN...

                Je constate également que tu interviens souvent juste pour guider les personnes, tel un mentor, à supprimer des composants de MSN, notamment ses sponsors. On pourrait donc presque croire que tu es allergique aux composants de MSN +, à l'instar de quick157 qui l'est avec les mises à jour, qu'il conseillait d'ailleurs de télécharger avant la désinfection du PC. Heureusement, il ne le fait plus :)

                lina - Si tu ne trouve pas le fichier notepaad.exe, ne t'inquiètes pas.
                Passe aux étapes suivantes...
                Relis donc bien les indications du poste < 5 > et, une fois toutes les manipulations effectuées (+ celle de ^^Marie^^) reposte un nouveau log HijackThis stp.

                Concernant le scan, celui préconisé par aran : Ewido est particulièrement efficace.

                À présent, je dois m'absenter.

                En te laissant entre les bonnes mains de Marie et aran, je te souhaite bonne chance ;)

                ++
                -- 

                "I don't mean to be mean but that's all I can be is just me" (Eminem)
                0
                1. lina
                  Salut aranjuez31

                  Alor je recommence keske jai fai au debut avec kristopher c'est ca??ou c'est autre chose?

                  Merci de ton aide
                  0
                  1. aranjuez31 Contributeur
                    re
                    oui lina
                    cela permet d examiner l evolution de la maladie....hum

                    donc pour se résumer:

                    1/nouveau rapport Ewido
                    +
                    2/nouvel hijack
                    0
                    1. lina
                      Bonjour a tous,
                      Désolé pour l'absence!!
                      Voila j'ai juste trouver MSN+ dans ajout/supprimer les programmes et je l'ai supprimer.

                      Donc voici le rapoort fait par ewido:

                      + Créé le: 21:43:25, 18/02/2006
                      + Somme de contrôle: 8DED2E98

                      + Résultats du scan:

                      Pas de fichiers infectés trouvés!

                      ::Fin du rapport

                      Et le nouveau rapport fait par hijackthis:

                      Logfile of HijackThis v1.99.1
                      Scan saved at 12:35:07, on 19/02/2006
                      Platform: Windows XP SP1 (WinNT 5.01.2600)
                      MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

                      Running processes:
                      C:\WINDOWS\System32\smss.exe
                      C:\WINDOWS\System32\winlogon.exe
                      C:\WINDOWS\system32\services.exe
                      C:\WINDOWS\system32\lsass.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\WINDOWS\System32\svchost.exe
                      C:\WINDOWS\system32\spoolsv.exe
                      C:\WINDOWS\Explorer.EXE
                      C:\windows\system\hpsysdrv.exe
                      C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
                      C:\WINDOWS\System32\hphmon05.exe
                      C:\HP\KBD\KBD.EXE
                      C:\WINDOWS\ALCXMNTR.EXE
                      C:\Program Files\Pack Securite\Common\FSM32.EXE
                      C:\Program Files\QuickTime\qttask.exe
                      C:\Program Files\iTunes\iTunesHelper.exe
                      C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
                      C:\WINDOWS\System32\LVCOMSX.EXE
                      C:\Program Files\Logitech\Video\LogiTray.exe
                      C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
                      C:\WINDOWS\System32\rundll32.exe
                      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
                      C:\Program Files\Logitech\Video\FxSvr2.exe
                      C:\PROGRA~1\PACKSE~1\backweb\361343\Program\SERVIC~1.EXE
                      C:\Program Files\ewido anti-malware\ewidoctrl.exe
                      C:\Program Files\ewido anti-malware\ewidoguard.exe
                      C:\Program Files\Pack Securite\backweb\361343\Program\fspex.exe
                      C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
                      C:\Program Files\Pack Securite\Anti-Virus\FSGK32.EXE
                      C:\Program Files\Pack Securite\backweb\361343\program\fsbwsys.exe
                      C:\Program Files\Pack Securite\Common\FSMA32.EXE
                      C:\Program Files\Pack Securite\Anti-Virus\fssm32.exe
                      C:\WINDOWS\System32\nvsvc32.exe
                      C:\Program Files\Pack Securite\Common\FSMB32.EXE
                      C:\WINDOWS\System32\svchost.exe
                      C:\Program Files\Pack Securite\Common\FCH32.EXE
                      C:\Program Files\Pack Securite\Common\FAMEH32.EXE
                      C:\Program Files\Pack Securite\FSPC\fspc.exe
                      C:\Program Files\Pack Securite\Anti-Virus\fsrw.exe
                      C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
                      C:\Program Files\Pack Securite\Anti-Virus\fsav32.exe
                      C:\Program Files\iPod\bin\iPodService.exe
                      C:\PROGRA~1\PACKSE~1\ANTI-S~1\fsaw.exe
                      C:\Program Files\Pack Securite\FSGUI\fsguidll.exe
                      C:\Program Files\MSN Messenger\msnmsgr.exe
                      C:\WINDOWS\System32\wuauclt.exe
                      C:\Program Files\Internet Explorer\IEXPLORE.EXE
                      C:\Documents and Settings\Propriétaire\Mes documents\HijackThis.exe

                      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://fr9.hpwis.com/
                      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-fr9.hpwis.com/
                      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-fr9.hpwis.com/
                      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com/
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-fr9.hpwis.com/
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-fr9.hpwis.com/
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-fr9.hpwis.com/
                      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr9.hpwis.com/
                      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
                      O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
                      O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
                      O3 - Toolbar: Vue HP - {B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} - c:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpdtlk02.dll
                      O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
                      O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
                      O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                      O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
                      O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
                      O4 - HKLM\..\Run: [CamMonitor] c:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
                      O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
                      O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
                      O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
                      O4 - HKLM\..\Run: [StorageGuard] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
                      O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
                      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
                      O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
                      O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
                      O4 - HKLM\..\Run: [Reminder] "C:\Windows\Creator\Remind_XP.exe"
                      O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
                      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Pack Securite\Common\FSM32.EXE" /splash
                      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Pack Securite\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
                      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Pack Securite\FSGUI\FSSW.EXE" /reboot
                      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                      O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
                      O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
                      O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
                      O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
                      O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
                      O4 - HKLM\..\RunOnce: [MessengerPlusUninstall] C:\WINDOWS\system32\cmd.exe /C "C:\DOCUME~1\PROPRI~1\LOCALS~1\Temp\MsgPlusUninst.bat"
                      O4 - HKCU\..\Run: [BackupNotify] c:\Program Files\Hewlett-Packard\Digital Imaging\bin\backupnotify.exe
                      O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
                      O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
                      O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
                      O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
                      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
                      O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
                      O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
                      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
                      O4 - Global Startup: Pack Securite.lnk = C:\Program Files\Pack Securite\backweb\361343\Program\fspex.exe
                      O8 - Extra context menu item: &Bloquer cette fenêtre publicitaire - C:\Program Files\Pack Securite\Anti-Spyware\blockpopups.htm
                      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
                      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
                      O9 - Extra button: Filtre Web - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
                      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
                      O9 - Extra 'Tools' menuitem: Filtre Web - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll
                      O9 - Extra button: Protection Internet Explorer - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Securite\Anti-Spyware\ieshield.dll
                      O9 - Extra 'Tools' menuitem: Protection Internet Explorer... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Securite\Anti-Spyware\ieshield.dll
                      O10 - Broken Internet access because of LSP provider 'winsflt.dll' missing
                      O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
                      O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/yinst/yinst_current.cab
                      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
                      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
                      O17 - HKLM\System\CCS\Services\Tcpip\..\{8766FCFD-D5CF-4035-93C5-EAB77810A72F}: NameServer = 86.64.145.151 86.64.145.141
                      O18 - Protocol: bw+0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw+0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw-0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw-0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw00 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw00s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw10 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw10s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw20 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw20s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw30 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw30s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw40 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw40s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw50 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw50s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw60 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw60s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw70 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw70s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw80 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw80s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw90 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw90s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwa0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwa0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwb0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwb0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwc0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwc0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwd0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwd0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwe0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwe0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwf0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwf0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
                      O18 - Protocol: bwg0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwg0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwh0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwh0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwi0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwi0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwj0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwj0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwk0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwk0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwl0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwl0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwm0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwm0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwn0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwn0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwo0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwo0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwp0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwp0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwq0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwq0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwr0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwr0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bws0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bws0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwt0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwt0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwu0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwu0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwv0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwv0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bww0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bww0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwx0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwx0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwy0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwy0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwz0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwz0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
                      O18 - Protocol: offline-8876480 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
                      O23 - Service: Pack Securite (BackWeb Plug-in - 361343) - BackWeb Technologies Inc. - C:\PROGRA~1\PACKSE~1\backweb\361343\Program\SERVIC~1.EXE
                      O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
                      O23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exe
                      O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe
                      O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Pack Securite\backweb\361343\program\fsbwsys.exe
                      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe
                      O23 - Service: F-Secure HTTP Server (fshttps) - F-Secure Corporation - C:\Program Files\Pack Securite\FSPC\fshttps\fshttps.exe
                      O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Pack Securite\Common\FSMA32.EXE
                      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
                      O23 - Service: iPodService - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
                      O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
                      O23 - Service: MS Dns Service (WinNet) - Unknown owner - C:\WINDOWS\system32\wincntrl.exe (file missing)

                      Et une question:
                      Est ce que je peux installer MSN+ parce que je m'en servait beaucoup?

                      Merciiiiiiiiiiiiiiiii de vos conseils!!!
                      0
                    2. ^^Marie^^
                      re,

                      Relance HijackThis, choisis " do a scan only" coche la case devant les lignes ci-dessous et clique en bas sur "fix checked"

                      O18 - Protocol: bw+0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw+0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw-0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw-0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw00 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw00s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw10 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw10s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw20 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw20s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw30 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw30s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw40 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw40s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw50 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw50s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw60 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw60s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw70 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw70s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw80 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw80s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw90 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw90s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwa0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwa0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwb0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwb0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwc0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwc0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwd0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwd0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwe0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwe0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwf0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwf0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
                      O18 - Protocol: bwg0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwg0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwh0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwh0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwi0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwi0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwj0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwj0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwk0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwk0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwl0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwl0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwm0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwm0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwn0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwn0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwo0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwo0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwp0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwp0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwq0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwq0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwr0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwr0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bws0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bws0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwt0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwt0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwu0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwu0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwv0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwv0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bww0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bww0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwx0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwx0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwy0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwy0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwz0 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwz0s - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
                      O18 - Protocol: offline-8876480 - {8DAE027C-E395-44CA-A042-E6B3CC252E8E} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

                      Celle là ne me plait pas non plus mais faudrait confirmation

                      O23 - Service: MS Dns Service (WinNet) - Unknown owner - C:\WINDOWS\system32\wincntrl.exe (file missing)

                      0
                      1. Kristopher Contributeur
                        Re,

                        Il faut également fixer cette ligne :
                        O23 - Service: MS Dns Service (WinNet) - Unknown owner - C:\WINDOWS\system32\wincntrl.exe (file missing)

                        Plus d'info ici :
                        http://castlecops.com/o23list-1163.html

                        Pense également à effectuer les mises à jour via Windows Update.

                        ++
                        0
                        1. ^^Marie^^
                          chui pas copine avec les 023 pour l'instant..........

                          Tu vas bien Krist ou Krisssssss ou Kris ou => c bon
                          0
                          1. Kristopher Contributeur
                            Re,

                            chui pas copine avec les 023 pour l'instant..........

                            Je nuancerai ce propos.
                            "les 023" ne sont pas toutes à fixer.

                            Tu vas bien Krist ou Krisssssss ou Kris ou => c bon

                            oui Mary ;)
                            Et Toi ?

                            ++
                            0
                        2. ^^Marie^^
                          "les 023" ne sont pas toutes à supprimer en effet ...c'est pourquoi je reste vigilente....

                          OUéé ! La M'lary vobien !!!!!!
                          0
                          1. Kristopher Contributeur
                            Au fait Mary ;)

                            Pendant qu'on y est, est ce que depuis, quick157 t'as répondu à la question concernant son âge ?
                            Je n'ai que des présomptions de mon côté donc, à moins que tu sois pythonisse et que tu le sache de toi même...
                            Cela m'intéresse quand même :D

                            Bonne journée, je retourne oeuvrer.
                            0
                            • 1
                            • 2

                            Discussions similaires

                            Softonic,est-ce un virus ?
                            techmel1

                            6 réponses
                            Chrome://newtab
                            Nova

                            14 réponses
                            Désinstaller Softonic
                            Diguimette

                            5 réponses
                            Supprimer New Tab
                            tysaozon

                            8 réponses
                            Virus dans filezilla
                            balnelius10

                            9 réponses