[Virus] stealthSWs114.h!dll

Salut à tous

Je suis apparemment infecté par le virus ou spyware stealthSWs114.h!dll et je n'arrive pas à l'enlever

Pourriez-vous m'aider à régler ce problème s'il vous plait!!

En espérant que quelqu'un puisse m'aider. Merci d'avance

6 réponses

  1. Salut,

    télécharges hijackthis:
    Téléchargement de HijackThis

    Installe le dans son propre dossier:
    -cliques droit sur le bureau, nouveau dossier, installes-le dedans.
    Lance le, cliques sur "do a system scan and save logfile"
    Puis copies et colles le rapport ici.
    0
    1. merci de pouvoir m'aider
      voici le rapport:

      Logfile of HijackThis v1.99.1
      Scan saved at 12:36:11, on 10/05/2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\System32\cisvc.exe
      C:\Program Files\ewido anti-malware\ewidoctrl.exe
      C:\Norman\Bin\Zanda.exe
      C:\WINDOWS\system32\slserv.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\wdfmgr.exe
      C:\Norman\bin\NJEEVES.EXE
      C:\WINDOWS\System32\alg.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\atmclk.exe
      C:\WINDOWS\System32\LVCOMSX.EXE
      C:\Program Files\Logitech\Video\LogiTray.exe
      C:\Norman\bin\ZLH.EXE
      C:\Program Files\D-Tools\daemon.exe
      C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
      C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
      C:\Program Files\Logitech\Video\FxSvr2.exe
      C:\WINDOWS\system32\devldr32.exe
      C:\WINDOWS\system32\cidaemon.exe
      C:\Norman\Nvc\BIN\NIP.EXE
      C:\Norman\Nvc\bin\nvcoas.exe
      C:\Norman\Nvc\BIN\NVCSCHED.EXE
      C:\Norman\Nvc\BIN\nipsvc.exe
      C:\Norman\Nvc\bin\cclaw.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\DOCUME~1\DOSSAN~1\LOCALS~1\Temp\Répertoire temporaire 5 pour hijackthis.zip\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://searchbar.findthewebsiteyouneed.com
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://searchbar.findthewebsiteyouneed.com
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchbar.findthewebsiteyouneed.com
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?cc=de&toHttps=1&redig=42E8C090C5164F069F1CB417402A2689
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchbar.findthewebsiteyouneed.com
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/de-de
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://searchbar.findthewebsiteyouneed.com
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
      R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL (file missing)
      O1 - Hosts: 69.50.166.13 google.com
      O1 - Hosts: 69.50.166.13 google.co.uk
      O1 - Hosts: 69.50.166.13 google.ca
      O1 - Hosts: 69.50.166.13 google.es
      O1 - Hosts: 69.50.166.13 google.de
      O1 - Hosts: 69.50.166.13 google.fr
      O1 - Hosts: 69.50.166.13 google.com.au
      O1 - Hosts: 69.50.166.12 yahoo.com
      O2 - BHO: Nothing - {b0398eca-0bcd-4645-8261-5e9dc70248d0} - C:\WINDOWS\system32\hp452F.tmp
      O3 - Toolbar: (no name) - {86227D9C-0EFE-4f8a-AA55-30386A3F5686} - (no file)
      O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
      O3 - Toolbar: &Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
      O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
      O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
      O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
      O4 - HKLM\..\Run: [Norman ZANDA] C:\Norman\bin\ZLH.EXE /LOAD /SPLASH
      O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
      O4 - HKLM\..\Run: [Ulead AutoDetector v2] C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
      O4 - HKCU\..\Run: [MSMSGS] "C:\PROGRA~1\MESSEN~1\msmsgs.exe" /background
      O4 - Global Startup: Kaspersky Anti-Hacker.lnk = C:\Program Files\Kaspersky Lab\Kaspersky Anti-Hacker\KAVPF.exe
      O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\ADOBE\Acrobat 7.0\Reader\reader_sl.exe
      O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
      O17 - HKLM\System\CCS\Services\Tcpip\..\{BDDA8434-CB8E-4549-92CB-C0539A86444D}: NameServer = 86.64.145.140 84.103.237.140
      O18 - Protocol: bw+0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw+0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
      O18 - Protocol: bwg0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwg0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
      O18 - Protocol: offline-8876480 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
      O23 - Service: Norman API-hooking helper (NipSvc) - Unknown owner - C:\Norman\Nvc\BIN\nipsvc.exe
      O23 - Service: Norman NJeeves - Unknown owner - C:\Norman\bin\NJEEVES.EXE
      O23 - Service: Norman ZANDA - Unknown owner - C:\Norman\Bin\Zanda.exe
      O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\Norman\Nvc\bin\nvcoas.exe
      O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman Data Defense Systems - C:\Norman\Nvc\BIN\NVCSCHED.EXE
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
      O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
      0
  2. merci bcp de m'aider
    voilci le rapport hijackthis:

    Logfile of HijackThis v1.99.1
    Scan saved at 12:36:11, on 10/05/2006
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\System32\cisvc.exe
    C:\Program Files\ewido anti-malware\ewidoctrl.exe
    C:\Norman\Bin\Zanda.exe
    C:\WINDOWS\system32\slserv.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\wdfmgr.exe
    C:\Norman\bin\NJEEVES.EXE
    C:\WINDOWS\System32\alg.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\system32\atmclk.exe
    C:\WINDOWS\System32\LVCOMSX.EXE
    C:\Program Files\Logitech\Video\LogiTray.exe
    C:\Norman\bin\ZLH.EXE
    C:\Program Files\D-Tools\daemon.exe
    C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
    C:\Program Files\Logitech\Video\FxSvr2.exe
    C:\WINDOWS\system32\devldr32.exe
    C:\WINDOWS\system32\cidaemon.exe
    C:\Norman\Nvc\BIN\NIP.EXE
    C:\Norman\Nvc\bin\nvcoas.exe
    C:\Norman\Nvc\BIN\NVCSCHED.EXE
    C:\Norman\Nvc\BIN\nipsvc.exe
    C:\Norman\Nvc\bin\cclaw.exe
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\DOCUME~1\DOSSAN~1\LOCALS~1\Temp\Répertoire temporaire 5 pour hijackthis.zip\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://searchbar.findthewebsiteyouneed.com
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://searchbar.findthewebsiteyouneed.com
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchbar.findthewebsiteyouneed.com
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?cc=de&toHttps=1&redig=42E8C090C5164F069F1CB417402A2689
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchbar.findthewebsiteyouneed.com
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/de-de
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://searchbar.findthewebsiteyouneed.com
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL (file missing)
    O1 - Hosts: 69.50.166.13 google.com
    O1 - Hosts: 69.50.166.13 google.co.uk
    O1 - Hosts: 69.50.166.13 google.ca
    O1 - Hosts: 69.50.166.13 google.es
    O1 - Hosts: 69.50.166.13 google.de
    O1 - Hosts: 69.50.166.13 google.fr
    O1 - Hosts: 69.50.166.13 google.com.au
    O1 - Hosts: 69.50.166.12 yahoo.com
    O2 - BHO: Nothing - {b0398eca-0bcd-4645-8261-5e9dc70248d0} - C:\WINDOWS\system32\hp452F.tmp
    O3 - Toolbar: (no name) - {86227D9C-0EFE-4f8a-AA55-30386A3F5686} - (no file)
    O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
    O3 - Toolbar: &Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll (file missing)
    O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
    O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
    O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
    O4 - HKLM\..\Run: [Norman ZANDA] C:\Norman\bin\ZLH.EXE /LOAD /SPLASH
    O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
    O4 - HKLM\..\Run: [Ulead AutoDetector v2] C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    O4 - HKCU\..\Run: [MSMSGS] "C:\PROGRA~1\MESSEN~1\msmsgs.exe" /background
    O4 - Global Startup: Kaspersky Anti-Hacker.lnk = C:\Program Files\Kaspersky Lab\Kaspersky Anti-Hacker\KAVPF.exe
    O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\ADOBE\Acrobat 7.0\Reader\reader_sl.exe
    O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{BDDA8434-CB8E-4549-92CB-C0539A86444D}: NameServer = 86.64.145.140 84.103.237.140
    O18 - Protocol: bw+0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw+0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
    O18 - Protocol: bwg0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwg0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
    O18 - Protocol: offline-8876480 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
    O23 - Service: Norman API-hooking helper (NipSvc) - Unknown owner - C:\Norman\Nvc\BIN\nipsvc.exe
    O23 - Service: Norman NJeeves - Unknown owner - C:\Norman\bin\NJEEVES.EXE
    O23 - Service: Norman ZANDA - Unknown owner - C:\Norman\Bin\Zanda.exe
    O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\Norman\Nvc\bin\nvcoas.exe
    O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman Data Defense Systems - C:\Norman\Nvc\BIN\NVCSCHED.EXE
    O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
    O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
    0
    1. Relance HijackThis, choisis " do a scan only" coche la case devant les lignes ci-dessous et clique en bas sur "fix checked"

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://searchbar.findthewebsiteyouneed.com
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://searchbar.findthewebsiteyouneed.com
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchbar.findthewebsiteyouneed.com
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchbar.findthewebsiteyouneed.com
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://searchbar.findthewebsiteyouneed.com
      R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL (file missing)
      O1 - Hosts: 69.50.166.13 google.com
      O1 - Hosts: 69.50.166.13 google.co.uk
      O1 - Hosts: 69.50.166.13 google.ca
      O1 - Hosts: 69.50.166.13 google.es
      O1 - Hosts: 69.50.166.13 google.de
      O1 - Hosts: 69.50.166.13 google.fr
      O1 - Hosts: 69.50.166.13 google.com.au
      O1 - Hosts: 69.50.166.12 yahoo.com
      O2 - BHO: Nothing - {b0398eca-0bcd-4645-8261-5e9dc70248d0} - C:\WINDOWS\system32\hp452F.tmp
      O3 - Toolbar: (no name) - {86227D9C-0EFE-4f8a-AA55-30386A3F5686} - (no file)
      O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
      O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
      O4 - HKLM\..\Run: [Ulead AutoDetector v2] C:\Program Files\Fichiers communs\Ulead Systems\AutoDetector\monitor.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [MSMSGS] "C:\PROGRA~1\MESSEN~1\msmsgs.exe" /background
      O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\ADOBE\Acrobat 7.0\Reader\reader_sl.exe
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
      O18 - Protocol: bw+0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw+0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
      O18 - Protocol: bwg0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwg0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
      O18 - Protocol: offline-8876480 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

      Clique sur demarrer, poste de travail, C:, program files, cherche et supprime ce dossier:

      MyWebSearch

      Clique sur demarrer, rechercher, cherche et supprime ce fichier:

      hp452F.tmp

      si un fichier persiste lors de la suppression fais ceci:
      -Redemarres ton pc, dès l'allumage de celui ci tapotes la touche f8, à l'ecran qui va apparaitre choisis "mode sans echec" attends un peu.. puis vas supprimer les fichiers/dossiers, vides ta corbeille et redemarres normalement

      Fait ce nettoyage:

      ¤Telecharges et installes ceci, dans la colonne de gauche cliques sur "erreurs" coches toutes les cases, puis cliques en bas sur "chercher des erreurs" une fois finit, cliques sur "reparer les erreurs" et tu aura un message pour sauvegarder ta base de registre tu dis "oui" puis tu recommences jusqu'a ce qu'il te trouve plus d'erreurs

      CCleaner:
      Ccleaner

      ¤Relance Ccleaner ,vas dans l'onglet "nettoyeur" present sur la gauche, decoches la derniere case (Avancé si elle est cochée) puis cliques sur "lancer le nettoyage"

      Puis:

      Fait ce scan anti-virus en ligne avec Internet Explorer, accepte l'active X, pour le faire fonctionner,
      une fois qu'il a terminé colle le rapport ici stp

      https://www.bitdefender.com/toolbox/
      0
  3. Salut,

    Je te donne les lignes à fixer que je connais, mais j'ai l'impression qu'il y en a d'autres mais attend l'avis d'un pro ...

    En attendant :

    Relance HijackThis, choisis " do a scan only" coche la case devant les lignes ci-dessous et clique en bas sur "fix checked"


    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://searchbar.findthewebsiteyouneed.com
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://searchbar.findthewebsiteyouneed.com
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchbar.findthewebsiteyouneed.com
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://searchbar.findthewebsiteyouneed.com

    O1 - Hosts: 69.50.166.13 google.com
    O1 - Hosts: 69.50.166.13 google.co.uk
    O1 - Hosts: 69.50.166.13 google.ca
    O1 - Hosts: 69.50.166.13 google.es
    O1 - Hosts: 69.50.166.13 google.de
    O1 - Hosts: 69.50.166.13 google.fr
    O1 - Hosts: 69.50.166.13 google.com.au
    O1 - Hosts: 69.50.166.12 yahoo.com

    O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
    O18 - Protocol: bw+0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw+0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
    O18 - Protocol: bwg0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwg0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0s - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
    O18 - Protocol: offline-8876480 - {DB6C3701-EC88-4388-95E9-5FBE1EFE610D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

    Refais un HT

    A suivre............
    0
    1. Hé !! Hé!!!!!
      0
      1. lol :O ... tu sera bientot le maillon fort :$
        0
      2. @Utilisateur anonymevoici le rapport de bitdefender:
        BitDefender Online Scanner

        Scan report generated at: Wed, May 10, 2006 - 16:44:42

        Scan path: A:\;C:\;D:\;E:\;F:\;G:\;

        Statistics

        Time
        02:44:50

        Files
        348724

        Folders
        4733

        Boot Sectors
        2

        Archives
        7676

        Packed Files
        53476

        Results

        Identified Viruses
        7

        Infected Files
        10

        Suspect Files
        0

        Warnings
        0

        Disinfected
        0

        Deleted Files
        8

        Engines Info

        Virus Definitions
        374256

        Engine build
        AVCORE v1.0 (build 2310) (i386) (Apr 17 2006 16:24:38)

        Scan plugins
        13

        Archive plugins
        39

        Unpack plugins
        4

        E-mail plugins
        6

        System plugins
        1

        Scan Settings

        First Action
        Disinfect

        Second Action
        Delete

        Heuristics
        Yes

        Enable Warnings
        Yes

        Scanned Extensions
        *;

        Exclude Extensions

        Scan Emails
        Yes

        Scan Archives
        Yes

        Scan Packed
        Yes

        Scan Files
        Yes

        Scan Boot
        Yes

        Scanned File
        Status

        C:\System Volume Information\_restore{6F57FCE7-7437-4141-9EB8-3282FFB07DB9}\RP441\A0459173.exe
        Infected with: Dropped:Trojan.Puper.IQ

        C:\System Volume Information\_restore{6F57FCE7-7437-4141-9EB8-3282FFB07DB9}\RP441\A0459173.exe
        Disinfection failed

        C:\System Volume Information\_restore{6F57FCE7-7437-4141-9EB8-3282FFB07DB9}\RP441\A0459173.exe
        Delete failed

        C:\System Volume Information\_restore{6F57FCE7-7437-4141-9EB8-3282FFB07DB9}\RP442\A0459212.exe
        Infected with: Trojan.Downloader.VB.LT

        C:\System Volume Information\_restore{6F57FCE7-7437-4141-9EB8-3282FFB07DB9}\RP442\A0459212.exe
        Disinfection failed

        C:\System Volume Information\_restore{6F57FCE7-7437-4141-9EB8-3282FFB07DB9}\RP442\A0459212.exe
        Deleted

        C:\System Volume Information\_restore{6F57FCE7-7437-4141-9EB8-3282FFB07DB9}\RP442\A0459214.exe
        Infected with: Trojan.Downloader.VB.LX

        C:\System Volume Information\_restore{6F57FCE7-7437-4141-9EB8-3282FFB07DB9}\RP442\A0459214.exe
        Disinfection failed

        C:\System Volume Information\_restore{6F57FCE7-7437-4141-9EB8-3282FFB07DB9}\RP442\A0459214.exe
        Deleted

        C:\System Volume Information\_restore{6F57FCE7-7437-4141-9EB8-3282FFB07DB9}\RP442\A0459216.exe
        Infected with: Trojan.Downloader.VB.LX

        C:\System Volume Information\_restore{6F57FCE7-7437-4141-9EB8-3282FFB07DB9}\RP442\A0459216.exe
        Disinfection failed

        C:\System Volume Information\_restore{6F57FCE7-7437-4141-9EB8-3282FFB07DB9}\RP442\A0459216.exe
        Deleted

        C:\System Volume Information\_restore{6F57FCE7-7437-4141-9EB8-3282FFB07DB9}\RP442\A0459217.exe
        Infected with: Trojan.Downloader.VB.LX

        C:\System Volume Information\_restore{6F57FCE7-7437-4141-9EB8-3282FFB07DB9}\RP442\A0459217.exe
        Disinfection failed

        C:\System Volume Information\_restore{6F57FCE7-7437-4141-9EB8-3282FFB07DB9}\RP442\A0459217.exe
        Deleted

        C:\System Volume Information\_restore{6F57FCE7-7437-4141-9EB8-3282FFB07DB9}\RP442\A0459221.dll
        Infected with: Trojan.FakeAlert.CH

        C:\System Volume Information\_restore{6F57FCE7-7437-4141-9EB8-3282FFB07DB9}\RP442\A0459221.dll
        Disinfection failed

        C:\System Volume Information\_restore{6F57FCE7-7437-4141-9EB8-3282FFB07DB9}\RP442\A0459221.dll
        Deleted

        C:\System Volume Information\_restore{6F57FCE7-7437-4141-9EB8-3282FFB07DB9}\RP442\A0459222.exe
        Infected with: Trojan.Downloader.VB.LX

        C:\System Volume Information\_restore{6F57FCE7-7437-4141-9EB8-3282FFB07DB9}\RP442\A0459222.exe
        Disinfection failed

        C:\System Volume Information\_restore{6F57FCE7-7437-4141-9EB8-3282FFB07DB9}\RP442\A0459222.exe
        Deleted

        C:\WINDOWS\system32\1024\ld7065.tmp
        Infected with: Dropped:Trojan.FakeAlert.CH

        C:\WINDOWS\system32\1024\ld7065.tmp
        Disinfection failed

        C:\WINDOWS\system32\1024\ld7065.tmp
        Deleted

        C:\WINDOWS\system32\atmclk.exe
        Infected with: Trojan.Downloader.Zlob.KF

        C:\WINDOWS\system32\atmclk.exe
        Disinfection failed

        C:\WINDOWS\system32\atmclk.exe
        Delete failed

        C:\WINDOWS\system32\ldB0ED.tmp
        Infected with: Trojan.Downloader.Zlob.NL

        C:\WINDOWS\system32\ldB0ED.tmp
        Disinfection failed

        C:\WINDOWS\system32\ldB0ED.tmp
        Deleted
        0
    2. voici le rapport de bitdefender:
      BitDefender Online Scanner

      Scan report generated at: Wed, May 10, 2006 - 16:44:42

      Scan path: A:\;C:\;D:\;E:\;F:\;G:\;

      Statistics

      Time
      02:44:50

      Files
      348724

      Folders
      4733

      Boot Sectors
      2

      Archives
      7676

      Packed Files
      53476

      Results

      Identified Viruses
      7

      Infected Files
      10

      Suspect Files
      0

      Warnings
      0

      Disinfected
      0

      Deleted Files
      8

      Engines Info

      Virus Definitions
      374256

      Engine build
      AVCORE v1.0 (build 2310) (i386) (Apr 17 2006 16:24:38)

      Scan plugins
      13

      Archive plugins
      39

      Unpack plugins
      4

      E-mail plugins
      6

      System plugins
      1

      Scan Settings

      First Action
      Disinfect

      Second Action
      Delete

      Heuristics
      Yes

      Enable Warnings
      Yes

      Scanned Extensions
      *;

      Exclude Extensions

      Scan Emails
      Yes

      Scan Archives
      Yes

      Scan Packed
      Yes

      Scan Files
      Yes

      Scan Boot
      Yes

      Scanned File
      Status

      C:\System Volume Information\_restore{6F57FCE7-7437-4141-9EB8-3282FFB07DB9}\RP441\A0459173.exe
      Infected with: Dropped:Trojan.Puper.IQ

      C:\System Volume Information\_restore{6F57FCE7-7437-4141-9EB8-3282FFB07DB9}\RP441\A0459173.exe
      Disinfection failed

      C:\System Volume Information\_restore{6F57FCE7-7437-4141-9EB8-3282FFB07DB9}\RP441\A0459173.exe
      Delete failed

      C:\System Volume Information\_restore{6F57FCE7-7437-4141-9EB8-3282FFB07DB9}\RP442\A0459212.exe
      Infected with: Trojan.Downloader.VB.LT

      C:\System Volume Information\_restore{6F57FCE7-7437-4141-9EB8-3282FFB07DB9}\RP442\A0459212.exe
      Disinfection failed

      C:\System Volume Information\_restore{6F57FCE7-7437-4141-9EB8-3282FFB07DB9}\RP442\A0459212.exe
      Deleted

      C:\System Volume Information\_restore{6F57FCE7-7437-4141-9EB8-3282FFB07DB9}\RP442\A0459214.exe
      Infected with: Trojan.Downloader.VB.LX

      C:\System Volume Information\_restore{6F57FCE7-7437-4141-9EB8-3282FFB07DB9}\RP442\A0459214.exe
      Disinfection failed

      C:\System Volume Information\_restore{6F57FCE7-7437-4141-9EB8-3282FFB07DB9}\RP442\A0459214.exe
      Deleted

      C:\System Volume Information\_restore{6F57FCE7-7437-4141-9EB8-3282FFB07DB9}\RP442\A0459216.exe
      Infected with: Trojan.Downloader.VB.LX

      C:\System Volume Information\_restore{6F57FCE7-7437-4141-9EB8-3282FFB07DB9}\RP442\A0459216.exe
      Disinfection failed

      C:\System Volume Information\_restore{6F57FCE7-7437-4141-9EB8-3282FFB07DB9}\RP442\A0459216.exe
      Deleted

      C:\System Volume Information\_restore{6F57FCE7-7437-4141-9EB8-3282FFB07DB9}\RP442\A0459217.exe
      Infected with: Trojan.Downloader.VB.LX

      C:\System Volume Information\_restore{6F57FCE7-7437-4141-9EB8-3282FFB07DB9}\RP442\A0459217.exe
      Disinfection failed

      C:\System Volume Information\_restore{6F57FCE7-7437-4141-9EB8-3282FFB07DB9}\RP442\A0459217.exe
      Deleted

      C:\System Volume Information\_restore{6F57FCE7-7437-4141-9EB8-3282FFB07DB9}\RP442\A0459221.dll
      Infected with: Trojan.FakeAlert.CH

      C:\System Volume Information\_restore{6F57FCE7-7437-4141-9EB8-3282FFB07DB9}\RP442\A0459221.dll
      Disinfection failed

      C:\System Volume Information\_restore{6F57FCE7-7437-4141-9EB8-3282FFB07DB9}\RP442\A0459221.dll
      Deleted

      C:\System Volume Information\_restore{6F57FCE7-7437-4141-9EB8-3282FFB07DB9}\RP442\A0459222.exe
      Infected with: Trojan.Downloader.VB.LX

      C:\System Volume Information\_restore{6F57FCE7-7437-4141-9EB8-3282FFB07DB9}\RP442\A0459222.exe
      Disinfection failed

      C:\System Volume Information\_restore{6F57FCE7-7437-4141-9EB8-3282FFB07DB9}\RP442\A0459222.exe
      Deleted

      C:\WINDOWS\system32\1024\ld7065.tmp
      Infected with: Dropped:Trojan.FakeAlert.CH

      C:\WINDOWS\system32\1024\ld7065.tmp
      Disinfection failed

      C:\WINDOWS\system32\1024\ld7065.tmp
      Deleted

      C:\WINDOWS\system32\atmclk.exe
      Infected with: Trojan.Downloader.Zlob.KF

      C:\WINDOWS\system32\atmclk.exe
      Disinfection failed

      C:\WINDOWS\system32\atmclk.exe
      Delete failed

      C:\WINDOWS\system32\ldB0ED.tmp
      Infected with: Trojan.Downloader.Zlob.NL

      C:\WINDOWS\system32\ldB0ED.tmp
      Disinfection failed

      C:\WINDOWS\system32\ldB0ED.tmp
      Deleted
      0
      1. Alors ceci C:\System Volume Information\_restore indique que ta restauration du systeme est infecté.Nous allons Tout supprimer et créer un point propre.

        Cliques sur demarrer, cliques droit sur poste de travail, propriétés, onglet "restauration du systeme"
        -coches la case, puis cliques sur "appliquer"
        -decoches la case et cliques sur "appliquer" puis "ok".

        Maintenant, que l'ont à effacés les point infectés, nous allons créer un point propre:

        Cliques sur demarrer, tout les programmes, accessoires, outils systemes, restauration du systeme, choisis "creer un point de restauration" nommes le " ccm" par exemple, cliques sur "creer" puis "ok".

        Puis remet un rapport hijackthis
        0
      2. @Utilisateur anonymevoici le rapport hijackthis:
        Logfile of HijackThis v1.99.1
        Scan saved at 20:04:23, on 10/05/2006
        Platform: Windows XP SP2 (WinNT 5.01.2600)
        MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

        Running processes:
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\csrss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\system32\spoolsv.exe
        C:\WINDOWS\System32\cisvc.exe
        C:\Program Files\ewido anti-malware\ewidoctrl.exe
        C:\Norman\Bin\Zanda.exe
        C:\WINDOWS\system32\slserv.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\system32\wdfmgr.exe
        C:\Norman\bin\NJEEVES.EXE
        C:\WINDOWS\System32\alg.exe
        C:\WINDOWS\Explorer.EXE
        C:\WINDOWS\system32\atmclk.exe
        C:\WINDOWS\System32\LVCOMSX.EXE
        C:\Program Files\Logitech\Video\LogiTray.exe
        C:\Norman\bin\ZLH.EXE
        C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
        C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
        C:\Program Files\Logitech\Video\FxSvr2.exe
        C:\WINDOWS\system32\devldr32.exe
        C:\WINDOWS\system32\cidaemon.exe
        C:\Norman\Nvc\BIN\NIP.EXE
        C:\Norman\Nvc\bin\nvcoas.exe
        C:\Norman\Nvc\BIN\NVCSCHED.EXE
        C:\Norman\Nvc\BIN\nipsvc.exe
        C:\Norman\Nvc\bin\cclaw.exe
        C:\Program Files\Internet Explorer\iexplore.exe
        C:\Program Files\MSN Messenger\msnmsgr.exe
        C:\Program Files\MSN Messenger\msnmsgr.exe
        C:\DOCUME~1\DOSSAN~1\LOCALS~1\Temp\Répertoire temporaire 1 pour hijackthis.zip\HijackThis.exe

        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?cc=de&toHttps=1&redig=42E8C090C5164F069F1CB417402A2689
        R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/de-de
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
        O3 - Toolbar: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
        O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
        O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
        O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
        O4 - HKLM\..\Run: [Norman ZANDA] C:\Norman\bin\ZLH.EXE /LOAD /SPLASH
        O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
        O4 - Global Startup: Kaspersky Anti-Hacker.lnk = C:\Program Files\Kaspersky Lab\Kaspersky Anti-Hacker\KAVPF.exe
        O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
        O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
        O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
        O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
        O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
        O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
        O17 - HKLM\System\CCS\Services\Tcpip\..\{BDDA8434-CB8E-4549-92CB-C0539A86444D}: NameServer = 86.64.145.140 84.103.237.140
        O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
        O23 - Service: Norman API-hooking helper (NipSvc) - Unknown owner - C:\Norman\Nvc\BIN\nipsvc.exe
        O23 - Service: Norman NJeeves - Unknown owner - C:\Norman\bin\NJEEVES.EXE
        O23 - Service: Norman ZANDA - Unknown owner - C:\Norman\Bin\Zanda.exe
        O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\Norman\Nvc\bin\nvcoas.exe
        O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman Data Defense Systems - C:\Norman\Nvc\BIN\NVCSCHED.EXE
        O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
        O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
        0
      3. @@lex51ça me semble propre mais..

        Telecharge puis mets à jour ce logiciel, et fait un scan complet de ton systeme, puis mets tous les fichiers qu'il te trouvera en quarantaine en utilisant "change action"

        spycatcher express free
        http://download.tenebril.com/pub/bin/spycatcher-express.exe
        0
      4. @Utilisateur anonymere; merci de m'avoir aider, mais il me reste un petit soucis a reglé encore.
        lorsque je me connecte a i,ternet un triangle jaune avec un point d'exclamation s'ouvre en bas a coté de l'heure avec un message dissant : urgent system message: virus!" et il ouvre plein de page internet de la pub pour des antivirus . si vous pourriez m'aidez.merci par avance
        0
      5. @@lex51fait ça:

        - Ouvre HijackThis
        Clique sur Do a scan and save log file.
        Ouvre le log avec le Bloc-Note
        Colle le rapport ici (edition / copier sur le bloc-note puis Clic droit / Edition / coller dans ton message ici)*

        puis ça:

        télécharge lopxp;
        http://pageperso.aol.fr/balltrap34/lopxp.zip

        dézippe-le sur ton bureau puis double-clique sur le fichier lopxp.bat
        quand il a terminé, un rapport s'ouvre : poste-le
        0
    3. voici le rapport lopxp:

      apport fait à 14:31:15,88 le 11/05/2006

      Le volume dans le lecteur C s'appelle HDD
      Le num‚ro de s‚rie du volume est B8EE-31B2

      R‚pertoire de C:\Documents and Settings\All Users\Application Data

      11/05/2006 06:45 <REP> Tenebril
      20/03/2006 11:10 <REP> Ulead Systems
      22/12/2005 16:20 <REP> Adobe
      25/04/2005 21:23 <REP> Kaspersky Lab
      25/04/2005 21:18 <REP> Avg7
      05/03/2005 13:30 <REP> Ciel
      24/02/2005 13:20 <REP> MSN6
      23/02/2005 15:20 <REP> Hewlett-Packard
      23/02/2005 14:42 1604 hpzinstall.log
      21/02/2005 21:54 62 desktop.ini
      21/02/2005 21:54 <REP> Microsoft
      21/02/2005 21:54 <REP> .
      21/02/2005 21:54 <REP> ..
      2 fichier(s) 1666 octets
      11 R‚p(s) 3999952896 octets libres
      Le volume dans le lecteur C s'appelle HDD
      Le num‚ro de s‚rie du volume est B8EE-31B2

      R‚pertoire de C:\Documents and Settings\Default User\Application Data

      21/02/2005 21:54 62 desktop.ini
      21/02/2005 21:54 <REP> ..
      21/02/2005 21:54 <REP> Microsoft
      21/02/2005 21:54 <REP> .
      1 fichier(s) 62 octets
      3 R‚p(s) 3999952384 octets libres
      Le volume dans le lecteur C s'appelle HDD
      Le num‚ro de s‚rie du volume est B8EE-31B2

      R‚pertoire de C:\Documents and Settings\Dos Santos\Application Data

      11/05/2006 07:07 <REP> Tenebril
      20/03/2006 12:02 <REP> Ulead Systems
      05/11/2005 14:58 <REP> Azureus
      19/10/2005 17:05 11264 CDRusersDB.v12
      31/07/2005 15:49 49264 GDIPFONTCACHEV1.DAT
      22/07/2005 12:01 <REP> Sun
      17/07/2005 17:01 <REP> Visicom Media
      28/05/2005 11:52 <REP> AdobeUM
      28/05/2005 11:50 <REP> Adobe
      17/05/2005 20:32 <REP> .ABC 3.01
      16/04/2005 19:49 <REP> Ahead
      16/04/2005 16:53 <REP> .bittorrent
      16/03/2005 17:37 <REP> Messenger2
      12/03/2005 16:13 <REP> Real
      08/03/2005 20:31 <REP> FotoWire
      03/03/2005 21:05 <REP> Help
      26/02/2005 14:51 <REP> Macromedia
      24/02/2005 13:20 <REP> MSN6
      21/02/2005 22:25 <REP> Identities
      21/02/2005 22:25 62 desktop.ini
      21/02/2005 22:25 <REP> ..
      21/02/2005 22:25 <REP> .
      21/02/2005 22:25 <REP> Microsoft
      3 fichier(s) 60590 octets
      20 R‚p(s) 3999950848 octets libres
      ******************************************
      Recherche des taches planifiées dans C:\WINDOWS\tasks

      Le volume dans le lecteur C s'appelle HDD
      Le num‚ro de s‚rie du volume est B8EE-31B2

      R‚pertoire de C:\WINDOWS\Tasks

      21/02/2005 22:15 6 SA.DAT
      21/02/2005 22:11 65 desktop.ini
      21/02/2005 22:11 <REP> ..
      21/02/2005 22:11 <REP> .
      2 fichier(s) 71 octets
      2 R‚p(s) 3ÿ999ÿ931ÿ392 octets libres

      ******************************************
      Recherche dans Program files

      Le dossier C:\Program Files\C2Media n'existe pas

      *************** Fin du rapport ****************
      0