[virus] infecté par win32.hllw.vb.ak ? Résolu

Question

Bonjour,Kapersky m'a averti que le pc était infecté par " virus win32.hllw.vb.ak" mais je n'ai pas trouvé cette dénomination exacte sur le site de Kapersky. J'ai viré manuellement le fichier car Kapersky ne pouvait pas le faire, mais j'ai retrouvé le virus ailleurs après un nouveau scan.J'ai essayé plusieurs méthodes, registryfix, ashampoo et des antivirus en ligne, mais à part Panda qui a découvert eicar.mod (Bravo !), les autres ne voient rien...Ci-joint les rapports de Ewido ( j'en ai fait deux pour raison de "pas le temps, maintenant" et le premier est plus étoffé !), Bitdefender et Hijackthis, merci d'avance.--------------------------------------------------------- ewido anti-malware - Rapport de scan---------------------------------------------------------- ewido anti-malware - Rapport de scan--------------------------------------------------------- + Créé le:		21:47:49, 08/06/2006 + Somme de contrôle:	E41FED41 + Résultats du scan:	C:\Documents and Settings\Domie\Cookies\domie@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyer et sauvegarder	C:\Documents and Settings\Domie\Cookies\domie@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyer et sauvegarder	C:\Documents and Settings\Domie\Cookies\domie@weborama[1].txt -> TrackingCookie.Weborama : Nettoyer et sauvegarder	C:\Documents and Settings\Domie\Cookies\domie@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Nettoyer et sauvegarder::Fin du rapport-------------------------------------------------------- + Créé le:		02:06:26, 20/05/2006 + Somme de contrôle:	99B7A5CF + Résultats du scan:	C:\Documents and Settings\Domie\Cookies\domie@247realmedia[2].txt -> TrackingCookie.247realmedia : Nettoyer et sauvegarder	C:\Documents and Settings\Domie\Cookies\domie@atdmt[1].txt -> TrackingCookie.Atdmt : Nettoyer et sauvegarder	C:\Documents and Settings\Domie\Cookies\domie@bluestreak[1].txt -> TrackingCookie.Bluestreak : Nettoyer et sauvegarder	C:\Documents and Settings\Domie\Cookies\domie@com[1].txt -> TrackingCookie.Com : Nettoyer et sauvegarder	C:\Documents and Settings\Domie\Cookies\domie@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyer et sauvegarder	C:\Documents and Settings\Domie\Cookies\domie@ivwbox[2].txt -> TrackingCookie.Ivwbox : Nettoyer et sauvegarder	C:\Documents and Settings\Domie\Cookies\domie@mediaplex[1].txt -> TrackingCookie.Mediaplex : Nettoyer et sauvegarder	C:\Documents and Settings\Domie\Cookies\domie@revenue[2].txt -> TrackingCookie.Revenue : Nettoyer et sauvegarder	C:\Documents and Settings\Domie\Cookies\domie@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Nettoyer et sauvegarder	C:\Documents and Settings\Domie\Cookies\domie@weborama[1].txt -> TrackingCookie.Weborama : Nettoyer et sauvegarder	C:\Documents and Settings\Domie\Cookies\domie@www.smartadserver[2].txt -> TrackingCookie.Smartadserver : Nettoyer et sauvegarder	C:\Documents and Settings\Domie\Local Settings\Temp	emp.fr6F81\NavHelper\v2.0.4c\NHelper.dll -> Adware.NavExcel : Nettoyer et sauvegarder	C:\Documents and Settings\Domie\Local Settings\Temp	emp.fr6F81\NavHelper\v2.0.4c\NHUninstaller.exe -> Adware.NavExcel : Nettoyer et sauvegarder	C:\Documents and Settings\Domie\Local Settings\Temp	emp.fr6F81\NavHelper\v2.0.4c\v2.0.4c.cab/NHelper.dll -> Adware.NavExcel : Nettoyer et sauvegarder	C:\Documents and Settings\Domie\Local Settings\Temp	emp.fr6F81\NavHelper\v2.0.4c\v2.0.4c.cab/NHUninstaller.exe -> Adware.NavExcel : Nettoyer et sauvegarder::Fin du rapportBitDefender Online Scanner     Scan report generated at: Thu, Jun 08, 2006 - 01:08:27       Scan path: C:\;D:\;E:\;           Statistics Time 01:50:24 Files 373650 Folders 936 Boot Sectors 2 Archives 3049 Packed Files 65338      Results Identified Viruses  1 Infected Files  4 Suspect Files  0 Warnings 0 Disinfected 0 Deleted Files 4      Engines Info Virus Definitions 386940 Engine build AVCORE v1.0 (build 2310) (i386) (Apr 17 2006 16:24:38) Scan plugins 13 Archive plugins 40 Unpack plugins 4 E-mail plugins 6 System plugins 1      Scan Settings First Action Disinfect Second Action Delete Heuristics Yes Enable Warnings Yes Scanned Extensions *; Exclude Extensions   Scan Emails Yes Scan Archives Yes Scan Packed Yes Scan Files Yes Scan Boot Yes        Scanned File  Status C:\Documents and Settings\Domie\Mes documents\domie\jeux\colortetris.exe=>(NSIS o)=>lzma_nsis0008 Detected with: Adware.Navexcel.A C:\Documents and Settings\Domie\Mes documents\domie\jeux\colortetris.exe=>(NSIS o)=>lzma_nsis0008 Disinfection failed C:\Documents and Settings\Domie\Mes documents\domie\jeux\colortetris.exe=>(NSIS o)=>lzma_nsis0008 Deleted C:\Documents and Settings\Domie\Mes documents\domie\jeux\colortetris.exe=>(NSIS o) Update failed C:\Documents and Settings\Domie\Mes documents\domie\jeux\colortetris.exe=>(NSIS o)=>lzma_nsis0010=>NHelper.dll Detected with: Adware.Navexcel.A C:\Documents and Settings\Domie\Mes documents\domie\jeux\colortetris.exe=>(NSIS o)=>lzma_nsis0010=>NHelper.dll Disinfection failed C:\Documents and Settings\Domie\Mes documents\domie\jeux\colortetris.exe=>(NSIS o)=>lzma_nsis0010=>NHelper.dll Deleted C:\Documents and Settings\Domie\Mes documents\domie\jeux\colortetris.exe=>(NSIS o)=>lzma_nsis0010 Update failed C:\Documents and Settings\Domie\Mes documents\domie\jeux\colortetris.exe=>(NSIS o)=>lzma_nsis0010=>NHUninstaller.exe Detected with: Adware.Navexcel.A C:\Documents and Settings\Domie\Mes documents\domie\jeux\colortetris.exe=>(NSIS o)=>lzma_nsis0010=>NHUninstaller.exe Disinfection failed C:\Documents and Settings\Domie\Mes documents\domie\jeux\colortetris.exe=>(NSIS o)=>lzma_nsis0010=>NHUninstaller.exe Deleted C:\Documents and Settings\Domie\Mes documents\domie\jeux\colortetris.exe=>(NSIS o)=>lzma_nsis0010 Update failed C:\Documents and Settings\Domie\Mes documents\domie\jeux\colortetris.exe=>(NSIS o)=>lzma_nsis0010=>NHUpdater.exe Detected with: Adware.Navexcel.A C:\Documents and Settings\Domie\Mes documents\domie\jeux\colortetris.exe=>(NSIS o)=>lzma_nsis0010=>NHUpdater.exe Disinfection failed C:\Documents and Settings\Domie\Mes documents\domie\jeux\colortetris.exe=>(NSIS o)=>lzma_nsis0010=>NHUpdater.exe Deleted C:\Documents and Settings\Domie\Mes documents\domie\jeux\colortetris.exe=>(NSIS o)=>lzma_nsis0010 Update failed     Logfile of HijackThis v1.99.1Scan saved at 22:03:33, on 08/06/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exeC:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exeC:\Program Files\Messenger\msmsgs.exeC:\WINDOWS\system32\RUNDLL32.EXEC:\Program Files\Logitech\SetPoint\SetPoint.exeC:\Program Files\Wanadoo\Synchronisation Wanadoo\Voxsync.exeC:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exeC:\Program Files\Boonty\BoontyBox\BoontyBox.exeC:\WINDOWS\system32\drivers\CDAC11BA.EXEC:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpm.exeC:\WINDOWS\System32
vsvc32.exeC:\Program Files\Fichiers communs\Logitech\KHAL\KHALMNPR.EXEC:\WINDOWS\System32\svchost.exeC:\Program Files\ewido anti-malware\ewidoguard.exeC:\Program Files\ewido anti-malware\ewidoctrl.exeC:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXER0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.com/frR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dllO2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dllO2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dllO3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dllO4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartupO4 - HKLM\..\Run: [nwiz] nwiz.exe /installO4 - HKLM\..\Run: [OfficeGuard RegChecker] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\ogrc.exe"O4 - HKLM\..\Run: [AVPCC] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe" /waitO4 - HKLM\..\Run: [MMTray] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe"O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exeO4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /backgroundO4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInitO4 - Startup: BoontyBox 01net.lnk = C:\Program Files\Boonty\BoontyBox\BoontyBox.exeO4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exeO4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exeO4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exeO4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXEO4 - Global Startup: Synchronisation Wanadoo.lnk = ?O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO16 - DPF: {0A46CB52-CFA0-4E78-A181-948D5E361BE3} (EpsonObj Class) - https://www.epson.eu/support/O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cabO16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cabO16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cabO16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site....O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cabO16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) - O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.htmlO16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cabO16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cabO18 - Protocol: bw+0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw+0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw-0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw-0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw00 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw00s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw10 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw10s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw20 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw20s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw30 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw30s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw40 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw40s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw50 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw50s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw60 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw60s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw70 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw70s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw80 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw80s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw90 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw90s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwa0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwa0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwb0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwb0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwc0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwc0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwd0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwd0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwe0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwe0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwf0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwf0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dllO18 - Protocol: bwg0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwg0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwh0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwh0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwi0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwi0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwj0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwj0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwk0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwk0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwl0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwl0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwm0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwm0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwn0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwn0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwo0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwo0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwp0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwp0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwq0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwq0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwr0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwr0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bws0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bws0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwt0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwt0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwu0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwu0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwv0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwv0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bww0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bww0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwx0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwx0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwy0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwy0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwz0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwz0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)O18 - Protocol: offline-8876480 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO23 - Service: AVP Control Centre Service (AVPCC) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe" /service (file missing)O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exeO23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXEO23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exeO23 - Service: ewido security suite guard - ewido networks - C:\Program Files\ewido anti-malware\ewidoguard.exeO23 - Service: KAV Monitor Service (KAVMonitorService) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpm.exe" /service (file missing)O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32
vsvc32.exeEt voilà ! Merci encore d'avance et @+hsshaman esprit pas simple...

aranjuez31 · Answer

Hello

un brin de ménage pour y voir plus clair
ouvre hijack
coche et fixe tt ce qui suit

et remets un autre hijack derrière :

O16 - DPF: {0A46CB52-CFA0-4E78-A181-948D5E361BE3} (EpsonObj Class) - https://www.epson.eu/support/
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site....
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) -
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
+
O18 - Protocol: bw+0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: offline-8876480 - {F4CBEC51-3D8B-4DE4-9B88-C25C41A2550A} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

aranjuez31 · Answer

re
continue
coche et fixe

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [MMTray] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe"

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe

O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background

O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit

O4 - Startup: BoontyBox 01net.lnk = C:\Program Files\Boonty\BoontyBox\BoontyBox.exe

O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe

O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe

O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE

O4 - Global Startup: Synchronisation Wanadoo.lnk = ?
=============
tu auras compris qu une part de tes ennuis se situe au niveau des jeux

désinstalle le programme 'Boonty'
===============
nettoie avec
- Ccleaner : ( nettoyeur de registre, cookies+temps+tempos+prefetch+historique+etc..)
Télécharge ici :
https://www.ccleaner.com/ccleaner/download
Tutorial ici:
https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php
============
pare-feu ??? quel est-il ?

(A)- Si tu n’ as pas de pare-feu, autre que le ‘joujou’ de Windows (à désactiver), je te conseille Kerio (gratuit même après les 30 jours d’ essai)
Tutorial et téléchargement ici :
https://www.vulgarisation-informatique.com/kerio.php
(B)- Règle d’ or à respecter : 1 seul pare-feu, 1 seul antivirus

aranjuez31 · Answer

hello
c est loin d être fini

Merci de procéder dans l’ordre,
Télécharge TOUS ces programmes (si tu ne les as pas), installe-les.
Fais les mises à jour des progr 1/, 2/, 3/
Scan avec TOUS, COLLE comme demandé les rapports de 0/, 3/ & 6/

1/ -Ad-Aware (gratuit) :
Tutorial et téléchargement ici :
https://forums.cnetfrance.fr

2/ - Spybot (gratuit) :
http://telecharger.01net.com/windows/Internet/internet_utlitaire/fiches/26157.html

3/ - Ewido (download)- gratuit même après 14 jours d’essai
http://perso.wanadoo.fr/entraide-hijackthis/Ewido/
Copie/COLLE le rapport généré sur ce forum
Pour certaines versions de Windows antérieures à XP, Ewido peut ne pas être compatible
Dans ce cas, il te faudra utiliser a-squared free et demander une clef pour son usage gratuit
https://www.emsisoft.com/fr/

4/ - Ccleaner : ( nettoyeur de registre, cookies+temps+tempos+prefetch+historique+etc..)
Télécharge ici :
https://www.ccleaner.com/ccleaner/download
Tutorial ici:
https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php

6/ - Scan online avec BitDefender (fonctionne uniquement sous Internet Explorer en acceptant l’ activX)
https://assiste.com/404_La_page_demandee_n_existe_pas.php
http://www.bitdefender.fr/scan8/ie.html
Copie/COLLE le rapport entier
======
remettre un hijack à la suite des rapports ddés

bon courage

hsshaman · Answer

Je viens de m'apercevoir que cette discussion n'était pas terminée : finalement comme Aranjuez31 était absent, j'ai finalement sauvegardé les données du PC et formater le disque dur !
Le problème a disparu !

Merci pour l'aide même si ça n'a pa été au bout.

hsshaman

[virus] infecté par win32.hllw.vb.ak ?

4 réponses

Votre réponse

Discussions similaires

Newsletters