virus systemdoctor moi aussi! Résolu

Question

bonjour,ça faisait longtemps que je n'avais pas eu de problème et voilà! comme beaucoup je me suis fais avoir par systèmdoctor, à l'aide!voilà mon hijackthis:Logfile of HijackThis v1.99.1Scan saved at 13:49:39, on 19/07/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\RunDll32.exeC:\Program Files\Softwin\BitDefender9\bdoesrv.exeC:\program files\softwin\bitdefender9\bdnagent.exeC:\program files\softwin\bitdefender9\bdswitch.exeC:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXEC:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exeC:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exeC:\WINDOWS\system32\LVCOMSX.EXEC:\Program Files\Logitech\Video\LogiTray.exeC:\Program Files\DAEMON Tools\daemon.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exeC:\WINDOWS\system32\rundll32.exeC:\Program Files\WinZip\WZQKPICK.EXEC:\Program Files\Logitech\Video\FxSvr2.exeC:\WINDOWS\system32\svchost.exeC:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exeC:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exeC:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exeC:\Program Files\Softwin\BitDefender9\vsserv.exec:\program files\softwin\bitdefender9\bdmcon.exeD:\Jeux\HijackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portailR1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhostR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dllO2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dllO2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dllO2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dllO3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dllO3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dllO4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWndO4 - HKLM\..\Run: [BDMCon] "C:\Program Files\Softwin\BitDefender9\bdmcon.exe"O4 - HKLM\..\Run: [BDOESRV] "C:\Program Files\Softwin\BitDefender9\bdoesrv.exe"O4 - HKLM\..\Run: [BDNewsAgent] "c:\program files\softwin\bitdefender9\bdnagent.exe"O4 - HKLM\..\Run: [BDSwitchAgent] "c:\program files\softwin\bitdefender9\bdswitch.exe"O4 - HKLM\..\Run: [EPSON Stylus C46 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE /P23 "EPSON Stylus C46 Series" /O6 "USB001" /M "Stylus C46"O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"O4 - HKLM\..\Run: [EEventManager] C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exeO4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXEO4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exeO4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exeO4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" bootO4 - HKCU\..\Run: [Instant Access] rundll32.exe p2esocks_1052.dll,InstantAccessO4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exeO4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exeO4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXEO8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.htmlO8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.htmlO8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.htmlO8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.htmlO8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar2.dll/cmcache.htmlO9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLLO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site....O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP.cabO16 - DPF: {E49A9FCB-FAA9-4C1F-A1C1-54920DA2CCA4} - http://es6-scripts.dlv4.com/binaries/egauth4/egauth4_1052_FR_XP.cabO18 - Protocol: bw+0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw+0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw-0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw-0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw00 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw00s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw10 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw10s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw20 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw20s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw30 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw30s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw40 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw40s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw50 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw50s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw60 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw60s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw70 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw70s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw80 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw80s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw90 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw90s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwa0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwa0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwb0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwb0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwc0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwc0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwd0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwd0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwe0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwe0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwf0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwf0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dllO18 - Protocol: bwg0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwg0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwh0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwh0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwi0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwi0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwj0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwj0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwk0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwk0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwl0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwl0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwm0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwm0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwn0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwn0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwo0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwo0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwp0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwp0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwq0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwq0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwr0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwr0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bws0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bws0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwt0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwt0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwu0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwu0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwv0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwv0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bww0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bww0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwx0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwx0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwy0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwy0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwz0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwz0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLLO18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLLO18 - Protocol: offline-8876480 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dllO23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe" /service (file missing)O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\Softwin\BitDefender9\vsserv.exe" /service (file missing)O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)merci...

lili 71 · Answer

re,Pour vous aidé, j'ai exécuté ewido voilà le rapport:ewido anti-spyware - Scan Report--------------------------------------------------------- + Created at:	15:00:28 19/07/2006 + Scan result:	C:\Program Files\SystemDoctor 2006 Free -> Adware.SystemDoctor2006 : Cleaned with backup (quarantined).C:\Program Files\SystemDoctor 2006 Free\is-343JS.tmp -> Adware.SystemDoctor2006 : Cleaned with backup (quarantined).C:\Program Files\SystemDoctor 2006 Free\is-56KN0.tmp -> Adware.SystemDoctor2006 : Cleaned with backup (quarantined).C:\Program Files\SystemDoctor 2006 Free\is-R4BDV.tmp -> Adware.SystemDoctor2006 : Cleaned with backup (quarantined).HKU\S-1-5-21-515967899-1284227242-725345543-1003\Software\EGDHTML -> Dialer.Generic : Cleaned with backup (quarantined).C:\Documents and Settings\Olive&Maud\Mes documents\Downloads\OCB karaoke daniel balavoine compilation karaoke complete daniel balavoine karaoke mp3 mid 03.zip/install.exe -> Hijacker.Agent.hi : Cleaned with backup (quarantined).C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@247realmedia[2].txt -> TrackingCookie.247realmedia : Cleaned.:mozilla.8:C:\Documents and Settings\Maud\Application Data\Mozilla\Firefox\Profiles\s8esj5ls.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.:mozilla.9:C:\Documents and Settings\Maud\Application Data\Mozilla\Firefox\Profiles\s8esj5ls.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@2o7[1].txt -> TrackingCookie.2o7 : Cleaned.C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@redcats.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@sfr.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@adtech[2].txt -> TrackingCookie.Adtech : Cleaned.C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@advertising[2].txt -> TrackingCookie.Advertising : Cleaned.:mozilla.39:C:\Documents and Settings\Maud\Application Data\Mozilla\Firefox\Profiles\s8esj5ls.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned.C:\Documents and Settings\Olive&Maud\Local Settings\Temp\Cookies\olive&maud@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned.:mozilla.63:C:\Documents and Settings\Maud\Application Data\Mozilla\Firefox\Profiles\s8esj5ls.default\cookies.txt -> TrackingCookie.Bluestreak : Cleaned.C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@bluestreak[1].txt -> TrackingCookie.Bluestreak : Cleaned.C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@crbanner.casinopays[1].txt -> TrackingCookie.Casinopays : Cleaned.C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@banner.clubdicecasino[2].txt -> TrackingCookie.Clubdicecasino : Cleaned.C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@com[1].txt -> TrackingCookie.Com : Cleaned.C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@fl01.ct2.comclick[1].txt -> TrackingCookie.Comclick : Cleaned.:mozilla.50:C:\Documents and Settings\Maud\Application Data\Mozilla\Firefox\Profiles\s8esj5ls.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.C:\Documents and Settings\Maud\Cookies\maud@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned.C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned.:mozilla.47:C:\Documents and Settings\Maud\Application Data\Mozilla\Firefox\Profiles\s8esj5ls.default\cookies.txt -> TrackingCookie.Estat : Cleaned.C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@estat[1].txt -> TrackingCookie.Estat : Cleaned.C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@as1.falkag[1].txt -> TrackingCookie.Falkag : Cleaned.C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@ehg-acdsystems.hitbox[1].txt -> TrackingCookie.Hitbox : Cleaned.C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned.C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@mediaplex[1].txt -> TrackingCookie.Mediaplex : Cleaned.C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@perf.overture[1].txt -> TrackingCookie.Overture : Cleaned.C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@ads.pointroll[1].txt -> TrackingCookie.Pointroll : Cleaned.C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@stats1.reliablestats[1].txt -> TrackingCookie.Reliablestats : Cleaned.:mozilla.10:C:\Documents and Settings\Maud\Application Data\Mozilla\Firefox\Profiles\s8esj5ls.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.:mozilla.11:C:\Documents and Settings\Maud\Application Data\Mozilla\Firefox\Profiles\s8esj5ls.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.:mozilla.12:C:\Documents and Settings\Maud\Application Data\Mozilla\Firefox\Profiles\s8esj5ls.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.:mozilla.13:C:\Documents and Settings\Maud\Application Data\Mozilla\Firefox\Profiles\s8esj5ls.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@serving-sys[2].txt -> TrackingCookie.Serving-sys : Cleaned.C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@cs.sexcounter[2].txt -> TrackingCookie.Sexcounter : Cleaned.:mozilla.21:C:\Documents and Settings\Maud\Application Data\Mozilla\Firefox\Profiles\s8esj5ls.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.:mozilla.22:C:\Documents and Settings\Maud\Application Data\Mozilla\Firefox\Profiles\s8esj5ls.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.:mozilla.23:C:\Documents and Settings\Maud\Application Data\Mozilla\Firefox\Profiles\s8esj5ls.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.:mozilla.24:C:\Documents and Settings\Maud\Application Data\Mozilla\Firefox\Profiles\s8esj5ls.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Cleaned.C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@statcounter[1].txt -> TrackingCookie.Statcounter : Cleaned.C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Cleaned.C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Cleaned.C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@valueclick[2].txt -> TrackingCookie.Valueclick : Cleaned.:mozilla.19:C:\Documents and Settings\Maud\Application Data\Mozilla\Firefox\Profiles\s8esj5ls.default\cookies.txt -> TrackingCookie.Weborama : Cleaned.:mozilla.20:C:\Documents and Settings\Maud\Application Data\Mozilla\Firefox\Profiles\s8esj5ls.default\cookies.txt -> TrackingCookie.Weborama : Cleaned.:mozilla.64:C:\Documents and Settings\Maud\Application Data\Mozilla\Firefox\Profiles\s8esj5ls.default\cookies.txt -> TrackingCookie.Weborama : Cleaned.C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@weborama[2].txt -> TrackingCookie.Weborama : Cleaned.C:\Documents and Settings\Olive&Maud\Local Settings\Temp\Cookies\olive&maud@weborama[2].txt -> TrackingCookie.Weborama : Cleaned.C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@statse.webtrendslive[1].txt -> TrackingCookie.Webtrendslive : Cleaned.C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Cleaned.C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@zedo[2].txt -> TrackingCookie.Zedo : Cleaned.::Report end

phoibe · Answer

bonjour,repost un hijack apres ewido stpphoibe

phoibe · Answer

bon alors premiere chose : il faut que tu installes un firewall sans quoi tu vas avoir de gros ennuis... je te recommande kério et zone alarm.pour plus de détails : https://sebsauvage.net/safehex.htmlapres avoir refait "do a system scan only", tu te retrouves avec une liste et il y a une case à cocher devant chaque ligne. coche les suivantes :de O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP.cabaO18 - Protocol: bwz0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllincluses, etO18 - Protocol: offline-8876480 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllpuis clique sur "fix checked"ensuite, réalise un scan en ligne sur bitdefender : http://www.bitdefender.fr/bd/site/search.php#et post le rapportbon couragephoibe

Regis59 · Answer

Salut,Non ! Un seul pare feu suffit !Télécharge Blacklight (de F-Secure) a l’une des 2 adresses : https://www.f-secure.com/en https://www.f-secure.com/en et sauvegarde le sur ton Bureau. Double-clique blbeta.exe et accepte la licence ; laisse [X]scan through Windows Explorer activé ; clique Scan puis Next Tu verras une liste de fichiers détectés apparaître. Tu verras également un rapport, sur ton Bureau, nommé fsbl.xxxxxxx.log (les xxxxxxx sont des chiffres). Copie et colle le contenu de ce rapport dans ta prochaine réponse a+

Regis59 · Answer

SalutTélécharge Brute Force Uninstaller (de Merijn) ici: http://www.merijn.org/files/bfu.zip Créé un nouveau dossier directement à la racine de ton disque dur ou l'endroit qui te convient, nomme ce dossier BFU. Décompresse le fichier téléchargé dans ce nouveau dossier (par exemple C:\BFU) Ensuite, télécharge EGDACCESS.bfu (de Metallica) :Fais un clik droit ici : http://metallica.geekstogo.com/EGDACCESS.bfu  et choisis "Enregistrer la cible sous..." afin de télécharger EGDACCESS.bfu (de Metallica). Sauvegarde dans le dossier créé (C:\BFU). **Note : si tu utlises Internet Explorer ; lors de la sauvegarde, assure-toi que le champs "Type :" affiche "Tous les fichiers". Tu dois maintenant avoir deux fichiers dans le dossier C:\BFU : EGDACCESS.bfu et BFU.exe (très important). Si tu utilises Internet Explorer, assure-toi lors de la sauvegarde que le champs "Type :" affiche "Tous les fichiers". Tu dois maintenant avoir deux fichiers dans le dossier C:\BFU : EGDACCESS.bfu et BFU.exe (très important). Ensuite: Désactive la restauration systéme. Clic droit sur poste de travail > propriétés > onglet restauration système puis cocher "désactiver la restauration système". clic sur ok pour valider Redémarre en mode sans échec Redemarre le pc, laisse passer l'écran du bios, puis tapote sur la touche F8 avant qu'apparaisse l'écran de chargement de windows. Choisis le mode sans échec dans les options et valide avec entrée. -_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_- Lance "Brute Force Uninstaller" en double-cliquant BFU.exe (Dans le dossier C:\BFU) - Clique sur le petit dossier jaune, et clique sur : EGDACCESS.bfu - Coches la case Show log after script ends - Clique sur Execute pour que le fix fasse son boulot :-) Attends que le message Complete script execution apparaîsse et clique sur OK. Un rapport va s'afficher dans la fenetre du programme, copie et colle dans le bloc-notes, puis sauvegardes le, tu le posteras plus tard sur le forum. Clique Exit pour fermer le programme BFU. -_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_- Ensuite, lance Blacklight en double cliquant sur blbeta.exe et accepte la licence. Clique sur Scan pour lancer l'analyse. Une fois fait, selectionnes chaques fichiers trouvés et clic sur "RENAME" Puis valide. Réponds oui aux messages d'avertissements et te demandant si tu autorises le reboot du pc. -_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_- Après le reboot du pc, les fichiers : c:\WINDOWS\system32\qknzybghr_navps.dat C:\WINDOWS\system32\qknzybghr_nav.dat c:\WINDOWS\system32\qknzybghr.dat C:\windows\system32\qknzybghr.exe devraient être visible et pouvoir être supprimés sans aucuns soucis. Blacklight ne les supprimes pas, il les renommes simplement et il va falloir que tu les vires toi même: Va dans C:\windows\system32\ et recherches et effaces: qknzybghr_navps.dat.renqknzybghr_nav.dat.renqknzybghr.dat.renqknzybghr.exe.renPuis fixe ceci dans HijackThis:O4 - HKCU\..\Run: [Instant Access] rundll32.exe p2esocks_1052.dll,InstantAccess Une fois fait,redemarre ton PC. Reposte un rapport hijackthis + le rapport de BFU que tu auras sauvegardé et un nouveau rapport de blacklight. bon nettoyage et bon courage ;-)

lili 71 · Answer

J'essaie ce soir. Je te tiens au courant...Merci beaucoup.

Regis59 · Answer

D'accorda bientot

Regis59 · Answer

Salut lili,Ce n'est pas tres grave...Ca arrive lolTu peux remettre un Hijack this et un black light?Merci

Regis59 · Answer

SalutRefixe ceci:O4 - HKLM\..\Run: [qknzybghr] c:\windows\system32\qknzybghr.exe qknzybghr Et dis moi si tu as d autres soucis ou si tu as des questions?a+

Regis59 · Answer

De rien,Bonne continuation:-)

Virus systemdoctor moi aussi!

10 réponses

Votre réponse

Discussions similaires

Newsletters