Virus systemdoctor moi aussi!

Résolu
bonjour,

ça faisait longtemps que je n'avais pas eu de problème et voilà! comme beaucoup je me suis fais avoir par systèmdoctor, à l'aide!
voilà mon hijackthis:Logfile of HijackThis v1.99.1
Scan saved at 13:49:39, on 19/07/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\Softwin\BitDefender9\bdoesrv.exe
C:\program files\softwin\bitdefender9\bdnagent.exe
C:\program files\softwin\bitdefender9\bdswitch.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE
C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\Softwin\BitDefender9\vsserv.exe
c:\program files\softwin\bitdefender9\bdmcon.exe
D:\Jeux\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [BDMCon] "C:\Program Files\Softwin\BitDefender9\bdmcon.exe"
O4 - HKLM\..\Run: [BDOESRV] "C:\Program Files\Softwin\BitDefender9\bdoesrv.exe"
O4 - HKLM\..\Run: [BDNewsAgent] "c:\program files\softwin\bitdefender9\bdnagent.exe"
O4 - HKLM\..\Run: [BDSwitchAgent] "c:\program files\softwin\bitdefender9\bdswitch.exe"
O4 - HKLM\..\Run: [EPSON Stylus C46 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE /P23 "EPSON Stylus C46 Series" /O6 "USB001" /M "Stylus C46"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [EEventManager] C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [Instant Access] rundll32.exe p2esocks_1052.dll,InstantAccess
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site....
O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP.cab
O16 - DPF: {E49A9FCB-FAA9-4C1F-A1C1-54920DA2CCA4} - http://es6-scripts.dlv4.com/binaries/egauth4/egauth4_1052_FR_XP.cab
O18 - Protocol: bw+0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe" /service (file missing)
O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\Softwin\BitDefender9\vsserv.exe" /service (file missing)
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)

merci...

10 réponses

  1. re,
    Pour vous aidé, j'ai exécuté ewido voilà le rapport:

    ewido anti-spyware - Scan Report
    ---------------------------------------------------------

    + Created at: 15:00:28 19/07/2006

    + Scan result:

    C:\Program Files\SystemDoctor 2006 Free -> Adware.SystemDoctor2006 : Cleaned with backup (quarantined).
    C:\Program Files\SystemDoctor 2006 Free\is-343JS.tmp -> Adware.SystemDoctor2006 : Cleaned with backup (quarantined).
    C:\Program Files\SystemDoctor 2006 Free\is-56KN0.tmp -> Adware.SystemDoctor2006 : Cleaned with backup (quarantined).
    C:\Program Files\SystemDoctor 2006 Free\is-R4BDV.tmp -> Adware.SystemDoctor2006 : Cleaned with backup (quarantined).
    HKU\S-1-5-21-515967899-1284227242-725345543-1003\Software\EGDHTML -> Dialer.Generic : Cleaned with backup (quarantined).
    C:\Documents and Settings\Olive&Maud\Mes documents\Downloads\OCB karaoke daniel balavoine compilation karaoke complete daniel balavoine karaoke mp3 mid 03.zip/install.exe -> Hijacker.Agent.hi : Cleaned with backup (quarantined).
    C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@247realmedia[2].txt -> TrackingCookie.247realmedia : Cleaned.
    :mozilla.8:C:\Documents and Settings\Maud\Application Data\Mozilla\Firefox\Profiles\s8esj5ls.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    :mozilla.9:C:\Documents and Settings\Maud\Application Data\Mozilla\Firefox\Profiles\s8esj5ls.default\cookies.txt -> TrackingCookie.2o7 : Cleaned.
    C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
    C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
    C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@redcats.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
    C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@sfr.122.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
    C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@adtech[2].txt -> TrackingCookie.Adtech : Cleaned.
    C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@advertising[2].txt -> TrackingCookie.Advertising : Cleaned.
    :mozilla.39:C:\Documents and Settings\Maud\Application Data\Mozilla\Firefox\Profiles\s8esj5ls.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned.
    C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned.
    C:\Documents and Settings\Olive&Maud\Local Settings\Temp\Cookies\olive&maud@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned.
    :mozilla.63:C:\Documents and Settings\Maud\Application Data\Mozilla\Firefox\Profiles\s8esj5ls.default\cookies.txt -> TrackingCookie.Bluestreak : Cleaned.
    C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@bluestreak[1].txt -> TrackingCookie.Bluestreak : Cleaned.
    C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@crbanner.casinopays[1].txt -> TrackingCookie.Casinopays : Cleaned.
    C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@banner.clubdicecasino[2].txt -> TrackingCookie.Clubdicecasino : Cleaned.
    C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@com[1].txt -> TrackingCookie.Com : Cleaned.
    C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@fl01.ct2.comclick[1].txt -> TrackingCookie.Comclick : Cleaned.
    :mozilla.50:C:\Documents and Settings\Maud\Application Data\Mozilla\Firefox\Profiles\s8esj5ls.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned.
    C:\Documents and Settings\Maud\Cookies\maud@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned.
    C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@doubleclick[1].txt -> TrackingCookie.Doubleclick : Cleaned.
    :mozilla.47:C:\Documents and Settings\Maud\Application Data\Mozilla\Firefox\Profiles\s8esj5ls.default\cookies.txt -> TrackingCookie.Estat : Cleaned.
    C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@estat[1].txt -> TrackingCookie.Estat : Cleaned.
    C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@as1.falkag[1].txt -> TrackingCookie.Falkag : Cleaned.
    C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@ehg-acdsystems.hitbox[1].txt -> TrackingCookie.Hitbox : Cleaned.
    C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@hitbox[2].txt -> TrackingCookie.Hitbox : Cleaned.
    C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@mediaplex[1].txt -> TrackingCookie.Mediaplex : Cleaned.
    C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@perf.overture[1].txt -> TrackingCookie.Overture : Cleaned.
    C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@ads.pointroll[1].txt -> TrackingCookie.Pointroll : Cleaned.
    C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@stats1.reliablestats[1].txt -> TrackingCookie.Reliablestats : Cleaned.
    :mozilla.10:C:\Documents and Settings\Maud\Application Data\Mozilla\Firefox\Profiles\s8esj5ls.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.11:C:\Documents and Settings\Maud\Application Data\Mozilla\Firefox\Profiles\s8esj5ls.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.12:C:\Documents and Settings\Maud\Application Data\Mozilla\Firefox\Profiles\s8esj5ls.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    :mozilla.13:C:\Documents and Settings\Maud\Application Data\Mozilla\Firefox\Profiles\s8esj5ls.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned.
    C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@serving-sys[2].txt -> TrackingCookie.Serving-sys : Cleaned.
    C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@cs.sexcounter[2].txt -> TrackingCookie.Sexcounter : Cleaned.
    :mozilla.21:C:\Documents and Settings\Maud\Application Data\Mozilla\Firefox\Profiles\s8esj5ls.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.
    :mozilla.22:C:\Documents and Settings\Maud\Application Data\Mozilla\Firefox\Profiles\s8esj5ls.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.
    :mozilla.23:C:\Documents and Settings\Maud\Application Data\Mozilla\Firefox\Profiles\s8esj5ls.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.
    :mozilla.24:C:\Documents and Settings\Maud\Application Data\Mozilla\Firefox\Profiles\s8esj5ls.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned.
    C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@www.smartadserver[1].txt -> TrackingCookie.Smartadserver : Cleaned.
    C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@statcounter[1].txt -> TrackingCookie.Statcounter : Cleaned.
    C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Cleaned.
    C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Cleaned.
    C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@valueclick[2].txt -> TrackingCookie.Valueclick : Cleaned.
    :mozilla.19:C:\Documents and Settings\Maud\Application Data\Mozilla\Firefox\Profiles\s8esj5ls.default\cookies.txt -> TrackingCookie.Weborama : Cleaned.
    :mozilla.20:C:\Documents and Settings\Maud\Application Data\Mozilla\Firefox\Profiles\s8esj5ls.default\cookies.txt -> TrackingCookie.Weborama : Cleaned.
    :mozilla.64:C:\Documents and Settings\Maud\Application Data\Mozilla\Firefox\Profiles\s8esj5ls.default\cookies.txt -> TrackingCookie.Weborama : Cleaned.
    C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@weborama[2].txt -> TrackingCookie.Weborama : Cleaned.
    C:\Documents and Settings\Olive&Maud\Local Settings\Temp\Cookies\olive&maud@weborama[2].txt -> TrackingCookie.Weborama : Cleaned.
    C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@statse.webtrendslive[1].txt -> TrackingCookie.Webtrendslive : Cleaned.
    C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Cleaned.
    C:\Documents and Settings\Olive&Maud\Cookies\olive&maud@zedo[2].txt -> TrackingCookie.Zedo : Cleaned.

    ::Report end
    0
    1. bonjour,

      repost un hijack apres ewido stp

      phoibe
      0
      1. re,

        voilà:

        Logfile of HijackThis v1.99.1
        Scan saved at 16:49:41, on 19/07/2006
        Platform: Windows XP SP2 (WinNT 5.01.2600)
        MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

        Running processes:
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\system32\spoolsv.exe
        C:\WINDOWS\Explorer.EXE
        C:\WINDOWS\system32\RunDll32.exe
        C:\Program Files\Softwin\BitDefender9\bdmcon.exe
        C:\Program Files\Softwin\BitDefender9\bdoesrv.exe
        C:\Program Files\Softwin\BitDefender9\bdnagent.exe
        C:\Program Files\Softwin\BitDefender9\bdswitch.exe
        C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE
        C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
        C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe
        C:\WINDOWS\system32\LVCOMSX.EXE
        C:\Program Files\Logitech\Video\LogiTray.exe
        C:\Program Files\DAEMON Tools\daemon.exe
        C:\Program Files\ewido anti-spyware 4.0\ewido.exe
        C:\WINDOWS\system32\ctfmon.exe
        C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
        C:\WINDOWS\system32\rundll32.exe
        C:\Program Files\WinZip\WZQKPICK.EXE
        C:\Program Files\Logitech\Video\FxSvr2.exe
        C:\Program Files\Internet Explorer\IEXPLORE.EXE
        C:\Program Files\ewido anti-spyware 4.0\guard.exe
        C:\WINDOWS\system32\svchost.exe
        C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
        C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
        C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
        C:\Program Files\Softwin\BitDefender9\vsserv.exe
        D:\Jeux\HijackThis.exe

        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
        R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
        O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
        O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
        O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
        O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
        O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
        O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
        O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
        O4 - HKLM\..\Run: [BDMCon] "C:\Program Files\Softwin\BitDefender9\bdmcon.exe"
        O4 - HKLM\..\Run: [BDOESRV] "C:\Program Files\Softwin\BitDefender9\bdoesrv.exe"
        O4 - HKLM\..\Run: [BDNewsAgent] "C:\Program Files\Softwin\BitDefender9\bdnagent.exe"
        O4 - HKLM\..\Run: [BDSwitchAgent] "C:\Program Files\Softwin\BitDefender9\bdswitch.exe"
        O4 - HKLM\..\Run: [EPSON Stylus C46 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE /P23 "EPSON Stylus C46 Series" /O6 "USB001" /M "Stylus C46"
        O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
        O4 - HKLM\..\Run: [EEventManager] C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe
        O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
        O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
        O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
        O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
        O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
        O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
        O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
        O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
        O4 - HKCU\..\Run: [Instant Access] rundll32.exe p2esocks_1052.dll,InstantAccess
        O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
        O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
        O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
        O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
        O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
        O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
        O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
        O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
        O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
        O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site....
        O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP.cab
        O16 - DPF: {E49A9FCB-FAA9-4C1F-A1C1-54920DA2CCA4} - http://es6-scripts.dlv4.com/binaries/egauth4/egauth4_1052_FR_XP.cab
        O18 - Protocol: bw+0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw+0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw-0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw-0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw00 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw00s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw10 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw10s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw20 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw20s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw30 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw30s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw40 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw40s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw50 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw50s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw60 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw60s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw70 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw70s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw80 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw80s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw90 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw90s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwa0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwa0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwb0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwb0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwc0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwc0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwd0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwd0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwe0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwe0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwf0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwf0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
        O18 - Protocol: bwg0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwg0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwh0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwh0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwi0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwi0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwj0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwj0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwk0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwk0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwl0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwl0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwm0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwm0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwn0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwn0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwo0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwo0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwp0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwp0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwq0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwq0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwr0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwr0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bws0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bws0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwt0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwt0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwu0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwu0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwv0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwv0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bww0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bww0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwx0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwx0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwy0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwy0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwz0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwz0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
        O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
        O18 - Protocol: offline-8876480 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
        O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
        O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
        O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe" /service (file missing)
        O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\Softwin\BitDefender9\vsserv.exe" /service (file missing)
        O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)

        merci
        0
    2. bon alors premiere chose : il faut que tu installes un firewall sans quoi tu vas avoir de gros ennuis... je te recommande kério et zone alarm.

      pour plus de détails :

      https://sebsauvage.net/safehex.html

      apres avoir refait "do a system scan only", tu te retrouves avec une liste et il y a une case à cocher devant chaque ligne. coche les suivantes :

      de

      O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP.cab

      a

      O18 - Protocol: bwz0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

      incluses, et

      O18 - Protocol: offline-8876480 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

      puis clique sur "fix checked"

      ensuite, réalise un scan en ligne sur bitdefender :

      http://www.bitdefender.fr/bd/site/search.php#

      et post le rapport

      bon courage

      phoibe
      0
      1. salut Phoibe,

        j'ai déjà un firewall: Bitdefender 9 est une solution complête que j'ai achetée. dois je vraiment en installer un autre?

        Je te remercie;
        0
    3. Contributeur sécurité
      Salut,

      Non ! Un seul pare feu suffit !

      Télécharge Blacklight (de F-Secure) a l’une des 2 adresses :
      https://www.f-secure.com/en
      https://www.f-secure.com/en

      et sauvegarde le sur ton Bureau.

      Double-clique blbeta.exe et accepte la licence ; laisse [X]scan through Windows Explorer activé ; clique Scan puis Next

      Tu verras une liste de fichiers détectés apparaître. Tu verras également un rapport, sur ton Bureau, nommé fsbl.xxxxxxx.log (les xxxxxxx sont des chiffres).

      Copie et colle le contenu de ce rapport dans ta prochaine réponse

      a+
      0
      1. Salut regis59,

        voilà ce que tu m'as demandé:

        07/19/06 19:38:30 [Info]: BlackLight Engine 1.0.42 initialized
        07/19/06 19:38:30 [Info]: OS: 5.1 build 2600 (Service Pack 2)
        07/19/06 19:38:30 [Note]: 7019 4
        07/19/06 19:38:30 [Note]: 7005 0
        07/19/06 19:39:00 [Note]: 7006 0
        07/19/06 19:39:00 [Note]: 7011 1460
        07/19/06 19:39:00 [Note]: 7026 0
        07/19/06 19:39:00 [Note]: 7026 0
        07/19/06 19:39:00 [Note]: 7024 3
        07/19/06 19:39:00 [Info]: Hidden process: C:\windows\system32\qknzybghr.exe
        07/19/06 19:39:00 [Note]: FSRAW library version 1.7.1019
        07/19/06 19:40:38 [Info]: Hidden file: c:\WINDOWS\system32\qknzybghr_navps.dat
        07/19/06 19:40:38 [Note]: 10002 1
        07/19/06 19:40:43 [Info]: Hidden file: c:\WINDOWS\system32\qknzybghr_nav.dat
        07/19/06 19:40:43 [Note]: 10002 1
        07/19/06 19:40:44 [Info]: Hidden file: c:\WINDOWS\system32\qknzybghr.dat
        07/19/06 19:40:44 [Note]: 10002 1
        07/19/06 19:40:44 [Info]: Hidden file: C:\windows\system32\qknzybghr.exe
        07/19/06 19:40:45 [Note]: 10002 1
        07/19/06 19:43:15 [Note]: 7007 0
        0
    4. Contributeur sécurité
      Salut

      Télécharge Brute Force Uninstaller (de Merijn) ici:
      http://www.merijn.org/files/bfu.zip
      Créé un nouveau dossier directement à la racine de ton disque dur ou l'endroit qui te convient, nomme ce dossier BFU.
      Décompresse le fichier téléchargé dans ce nouveau dossier (par exemple C:\BFU)

      Ensuite, télécharge EGDACCESS.bfu (de Metallica) :

      Fais un clik droit ici : http://metallica.geekstogo.com/EGDACCESS.bfu et choisis "Enregistrer la cible sous..." afin de télécharger EGDACCESS.bfu (de Metallica). Sauvegarde dans le dossier créé (C:\BFU). **Note : si tu utlises Internet Explorer ; lors de la sauvegarde, assure-toi que le champs "Type :" affiche "Tous les fichiers". Tu dois maintenant avoir deux fichiers dans le dossier C:\BFU : EGDACCESS.bfu et BFU.exe (très important).

      Si tu utilises Internet Explorer, assure-toi lors de la sauvegarde que le champs "Type :" affiche "Tous les fichiers".
      Tu dois maintenant avoir deux fichiers dans le dossier C:\BFU : EGDACCESS.bfu et BFU.exe (très important).

      Ensuite:
      Désactive la restauration systéme.
      Clic droit sur poste de travail > propriétés > onglet restauration système
      puis cocher "désactiver la restauration système".
      clic sur ok pour valider

      Redémarre en mode sans échec
      Redemarre le pc, laisse passer l'écran du bios, puis tapote sur la touche F8 avant qu'apparaisse l'écran de chargement de windows.
      Choisis le mode sans échec dans les options et valide avec entrée.

      -_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-

      Lance "Brute Force Uninstaller" en double-cliquant BFU.exe (Dans le dossier C:\BFU)
      - Clique sur le petit dossier jaune, et clique sur : EGDACCESS.bfu
      - Coches la case Show log after script ends
      - Clique sur Execute pour que le fix fasse son boulot :-)

      Attends que le message Complete script execution apparaîsse et clique sur OK.
      Un rapport va s'afficher dans la fenetre du programme, copie et colle dans le bloc-notes, puis sauvegardes le, tu le posteras plus tard sur le forum.
      Clique Exit pour fermer le programme BFU.

      -_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-

      Ensuite, lance Blacklight en double cliquant sur blbeta.exe et accepte la licence.
      Clique sur Scan pour lancer l'analyse.
      Une fois fait, selectionnes chaques fichiers trouvés et clic sur "RENAME"
      Puis valide.
      Réponds oui aux messages d'avertissements et te demandant si tu autorises le reboot du pc.

      -_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-

      Après le reboot du pc, les fichiers :

      c:\WINDOWS\system32\qknzybghr_navps.dat
      C:\WINDOWS\system32\qknzybghr_nav.dat
      c:\WINDOWS\system32\qknzybghr.dat
      C:\windows\system32\qknzybghr.exe

      devraient être visible et pouvoir être supprimés sans aucuns soucis.
      Blacklight ne les supprimes pas, il les renommes simplement et il va falloir que tu les vires toi même:
      Va dans C:\windows\system32\ et recherches et effaces:

      qknzybghr_navps.dat.ren
      qknzybghr_nav.dat.ren
      qknzybghr.dat.ren
      qknzybghr.exe.ren

      Puis fixe ceci dans HijackThis:
      O4 - HKCU\..\Run: [Instant Access] rundll32.exe p2esocks_1052.dll,InstantAccess

      Une fois fait,redemarre ton PC. Reposte un rapport hijackthis + le rapport de BFU que tu auras sauvegardé et un nouveau rapport de blacklight.

      bon nettoyage et bon courage ;-)
      0
      1. J'essaie ce soir. Je te tiens au courant...

        Merci beaucoup.
        0
        1. Contributeur sécurité
          D'accord

          a bientot
          0
          1. Salut regis59,

            J'ai suivi étape par étape tout ce que tu m'as dis de faire.

            Juste: je suis pas très fine, et je ne retrouve pas la copie du rapport bfu que j'ai sauvegardé. As-tu une astuce pour le retrouver ?

            Merci encore.
            0
        2. Contributeur sécurité
          Salut lili,

          Ce n'est pas tres grave...Ca arrive lol

          Tu peux remettre un Hijack this et un black light?

          Merci
          0
          1. Re Regis 59,

            Voilà ce que tu m'as demandé:

            Logfile of HijackThis v1.99.1
            Scan saved at 12:56:02, on 20/07/2006
            Platform: Windows XP SP2 (WinNT 5.01.2600)
            MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

            Running processes:
            C:\WINDOWS\System32\smss.exe
            C:\WINDOWS\system32\winlogon.exe
            C:\WINDOWS\system32\services.exe
            C:\WINDOWS\system32\lsass.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\System32\svchost.exe
            C:\WINDOWS\system32\spoolsv.exe
            C:\WINDOWS\Explorer.EXE
            C:\WINDOWS\system32\RunDll32.exe
            C:\Program Files\Softwin\BitDefender9\bdoesrv.exe
            C:\Program Files\Softwin\BitDefender9\bdnagent.exe
            C:\Program Files\Softwin\BitDefender9\bdswitch.exe
            C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE
            C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe
            C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe
            C:\WINDOWS\system32\LVCOMSX.EXE
            C:\Program Files\Logitech\Video\LogiTray.exe
            C:\Program Files\DAEMON Tools\daemon.exe
            C:\Program Files\ewido anti-spyware 4.0\ewido.exe
            C:\WINDOWS\system32\ctfmon.exe
            C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
            C:\Program Files\WinZip\WZQKPICK.EXE
            C:\Program Files\Logitech\Video\FxSvr2.exe
            C:\Program Files\ewido anti-spyware 4.0\guard.exe
            C:\WINDOWS\system32\svchost.exe
            C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
            C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
            C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
            C:\Program Files\Softwin\BitDefender9\vsserv.exe
            c:\program files\softwin\bitdefender9\bdmcon.exe
            C:\Program Files\Internet Explorer\IEXPLORE.EXE
            D:\Jeux\HijackThis.exe

            R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
            R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
            R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
            O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
            O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
            O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
            O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
            O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
            O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
            O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
            O4 - HKLM\..\Run: [BDMCon] "C:\Program Files\Softwin\BitDefender9\bdmcon.exe"
            O4 - HKLM\..\Run: [BDOESRV] "C:\Program Files\Softwin\BitDefender9\bdoesrv.exe"
            O4 - HKLM\..\Run: [BDNewsAgent] "c:\program files\softwin\bitdefender9\bdnagent.exe"
            O4 - HKLM\..\Run: [BDSwitchAgent] "c:\program files\softwin\bitdefender9\bdswitch.exe"
            O4 - HKLM\..\Run: [EPSON Stylus C46 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.EXE /P23 "EPSON Stylus C46 Series" /O6 "USB001" /M "Stylus C46"
            O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe"
            O4 - HKLM\..\Run: [EEventManager] C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe
            O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
            O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
            O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
            O4 - HKLM\..\Run: [qknzybghr] c:\windows\system32\qknzybghr.exe qknzybghr
            O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
            O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized
            O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
            O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
            O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
            O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
            O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
            O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
            O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
            O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
            O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
            O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
            O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
            O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
            O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
            O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
            O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
            O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site....
            O16 - DPF: {B79A53C0-1DAC-4636-BACE-FD086A7A79BF} (AdSignerLCContrl Class) - https://static.impots.gouv.fr/tdir/static/adpform/AdSignerADP.cab
            O18 - Protocol: bw+0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw+0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw-0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw-0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw00 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw00s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw10 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw10s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw20 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw20s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw30 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw30s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw40 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw40s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw50 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw50s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw60 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw60s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw70 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw70s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw80 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw80s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw90 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw90s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwa0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwa0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwb0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwb0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwc0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwc0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwd0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwd0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwe0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwe0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwf0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwf0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
            O18 - Protocol: bwg0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwg0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwh0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwh0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwi0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwi0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwj0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwj0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwk0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwk0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwl0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwl0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwm0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwm0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwn0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwn0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwo0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwo0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwp0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwp0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwq0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwq0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwr0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwr0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bws0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bws0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwt0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwt0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwu0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwu0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwv0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwv0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bww0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bww0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwx0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwx0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwy0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwy0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwz0 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwz0s - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
            O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
            O18 - Protocol: offline-8876480 - {63FC7A20-1AF4-461C-B1A2-3C346E7FA409} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
            O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
            O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe
            O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe" /service (file missing)
            O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\Softwin\BitDefender9\vsserv.exe" /service (file missing)
            O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)

            +

            07/20/06 12:39:52 [Info]: BlackLight Engine 1.0.42 initialized
            07/20/06 12:39:52 [Info]: OS: 5.1 build 2600 (Service Pack 2)
            07/20/06 12:39:52 [Note]: 7019 4
            07/20/06 12:39:52 [Note]: 7005 0
            07/20/06 12:39:57 [Note]: 7006 0
            07/20/06 12:39:57 [Note]: 7011 1456
            07/20/06 12:39:57 [Note]: 7026 0
            07/20/06 12:39:57 [Note]: 7026 0
            07/20/06 12:40:02 [Note]: FSRAW library version 1.7.1019
            07/20/06 12:41:47 [Note]: 7007 0

            Et pour l'instant tout se passe bien...
            0
        3. Contributeur sécurité
          Salut

          Refixe ceci:
          O4 - HKLM\..\Run: [qknzybghr] c:\windows\system32\qknzybghr.exe qknzybghr

          Et dis moi si tu as d autres soucis ou si tu as des questions?

          a+
          0
          1. Et bien, c'est fait!

            Vraiment je ne sais pas comment te remercier!!
            Sauf en te disant encore merci pour tout.

            Je n'ai pas d'autres questions pour le moment, bonne journée.

            A bientôt.
            0
        4. Contributeur sécurité
          De rien,

          Bonne continuation

          :-)
          0