Sale doctor !

Question

BonjourJe tourne sous windows XP HomeJ'ai, comme bien d'autres herites de cette saloperie de DoctorSur mon hijackthis je note la ligne suivante : 04-HKLM..\Run:[SystemDoctor 2006 Free] C:\Program Files\SystemDoctor 2006 Free\sd2006.exe-scanDois je eliminer cette ligne ?Et comme je suis ignare en informatique, quelles manipulations faire,  si je dois l'eliminerMerci d'avance aux bonnes ames qui auront pitie d'un ancetre de 75 ans, pour qui l'informatique est un domaine inconnu, et qui m'aideront a resoudre mon probleme

Regis59 · Answer

Salut l'ancetrePour une fois c est un petit jeune qui va faire parler de son experience :-)Vas dans panneau de configuration < ajout suppression de programme et desinstalle systeme doctorEt ensuite fais ceciTélécharge Blacklight (de F-Secure) a l’une des 2 adresses : https://www.f-secure.com/en https://www.f-secure.com/en et sauvegarde le sur ton Bureau. Double-clique blbeta.exe et accepte la licence ; laisse [X]scan through Windows Explorer activé ; clique Scan puis Next Tu verras une liste de fichiers détectés apparaître. Tu verras également un rapport, sur ton Bureau, nommé fsbl.xxxxxxx.log (les xxxxxxx sont des chiffres). Copie et colle le contenu de ce rapport dans ta prochaine réponse a+

l'ancetre · Answer

Salut Regis 59 et merci deja d'avoir bien voulu me repondreJ'ai bien note la manipulation quetu m'as indiquee, mais je ne sais pas si je serai capable de la realiser, vu mon incompetence en la matiere . Je serai sans doute oblige de te demander encore bien des explications Mais tu n'as pas repondu precisement a la question que j'avais posee sur la possibilite d'eliminer la ligne que j'ai reperee dans mon hijackthisCompte tenu de la sympathie que tu veux bien temoigner a un ancetre, j'espere que tu voudras bien me repondre sur ce point precisD'avance merci

Regis59 · Answer

Salut l ancetre,Aucuns problemes, poses moi autant de questions que necessaire.Je ne suis pas contre pour t habituer a te servir de ton pc, t entrainer et te donner des conseils.Pour Hijack this, fixer la ligne ne servira strictement a rien. En fait, si tu fixes la ligne, HijackThis ne le supprimera pas mais l enlevera juste du demarrage. Ainsi, il ne sera plus au demarrage mais sera toujours dans ton pc. Tu comprends?Maintenant, il faudrait le supprimer comme ca il n aura pas besoin de le fixer sur hijack this.De plus, poste moi le rapport de Hijack this pour que j y regardes.A ton service,a+PS: Appelle moi Quentin, regis59, j aime pas trop lol

l'ancetre · Answer

Salut QuentinNe t'etonnes  pas si je tarde un peu a faire les manipulations que tu m'as indiquees, mais ma fille et ma petite fille sont arrivees pour quelques jours de vacances et elles perturbent un peu  mon temps libreJe te ferai passer ça des que j'aurai un moment de tranquillite, ne me laisse pas tomber, car ton aide me sera precieuseMerci de t'interesser a un membre du 3 eme age, car bien des gens nous voient deja morts !!!AmicalementGeorges

Regis59 · Answer

Salut l'ancetre,Il n y a aucuns problemes ! J'attendrais ton retour.Elles s appellent comment ta petite fille?Bha nous sommes tous des êtres humain :-)A+ Georges (ton prénom caracterise bien ta generation (sourire))

l'ancetre · Answer

Salut QuentinTu es vraiment tres sympaJ'ai profite de quelques instants de tranquillite pour essayer de magouiller les manipulations que tu m'avais indiqueesEn final, j'ai bien optenu un rapport, mais je me suis trouve tres couillon quand j'ai voulu te le joindre au present messageFort de mes magnifiques connaissances en informatique, j'ai essaye un copier/coller, ....mais justement ça ne colle pas !!!Alors a toi de m'instruire un peu plus et de me dire comment pretiquer pour te faire parvenir ce rapportMerci d'avanceGeorges

^^Marie^^ · Answer

Slt, j'ai essaye un copier/collerCTRL+C ==> copierCTRL+V ==> colleren espérant répondre à ton collage...;-))

l'ancetre · Answer

Salut MarieSympa de vouloir m'aider, mais je n'ai pas encore reussi a deplacer le document que j'ai sur mon bureau pour le coller dans le message que j'envoie a Quentin !!!Merci tout de meme

Regis59 · Answer

Salut GeorgesOuvre le document qui est sur ton bureau.Selectionne tout, clik droit copierVient dans un message ici et coller.A+

l'ancetre · Answer

08/11/06 23:59:35 [Info]: BlackLight Engine 1.0.42 initialized08/11/06 23:59:35 [Info]: OS: 5.1 build 2600 (Service Pack 2)08/11/06 23:59:36 [Note]: 7019 408/11/06 23:59:36 [Note]: 7005 008/12/06 00:00:10 [Note]: 7006 008/12/06 00:00:10 [Note]: 7011 146808/12/06 00:00:11 [Note]: 7026 008/12/06 00:00:11 [Note]: 7026 008/12/06 00:00:11 [Note]: 7024 308/12/06 00:00:11 [Info]: Hidden process: C:\windows\system32\mjlnqrv.exe08/12/06 00:00:11 [Note]: FSRAW library version 1.7.101908/12/06 00:02:25 [Info]: Hidden file: c:\WINDOWS\Prefetch\MJLNQRV.EXE-23F8B65F.pf08/12/06 00:02:26 [Note]: 10002 108/12/06 00:05:29 [Info]: Hidden file: c:\WINDOWS\system32\mjlnqrv.dat08/12/06 00:05:29 [Note]: 10002 108/12/06 00:05:29 [Info]: Hidden file: C:\windows\system32\mjlnqrv.exe08/12/06 00:05:29 [Note]: 10002 108/12/06 00:05:29 [Info]: Hidden file: c:\WINDOWS\system32\mjlnqrv_nav.dat08/12/06 00:05:29 [Note]: 10002 108/12/06 00:05:29 [Info]: Hidden file: c:\WINDOWS\system32\mjlnqrv_navps.dat08/12/06 00:05:29 [Note]: 10002 108/12/06 00:07:00 [Note]: 4013 7362008/12/06 00:07:00 [Note]: 4020 6418 13107208/12/06 00:07:00 [Note]: 4020 6418 13107208/12/06 00:07:00 [Note]: 4018 6418 13107208/12/06 00:08:57 [Note]: 4013 7380208/12/06 00:08:57 [Note]: 4020 73284 6488064008/12/06 00:08:57 [Note]: 4020 73284 6488064008/12/06 00:08:57 [Note]: 4018 73284 6488064008/12/06 00:16:46 [Note]: 7007 0Salut QuentinTu vois, je ne suis pas encore en Alsheimer, et quand on m'expliquej'arrive a percuter !!Mais il est vrai que je suis comme le gamin en train d'etudier son alphabet !Alors que penses tu de ce joli rapport ?Amicalement Georges

Regis59 · Answer

Salut Georges;Ca fait plaisir de voir que mes explications sont comprises par tout le monde et facilement exécutable ;-)Bha si tu coinces quelques part, dis le moi et je t expliquerais jusqu a ce que tu comprennes !!Le rapport donne ce que j atendais lolTes filles sont partis ?(fille et petite fille)Pour l informatique lol,Télécharge: Pocket Killbox ici http://www.downloads.subratam.org/KillBox.exe :: Démo d utilisation (merci a Balltrap34 pour cette réalisation) ::http://pageperso.aol.fr/balltrap34/killbox.htm Regarde la méthode du bloc note et fais pareil avec cette liste:c:\WINDOWS\Prefetch\MJLNQRV.EXE-23F8B65F.pf c:\WINDOWS\system32\mjlnqrv.dat C:\windows\system32\mjlnqrv.exe c:\WINDOWS\system32\mjlnqrv_nav.dat c:\WINDOWS\system32\mjlnqrv_navps.dat Ensuite, redemarre ton PC et remet un rapport comme tu viens de faire.a+Bon courage et bonne soirée

l'ancetre · Answer

Salut QuentinEh non, mes femmes ne sont pas encore parties, et elles me bouffent tout mon temps !Je ne'ai pas encore pu attaquer la suite des manip que tu m'as indiquees, mais je pense le faire ce soir ou demain Excuse moi si j'abuse de ta patience et de ta bonne volonte, mais ce n'est pas toujours facile de jouer les grand'peres !!AmicalementGeorges

Regis59 · Answer

Salut GeorgesIl n y a aucuns problemes et je comprend ta situation.Prends le temps qu il te faut, on est pas presséRecontactes moi des que tu es dispo, des que tu as fais les manips, ou si tu as besoinJe file faire ma sieste, le boulot fut difficile ce matin lola+

l'ancetre · Answer

Salut Quentin, me revoila !Excuse moi de t'avoir zappe durant quelques jours, mais mes femmes ( ma fille et ma petite fille ) m'avaient pris la tete et me bouffaient la vie.Les vacances finies elles sont reparties, et je recupere mon PC que ma petite fille ( 6 ans et demi ) squattait pour ses jeux video.Puis je encore compter sur ta bonne volonte pour depanner l'ancetre et ses 75 ans ?Amicalement Georges

Regis59 · Answer

Salut Georges,enfin reposé lolte causes pas trop de soucis et te prend pas la tete ;-)As tu essayé la manipulation proposé auparavant?a+

l'ancetre · Answer

Salut QuentinJ'y ai mis le temps, car en informatique je suis comme en pays etranger ,sans carte et sans connaitre la langue, mais je crois avoir fait ce que tu preconisaisV08/27/06 21:24:52 [Info]: BlackLight Engine 1.0.42 initialized08/27/06 21:24:52 [Info]: OS: 5.1 build 2600 (Service Pack 2)08/27/06 21:24:52 [Note]: 7019 408/27/06 21:24:52 [Note]: 7005 008/27/06 21:25:09 [Note]: 7006 008/27/06 21:25:09 [Note]: 7011 151608/27/06 21:25:09 [Note]: 7026 008/27/06 21:25:10 [Note]: 7026 008/27/06 21:25:14 [Note]: FSRAW library version 1.7.101908/27/06 21:32:13 [Note]: 2000 100608/27/06 21:32:13 [Note]: 2000 100608/27/06 21:32:13 [Note]: 2000 100608/27/06 21:32:13 [Note]: 2000 100608/27/06 21:33:54 [Note]: 7007 0oila le rapport:Que me faut il faire maintenant ?Amicalement Georges

Regis59 · Answer

Salut Geroges,c est tres bien et je pense que tu n as plus de pubs.Maintenant;télécharge HijackThis ici: http://telechargement.zebulon.fr/138-hijackthis-1991.html Dézippe le dans un dossier prévu à cet effet. Par exemple C:\hijackthis < Enregistre le bien dans c : ! Démo : (Merci a Balltrap34 pour cette réalisation)   http://pageperso.aol.fr/balltrap34/Hijenr.gif Lance le puis: clique sur "do a system scan and save logfile" (cf démo) faire un copier coller du log entier sur le forumDémo : (Merci a Balltrap34 pour cette réalisation)   http://pageperso.aol.fr/balltrap34/demohijack.htm	Bon courageA+

l'ancetre · Answer

Salut Quentin Et moi qui croyais en avoir fini !!! Douce illusion !Encore merci a toi pour cette premiere etape. A premiere vue, les pubs semblent en effet s'etre fait la malle. Et je retiens la methodeMais tu n'as pas de pitie pour ma vieille cervelle en me donnant ce nouveau travail a realiser !Je vais malgre tout m'atteler a la tache, a mon rythme, et en essayant de comprendre ce que je fais.Ceci dit, tu es un mec vraiment sympa , et j'apprecie ton aideAmicalement Georges

Regis59 · Answer

Salut Georges,Ravi de te revoir.L'étape que je te donne va me permettre de faire un petit bilan sur une infection qui pourrait etre presente.Ca me permettra aussi de voir l etat de tes protections.Tu voulais déjà me quitter?lolJe t'ai donné des explications simples et en plus j y ai ajouté des petites vidéos qui te permettront de faire cela aisement.J'apprécie beaucoup te venir en aide et des efforts que tu fais.A+

l'ancetre · Answer

Salut QuentinOuaah ! j'ai l'impresion que j'ai finalement reussi a te l'adresser ce foutu logfile !Mais j'ai pas mal transpire car le cheminement n'etait pas exactement conforme a la demo de Balltrap. Merci toutefois a ce dernier qui donne la piste a retrouver pour aboutirJ'espere , mon cher Quentin, que tu vas bien t'amuser avec le vrai foutoir que tu vas trouverIl y a pas mal de choses inutiles que j'aimerais zapper, mais je ne suis pas competent pour çaAlors bon courage a toi et encore merciAmicalement Georges ( qui a toujours 75ans mais a l'impression d'avoir encore vieilli de quelques annees de plus !! )Logfile of HijackThis v1.99.1Scan saved at 16:28:45, on 30/08/2006Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\System32\LVCOMSX.EXEC:\Program Files\Logitech\Video\LogiTray.exeC:\Program Files\VIAudioi\SBADeck\ADeck.exeC:\Program Files\QuickTime\qttask.exeC:\Program Files\Microsoft IntelliType Pro	ype32.exeC:\Program Files\Fichiers communs\Real\Update_OBealsched.exeC:\Program Files\Java\jre1.5.0_06\bin\jusched.exeC:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exeC:\Program Files\HP\HP Software Update\HPWuSchd2.exeC:\PROGRA~1\Grisoft\AVGFRE~2\avgcc.exeC:\Program Files\HP\hpcoretech\hpcmpmgr.exeC:\Program Files\Alwil Software\Avast4\aswUpdSv.exeC:\Program Files\Alwil Software\Avast4\ashServ.exeC:\Program Files\HP\Digital Imaging\bin\hpqtra08.exeC:\PROGRA~1\Grisoft\AVGFRE~2\avgamsvr.exeC:\PROGRA~1\Grisoft\AVGFRE~2\avgupsvc.exeC:\PROGRA~1\Grisoft\AVGFRE~2\avgemc.exeC:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exeC:\Program Files\Logitech\Video\FxSvr2.exeC:\WINDOWS\system32\slserv.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Yahoo!\Messenger\ymsgr_tray.exeC:\Program Files\HP\hpcoretech\comp\hptskmgr.exeC:\WINDOWS\system32\fxssvc.exeC:\Program Files\HP\Digital Imaging\bin\hpqgalry.exeC:\Program Files\Alwil Software\Avast4\ashMaiSv.exeC:\Program Files\Alwil Software\Avast4\ashWebSv.exeC:\Program Files\Messenger\msmsgs.exeC:\Program Files\MSN Messenger\msnmsgr.exeC:\Program Files\Internet Explorer\iexplore.exeC:\WINDOWS\System32\HPZipm12.exeC:\Program Files\Fichiers communs\Real\Update_OBnathchk.exeC:\PROGRA~1\IZArc\IZArc.exeC:\C-Hijackthis\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.google.fr/keyword/%sR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.fr/toolbar/ie8/sidebar.htmlR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.free.fr/freebox/index.htmlR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet ExploreurR1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhostR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dllO2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dllO2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dllO2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dllO2 - BHO: (no name) - {ACB3E0B7-7D0C-40B7-99B3-3EEACDF86BFB} - blank (file missing)O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dllO3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dllO3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dllO4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\NeroCheck.exeO4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXEO4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exeO4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exeO4 - HKLM\..\Run: [AudioDeck] C:\Program Files\VIAudioi\SBADeck\ADeck.exe 1O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeO4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro	ype32.exe"O4 - HKLM\..\Run: [TkBellExe] C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe -osbootO4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exeO4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exeO4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exeO4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~2\avgcc.exe /STARTUPO4 - HKLM\..\Run: [mjlnqrv] c:\windows\system32\mjlnqrv.exe mjlnqrvO4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quietO4 - HKCU\..\Run: [LDM] \Program\O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exeO4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exeO4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exeO8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.htmlO8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.htmlO8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.htmlO8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.htmlO8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.htmlO8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.htmlO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dllO9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dllO9 - Extra button: Allocam Multi Vision - {2D6B57BF-71FA-41A3-BDC5-3B5A25813D2E} - C:\Program Files\Allocam Multi Visio\allocam.exe (file missing)O9 - Extra 'Tools' menuitem: Allocam Multi Vision - {2D6B57BF-71FA-41A3-BDC5-3B5A25813D2E} - C:\Program Files\Allocam Multi Visio\allocam.exe (file missing)O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO16 - DPF: PackageHtmlCab - http://acces.blonde.com/package/PackageHtmlCab.CABO16 - DPF: ppctlcab - http://ppupdates.ca.com/downloads/scanner/ppctlcab.cabO16 - DPF: {09C21411-B9A2-4DE6-8416-4E3B58577BE0} (France Telecom MDM ActiveX Control) - http://minitelweb.minitel.com/imin_data/ocx/MDM.cabO16 - DPF: {09F1ADAC-76D8-4D0F-99A5-5C907DADB988} - http://fr.systemdoctor.com/download/2006/cab/SystemDoctor2006FreeInstall_fr.cabO16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cabO16 - DPF: {2472DCCC-68CE-49DA-AA81-E7E6D83C1DFA} (PackageHTML) - http://acces.blonde.com/package/op/PackageHtmlCab.CABO16 - DPF: {2AEEAC34-FD74-4142-B891-4B05C0C03C87} - https://www.afternic.com/domains/downloadv3.comO16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yinst0401.cabO16 - DPF: {5CA8D349-C6E7-11D4-8166-009027DF3BB2} (France Telecom MDDK ActiveX Control) - http://accueil.ava.serveur-ava.com/stkid_data/ocx/mDKid.cabO16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.htmlO16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cabO16 - DPF: {A3009861-330C-4E10-822B-39D16EC8829D} (CRAVOnline Object) - http://www.ravantivirus.com/scan/ravonline.cabO16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cabO16 - DPF: {D1B80EBF-1A26-4FEC-B0B9-DCB934C6507E} - http://dialup.carpediem.fr/CABS/cd/1,0,3,8/fr/AccesMembre.cabO16 - DPF: {D8B94E9A-A34B-4253-BF48-C7CB7F2CFDB0} - https://www.afternic.com/domains/downloadv3.comO16 - DPF: {E76AAE10-AF57-4AEA-B33D-C3EDFA414DAE} (MGTVodPlayer Control) - http://www.ipdv.tv/downloads/S2MPlayer.3.2.0.9.cabO16 - DPF: {EEECA057-AD0F-44A7-8BE5-8634CEDBDBD1} - https://www.afternic.com/domains/downloadv3.comO16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cabO16 - DPF: {F72BC3F0-6C20-4793-9DDA-258589D8A907} - https://www.afternic.com/domains/downloadv3.comO18 - Protocol: bw+0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw+0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw-0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw-0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw00 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw00s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw10 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw10s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw20 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw20s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw30 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw30s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw40 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw40s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw50 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw50s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw60 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw60s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw70 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw70s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw80 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw80s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw90 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw90s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwa0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwa0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwb0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwb0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwc0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwc0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwd0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwd0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwe0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwe0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwf0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwf0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dllO18 - Protocol: bwg0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwg0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwh0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwh0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwi0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwi0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwj0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwj0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwk0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwk0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwl0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwl0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwm0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwm0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwn0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwn0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwo0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwo0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwp0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwp0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwq0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwq0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwr0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwr0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bws0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bws0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwt0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwt0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwu0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwu0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwv0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwv0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bww0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bww0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwx0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwx0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwy0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwy0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwz0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwz0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)O18 - Protocol: offline-8876480 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dllO23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exeO23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exeO23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exeO23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~2\avgamsvr.exeO23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~2\avgupsvc.exeO23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~2\avgemc.exeO23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exeO23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exeO23 - Service: SmartLinkService (SLService) -   - C:\WINDOWS\SYSTEM32\slserv.exe

l'ancetre · Answer

Resalut Quentin

Un detail que j'ai oublie
En ce qui concerne la protection de mon PC, apres avoir fait un sessai peu concluant avec la version payante de NORTON je me suis cantonne sur un groupe de free qui me donne satisafaction et que j'aimerais bien garder, a moins que tu n'aies une merveille a me conseiller.
J'utilise AVAST, AVG FEE, AD AWARE, SPYBOT, et A2 SQUARE
tous free et qui ne se contrarient pas, comme j'ai pu le constater au fil des mois . J'ai ainsi pu contrer la plupart des attaques virales, et eliminer une pleiade de malwares au fil des mois ,mais je n'avais pas pu eliminer ce foutu Doctor
A plus
Georges

^^Marie^^ · Answer

Bonjour,

Sans vouloir faire intrusion......;
Pour avancer je reste parfois sur les anciennes méthodes......

Juste cette ligne qui me contrarie

O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll

Méthode à suivre dans l'ordre...
----------------------------------------------------------------------------
Télécharger ces logiciels (sauf si tu les as)
A utiliser plus tard

A - ad-aware version 1.06
(ici) http://www.florensac-chasse-trap.com/ section virus/logiciel de securite
voir demo
http://pageperso.aol.fr/balltrap34/adwseflash.zip

B - spybot version 1.4
(ici) http://www.florensac-chasse-trap.com/ section virus/logiciel de securite
voir demo d utilisation
http://pageperso.aol.fr/Balltrap34/demo%20spybot.htm

C - Ccleaner : ( nettoyeur de registre, cookies+temps+tempos+prefetch+historique+etc..)
Télécharge ici :
https://www.ccleaner.com/ccleaner/download
Tutorial ici:
https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php

D - Ewido
https://www.malekal.com/tutorial-et-guide-ewido-v4/
----------------------------------------------------------------------------
¤Affiche tous les fichiers et dossiers :
Clique sur démarrer/panneau de configuration/outil/option des dossiers/affichage

Coche « afficher les fichiers et dossiers cachés »

Décoche la case "Masquer les fichiers protégés du système d'exploitation (recommandé)"

Décoche « masquer les extensions dont le type est connu »
Puis fais «Ok» pour valider les changements.

Et appliquer !
=================================
Relance HijackThis, choisis " do a scan only" coche la case devant les lignes ci-dessous et clique en bas sur "fix checked"

O2 - BHO: (no name) - {ACB3E0B7-7D0C-40B7-99B3-3EEACDF86BFB} - blank (file missing
O16 - DPF: PackageHtmlCab - http://acces.blonde.com/package/PackageHtmlCab.CAB
O16 - DPF: ppctlcab - http://ppupdates.ca.com/downloads/scanner/ppctlcab.cab
O16 - DPF: {09C21411-B9A2-4DE6-8416-4E3B58577BE0} (France Telecom MDM ActiveX Control) - http://minitelweb.minitel.com/imin_data/ocx/MDM.cab
O16 - DPF: {09F1ADAC-76D8-4D0F-99A5-5C907DADB988} - http://fr.systemdoctor.com/download/2006/cab/SystemDoctor2006FreeInstall_fr.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {2472DCCC-68CE-49DA-AA81-E7E6D83C1DFA} (PackageHTML) - http://acces.blonde.com/package/op/PackageHtmlCab.CAB
O16 - DPF: {2AEEAC34-FD74-4142-B891-4B05C0C03C87} - https://www.afternic.com/domains/downloadv3.com
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yinst0401.cab
O16 - DPF: {5CA8D349-C6E7-11D4-8166-009027DF3BB2} (France Telecom MDDK ActiveX Control) - http://accueil.ava.serveur-ava.com/stkid_data/ocx/mDKid.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab
O16 - DPF: {A3009861-330C-4E10-822B-39D16EC8829D} (CRAVOnline Object) - http://www.ravantivirus.com/scan/ravonline.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {D1B80EBF-1A26-4FEC-B0B9-DCB934C6507E} - http://dialup.carpediem.fr/CABS/cd/1,0,3,8/fr/AccesMembre.cab
O16 - DPF: {D8B94E9A-A34B-4253-BF48-C7CB7F2CFDB0} - https://www.afternic.com/domains/downloadv3.com
O16 - DPF: {E76AAE10-AF57-4AEA-B33D-C3EDFA414DAE} (MGTVodPlayer Control) - http://www.ipdv.tv/downloads/S2MPlayer.3.2.0.9.cab
O16 - DPF: {EEECA057-AD0F-44A7-8BE5-8634CEDBDBD1} - https://www.afternic.com/domains/downloadv3.com
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab
O16 - DPF: {F72BC3F0-6C20-4793-9DDA-258589D8A907} - https://www.afternic.com/domains/downloadv3.com
O18 - Protocol: bw+0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

============ ============================
¤Démarre en mode sans échec :
Pour cela, tu tapotes la touche F8 dès le début de l’allumage du pc sans t’arrêter
Une fenêtre va s’ouvrir tu te déplaces avec les flèches du clavier sur démarrer en mode sans échec puis tape entrée.
Une fois sur le bureau s’il n’y a pas toutes les couleurs et autres c’est normal !
(Si F8 ne marche pas utilise la touche F5).
----------------------------------------------------------------------------
¤Vide tes fichiers temps et temporary internet file:

Maintenant tu lances
A/ Ad-Aware supprime quarantaine
B/ Spybot Supprime quarantaine
C/ Ccleaner Ewido Copier/coller le rapport
D/
----------------------------------------------------------------------------
¤ Vide ta Corbeille.
----------------------------------------------------------------------------
¤ Redémarre en mode normal, relance Hijackthis et copie/colle un nouveau rapport sur le forum.

Tiens nous au courant

l'ancetre · Answer

Merci Marie, c'est gentil de vouloir m'aider, mais ou est passe mon sympathique Quentin ?
Quant a m'expliquer le principe du demarrage sans echec, je sais bien que je suis nul, mais tout de meme pas au point d'ignorer encore cette manoeuvre ( je souris )
Merci encore
Georges

^^Marie^^ · Answer

Slt,

Quant a m'expliquer le principe du demarrage sans echec, je sais bien que je suis nul, mais tout de meme pas au point d'ignorer encore cette manoeuvre ( je souris )

C'est une marche à suivre que je mets à tout le monde. Donc.....je ne regarde pas la nullité ou non des internautes... ;-)))

Je ne faisais que passer pour faire avancer le smilblik....et faire supprimer les lignes inutiles.....
C tout..........

Je suis autant néophite que les autres ;;-)))

Bye

^^Marie^^ · Answer

Ouaah ! Un peu caracterielle la Marie ! du tout, c'est pour cela que j'avais mis les smileys ===> ;-)))https://www.cjoint.com/?iFlMOldqVEhttps://www.cjoint.com/?iFlNiZ5iLY

Regis59 · Answer

Salut Georges,je passais justement expres pour voir si tu etais revenu !Apparemment Marie a pris les devants ;-)Par contre, une petite chose, evite les sites X ;-)A+

l'ancetre · Answer

Salut Quentin
Marie ou pas Marie, je prefere avoir affaire a toi
Tu sais les vieux n'aiment pas beaucoup le changement et apprecient de garder leur mecano, leur medecin, ....ou leur specialiste de l'informatique, et, en plus, je suis mysogine !!!
Alors je suis a l'ecoute de tes directives sur ce que je dois faire

Quant a eviter les sites X, il ne faut pas y compter, ils ne sont pas reserves aux juniors !!!

Amicalement
Georges

Regis59 · Answer

Salut Georges

Oui je comprends que tu n aime pas le changement lol
Pour les sites X, c'est la ou tu vas ramasser toutes les infections, tu es prevenu, maintenant, si tu veux venir te desinfecter toutes les semaines, libre a toi ! Quoi qu il en soit, les sites X c est la porte ouverte a toutes les infections, et comme beaucoup y vont, c est la ou ils les mettent.

D'abors, je vois 2 antivirus: AVG et Avast.
Rend toi dans demarer < panneau de configuration <ajout/suppression de programme < recherche AVG et desinstalle le.

Une fois fait, remet un rapport HijackThis.

a+

l'ancetre · Answer

Salut Quentin, content de te revoir
J'ai supprime AVG, comme tu le preconisais . Dommage je l'aimais bien et il n'interferait pas avec AVAST, mais le specialiste ce n'est pas moi
En ce qui concerne le rapport Hijackthis, tu ne trouveras pas beaucoup de changement avec le precedent, car en vieille bourrique que je suis, je n'ai pas fait les manipulations indiquees par Marie. J'attendais ton avis et tes directives ( ne t'ai je pas dit que je suis misogyne ?! )

jLogfile of HijackThis v1.99.1
Scan saved at 10:53:49, on 01/09/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\VIAudioi\SBADeck\ADeck.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Microsoft IntelliType Pro\type32.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\WINDOWS\system32\fxssvc.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Fichiers communs\Real\Update_OB\rnathchk.exe
C:\Documents and Settings\Propriétaire\Bureau\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.google.fr/keyword/%s
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.fr/toolbar/ie8/sidebar.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.free.fr/freebox/index.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Exploreur
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: (no name) - {ACB3E0B7-7D0C-40B7-99B3-3EEACDF86BFB} - blank (file missing)
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\NeroCheck.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [AudioDeck] C:\Program Files\VIAudioi\SBADeck\ADeck.exe 1
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
O4 - HKLM\..\Run: [TkBellExe] C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [mjlnqrv] c:\windows\system32\mjlnqrv.exe mjlnqrv
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [LDM] \Program\
O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Allocam Multi Vision - {2D6B57BF-71FA-41A3-BDC5-3B5A25813D2E} - C:\Program Files\Allocam Multi Visio\allocam.exe (file missing)
O9 - Extra 'Tools' menuitem: Allocam Multi Vision - {2D6B57BF-71FA-41A3-BDC5-3B5A25813D2E} - C:\Program Files\Allocam Multi Visio\allocam.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: PackageHtmlCab - http://acces.blonde.com/package/PackageHtmlCab.CAB
O16 - DPF: ppctlcab - http://ppupdates.ca.com/downloads/scanner/ppctlcab.cab
O16 - DPF: {09C21411-B9A2-4DE6-8416-4E3B58577BE0} (France Telecom MDM ActiveX Control) - http://minitelweb.minitel.com/imin_data/ocx/MDM.cab
O16 - DPF: {09F1ADAC-76D8-4D0F-99A5-5C907DADB988} - http://fr.systemdoctor.com/download/2006/cab/SystemDoctor2006FreeInstall_fr.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {2472DCCC-68CE-49DA-AA81-E7E6D83C1DFA} (PackageHTML) - http://acces.blonde.com/package/op/PackageHtmlCab.CAB
O16 - DPF: {2AEEAC34-FD74-4142-B891-4B05C0C03C87} - https://www.afternic.com/domains/downloadv3.com
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yinst0401.cab
O16 - DPF: {5CA8D349-C6E7-11D4-8166-009027DF3BB2} (France Telecom MDDK ActiveX Control) - http://accueil.ava.serveur-ava.com/stkid_data/ocx/mDKid.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab
O16 - DPF: {A3009861-330C-4E10-822B-39D16EC8829D} (CRAVOnline Object) - http://www.ravantivirus.com/scan/ravonline.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {D1B80EBF-1A26-4FEC-B0B9-DCB934C6507E} - http://dialup.carpediem.fr/CABS/cd/1,0,3,8/fr/AccesMembre.cab
O16 - DPF: {D8B94E9A-A34B-4253-BF48-C7CB7F2CFDB0} - https://www.afternic.com/domains/downloadv3.com
O16 - DPF: {E76AAE10-AF57-4AEA-B33D-C3EDFA414DAE} (MGTVodPlayer Control) - http://www.ipdv.tv/downloads/S2MPlayer.3.2.0.9.cab
O16 - DPF: {EEECA057-AD0F-44A7-8BE5-8634CEDBDBD1} - https://www.afternic.com/domains/downloadv3.com
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab
O16 - DPF: {F72BC3F0-6C20-4793-9DDA-258589D8A907} - https://www.afternic.com/domains/downloadv3.com
O18 - Protocol: bw+0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: offline-8876480 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe

Amicalement
Georges

marie · Answer

slt,

car en vieille bourrique que je suis, je n'ai pas fait les manipulations indiquees par Marie. J'attendais ton avis et tes directives ( ne t'ai je pas dit que je suis misogyne ?! )

Tant pis...........

AAAAAAA+++++

Regis59 · Answer

Salut Georges,

;-)

¤Relance HijackThis, coche les cases devant ces lignes et ensuite clique sur fix checked :

O2 - BHO: (no name) - {ACB3E0B7-7D0C-40B7-99B3-3EEACDF86BFB} - blank (file missing)

O4 - HKLM\..\Run: [mjlnqrv] c:\windows\system32\mjlnqrv.exe mjlnqrv

O16 - DPF: PackageHtmlCab - http://acces.blonde.com/package/PackageHtmlCab.CAB

O16 - DPF: {09C21411-B9A2-4DE6-8416-4E3B58577BE0} (France Telecom MDM ActiveX Control) - http://minitelweb.minitel.com/imin_data/ocx/MDM.cab

O16 - DPF: {09F1ADAC-76D8-4D0F-99A5-5C907DADB988} - http://fr.systemdoctor.com/download/2006/cab/SystemDoctor2006FreeInstall_fr.cab

O16 - DPF: {2472DCCC-68CE-49DA-AA81-E7E6D83C1DFA} (PackageHTML) - http://acces.blonde.com/package/op/PackageHtmlCab.CAB

O16 - DPF: {2AEEAC34-FD74-4142-B891-4B05C0C03C87} - https://www.afternic.com/domains/downloadv3.com

O16 - DPF: {5CA8D349-C6E7-11D4-8166-009027DF3BB2} (France Telecom MDDK ActiveX Control) - http://accueil.ava.serveur-ava.com/stkid_data/ocx/mDKid.cab

O16 - DPF: {D1B80EBF-1A26-4FEC-B0B9-DCB934C6507E} - http://dialup.carpediem.fr/CABS/cd/1,0,3,8/fr/AccesMembre.cab

O16 - DPF: {D8B94E9A-A34B-4253-BF48-C7CB7F2CFDB0} - https://www.afternic.com/domains/downloadv3.com

O16 - DPF: {E76AAE10-AF57-4AEA-B33D-C3EDFA414DAE} (MGTVodPlayer Control) - http://www.ipdv.tv/downloads/S2MPlayer.3.2.0.9.cab

O16 - DPF: {EEECA057-AD0F-44A7-8BE5-8634CEDBDBD1} - https://www.afternic.com/domains/downloadv3.com

O16 - DPF: {F72BC3F0-6C20-4793-9DDA-258589D8A907} - https://www.afternic.com/domains/downloadv3.com

Ferme HijackThis.

Tes films que tu visionnes, tu les achetes?

A+

l'ancetre · Answer

Salut Quentin
Voila j'ai fait la manipulation indiquee et fixe les rubriques que tu m'avais indiquees
Operations suivantes ?

En ce qui concerne les films que je visionne, ceux que j'achete c'est avec Allopass,et ça ne me ruine pas. Quand mon amie ( 42 ans), n'est pas la, je m'offre parfois cette petite distraction visuelle, car j'ai toujours ete amateur de chair fraiche !! Eh oui, a mon age venerable on n'est encore pas retraite du sexe ! Je te choque ?

Amicalement
Georges

Regis59 · Answer

Salut Georges,Non tu ne me choques pas.Ta femme a 42 ans, soit 33 ans de moins que toi?Remet un nouvel HijackThis pour controle.A+

l'ancetre · Answer

Salut Quentin
Sitot dit, sitot fait. Voici un nouvel Hijack This

Logfile of HijackThis v1.99.1
Scan saved at 20:07:27, on 03/09/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\VIAudioi\SBADeck\ADeck.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Microsoft IntelliType Pro\type32.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\WINDOWS\system32\fxssvc.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Fichiers communs\Real\Update_OB\rnathchk.exe
C:\Documents and Settings\Propriétaire\Bureau\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.google.fr/keyword/%s
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.fr/toolbar/ie8/sidebar.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.free.fr/freebox/index.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Exploreur
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\NeroCheck.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [AudioDeck] C:\Program Files\VIAudioi\SBADeck\ADeck.exe 1
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
O4 - HKLM\..\Run: [TkBellExe] C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quiet
O4 - HKCU\..\Run: [LDM] \Program\
O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Allocam Multi Vision - {2D6B57BF-71FA-41A3-BDC5-3B5A25813D2E} - C:\Program Files\Allocam Multi Visio\allocam.exe (file missing)
O9 - Extra 'Tools' menuitem: Allocam Multi Vision - {2D6B57BF-71FA-41A3-BDC5-3B5A25813D2E} - C:\Program Files\Allocam Multi Visio\allocam.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: ppctlcab - http://ppupdates.ca.com/downloads/scanner/ppctlcab.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/yinst0401.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {7B297BFD-85E4-4092-B2AF-16A91B2EA103} (WScanCtl Class) - http://www3.ca.com/securityadvisor/virusinfo/webscan.cab
O16 - DPF: {A3009861-330C-4E10-822B-39D16EC8829D} (CRAVOnline Object) - http://www.ravantivirus.com/scan/ravonline.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab
O18 - Protocol: bw+0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: offline-8876480 - {B1C71F0A-1C17-4D3F-9252-BAEE3DF1075D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe

Pour repondre a ta question, ce n'est pas ma femme mais une amie, draguee sur la plage quand j'avais encore le physique pour le faire ( j'avais 53ans et elle 20ans ), une histoire qui dure tres librement depuis 22 ans

Regis59 · Answer

SalutAh ok, bha dis donc, super aventure ;-)Ou en sont tes soucis?A+

l'ancetre · Answer

Salut Quentin
Ce serait plutot a toi de me dire si j'ai encore quelques saloperies a eliminet de mon PC
A priori, je fonctionne sans problemes pour l'instant, mais mon peu d'experience m'a appris qu'il peut toujours y avoir un malware cache quelquepart
Une question toutefois : en effectuant mes Hijack This, il s'est ouvert en parallele un fichier : Backups Quelle en est l'utilite ?
A te lire
Amicalement
Georges

Regis59 · Answer

Salut Geroges,

le fichier back up. En fait, hijack this cree des sauvegardes quand tu supprime une ligne, comme ca en cas de soucis, tu pas la restaurer ! Tu comprends?

Lance ce scan en ligne:
http://www.bitdefender.fr/scan8/ie.html
Copie/colle le rapport

a+

Regis59 · Answer

Salut Georges;Pour les back up , bha tu peux les supprimerPour moi c'est ok et toi?J'ai 19 ans et je suis BTS Managment des Unites Commerciales.A+

l'ancetre · Answer

Salut Quentin

Ouaah ! 19 ans et toute une vie devant soi ! C'est le pied
Tu es un mec sympa, et je te remercie encore d'avoir bien voulu apporter ton experience a un ancien qui decouvre peu a peu les mysteres de son PC
Je te souhaite bonne chance dans tes etudes, et peut etre a un de ces jours, car je ne doute pas d'avoir d'autres problemes dans l'avenir !!
Amicalement
georges

Regis59 · Answer

Salut Georges,

eh bien y'a pas de quoi, comme quoi y'a des jeunes qui aide tout le monde ;-)
Bonne continuation a toi et surtout, si tu as besoin, pour quoi que ce soit, pour n importe quoi, tu peux me demander

a+
Un plaisir de te renseigner.

Sale doctor ! - Page 2

Discussions similaires

Newsletters