Magiccontrol agent

Résolu
kelly150 -  
bonjour je n'arrive pas a supprimer magiccontrol agent avec spybot
quelqu'un peu maider
merci d'avance

15 réponses

Résumé de la discussion

Plusieurs participants rencontrent des difficultés à supprimer MagicControl Agent avec Spybot sur Windows et sollicitent une aide pratique pour identifier et désinstaller ce programme indésirable persistant. Des contributions suggèrent d'évaluer si Spybot détecte encore l'élément, de suivre le tutoriel et d'envisager des vérifications complémentaires comme HijackThis pour examiner les clés de démarrage et les composants malveillants. Plusieurs réponses évoquent des outils additionnels, comme HijackThis pour générer des rapports, et des options telles que des commandes de correction ou des manipulations via ComboFix. Enfin, l'épisode illustre l'importance d'un suivi attentif des éléments de démarrage et des barres d'outils, car des résidus peuvent persister même après la suppression apparente.

Bobot (l’IA à votre service)
  1. salwa
    bonjour suis la methode de christopher

    infecte par magiccontrol agent

    @+++++
    0
    1. kelly150 Auteur
      bonjour et tou d'abord merci du coup de main c cool
      g fait la methode de christopher et le resultat et le meme il et toujour la
      0
  2. salwa
    bonjour suis les procedure de ce lien http://perso.numericable.fr/~altshift/Info/proc%E9dureIA.html

    si tu as des questions n'hesite pas

    a+++
    0
    1. kelly150
      ok merci
      mais je suis pas tres douer et j'ai pas tou compris ta pas une autre solution par azzard
      0
      1. salwa
        bonjour malheureusement on peu pas faire dans la simplicité avec ce genre de merde :/

        c pas grave on va proceder etap par etape :)

        Télécharge F-Secure Blacklight : https://www.f-secure.com/en
        - Clic en bas sur "I accept"
        - Dans la nouvelle fenêtre, clic sur le bouton en haut du tableau Download.
        - Lance-le en double-cliquant sur le fichier blbeta.exe
        - Accepte la licence, et clique enfin sur "Scan"
        - Poste le rapport qui a été créé dans le fichier fsbl-bxxxx.log en l'ouvrant avec le bloc-note.

        @++++
        0
        1. kelly150
          salut
          j'ai fait se que tu ma dit et voila le resultat

          11/25/06 16:29:43 [Info]: BlackLight Engine 1.0.47 initialized
          11/25/06 16:29:43 [Info]: OS: 5.1 build 2600 (Service Pack 2)
          11/25/06 16:29:43 [Note]: 7019 4
          11/25/06 16:29:43 [Note]: 7005 0
          11/25/06 16:29:46 [Note]: 7006 0
          11/25/06 16:29:46 [Note]: 7011 1936
          11/25/06 16:29:46 [Note]: 7026 0
          11/25/06 16:29:46 [Note]: 7026 0
          11/25/06 16:29:53 [Note]: FSRAW library version 1.7.1020
          11/25/06 16:38:01 [Note]: 7007 0
          0
      3. salwa
        re telecharge hijackthis et colle le resultat ici :

        http://www.infos-du-net.com/telecharger/HijackThis.html
        demo :
        http://pageperso.aol.fr/balltrap34/demohijack.htm

        @++++
        0
        1. KELLY150
          VOILA SE QUE SA DONNE

          Logfile of HijackThis v1.99.1
          Scan saved at 20:56:27, on 26/11/2006
          Platform: Windows XP SP2 (WinNT 5.01.2600)
          MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

          Running processes:
          C:\WINDOWS\System32\smss.exe
          C:\WINDOWS\system32\winlogon.exe
          C:\WINDOWS\system32\services.exe
          C:\WINDOWS\system32\lsass.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\Explorer.EXE
          C:\WINDOWS\system32\spoolsv.exe
          C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
          C:\Program Files\Alwil Software\Avast4\ashServ.exe
          C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\mdm.exe
          C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
          C:\WINDOWS\system32\svchost.exe
          C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
          C:\WINDOWS\system32\wscntfy.exe
          C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
          C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
          C:\WINDOWS\system32\WgaTray.exe
          C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE
          C:\WINDOWS\system32\LVCOMSX.EXE
          C:\Program Files\Logitech\Video\LogiTray.exe
          C:\Program Files\QuickTime\qttask.exe
          C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe
          C:\Program Files\Microsoft IntelliType Pro\type32.exe
          C:\Program Files\Microsoft IntelliPoint\point32.exe
          C:\WINDOWS\system32\ctfmon.exe
          C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
          C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\GoogleToolbarNotifier.exe
          C:\Program Files\Logitech\Video\FxSvr2.exe
          C:\Program Files\Internet Explorer\iexplore.exe
          C:\Program Files\Internet Explorer\iexplore.exe
          C:\Program Files\WinRAR\WinRAR.exe
          C:\DOCUME~1\Kelly\LOCALS~1\Temp\Rar$EX00.453\HijackThis.exe

          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://portail.free.fr/
          R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.fr/keyword/%s
          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Alice ADSL
          R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Favoris
          O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
          O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
          O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
          O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
          O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
          O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
          O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
          O4 - HKLM\..\Run: [EPSON Stylus DX3800 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE /P26 "EPSON Stylus DX3800 Series" /O6 "USB001" /M "Stylus DX3800"
          O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
          O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
          O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
          O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
          O4 - HKLM\..\Run: [AliceSAV] C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe
          O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
          O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
          O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
          O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
          O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
          O4 - HKCU\..\Run: [MailSkinner] c:\program files\mailskinner\mailskinner.exe
          O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\GoogleToolbarNotifier.exe
          O4 - HKCU\..\Run: [messengerskinner] C:\Program Files\MessengerSkinner\MessengerSkinner.exe
          O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
          O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
          O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
          O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
          O9 - Extra button: Alice ADSL - {88E56811-A863-4AA4-BC54-308E29469F59} - https://portail.free.fr/ (file missing) (HKCU)
          O14 - IERESET.INF: START_PAGE_URL=https://portail.free.fr/
          O16 - DPF: {C45B1500-7B63-47C2-AB25-C28CB46AFDEE} (MediaBar) - http://sib1.od2.com/common/musicmanager/installation/MusicManagerPlugin.CAB
          O18 - Protocol: bw+0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw+0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw-0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw-0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw00 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw00s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw10 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw10s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw20 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw20s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw30 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw30s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw40 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw40s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw50 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw50s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw60 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw60s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw70 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw70s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw80 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw80s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw90 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw90s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwa0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwa0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwb0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwb0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwc0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwc0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwd0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwd0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwe0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwe0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwf0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwf0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
          O18 - Protocol: bwg0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwg0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwh0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwh0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwi0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwi0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwj0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwj0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwk0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwk0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwl0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwl0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwm0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwm0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwn0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwn0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwo0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwo0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwp0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwp0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwq0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwq0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwr0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwr0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bws0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bws0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwt0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwt0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwu0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwu0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwv0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwv0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bww0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bww0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwx0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwx0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwy0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwy0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwz0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwz0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll
          O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
          O18 - Protocol: offline-8876480 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\MSOXMLMF.DLL
          O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
          O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
          O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
          O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
          O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
          O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
          O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
          0
      4. salwa
        ree coche ces lignes dans hijack ensuite clique sur fix checked

        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Favoris

        O18 - Protocol: bw+0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw+0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw-0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw-0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw00 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw00s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw10 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw10s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw20 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw20s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw30 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw30s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw40 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw40s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw50 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw50s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw60 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw60s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw70 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw70s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw80 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw80s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw90 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw90s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwa0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwa0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwb0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwb0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwc0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwc0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwd0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwd0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwe0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwe0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwf0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwf0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
        O18 - Protocol: bwg0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwg0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwh0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwh0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwi0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwi0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwj0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwj0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwk0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwk0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwl0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwl0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwm0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwm0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwn0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwn0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwo0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwo0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwp0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwp0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwq0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwq0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwr0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwr0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bws0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bws0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwt0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwt0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwu0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwu0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwv0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwv0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bww0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bww0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwx0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwx0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwy0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwy0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwz0 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwz0s - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: offline-8876480 - {E0707585-C60F-46EA-8846-78E81A31F1E8} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

        ensuite execute ces antispyware

        (1) ad-aware version 1.06

        (ici) http://www.florensac-chasse-trap.com/ section virus/logiciel de securite
        voir demo
        http://pageperso.aol.fr/balltrap34/adwseflash.zip
        ***

        ps : un grand merci a balltrap pour les lien :)

        (2) AVG anti spyware
        https://www.01net.com/telecharger/
        Copier/coller le rapport entier sur le forum.

        -tutoriel http://www.kachouri.com/tuto/tuto-161-avg-anti-spyware-75-pour-votre-securite.html

        supprime les fichiers temporaire et cookies avec ceci :

        Ccleaner
        https://www.malekal.com/tutoriel-ccleaner/
        ***

        netoie la base de registre avec ca:

        regcleaner
        https://forums.cnetfrance.fr

        apres tt ca tu me dit si spybot te detect tjr magiccontrol
        :) bonne chance

        @+++
        0
        1. kelly150
          bonsoir c long mais j'en vien a bout et je te remercie encor de ton aide
          voici le rapport

          ---------------------------------------------------------
          AVG Anti-Spyware - Rapport d'analyse
          ---------------------------------------------------------

          + Créé à: 19:21:08 27/11/2006

          + Résultat de l'analyse:

          HKU\S-1-5-21-2052111302-1993962763-839522115-1003\Software\Internet Security -> Adware.IntCodec : Ignoré.
          :mozilla.34:C:\Documents and Settings\Kelly\Application Data\Mozilla\Firefox\Profiles\zfvjflff.default\cookies.txt -> TrackingCookie.247realmedia : Ignoré.
          :mozilla.35:C:\Documents and Settings\Kelly\Application Data\Mozilla\Firefox\Profiles\zfvjflff.default\cookies.txt -> TrackingCookie.247realmedia : Ignoré.
          :mozilla.36:C:\Documents and Settings\Kelly\Application Data\Mozilla\Firefox\Profiles\zfvjflff.default\cookies.txt -> TrackingCookie.247realmedia : Ignoré.
          :mozilla.37:C:\Documents and Settings\Kelly\Application Data\Mozilla\Firefox\Profiles\zfvjflff.default\cookies.txt -> TrackingCookie.247realmedia : Ignoré.
          :mozilla.38:C:\Documents and Settings\Kelly\Application Data\Mozilla\Firefox\Profiles\zfvjflff.default\cookies.txt -> TrackingCookie.247realmedia : Ignoré.
          C:\Documents and Settings\Kelly\Cookies\kelly@247realmedia[1].txt -> TrackingCookie.247realmedia : Ignoré.
          :mozilla.127:C:\Documents and Settings\Kelly\Application Data\Mozilla\Firefox\Profiles\zfvjflff.default\cookies.txt -> TrackingCookie.2o7 : Ignoré.
          C:\Documents and Settings\Kelly\Cookies\kelly@2o7[1].txt -> TrackingCookie.2o7 : Ignoré.
          C:\Documents and Settings\Kelly\Cookies\kelly@metacafe.122.2o7[1].txt -> TrackingCookie.2o7 : Ignoré.
          C:\Documents and Settings\Kelly\Cookies\kelly@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Ignoré.
          C:\Documents and Settings\Kelly\Cookies\kelly@notrefamille.112.2o7[1].txt -> TrackingCookie.2o7 : Ignoré.
          :mozilla.47:C:\Documents and Settings\Kelly\Application Data\Mozilla\Firefox\Profiles\zfvjflff.default\cookies.txt -> TrackingCookie.Adbrite : Ignoré.
          :mozilla.48:C:\Documents and Settings\Kelly\Application Data\Mozilla\Firefox\Profiles\zfvjflff.default\cookies.txt -> TrackingCookie.Adbrite : Ignoré.
          C:\Documents and Settings\Kelly\Cookies\kelly@adbrite[1].txt -> TrackingCookie.Adbrite : Ignoré.
          C:\Documents and Settings\Kelly\Cookies\kelly@redir.adengage[2].txt -> TrackingCookie.Adengage : Ignoré.
          C:\Documents and Settings\Kelly\Cookies\kelly@rotator.adjuggler[1].txt -> TrackingCookie.Adjuggler : Ignoré.
          :mozilla.53:C:\Documents and Settings\Kelly\Application Data\Mozilla\Firefox\Profiles\zfvjflff.default\cookies.txt -> TrackingCookie.Adtech : Ignoré.
          :mozilla.54:C:\Documents and Settings\Kelly\Application Data\Mozilla\Firefox\Profiles\zfvjflff.default\cookies.txt -> TrackingCookie.Adtech : Ignoré.
          C:\Documents and Settings\Kelly\Cookies\kelly@adtech[2].txt -> TrackingCookie.Adtech : Ignoré.
          C:\Documents and Settings\Kelly\Cookies\kelly@bluestreak[1].txt -> TrackingCookie.Bluestreak : Ignoré.
          :mozilla.62:C:\Documents and Settings\Kelly\Application Data\Mozilla\Firefox\Profiles\zfvjflff.default\cookies.txt -> TrackingCookie.Com : Ignoré.
          C:\Documents and Settings\Kelly\Cookies\kelly@com[1].txt -> TrackingCookie.Com : Ignoré.
          C:\Documents and Settings\Kelly\Cookies\kelly@fl01.ct2.comclick[2].txt -> TrackingCookie.Comclick : Ignoré.
          :mozilla.10:C:\Documents and Settings\Kelly\Application Data\Mozilla\Firefox\Profiles\zfvjflff.default\cookies.txt -> TrackingCookie.Doubleclick : Ignoré.
          :mozilla.87:C:\Documents and Settings\Kelly\Application Data\Mozilla\Firefox\Profiles\zfvjflff.default\cookies.txt -> TrackingCookie.Estat : Ignoré.
          C:\Documents and Settings\Kelly\Cookies\kelly@estat[1].txt -> TrackingCookie.Estat : Ignoré.
          C:\Documents and Settings\Kelly\Cookies\kelly@as-eu.falkag[1].txt -> TrackingCookie.Falkag : Ignoré.
          C:\Documents and Settings\Kelly\Cookies\kelly@as1.falkag[1].txt -> TrackingCookie.Falkag : Ignoré.
          :mozilla.88:C:\Documents and Settings\Kelly\Application Data\Mozilla\Firefox\Profiles\zfvjflff.default\cookies.txt -> TrackingCookie.Findwhat : Ignoré.
          :mozilla.190:C:\Documents and Settings\Kelly\Application Data\Mozilla\Firefox\Profiles\zfvjflff.default\cookies.txt -> TrackingCookie.Googleadservices : Ignoré.
          C:\Documents and Settings\Kelly\Cookies\kelly@server.iad.liveperson[1].txt -> TrackingCookie.Liveperson : Ignoré.
          C:\Documents and Settings\Kelly\Cookies\kelly@image.masterstats[1].txt -> TrackingCookie.Masterstats : Ignoré.
          C:\Documents and Settings\Kelly\Cookies\kelly@overture[2].txt -> TrackingCookie.Overture : Ignoré.
          C:\Documents and Settings\Kelly\Cookies\kelly@ads.pointroll[1].txt -> TrackingCookie.Pointroll : Ignoré.
          C:\Documents and Settings\Kelly\Cookies\kelly@questionmarket[1].txt -> TrackingCookie.Questionmarket : Ignoré.
          :mozilla.163:C:\Documents and Settings\Kelly\Application Data\Mozilla\Firefox\Profiles\zfvjflff.default\cookies.txt -> TrackingCookie.Reliablestats : Ignoré.
          :mozilla.164:C:\Documents and Settings\Kelly\Application Data\Mozilla\Firefox\Profiles\zfvjflff.default\cookies.txt -> TrackingCookie.Reliablestats : Ignoré.
          :mozilla.165:C:\Documents and Settings\Kelly\Application Data\Mozilla\Firefox\Profiles\zfvjflff.default\cookies.txt -> TrackingCookie.Reliablestats : Ignoré.
          :mozilla.166:C:\Documents and Settings\Kelly\Application Data\Mozilla\Firefox\Profiles\zfvjflff.default\cookies.txt -> TrackingCookie.Reliablestats : Ignoré.
          :mozilla.167:C:\Documents and Settings\Kelly\Application Data\Mozilla\Firefox\Profiles\zfvjflff.default\cookies.txt -> TrackingCookie.Reliablestats : Ignoré.
          C:\Documents and Settings\Kelly\Cookies\kelly@stats1.reliablestats[1].txt -> TrackingCookie.Reliablestats : Ignoré.
          C:\Documents and Settings\Kelly\Cookies\kelly@revenue[2].txt -> TrackingCookie.Revenue : Ignoré.
          C:\Documents and Settings\Kelly\Cookies\kelly@edge.ru4[2].txt -> TrackingCookie.Ru4 : Ignoré.
          C:\Documents and Settings\Kelly\Cookies\kelly@serving-sys[1].txt -> TrackingCookie.Serving-sys : Ignoré.
          C:\Documents and Settings\Kelly\Cookies\kelly@cs.sexcounter[2].txt -> TrackingCookie.Sexcounter : Ignoré.
          C:\Documents and Settings\Kelly\Cookies\kelly@adopt.specificclick[1].txt -> TrackingCookie.Specificclick : Ignoré.
          C:\Documents and Settings\Kelly\Cookies\kelly@statcounter[1].txt -> TrackingCookie.Statcounter : Ignoré.
          :mozilla.175:C:\Documents and Settings\Kelly\Application Data\Mozilla\Firefox\Profiles\zfvjflff.default\cookies.txt -> TrackingCookie.Tradedoubler : Ignoré.
          :mozilla.176:C:\Documents and Settings\Kelly\Application Data\Mozilla\Firefox\Profiles\zfvjflff.default\cookies.txt -> TrackingCookie.Tradedoubler : Ignoré.
          :mozilla.177:C:\Documents and Settings\Kelly\Application Data\Mozilla\Firefox\Profiles\zfvjflff.default\cookies.txt -> TrackingCookie.Tradedoubler : Ignoré.
          :mozilla.178:C:\Documents and Settings\Kelly\Application Data\Mozilla\Firefox\Profiles\zfvjflff.default\cookies.txt -> TrackingCookie.Tradedoubler : Ignoré.
          C:\Documents and Settings\Kelly\Cookies\kelly@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Ignoré.
          C:\Documents and Settings\Kelly\Cookies\kelly@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Ignoré.
          :mozilla.179:C:\Documents and Settings\Kelly\Application Data\Mozilla\Firefox\Profiles\zfvjflff.default\cookies.txt -> TrackingCookie.Weborama : Ignoré.
          :mozilla.180:C:\Documents and Settings\Kelly\Application Data\Mozilla\Firefox\Profiles\zfvjflff.default\cookies.txt -> TrackingCookie.Weborama : Ignoré.
          :mozilla.181:C:\Documents and Settings\Kelly\Application Data\Mozilla\Firefox\Profiles\zfvjflff.default\cookies.txt -> TrackingCookie.Weborama : Ignoré.
          :mozilla.182:C:\Documents and Settings\Kelly\Application Data\Mozilla\Firefox\Profiles\zfvjflff.default\cookies.txt -> TrackingCookie.Weborama : Ignoré.
          C:\Documents and Settings\Kelly\Cookies\kelly@bnpparibas.weborama[1].txt -> TrackingCookie.Weborama : Ignoré.
          C:\Documents and Settings\Kelly\Cookies\kelly@weborama[2].txt -> TrackingCookie.Weborama : Ignoré.
          C:\Documents and Settings\Kelly\Cookies\kelly@yadro[2].txt -> TrackingCookie.Yadro : Ignoré.
          C:\Documents and Settings\Kelly\Cookies\kelly@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Ignoré.
          :mozilla.29:C:\Documents and Settings\Kelly\Application Data\Mozilla\Firefox\Profiles\zfvjflff.default\cookies.txt -> TrackingCookie.Zedo : Ignoré.
          :mozilla.30:C:\Documents and Settings\Kelly\Application Data\Mozilla\Firefox\Profiles\zfvjflff.default\cookies.txt -> TrackingCookie.Zedo : Ignoré.
          :mozilla.31:C:\Documents and Settings\Kelly\Application Data\Mozilla\Firefox\Profiles\zfvjflff.default\cookies.txt -> TrackingCookie.Zedo : Ignoré.
          C:\Documents and Settings\Kelly\Cookies\kelly@c5.zedo[1].txt -> TrackingCookie.Zedo : Ignoré.
          C:\Documents and Settings\Kelly\Cookies\kelly@zedo[1].txt -> TrackingCookie.Zedo : Ignoré.

          Fin du rapport
          0
      5. salwa
        c bizzare que avg antispyware n'a pas supprimé ce qu'il a trouvé faut le parametrais correctement en suivant les instruction du tutorial que je t'ai donné

        sinon apart ca esque spybot te le detect tjr?

        @+++
        0
        1. kelly150
          ok j'ai bien reverifier les paramettre et relance une analyse
          a plus
          0
          1. kelly150
            je suis desoler de te dire que spybot detecte toujour magiccontrol agent
            et j'ai bien verifier les parametre
            0
            1. salwa
              au fait as tu utilisé regcleaner comme indiqué plus haut?

              essay ceci

              telecharge ça:
              http://download.bleepingcomputer.com/sUBs/combofix.exe

              appuyes sur "Y" pour continuer

              Attends quelques minutes..un rapport va s'ouvrir enregistre son contenu, puis copie et colle le sur ici stp

              @++
              0
            2. kelly150
              jai bien fait tou se que tu ma conseiler et je ten remerci encore
              je te dit quoi des que jai fait se que tu me dit
              0
            3. kelly150
              desoler mais il se passe rien
              0
          2. salwa
            quand tu double clike sur combofix quesqui se passe? esqu'il y'a un message d'erreur?

            @++++
            0
            1. kelly150
              qaund je double clic il y a une fenetre noir et des ecriture qui apparer 2sec et plus rien

              je vien de finir toute les analyse en mode sans echec et tou et ok
              1 fois : fichiers infecter 2eme fois pour verifier non probleme
              0
            2. salwa
              @kelly150oui c normal qu'une fenetre apparais apres il faut appuiyé sur la touche "y" pour commencer le scan

              apres quelque minute il va te generé un rapport , tu copie/ colle le rapport ici

              je vien de finir toute les analyse en mode sans echec et tou et ok
              1 fois : fichiers infecter 2eme fois pour verifier non probleme

              esque ca veut dire que spybot ne trouve plus magiccontrol? si c le cas alors tu peu zapper la manip de combofix :p

              @+++
              0
            3. kelly150
              @kelly150je suis desoler mais il ny a aucun rapport qui aparer juste une fenetre noir avec quelque ligne mais elle se referme aussitot
              et jai toujour magic control agent et les page de pub apparaise toujour toute seul
              0
          3. salwa
            ok on va deployé les grand moyen :)

            ouvre hijackthis / coche et fix cette lignes

            O4 - HKCU\..\Run: [MailSkinner] c:\program files\mailskinner\mailskinner.exe

            si tu connais pas ce programe (mailskinner) je te conseille de le desinstallé dans ajout/supression de programe

            Télécharge Brute Force Uninstaller (de Merijn) ici:
            http://www.merijn.org/files/bfu.zip
            Créé un nouveau dossier directement à la racine de ton disque dur ou l'endroit qui te convient, nomme ce dossier BFU.
            Décompresse le fichier téléchargé dans ce nouveau dossier (par exemple C:\BFU)

            Ensuite, télécharge EGDACCESS.bfu (de Metallica) :

            Fais un clik droit ici : http://metallica.geekstogo.com/EGDACCESS.bfu et choisis "Enregistrer la cible sous..." afin de télécharger EGDACCESS.bfu (de Metallica). Sauvegarde dans le dossier créé (C:\BFU). **Note : si tu utlises Internet Explorer ; lors de la sauvegarde, assure-toi que le champs "Type :" affiche "Tous les fichiers". Tu dois maintenant avoir deux fichiers dans le dossier C:\BFU : EGDACCESS.bfu et BFU.exe (très important).

            Lance "Brute Force Uninstaller" en double-cliquant BFU.exe (Dans le dossier C:\BFU)
            - Clique sur le petit dossier jaune, et clique sur : EGDACCESS.bfu
            - Coches la case Show log after script ends
            - Clique sur Execute pour que le fix fasse son boulot :-)

            Attends que le message Complete script execution apparaîsse et clique sur OK.
            Un rapport va s'afficher dans la fenetre du programme, copie et colle dans le bloc-notes, puis sauvegardes le, poste le ici

            Clique Exit pour fermer le programme BFU.

            @+++++
            0
            1. kelly150
              elle ny est pas ta ligne

              Logfile of HijackThis v1.99.1
              Scan saved at 12:59:03, on 29/11/2006
              Platform: Windows XP SP2 (WinNT 5.01.2600)
              MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

              Running processes:
              C:\WINDOWS\System32\smss.exe
              C:\WINDOWS\system32\winlogon.exe
              C:\WINDOWS\system32\services.exe
              C:\WINDOWS\system32\lsass.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\System32\svchost.exe
              C:\WINDOWS\system32\spoolsv.exe
              C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
              C:\Program Files\Alwil Software\Avast4\ashServ.exe
              C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
              C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\mdm.exe
              C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\Explorer.EXE
              C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
              C:\WINDOWS\system32\WgaTray.exe
              C:\WINDOWS\system32\wscntfy.exe
              C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
              C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
              C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE
              C:\WINDOWS\system32\LVCOMSX.EXE
              C:\Program Files\Logitech\Video\LogiTray.exe
              C:\Program Files\QuickTime\qttask.exe
              C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe
              C:\Program Files\Microsoft IntelliType Pro\type32.exe
              C:\Program Files\Microsoft IntelliPoint\point32.exe
              C:\Program Files\Logitech\Video\FxSvr2.exe
              C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
              C:\WINDOWS\system32\ctfmon.exe
              C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
              C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\GoogleToolbarNotifier.exe
              C:\Program Files\MSN Messenger\msnmsgr.exe
              C:\Program Files\Internet Explorer\iexplore.exe
              C:\DOCUME~1\Kelly\LOCALS~1\Temp\Rar$EX00.172\HijackThis.exe

              R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://portail.free.fr/
              R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.fr/keyword/%s
              R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Alice ADSL
              R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
              R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Favoris
              O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
              O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
              O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
              O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
              O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
              O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
              O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
              O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
              O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
              O4 - HKLM\..\Run: [EPSON Stylus DX3800 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIACE.EXE /P26 "EPSON Stylus DX3800 Series" /O6 "USB001" /M "Stylus DX3800"
              O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
              O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
              O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
              O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
              O4 - HKLM\..\Run: [AliceSAV] C:\Program Files\TechCity Solutions\AliceSAV\AliceAgent.exe
              O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
              O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
              O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
              O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
              O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
              O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
              O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.0.720.3640\GoogleToolbarNotifier.exe
              O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
              O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
              O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
              O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
              O9 - Extra button: Alice ADSL - {88E56811-A863-4AA4-BC54-308E29469F59} - https://portail.free.fr/ (file missing) (HKCU)
              O14 - IERESET.INF: START_PAGE_URL=https://portail.free.fr/
              O16 - DPF: {C45B1500-7B63-47C2-AB25-C28CB46AFDEE} (MediaBar) - http://sib1.od2.com/common/musicmanager/installation/MusicManagerPlugin.CAB
              O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Fichiers communs\Microsoft Shared\OFFICE12\MSOXMLMF.DLL
              O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
              O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
              O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
              O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
              O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
              O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
              O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
              O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
              0
              1. salwa
                bonjour la lignes etait presente dans le log hijack du message numero 8

                ESque tu as fait la manip avec brut force? esqu'il t'a generé un raport?

                @+++
                0
                1. kelly150
                  voi sa avec un ami cette apreme et te tien au courant

                  merci
                  0
              2. KELLY150
                c ok
                mon ami a fait la manipulation que tu a indiquer plus d'autre quil connaisait et a parament c bon .il a quan meme passer l'apres midi decu
                je tennai a te remerci car ton coup de main ma bcp aider
                jespere ne plus avoir de probleme
                salut a toi
                kelly
                0
                1. salwa
                  de rien :) n'oublie pas d'indiqué ton sujet comme resolu

                  @++++
                  0

                  Discussions similaires

                  Inventaire réseau sans agent
                  octalio

                  4 réponses
                  Déploiement agent OCS Inventory
                  tekarika777

                  6 réponses
                  Boucle sur la première diapositive d'une présentation
                  ND83

                  3 réponses
                  Comment supprimer Quickshare ?
                  Jo_le_rigolo

                  5 réponses
                  Quelles sont les applis à supprimer?
                  Melissa

                  2 réponses