ad firstadsolution pupop n arrive pas a enlev

Question

j ai un probleme avec un popup si vous pouvez jeter un coup d oei ca serait cool merci
Scan saved at 19:18:47, on 16/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RunDLL32.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\CameraAssistant.exe
C:\WINDOWS\system32\ElkCtrl.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\Program Files\Thrustmaster\Thrustmapper\TMTMTSR.exe
C:\Program Files\Softwin\BitDefender10\bdagent.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\TGTSoft\StyleXP\StyleXP.exe
C:\Program Files
euf telecom
euf Box\Wizard\QuickAccess.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\ctfmon.exe
c:\progra~1\intern~1\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Azureus\Azureus.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\Softwin\BitDefender10\vsserv.exe
c:\program files\softwin\bitdefender10\bdmcon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://home.neuf.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.neuf.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SW20] C:\WINDOWS\system32\sw20.exe
O4 - HKLM\..\Run: [SW24] C:\WINDOWS\system32\sw24.exe
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechCameraAssistant] C:\Program Files\Logitech\Video\CameraAssistant.exe
O4 - HKLM\..\Run: [LogitechVideo[inspector]] C:\Program Files\Logitech\Video\InstallHelper.exe /inspect
O4 - HKLM\..\Run: [LogitechCameraService(E)] C:\WINDOWS\system32\ElkCtrl.exe /automation
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [ThrustTSR] C:\Program Files\Thrustmaster\Thrustmapper\TMTMTSR.exe
O4 - HKLM\..\Run: [BDSwitchAgent] "c:\progra~1\softwin\bitdef~1\bdswitch.exe"
O4 - HKLM\..\Run: [Copy platform second bold] C:\Documents and Settings\All Users\Application Data\SkipDefaultCopyPlatform\Vga info.exe
O4 - HKLM\..\Run: [BDMCon] "C:\Program Files\Softwin\BitDefender10\bdmcon.exe" /reg
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\Softwin\BitDefender10\bdagent.exe"
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [STYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide
O4 - HKCU\..\Run: [Configuration de la neuf Box] C:\Program Files
euf telecom
euf Box\Wizard\QuickAccess.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [Delete Wait] C:\DOCUME~1\PROPRI~1\APPLIC~1\FUNKST~1\for size ante.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: bw+0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe" /service (file missing)
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\Softwin\BitDefender10\vsserv.exe" /service (file missing)
O23 - Service: Security Services Internet (winmech) - Unknown owner - C:\WINDOWS\winmech\NTSERV~1\srunner.exe (file missing)
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)

xemor · Answer

Bonjour,

Relance hijackthis et fixe cette ligne :

O4 - HKLM\..\Run: [Copy platform second bold] C:\Documents and Settings\All Users\Application Data\SkipDefaultCopyPlatform\Vga info.exe

+ toutes les lignes qui commencent par O18 - Protocol: bw

et encore les deux lignes suivantes :

O18 - Protocol: offline-8876480 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

O23 - Service: Security Services Internet (winmech) - Unknown owner - C:\WINDOWS\winmech\NTSERV~1\srunner.exe (file missing)

1/ Désactive ta restauration système :


    Dans la barre des tâches de Windows, cliquez sur Démarrer.
    Clique avec le bouton droit de la souris sur Poste de travail puis cliquez sur Propriétés.
    Dans l'onglet Restauration du système, sélectionne Désactiver la Restauration du système ou Désactiver la Restauration du système sur tous les lecteurs.
    Si tu ne vois pas l'onglet Restauration du système, tu n'es pas connecté sous Windows comme Administrateur.
    Clique sur Appliquer. 
    Lorsque le message de confirmation apparaît, cliquez sur Oui.
    Cliquez sur OK.

2/ Mets à jour bitdefender


3/ Télécharge et nettoie ton PC avec CCLEANER :

ccleaner

Utilisation : Dans l'onglet "Nettoyeur" clique sur "Analyse". Une fois l'analyse terminée, clique sur "Lancer le Nettoyage".
Ensuite, dans l'onglet "Erreurs" clique sur "Chercher des erreurs" puis,  clique sur "Réparer les erreurs sélectionnées" et effectue une sauvegarde de ton registre (comme proposé). Recommence jusqu’à ce qu’il ne trouve plus rien.

4/ Télécharge EasyCleaner ici :

https://www.01net.com/telecharger/windows/Utilitaire/registre/fiches/8351.html

Utilisation : Exécuter EasyCleaner, choisir "Registry" + "Unnecessary".  Supprime tout ce qu'il te  propose.


5/ Télécharge Spybot :

Tu trouveras le lien sur la page d'accueil de ccm côté gauche. Installe le

Utilisation : Clique sur Vérifier tout. Selectionne tout et clique sur vaccination

6/ Redémarre en mode sans echec 

Il faut tapotter sur la touche F8 pendant le demarrage Attention tu n'auras plus accés à cette page à partir de ce moment donc imprime ou note les informations qui se situent en dessous

7/ Supprimes le dossier suivant :
C:\Documents and Settings\All Users\Application Data\SkipDefaultCopyPlatform\Vga info.exe


8/ Relance un scan complet de ton ordi avec bitdefender

9/ Redemarre en mode normal
10/ Reposte un log d'hijackthis



Bon courage

man · Answer

je te donne le rapport mais je n ai reussi a trouver le fichier d and sett
Scan saved at 23:16:40, on 16/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RunDLL32.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\CameraAssistant.exe
C:\WINDOWS\system32\ElkCtrl.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\Program Files\Thrustmaster\Thrustmapper\TMTMTSR.exe
C:\Program Files\Softwin\BitDefender10\bdagent.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\TGTSoft\StyleXP\StyleXP.exe
C:\Program Files
euf telecom
euf Box\Wizard\QuickAccess.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\WINDOWS\system32\ctfmon.exe
c:\progra~1\intern~1\iexplore.exe
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
C:\Program Files\Softwin\BitDefender10\vsserv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Softwin\BitDefender10\bdmcon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://home.neuf.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.neuf.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [SW20] C:\WINDOWS\system32\sw20.exe
O4 - HKLM\..\Run: [SW24] C:\WINDOWS\system32\sw24.exe
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechCameraAssistant] C:\Program Files\Logitech\Video\CameraAssistant.exe
O4 - HKLM\..\Run: [LogitechVideo[inspector]] C:\Program Files\Logitech\Video\InstallHelper.exe /inspect
O4 - HKLM\..\Run: [LogitechCameraService(E)] C:\WINDOWS\system32\ElkCtrl.exe /automation
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKLM\..\Run: [ThrustTSR] C:\Program Files\Thrustmaster\Thrustmapper\TMTMTSR.exe
O4 - HKLM\..\Run: [BDSwitchAgent] "c:\progra~1\softwin\bitdef~1\bdswitch.exe"
O4 - HKLM\..\Run: [BDMCon] "C:\Program Files\Softwin\BitDefender10\bdmcon.exe" /reg
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\Softwin\BitDefender10\bdagent.exe"
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [STYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide
O4 - HKCU\..\Run: [Configuration de la neuf Box] C:\Program Files
euf telecom
euf Box\Wizard\QuickAccess.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [Delete Wait] C:\DOCUME~1\PROPRI~1\APPLIC~1\FUNKST~1\for size ante.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: bwa0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {3D0A73AD-CEF1-424F-910C-1A662EE544F2} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe" /service (file missing)
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\Softwin\BitDefender10\vsserv.exe" /service (file missing)
O23 - Service: Security Services Internet (winmech) - Unknown owner - C:\WINDOWS\winmech\NTSERV~1\srunner.exe (file missing)
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)

Lyonnais92 · Answer

Bonsoir,

Si je peux me permettre,

cette ligne : O4 - HKCU\..\Run: [Delete Wait] C:\DOCUME~1\PROPRI~1\APPLIC~1\FUNKST~1\for size ante.exe 
semble renvoyer à une infection lop.com comme la ligne 
O4 - HKLM\..\Run: [Copy platform second bold] C:\Documents and Settings\All Users\Application Data\SkipDefaultCopyPlatform\Vga info.exe 

Une particularité de cette infection est de redémarrer à chaque reboot via une tâche planifiée.

Pour avoir l'ensemble des informations, fait ceci :
Télécharge lopxp ici: (de moe)

http://pageperso.aol.fr/balltrap34/lopxp.zip (Merci Moe31 et Balltrap34)

2) dezippe le (clic droit dessus > extraire tout) 
et lance lopxp.bat 
le bloc note va s'ouvrir, copie et colle le contenu ici

Bonne suite à tous les deux.

@+
xemor, un lien complémentaire : tutoriel se debarrasser de adfirstsolution

man · Answer

Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est E056-83FC

R‚pertoire de C:\Documents and Settings\All Users\Application Data

16/12/2006 18:10 <REP> BitDefender
16/12/2006 12:53 <REP> SkipDefaultCopyPlatform
15/12/2006 14:31 3120 118300.34
15/12/2006 13:51 <REP> TEMP
09/12/2006 22:30 <REP> QuickTime
09/12/2006 14:56 <REP> Spybot - Search & Destroy
05/12/2006 13:40 <REP> Windows Genuine Advantage
04/12/2006 20:18 <REP> Adobe
03/12/2006 14:32 <REP> DVD Shrink
30/11/2006 18:07 <REP> Symantec
28/11/2006 16:52 62 desktop.ini
28/11/2006 16:52 <REP> .
28/11/2006 16:52 <REP> ..
28/11/2006 16:52 <REP> Microsoft
28/11/2006 16:22 <REP> Ahead
2 fichier(s) 3182 octets
13 R‚p(s) 107390111744 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est E056-83FC

R‚pertoire de C:\Documents and Settings\Default User\Application Data

28/11/2006 16:52 62 desktop.ini
28/11/2006 16:52 <REP> ..
28/11/2006 16:52 <REP> Microsoft
28/11/2006 16:52 <REP> .
1 fichier(s) 62 octets
3 R‚p(s) 107390111744 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est E056-83FC

R‚pertoire de C:\Documents and Settings\maney

Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est E056-83FC

R‚pertoire de C:\Documents and Settings\Propri‚taire\Application Data

16/12/2006 12:54 <REP> NetPumper
16/12/2006 12:53 <REP> FunkStartDash
15/12/2006 17:26 <REP> Lavasoft
14/12/2006 18:56 <REP> BitDefender
11/12/2006 20:04 34 BKZTUPLC.log
11/12/2006 20:04 125 BKZTUPLC.ini
11/12/2006 20:04 7172 ezplay.cat
11/12/2006 20:04 1104 BKZTUPLC.inf
11/12/2006 20:04 94080 ezplay.sys
11/12/2006 20:04 34 pcouffin.log
11/12/2006 20:04 81920 ezpinst.exe
11/12/2006 20:04 7176 pcouffin.cat
11/12/2006 20:04 47360 pcouffin.sys
11/12/2006 20:04 1144 pcouffin.inf
11/12/2006 20:04 <REP> Vso
09/12/2006 22:31 <REP> iShell
05/12/2006 16:01 <REP> Ahead
04/12/2006 20:20 <REP> AdobeUM
04/12/2006 20:19 <REP> Adobe
01/12/2006 21:44 <REP> Sun
01/12/2006 19:45 <REP> Azureus
01/12/2006 15:03 <REP> Macromedia
01/12/2006 13:47 <REP> Talkback
01/12/2006 13:47 <REP> Thunderbird
01/12/2006 13:19 <REP> Mozilla
30/11/2006 18:08 <REP> Symantec
28/11/2006 16:07 <REP> Identities
28/11/2006 16:07 62 desktop.ini
28/11/2006 16:07 <REP> ..
28/11/2006 16:07 <REP> .
28/11/2006 16:07 <REP> Microsoft
11 fichier(s) 240211 octets
20 R‚p(s) 107390111744 octets libres
******************************************
Recherche des taches planifiées dans C:\WINDOWS\tasks

Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est E056-83FC

R‚pertoire de C:\WINDOWS\Tasks

28/11/2006 16:07 6 SA.DAT
28/11/2006 15:59 65 desktop.ini
28/11/2006 15:59 <REP> ..
28/11/2006 15:59 <REP> .
2 fichier(s) 71 octets
2 R‚p(s) 107ÿ390ÿ111ÿ744 octets libres

******************************************
Recherche dans Program files

Le dossier C:\Program Files\C2Media n'existe pas

*************** Fin du rapport ****************
Rapport fait à 13:13:30,95 le 17/12/2006

Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est E056-83FC

R‚pertoire de C:\Documents and Settings\All Users\Application Data

16/12/2006 18:10 <REP> BitDefender
16/12/2006 12:53 <REP> SkipDefaultCopyPlatform
15/12/2006 14:31 3120 118300.34
15/12/2006 13:51 <REP> TEMP
09/12/2006 22:30 <REP> QuickTime
09/12/2006 14:56 <REP> Spybot - Search & Destroy
05/12/2006 13:40 <REP> Windows Genuine Advantage
04/12/2006 20:18 <REP> Adobe
03/12/2006 14:32 <REP> DVD Shrink
30/11/2006 18:07 <REP> Symantec
28/11/2006 16:52 62 desktop.ini
28/11/2006 16:52 <REP> .
28/11/2006 16:52 <REP> ..
28/11/2006 16:52 <REP> Microsoft
28/11/2006 16:22 <REP> Ahead
2 fichier(s) 3182 octets
13 R‚p(s) 107389943808 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est E056-83FC

R‚pertoire de C:\Documents and Settings\Default User\Application Data

28/11/2006 16:52 62 desktop.ini
28/11/2006 16:52 <REP> ..
28/11/2006 16:52 <REP> Microsoft
28/11/2006 16:52 <REP> .
1 fichier(s) 62 octets
3 R‚p(s) 107389943808 octets libres
Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est E056-83FC

R‚pertoire de C:\Documents and Settings\maney

Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est E056-83FC

R‚pertoire de C:\Documents and Settings\Propri‚taire\Application Data

16/12/2006 12:54 <REP> NetPumper
16/12/2006 12:53 <REP> FunkStartDash
15/12/2006 17:26 <REP> Lavasoft
14/12/2006 18:56 <REP> BitDefender
11/12/2006 20:04 34 BKZTUPLC.log
11/12/2006 20:04 125 BKZTUPLC.ini
11/12/2006 20:04 7172 ezplay.cat
11/12/2006 20:04 1104 BKZTUPLC.inf
11/12/2006 20:04 94080 ezplay.sys
11/12/2006 20:04 34 pcouffin.log
11/12/2006 20:04 81920 ezpinst.exe
11/12/2006 20:04 7176 pcouffin.cat
11/12/2006 20:04 47360 pcouffin.sys
11/12/2006 20:04 1144 pcouffin.inf
11/12/2006 20:04 <REP> Vso
09/12/2006 22:31 <REP> iShell
05/12/2006 16:01 <REP> Ahead
04/12/2006 20:20 <REP> AdobeUM
04/12/2006 20:19 <REP> Adobe
01/12/2006 21:44 <REP> Sun
01/12/2006 19:45 <REP> Azureus
01/12/2006 15:03 <REP> Macromedia
01/12/2006 13:47 <REP> Talkback
01/12/2006 13:47 <REP> Thunderbird
01/12/2006 13:19 <REP> Mozilla
30/11/2006 18:08 <REP> Symantec
28/11/2006 16:07 <REP> Identities
28/11/2006 16:07 62 desktop.ini
28/11/2006 16:07 <REP> ..
28/11/2006 16:07 <REP> .
28/11/2006 16:07 <REP> Microsoft
11 fichier(s) 240211 octets
20 R‚p(s) 107389943808 octets libres
******************************************
Recherche des taches planifiées dans C:\WINDOWS\tasks

Le volume dans le lecteur C n'a pas de nom.
Le num‚ro de s‚rie du volume est E056-83FC

R‚pertoire de C:\WINDOWS\Tasks

28/11/2006 16:07 6 SA.DAT
28/11/2006 15:59 65 desktop.ini
28/11/2006 15:59 <REP> ..
28/11/2006 15:59 <REP> .
2 fichier(s) 71 octets
2 R‚p(s) 107ÿ389ÿ943ÿ808 octets libres

******************************************
Recherche dans Program files

Le dossier C:\Program Files\C2Media n'existe pas

*************** Fin du rapport ****************

Lyonnais92 · Answer

Bonjour;

As tu rebooté depuis le 16 décembre à 12h53 ?

Sinon, tu rebootes, tu refais passer lopxp et tu mets le rapport.

Si oui, tu détruits par l'explorateur Windows les répertoires suivants :
C:\Documents and Settings\All Users\Application Data\SkipDefaultCopyPlatform 
 C:\Documents and Settings\Propriétaire\Application Data\NetPumper 
C:\Documents and Settings\Propriétaire\Application Data\FunkStartDash 

Si ils résistent, tu vas les supprimer en mode sans échec.
(Démarre en mode sans échec : 
Pour cela, tu tapotes la touche F8 dès le début de l’allumage du pc sans t’arrêter. 
Une fenêtre va s’ouvrir tu te déplaces avec les flèches du clavier sur démarrer en mode sans échec puis tape entrée. 
Une fois sur le bureau s’il n’y a pas toutes les couleurs et autres c’est normal ! 
(Si F8 ne marche pas utilise la touche F5).)

Tu remets un log HijackThis.

Je voudrais aussi voir ce qui se passe avec un fichier.
Rends toi sur ce site :
http://www.virustotal.com/xhtml/virustotal_en.html

Clique sur parcourir et cherche ce fichier : C:\Documents and Settings\All Users\Application Data\118300.34 
Clique sur send.

Un rapport va s'élaborer ligne à ligne.

Attends la fin. Il doit comprendre la taille du fichier envoyé.

Sauvegarde le rapport avec le bloc-note.

Copie le dans ta réponse

@+

Ad firstadsolution pupop n arrive pas a enlev

5 réponses

Discussions similaires

Newsletters