PUB INTEMPESTIVES (systemdoctor, casino,...)

Question

Bonjour
j'ai un problème très embarassant depuis un bon moment maintenant, etj'ai envie d'en finir une bonne fois pour toute.
Mais je n'y ariverais pas sans aide, j'ai vu que beaucoup de persone avait eu le même probème dans de nombreux forum, mais c'est un peu fuilli, et peu-être pas adapté au même pub que celle qui s'affiche sur mon ordinateur.

Si quelqu'un pouvait me venir en aide pour supprimer ces fenêtres qui ne cesse d'apparaitre, je lui en serais très reconnaissant.

MERCI d'avance!!!

iceman6259 · Answer

Bonsoir, et bonne année !!

télécharge ceci:

http://www.hijackthis.de/downloads/hijackthis_199.zip

Dézippe le dans un dossier prévu à cet effet.
Par exemple C:\hijackthis < Enregistre le bien dans c : !
Démo (merci à Balltrap) :
instalation hijackthis
http://pageperso.aol.fr/balltrap34/Hijenr.gif

Lance le puis:
clique sur "do a system scan and save logfile" (cf démo)
faire un copier coller du log entier sur le forum

Démo : (merci à balltrap34 pour cette réalisation)
http://pageperso.aol.fr/balltrap34/demohijack.htm

jeremiegasche · Answer

voici le résltat du scan,merci!




Logfile of HijackThis v1.99.1
Scan saved at 23:04:11, on 01/01/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
C:\WINDOWS\System32\cisvc.exe
C:\WINDOWS\system32\LXSUPMON.EXE
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Norton SystemWorks\Norton GoBack\GBPoll.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\Logitech\ImageStudio\LogiTray.exe
C:\WINDOWS\SYSTEM32\GEARSEC.EXE
C:\Program Files\Logitech\Video\CameraAssistant.exe
C:\WINDOWS\system32\ElkCtrl.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre1.5.0_09\bin\jusched.exe
C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Adobe\Reader 8.0\Reader\AcroRd32.exe
C:\PROGRA~1\Lavasoft\AD-AWA~1\Ad-Aware.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = 

https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = 

https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 

https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL 

= https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = 

https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = 

https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName 

= Favoris
R3 - URLSearchHook: (no name) -  - (no file)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - 

{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers 

communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - 

C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - 

{9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers 

communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: CoTGT_BHO Class - {C333CF63-767F-4831-94AC-E683D962C63C} - 

C:\Program Files\TGTSoft\StyleXP\TGT_BHO.dll
O4 - HKLM\..\Run: [LXSUPMON] C:\WINDOWS\system32\LXSUPMON.EXE RUN
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers 

communs\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [LWBMOUSE] C:\MMaestro\BWheel35.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE 

C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 

3\MsgPlus.exe"
O4 - HKLM\..\Run: [LogitechGalleryRepair] C:\Program 

Files\Logitech\ImageStudio\ISStart.exe
O4 - HKLM\..\Run: [LogitechImageStudioTray] C:\Program 

Files\Logitech\ImageStudio\LogiTray.exe
O4 - HKLM\..\Run: [LogitechCameraAssistant] C:\Program 

Files\Logitech\Video\CameraAssistant.exe
O4 - HKLM\..\Run: [LogitechVideo[inspector]] C:\Program 

Files\Logitech\Video\InstallHelper.exe /inspect
O4 - HKLM\..\Run: [LogitechCameraService(E)] 

C:\WINDOWS\system32\ElkCtrl.exe /automation
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program 

Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program 

Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [adiras] adiras.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program 

Files\Java\jre1.5.0_09\bin\jusched.exe"
O4 - HKCU\..\Run: [STYLEXP] C:\Program 

Files\TGTSoft\StyleXP\StyleXP.exe -Hide
O4 - HKCU\..\Run: [NBJ] "C:\Program Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: Assistance à distance.lnk = 

C:\WINDOWS\system32\rcimlby.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program 

Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 

800-840\dslmon.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program 

Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program 

Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft 

Office\Office\OSA9.EXE
O4 - Global Startup: Norton GoBack.lnk = C:\Program Files\Norton 

SystemWorks\Norton GoBack\GBTray.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - 

C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - 

{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program 

Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - 

%windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - 

{85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file 

missing)
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - 

C:\WINDOWS\System32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - 

%windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - 

{e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network 

Diagnostic\xpnetdiag.exe (file missing)
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - 
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine 

Advantage Validation Tool) - 

http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {39EA2F6F-3F50-4F58-9C63-4B3D53B0926E} - 

https://www.afternic.com/domains/downloadv3.com
O16 - DPF: {3E68E405-C6DE-49ff-83AE-41EE9F4C36CE} (Office Update 

Installation Engine) - 
O16 - DPF: {42E1F024-ECC3-456F-B98A-4CE5ACDBF25C} (ActiveFormX 

Contrôle) - 
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload 

Tool) - http://by15fd.bay15.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE 

Control) - http://www.zebulon.fr/scan8/oscan8.cab
O16 - DPF: {6AA85413-165C-4200-8154-71166077B22E} - 

https://www.afternic.com/domains/downloadv3.com
O16 - DPF: {8B3B8135-9DAA-40E7-8941-962795F9C1CB} - 

https://www.afternic.com/domains/downloadv3.com
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient 

Class) - 

http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer 

Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} 

(MsnMessengerSetupDownloadControl Class) - 

http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O17 - 

HKLM\System\CCS\Services\Tcpip\..\{8C631CB8-DBF9-4B52-A8C0-B4CD88078167

}: NameServer = 84.103.237.140 86.64.145.140
O18 - Protocol: bw+0 - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} 

- C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {2B1268DB-34F9-460A-9372-288717D1F01A} - 

C:\Program Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - 

C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - 

C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - 

{2B1268DB-34F9-460A-9372-288717D1F01A} - C:\Program 

Files\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - AppInit_DLLs: MsgPlusLoader.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - 

C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner 

- C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program 

Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program 

Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program 

Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: C-DillaSrv - C-Dilla Ltd - 

C:\WINDOWS\System32\DRIVERS\CDANTSRV.EXE
O23 - Service: GBPoll - Symantec Corporation - C:\Program Files\Norton 

SystemWorks\Norton GoBack\GBPoll.exe
O23 - Service: GEARSecurity - GEAR Software - 

C:\WINDOWS\SYSTEM32\GEARSEC.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision 

Corporation - C:\Program Files\Fichiers 

communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:\Program 

Files\iPod\bin\iPodService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - 

C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - 

c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe

iceman6259 · Answer

ouahou !! quel rapport !! lol


pourrais tu d'abord nettoyer ton pc avec Ccleaner.
Tutorial là :
https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php

Téléchargement :
ftp://ftp.commentcamarche.com/download/ccsetup136.exe
Et fais ceci avec ccleaner:

¤Relance Ccleaner ,vas dans l'onglet "nettoyeur" présent sur la gauche, décoche la dernière case (Avancé si elle est cochée) puis clique sur "lancer le nettoyage".

Ensuite, relance Hijackthis, et refait un rapport. Quand tu le colles ici, ne le trafique pas (ne fait pas "entrer" ou d'autres choses !!)

@+

iceman6259 · Answer

ps: tu peux désinstaller msnmessengerplus!3 

il te sert à rien avec livemessenger.

Si tu veux, il existe livemessengerplus !!

va voir sur mon site, les images d'en bas :

http://iceman6259.fr.tc

@+

salwa5 · Answer

bonsoir Télécharge Blacklight (de F-Secure) 
https://www.f-secure.com/en
https://europe.f-secure.com/exclude/blacklight/index.shtml 


et sauvegarde le sur ton Bureau. 

Double-clique blbeta.exe et accepte la licence ; laisse [X]scan through Windows Explorer activé ; clique Scan puis Next 

Tu verras une liste de fichiers détectés apparaître. Tu verras également un rapport, sur ton Bureau, nommé fsbl.xxxxxxx.log (les xxxxxxx sont des chiffres). 

Copie et colle le contenu de ce rapport dans ta prochaine réponse 


a++

jeremiegasche · Answer

01/06/07 11:56:07 [Info]: BlackLight Engine 1.0.55 initialized
01/06/07 11:56:07 [Info]: OS: 5.1 build 2600 (Service Pack 2)
01/06/07 11:56:07 [Note]: 7019 4
01/06/07 11:56:07 [Note]: 7005 0
01/06/07 11:56:11 [Note]: 7006 0
01/06/07 11:56:11 [Note]: 7011 1656
01/06/07 11:56:11 [Note]: 7026 0
01/06/07 11:56:11 [Note]: 7026 0
01/06/07 11:56:11 [Note]: 7024 3
01/06/07 11:56:11 [Info]: Hidden process: C:\windows\system32\owlgpjar.exe
01/06/07 11:56:16 [Note]: FSRAW library version 1.7.1021
01/06/07 11:56:23 [Note]: 2000 1012
01/06/07 11:56:23 [Note]: 2000 1012
01/06/07 11:58:42 [Note]: 7007 0

salwa5 · Answer

bonjour


Télécharge Brute Force Uninstaller (de Merijn) ici: 
http://www.merijn.org/files/bfu.zip 
Créé un nouveau dossier directement à la racine de ton disque dur ou l'endroit qui te convient, nomme ce dossier BFU. 
Décompresse le fichier téléchargé dans ce nouveau dossier (par exemple C:\BFU) 

Ensuite, télécharge EGDACCESS.bfu (de Metallica) : 

Fais un clik droit ici : http://metallica.geekstogo.com/EGDACCESS.bfu et choisis "Enregistrer la cible sous..." afin de télécharger EGDACCESS.bfu (de Metallica). Sauvegarde dans le dossier créé (C:\BFU). **Note : si tu utlises Internet Explorer ; lors de la sauvegarde, assure-toi que le champs "Type :" affiche "Tous les fichiers". Tu dois maintenant avoir deux fichiers dans le dossier C:\BFU : EGDACCESS.bfu et BFU.exe (très important). 


-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_- 

Lance "Brute Force Uninstaller" en double-cliquant BFU.exe (Dans le dossier C:\BFU) 
- Clique sur le petit dossier jaune, et clique sur : EGDACCESS.bfu 
- Coches la case Show log after script ends 
- Clique sur Execute pour que le fix fasse son boulot :-) 

Attends que le message Complete script execution apparaîsse et clique sur OK. 
Un rapport va s'afficher dans la fenetre du programme, copie et colle dans le bloc-notes, puis sauvegardes le, tu le posteras plus tard sur le forum. 
Clique Exit pour fermer le programme BFU. 

-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_- 

Ensuite, lance Blacklight en double cliquant sur blbeta.exe et accepte la licence. 
Clique sur Scan pour lancer l'analyse. 
Une fois fait, selectionnes chaques fichiers trouvés et clic sur "RENAME" 
Puis valide. 
Réponds oui aux messages d'avertissements et te demandant si tu autorises le reboot du pc. 

-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_- 

Après le reboot du pc, le fichiers : 

C:\windows\system32\owlgpjar.exe 

devraient être visible et pouvoir être supprimés sans aucuns soucis. 
Blacklight ne les supprimes pas, il les renommes simplement et il va falloir que tu les vires toi même: 
Va dans C:\windows\system32\ et recherches et effaces: 

owlgpjar.exe.ren 

Une fois fait, reposte un rapport hijackthis + le rapport de BFU que tu auras sauvegardé et un nouveau rapport de blacklight. 

bon nettoyage et bon courage ;-)

a++++

salwa5 · Answer

postes le raport bfu + raport blacklight stp 

a++

salwa5 · Answer

en attendant les raports 

ouvre hijack coches ces lignes puis click sur fix checked


R3 - URLSearchHook: (no name) - - (no file)
O4 - HKLM\..\Run: [owlgpjar] c:\windows\system32\owlgpjar.exe owlgpjar

O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)



desinstalles ce programe inutil

- Va dans le Panneau de Configuration >> Ajout/Suppression de programmes, et désinstalle/supprime celui-ci : 
Logitech Desktop Messenger 


ta version java est perimé pour plus de securité 

 télécharge la dernière version https://www.java.com/fr/

Après installation et redémarrage , va dans panneau de configuration/Ajouter-Supprimer des programmes afin de désinstaller l'ancienne version, ceci pour récupérer de l'espace disque et éventuellement pour virer les failles présentes dans cette ancienne version.

Retourne ensuite chez Java ci-dessus et clique sur le bouton "Vérifier l'installation" pour t'assurer que tout est en ordre.



a++++

salwa5 · Answer

ok :)

pour finir quelque conseille de base

- passe reglierement les antispyware (adaware , spybot , avg antispyware .. ect) pense a les mettre ajour avant de les lancé c'est tres important

-supprime regulierement les fichiers inutiles (fichiers temporaire , cookies .. ect a l'aide de CCleaner https://www.malekal.com/tutoriel-ccleaner/

-maintenant que ton ordinateur est propre je te conseille de creer un point de restauration comme ca en cas de probleme (virus , plantage ..ect) tu poura tjr revenir en arriere 
http://www.aidoforum.com/tutoriaux-371-creer-un-point-de-restauration-sous-windows.html

a++++

salwa5 · Answer

de rien :) 

a+++

salwa5 · Answer

essay de les desinstaller avec suppress plus https://www.pcastuces.com/logitheque/utilitaires.asp

si t'arrive pas en mode normal essay en mode sans echec

a++

PUB INTEMPESTIVES (systemdoctor, casino,...)

12 réponses

Discussions similaires

Newsletters