Infection winantiviruspro2006

Résolu
cake aux fruits -  
bonsoir,
je suis à mon tour infectée par cette cochonnerie. depuis 2 jours, des pubs apparaissent et depuis ce matin, des pages d'alerte de winantivirus. voici les rapports fsbl et hijackthis. j'ai aussi fait une recherche de winantiviruspro2006 sans résultat...
merci par avance de votre aide.
à bientôt.
02/18/07 20:12:45 [Info]: BlackLight Engine 1.0.55 initialized
02/18/07 20:12:45 [Info]: OS: 5.1 build 2600 (Service Pack 1)
02/18/07 20:12:45 [Note]: 7019 4
02/18/07 20:12:45 [Note]: 7005 0
02/18/07 20:13:02 [Note]: 7006 0
02/18/07 20:13:02 [Note]: 7011 1332
02/18/07 20:13:02 [Note]: 7026 0
02/18/07 20:13:02 [Note]: 7026 0
02/18/07 20:13:02 [Note]: 7024 3
02/18/07 20:13:02 [Info]: Hidden process: C:\windows\system32\asngzunalf.exe
02/18/07 20:13:08 [Note]: FSRAW library version 1.7.1021
02/18/07 20:15:19 [Info]: Hidden file: c:\WINDOWS\system32\asngzunalf.dat
02/18/07 20:15:19 [Note]: 10002 1
02/18/07 20:15:19 [Info]: Hidden file: C:\windows\system32\asngzunalf.exe
02/18/07 20:15:19 [Note]: 10002 1
02/18/07 20:15:20 [Info]: Hidden file: c:\WINDOWS\system32\asngzunalf_nav.dat
02/18/07 20:15:20 [Note]: 10002 1
02/18/07 20:15:20 [Info]: Hidden file: c:\WINDOWS\system32\asngzunalf_navps.dat
02/18/07 20:15:20 [Note]: 10002 1
02/18/07 20:56:51 [Note]: 7007 0

Logfile of HijackThis v1.99.1
Scan saved at 21:13:44, on 18/02/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Kerio\Personal Firewall\persfw.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\sstray.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Program Files\Logitech\SetPoint\KEM.exe
C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\erf\LOCALS~1\Temp\Rar$EX00.860\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.tf1.fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe
O4 - HKLM\..\Run: [EEventManager] C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://quelien.spaces.live.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {68C1822F-F5C7-4404-A73F-03C10E0E94DA} (telechargement-photoweb) - http://www4.photoweb.fr/telechargement/Photoweb_uploader.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{3C017E43-8022-424A-9B51-F4373CDF2B37}: NameServer = 84.103.237.142 86.64.145.142
O17 - HKLM\System\CS1\Services\Tcpip\..\{3C017E43-8022-424A-9B51-F4373CDF2B37}: NameServer = 84.103.237.142 86.64.145.142
O18 - Protocol: bw+0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Kerio Personal Firewall (PersFw) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall\persfw.exe
Configuration: Windows XP
Internet Explorer 6.0

9 réponses

  1.  green day Modérateur
    Salut

    # Affiche les dossiers système et fichiers cachés :
    Ouvrir le poste de travail :
    - Outils --> Options des dossiers
    - Affichage --> zone Paramètres avancés
    - Cocher : Afficher le contenu des dossiers système
    - Cocher : Afficher les fichiers et dossiers cachés
    - Décocher : Masquer les extensions des fichiers dont le type est connu
    - Décocher : Masquer les fichiers protégés du système d'exploitation (recommandé)
    répondre Oui au message
    Clique sur "Appliquer à tous les dossiers"
    Clique sur OK

    # passe à l'option 2 de blacklight :

    voir demo : http://perso.orange.fr/entraide-hijackthis/Mailskinner/Blacklight.htm

    après le redemmarage du PC :

    Télécharge Killbox sur ton Bureau :

    http://www.downloads.subratam.org/KillBox.exe

    Double-clique killbox.exe.

    Copie le texte gras ci-bas (sélectionne tout avec ta souris, clic-droit et "Copier") :

    C:\windows\system32\asngzunalf.exe
    c:\WINDOWS\system32\asngzunalf.dat
    C:\windows\system32\asngzunalf.exe
    c:\WINDOWS\system32\asngzunalf_nav.dat
    c:\WINDOWS\system32\asngzunalf_navps.dat

    * Sélectionnz "delete on reboot"
    * Cliquez sur le menu "File" -> "Past from clip board"
    * Cliquez sur All Files
    * Cliquez sur la croix rouge et et blanche
    * Répondez yes et laisse redémarrer ton pc.
    *poste un nouveau blacklight

    cf démo : http://mickael.barroux.free.fr/securite/killbox.html

    ensuite, fais les manips de ce lien stp :

    virus methode preliminaire de desinfection version fr

    @+
    0
    1. cake aux fruits Auteur
      salut green day.
      merci beaucoup pour ton savoir qui m'a retiré une énorme épine du pied...je ne sais pas comment vous faîtes tous pour réussir à nous dépatouiller de nos problèmes sans avoir réellement le problème en face de soi ; en tout cas, je vous tire mon chapeau.
      en attendant, voici les 3 rapports demandés dans la méthode de désinfection :

      AVG Anti-Spyware - Rapport d'analyse
      ---------------------------------------------------------

      + Créé à: 18:47:25 19/02/2007

      + Résultat de l'analyse:

      D:\System Volume Information\_restore{A9E4A0EB-98DD-453B-A022-F0481FD13AA2}\RP80\A0036291.exe -> Adware.180Solutions : Ignoré.
      HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{c95fe080-8f5d-11d2-a20b-00aa003c157a} -> Adware.Generic : Ignoré.
      D:\System Volume Information\_restore{A9E4A0EB-98DD-453B-A022-F0481FD13AA2}\RP80\A0035492.exe -> Not-A-Virus.VirTool.Win32.AvSpoffer.a : Ignoré.
      D:\System Volume Information\_restore{A9E4A0EB-98DD-453B-A022-F0481FD13AA2}\RP80\A0035513.exe -> Not-A-Virus.VirTool.Win32.AvSpoffer.a : Ignoré.
      D:\System Volume Information\_restore{A9E4A0EB-98DD-453B-A022-F0481FD13AA2}\RP80\A0035527.exe -> Not-A-Virus.VirTool.Win32.AvSpoffer.a : Ignoré.
      D:\System Volume Information\_restore{A9E4A0EB-98DD-453B-A022-F0481FD13AA2}\RP80\A0036410.exe -> Not-A-Virus.VirTool.Win32.AvSpoffer.a : Ignoré.
      D:\System Volume Information\_restore{A9E4A0EB-98DD-453B-A022-F0481FD13AA2}\RP80\A0036435.exe -> Not-A-Virus.VirTool.Win32.AvSpoffer.a : Ignoré.

      Fin du rapport

      BitDefender Online Scanner - Real Time Virus Report

      Generated at: Mon, Feb 19, 2007 - 22:32:03

      --------------------------------------------------------------------------------

      Scan Info

      Scanned Files
      277386

      Infected Files
      0

      Virus Detected

      No virus found.

      Logfile of HijackThis v1.99.1
      Scan saved at 22:33:32, on 19/02/2007
      Platform: Windows XP SP1 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
      C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      C:\Program Files\Kerio\Personal Firewall\persfw.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\System32\sstray.exe
      C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
      C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe
      C:\Program Files\QuickTime\qttask.exe
      C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
      C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
      C:\WINDOWS\System32\ctfmon.exe
      C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
      C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
      C:\Program Files\MSN Messenger\MsnMsgr.Exe
      C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
      C:\Program Files\Logitech\SetPoint\KEM.exe
      C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
      C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\WinRAR\WinRAR.exe
      C:\DOCUME~1\erf\LOCALS~1\Temp\Rar$EX00.828\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.tf1.fr/
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
      O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
      O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
      O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
      O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe
      O4 - HKLM\..\Run: [EEventManager] C:\Program Files\EPSON\Creativity Suite\Event Manager\EEventManager.exe
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
      O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
      O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
      O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
      O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
      O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1
      O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
      O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
      O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
      O4 - Global Startup: NkbMonitor.exe.lnk = C:\Program Files\Nikon\PictureProject\NkbMonitor.exe
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
      O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
      O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://quelien.spaces.live.com//PhotoUpload/MsnPUpld.cab
      O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
      O16 - DPF: {68C1822F-F5C7-4404-A73F-03C10E0E94DA} (telechargement-photoweb) - http://www4.photoweb.fr/telechargement/Photoweb_uploader.cab
      O17 - HKLM\System\CCS\Services\Tcpip\..\{3C017E43-8022-424A-9B51-F4373CDF2B37}: NameServer = 86.64.145.145 84.103.237.145
      O17 - HKLM\System\CS1\Services\Tcpip\..\{3C017E43-8022-424A-9B51-F4373CDF2B37}: NameServer = 86.64.145.145 84.103.237.145
      O18 - Protocol: bw+0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw+0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
      O18 - Protocol: bwg0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwg0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: offline-8876480 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
      O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
      O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: Kerio Personal Firewall (PersFw) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall\persfw.exe

      ceci dit, que dois-je faire des logiciels téléchargés pour l'occasion : les garder de côté pour une prochaine fois ou les garder tels quels ?
      et les cases que tu m'as fais cocher et décocher dans les options du poste de travail, dois-je les remettre comme avant ?
      merci, merci, merci, merci, merci, merci, merci, merci, ...

      cake aux fruits.
      0
      1. green day Modérateur
        Salut

        as tu supprimer tout ce qu'avg t'avais signalé ???

        Désactiver la Restauration du système

        * Cliquez sur le bouton Démarrer.
        * Cliquez avec le bouton droit de la souris sur Poste de travail puis cliquez sur Propriétés.
        * Dans l'onglet Restauration du système, sélectionnez l'option Désactiver la Restauration du système ou Désactiver la Restauration du système sur tous les lecteurs

        ( tu pourras la réactivé à la fin de la manip )

        Relance HijackThis : choisis " do a scan only" coche la case devant les lignes ci-dessous et clique en bas sur "fix checked" :

        O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe

        O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
        O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
        O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"

        O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
        O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
        O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
        O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
        O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_9 -reboot 1

        O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
        O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
        O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe

        O18 - Protocol: bw+0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw+0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw-0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw-0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw00 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw00s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw10 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw10s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw20 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw20s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw30 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw30s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw40 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw40s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw50 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw50s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw60 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw60s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw70 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw70s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw80 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw80s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw90 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw90s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwa0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwa0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwb0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwb0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwc0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwc0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwd0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwd0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwe0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwe0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwf0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwf0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
        O18 - Protocol: bwg0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwg0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwh0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwh0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwi0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwi0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwj0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwj0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwk0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwk0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwl0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwl0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwm0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwm0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwn0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwn0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwo0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwo0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwp0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwp0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwq0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwq0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwr0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwr0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bws0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bws0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwt0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwt0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwu0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwu0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwv0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwv0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bww0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bww0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwx0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwx0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwy0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwy0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwz0 - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwz0s - {DEAF77A2-C535-4A34-91C3-CDBF795CB6CF} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

        ensuite, repasse un coup de ccleaner + cleanup :

        * CleanUp40 (qui élimine les fichiers temporaires + cookies : gratuit )
        http://pageperso.aol.fr/Balltrap34/CleanUp40.exe

        tuto : (merci à Balltrap) http://pageperso.aol.fr/balltrap34/democleanup.htm

        que dois-je faire des logiciels téléchargés pour l'occasion : les garder de côté pour une prochaine fois ou les garder tels quels ?

        tu peux garder blacklight, et s'il te detecte quelque chose, tu as la manips pour supprimer les fichiers infectes, il suffit de passer l'option 2 du logiciel, et de supprimer ces fichier, soit manuellement en les cherchant, soit en utilisant killbox, en copriant le chemin des fichiers à supprimer !

        avg : garge le, il est très bien et gratuit ! à mettre à jour et utiliser regulièrement, ainsi que cleanup et ccleaner :

        pour plus d'info :

        https://sebsauvage.net/safehex.html
        securite proteger un ordinateur contre les malwares d internet

        precise tes soucis s'il en reste !

        @+
        0
        1. cake aux fruits Auteur
          bonjour,
          j'ai supprimé tout ce que tu m'as demandé et relancé ccleaner + cleanup.
          c'est nickel!!!
          merci encore.
          salutations
          0
      2. green day Modérateur
        pas d'quoi ;-)

        @+
        0
        1. cake aux fruits Auteur
          bonjour.
          j'ai installé 1 neuf box chez 1 amie il y a peu de temps et à la suite je lui ai installé msn qui n'a jamais voulu s'ouvrir.
          suite à ça, je suis passée chez neuf aujourd'hui. après installation ça fonctionnait)et redémarrage, plus rien : impossible de me connecter... sur le forum j'ai testé plusieurs solutions mais aucune n'a fonctionné. le code d'erreur étant 80048820 et le complet 80048439. logiquement, c'est lié à la neuf box ; j'ai cherché partout sans trouver la raison. si tu peux m'aider je t'en serai très reconnaissante.
          0
      4. green day Modérateur
        Salut

        regarde ici :

        msn erreur de connexion 80048820

        ++
        0
        1. cake aux fruits Auteur
          salut. merci de ta réponse, mais comme je le disais hier, j'ai déjà fais ce cheminement, mis à part le n°6 "réinitialiser les paramètres proxy de msn" je ne comprend pas ce qu'il faut faire...
          cependant, ailleurs il a été conseillé de désinstaller windows live messenger et d'installer à sa place msn messenger 7.0 ou 7.5 ; c'est chose faite, par contre impossible d'accéder à mon site perso ainsi qu'à mes messages. que faire ?????
          0
      5. green day Modérateur
        Salut

        voir ici peut être ...

        internet recapitulatif msn

        ++
        0
        1. cake aux fruits Auteur
          salut.
          en fait je me suis mal expliquée : j'avais windows live messenger qui fonctionnait très bien. après avoir installé la 9 box, plus rien (chez mon amie non plus). avec l'ancienne version d'msn, pas de pb de connexion mais aucun accès à ma messagerie possible; même en passant par web messenger ou gaim : il y a qq ch ds l'ordi qui bloque. y a-t-il 1 sécurité sur 9.fr ? car sur kério, je ne vois rien.
          enfin, c'est pas grave, je vais me contenter de ça pour l'instant (j'ai tt de même tenter tt ce qu'il y avait sur ce site).
          merci qd même. à+.
          0
      6. cake aux fruits Auteur
        ah! j'oubliait que même la mise à jour d'AVG Anti spyware ne fonctionne plus et il y a peut-être d'autres choses que je découvrirai au fur et à mesure.
        0
        1. green day Modérateur
          Salut

          là, je ne sais pas pour live messenger, je suis moi même chez 9télécom,

          j'étais passé à cette version, mais je n'aimais pas trop et je suis revenu à la version 7.5, cependant, ça m'avais l'aire de plutôt bien fonctionnait ?! ...

          Pour avg, c'est normal, tu as la version gratuite, et plus possible de mettre à jour automatiquement, mais tu peux le faire manuellement !

          ++
          0
          1. cake aux fruits Auteur
            salut.
            je ne mets pas en cause le bon fonctionnement de la 9 box, c'est juste qu'il y a 1 incompatibilité qq part comme chez mes amis, c'est peut-être kerio... je pense que je vais le désinstaller puis le réinstaller...on verra. sinon, pour AVG, ça ne fonctionne pas non plus en manuel, je ne peux faire que des analyses de mon système. enfin, à force, je vais bien finir par trouver. allez, bon week-end et merci.
            0
        2. green day Modérateur
          Salut

          soucis avec kerio : possible, sinon change de parfeu, au pire des cas ...

          pour avg : tu peux aussi le désinstaller puis le réinstaller !

          bon WE !

          ++
          0
          1. cake aux fruits Auteur
            salut.
            j'ai résolu mon pb : c'est kerio qui me bloquait tout. je l'ai donc bloqué en attendant soit de trouver le hic du paramétrage soit de trouver un autre pare-feu. allez à+.
            0

        Discussions similaires

        infection
        céline0034

        12 réponses
        Infection
        toast3r

        44 réponses
        problème infection ?
        emma

        76 réponses
        Infection FileRepMetagen
        Fab8769

        9 réponses
        Infection Luckystarting
        @ssomw@r

        20 réponses