Popup Serwab et autre virus inconnu

volt999 Messages postés 98 Date d'inscription   Statut Membre Dernière intervention   -  
volt999 Messages postés 98 Date d'inscription   Statut Membre Dernière intervention   -
Bonjour,

depuis peux de temps, je suis infecté par des popup de Winantivirus pro 2006, Serwab, ...

Mais encore, mon ordi est très lent comparé à d'habitude.

Que dois-je faire?

D'avance merci pour votre aide
Configuration: Windows XP Edition familial SP2
Firefox 1.5.0.10

7 réponses

  1. Utilisateur anonyme
     
    Salut

    Télécharge ComboScan sur ton Bureau.
    http://www.techsupportforum.com/sectools/Deckard/comboscan.exe

    Ferme toutes les applications en cours.
    Double-clique sur comboscan.exe pour lancer l'outil.
    A la fenêtre de prévention, clique sur OK.
    L'analyse peut prendre quelques minutes.
    A la fenêtre indiquant la fin de l'analyse, clique sur OK.
    Le rapport Comboscan.txt s'affichera, copie et colle le raport ici stp
    0
  2. volt999 Messages postés 98 Date d'inscription   Statut Membre Dernière intervention   22
     
    ComboScan v20070226.18 run by Stéphane on 2007-03-01 at 12:00:16
    Computer is in Normal Mode.
    --------------------------------------------------------------------------------

    -- HijackThis (run as Stéphane.exe) ---------------------------------------------

    Logfile of HijackThis v1.99.1
    Scan saved at 12:00:18, on 01/03/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Avast\aswUpdSv.exe
    C:\Program Files\Avast\ashServ.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Avast\ashMaiSv.exe
    C:\Program Files\Avast\ashWebSv.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\htpatch.exe
    C:\WINDOWS\Anvshell.exe
    C:\WINDOWS\system32\LVCOMSX.EXE
    C:\PROGRA~1\Avast\ashDisp.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Documents and Settings\Stéphane\Bureau\comboscan.exe
    C:\DOCUME~1\STPHAN~1\Bureau\HIJACK~1\STPHAN~1.EXE

    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {0D6B220B-BAC0-4DF0-869B-4224BADE8CED} - C:\WINDOWS\system32\geebb.dll (file missing)
    O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} - C:\Program Files\Shareaza\Plugins\RazaWebHook.dll
    O2 - BHO: (no name) - {6A2F9A88-9B42-4C8D-9C62-C863A95A75B4} - C:\WINDOWS\system32\vtstu.dll
    O2 - BHO: (no name) - {C47A9554-195A-4769-9B13-04F15B450A39} - C:\WINDOWS\system32\rqrsspo.dll
    O2 - BHO: (no name) - {E03C740E-BB24-4d3c-B92A-6F84DE1DD99C} - C:\WINDOWS\system32\diqgdxke.dll (file missing)
    O2 - BHO: (no name) - {E316122B-3CFF-4F29-A02F-61F1D0962ECC} - C:\WINDOWS\system32\jkhfd.dll (file missing)
    O2 - BHO: (no name) - {EA4BA9F8-86F1-4ACA-B5CD-9ED4D62703EE} - C:\WINDOWS\system32\ddabc.dll (file missing)
    O4 - HKLM\..\Run: [HTpatch] C:\WINDOWS\htpatch.exe
    O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [anvshell] C:\WINDOWS\Anvshell.exe
    O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\Avast\ashDisp.exe
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O8 - Extra context menu item: Download with &Shareaza - res://C:\Program Files\Shareaza\Plugins\RazaWebHook.dll/3000
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
    O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
    O18 - Protocol: bw+0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw+0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
    O18 - Protocol: bwg0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwg0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
    O18 - Protocol: offline-8876480 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O20 - Winlogon Notify: rqrsspo - C:\WINDOWS\SYSTEM32\rqrsspo.dll
    O20 - Winlogon Notify: vtstu - C:\WINDOWS\system32\vtstu.dll
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
    O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Avast\aswUpdSv.exe
    O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Avast\ashServ.exe
    O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Avast\ashMaiSv.exe" /service (file missing)
    O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Avast\ashWebSv.exe" /service (file missing)
    O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: ASUS Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

    -- Files created between 2007-02-01 and 2007-03-01 ------------------------------

    2007-02-28 20:28:32 483670 ---hs---- C:\WINDOWS\system32\utstv.bak1<UTSTV~1.BAK>
    2007-02-28 20:28:25 282164 ---hs---- C:\WINDOWS\system32\vtstu.dll
    2007-02-28 18:34:02 0 d-------- C:\Documents and Settings\Stéphane\Application Data\SearchToolbarCorp<SEARCH~1>
    2007-02-28 18:07:15 0 d-------- C:\VundoFix Backups<VUNDOF~1>
    2007-02-26 20:22:49 0 d-------- C:\Program Files\Western Digital Technologies<WESTER~1>
    2007-02-25 17:42:27 26637 ---hs---- C:\WINDOWS\system32\rqrsspo.dll
    2007-02-25 17:17:39 0 d-------- C:\Documents and Settings\Stéphane\.trigger<TRIGGE~1>
    2007-02-25 16:31:00 0 d-------- C:\Program Files\metal oxide software<METALO~1>
    2007-02-25 12:19:52 0 d-------- C:\Documents and Settings\Stéphane\Application Data\OfficeUpdate12<OFFICE~1>
    2007-02-22 21:10:49 0 d-------- C:\Program Files\Ihsv
    2007-02-22 19:16:13 0 d--h----- C:\Documents and Settings\All Users\Application Data\CanonBJ
    2007-02-22 14:42:17 43176 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys
    2007-02-22 14:42:17 23352 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys
    2007-02-22 14:42:16 31560 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys
    2007-02-22 14:42:14 94424 --a------ C:\WINDOWS\system32\drivers\aswmon2.sys
    2007-02-22 14:42:14 85952 --a------ C:\WINDOWS\system32\drivers\aswmon.sys
    2007-02-22 14:42:07 90112 --a------ C:\WINDOWS\system32\AVASTSS.scr
    2007-02-22 14:42:07 689280 --a------ C:\WINDOWS\system32\aswBoot.exe
    2007-02-22 14:42:02 0 d-------- C:\Program Files\Avast
    2007-02-19 17:06:11 0 d-------- C:\Documents and Settings\Stéphane\Application Data\Lavasoft
    2007-02-19 17:05:40 0 d-------- C:\Program Files\Lavasoft
    2007-02-19 16:56:14 0 d-------- C:\Program Files\RegCleaner<REGCLE~1>
    2007-02-19 16:41:34 0 d-------- C:\Program Files\CCleaner
    2007-02-17 10:38:15 119568 --a------ C:\WINDOWS\system32\VB6FR.DLL
    2007-02-15 13:10:27 0 d-------- C:\Documents and Settings\Stéphane\.jpi_cache<JPI_CA~1>
    2007-02-15 13:10:27 0 d-------- C:\Documents and Settings\Stéphane\.java<JAVA~1>
    2007-02-06 13:02:01 6016 --a------ C:\WINDOWS\system32\drivers\vnccom.SYS
    2007-02-06 13:01:38 5760 --a------ C:\WINDOWS\system32\vnchelp.dll
    2007-02-06 13:01:38 12800 --a------ C:\WINDOWS\system32\vncdrv.dll
    2007-02-06 13:01:38 4736 --a------ C:\WINDOWS\system32\drivers\vncdrv.sys
    2007-02-03 18:55:28 0 d-------- C:\Documents and Settings\Léo\Application Data\AdobeUM
    2007-02-03 18:22:39 0 d-------- C:\Documents and Settings\All Users\Application Data\BOONTY
    2007-02-03 18:22:34 0 d-------- C:\Program Files\Fichiers communs\BOONTY Shared<BOONTY~1>
    2007-02-03 18:22:05 0 d-------- C:\Program Files\Boonty
    2007-02-03 18:11:37 0 d-------- C:\Documents and Settings\Justine\Application Data\Help
    2007-02-01 18:14:51 0 d-------- C:\Program Files\MultiProxy<MULTIP~1>

    -- Find3M Report ----------------------------------------------------------------

    2007-03-01 11:52:06 0 d-------- C:\Program Files\Mozilla Firefox<MOZILL~1>
    2007-02-26 20:22:53 0 d---s---- C:\Documents and Settings\Stéphane\Application Data\Microsoft<MICROS~1>
    2007-02-25 14:05:55 0 d-------- C:\Documents and Settings\Stéphane\Application Data\Adobe
    2007-02-22 14:39:18 0 d-------- C:\Program Files\Grisoft
    2007-02-22 14:37:39 0 d-------- C:\Program Files\Fichiers communs\Adobe
    2007-02-22 08:48:36 0 d-------- C:\Documents and Settings\Stéphane\Application Data\AdobeUM
    2007-02-17 18:07:44 0 d-------- C:\Documents and Settings\Stéphane\Application Data\OpenOffice.org2<OPENOF~1.ORG>
    2007-02-03 18:38:39 0 d-------- C:\Program Files\Shareaza
    2007-02-03 18:22:34 0 d-------- C:\Program Files\Fichiers communs<FICHIE~1>
    2007-01-29 19:59:59 0 d-------- C:\Program Files\Astase
    2007-01-29 09:58:06 60416 -----n--- C:\WINDOWS\system32\tzchange.exe
    2007-01-22 17:37:54 0 d-------- C:\Program Files\SuperScan<SUPERS~1>
    2007-01-19 20:14:16 0 d-------- C:\Program Files\HEXWORKS
    2007-01-10 20:18:55 233472 --a------ C:\WINDOWS\system32\ILDA32.dll
    2007-01-10 20:07:34 0 d-------- C:\Program Files\Programmation<PROGRA~1>
    2007-01-10 19:44:32 0 d-------- C:\Program Files\Windows Media Connect 2<WINDOW~4>
    2007-01-08 11:56:50 0 d-------- C:\Program Files\OpenOffice.org 2.1<OPENOF~1.1>
    2006-12-19 22:49:47 135168 --a------ C:\WINDOWS\system32\shsvcs.dll
    2006-12-19 19:17:50 334336 --a------ C:\WINDOWS\system32\wiaservc.dll

    -- Registry Dump ----------------------------------------------------------------

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
    "ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.exe"

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
    "HTpatch"="C:\\WINDOWS\\htpatch.exe"
    "SiSUSBRG"="C:\\WINDOWS\\SiSUSBrg.exe"
    "NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\System32\\NvCpl.dll,NvStartup"
    "anvshell"="C:\\WINDOWS\\Anvshell.exe"
    "LVCOMSX"="C:\\WINDOWS\\system32\\LVCOMSX.EXE"
    "avast!"="C:\\PROGRA~1\\Avast\\ashDisp.exe"

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\IMAIL]
    "Installed"="1"

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MAPI]
    "Installed"="1"
    "NoChange"="1"

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\OptionalComponents\MSFS]
    "Installed"="1"

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
    "{C47A9554-195A-4769-9B13-04F15B450A39}"=""

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
    "WPDShServiceObj"="{AAA288BA-9A4C-45B0-95D7-94D524869DB5}"

    HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\rqrsspo
    HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\vtstu

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
    "SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"

    [HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost]
    LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0
    NetworkService REG_MULTI_SZ DnsCache\0\0
    rpcss REG_MULTI_SZ RpcSs\0\0
    imgsvc REG_MULTI_SZ StiSvc\0\0
    termsvcs REG_MULTI_SZ TermService\0\0
    HTTPFilter REG_MULTI_SZ HTTPFilter\0\0
    DcomLaunch REG_MULTI_SZ DcomLaunch\0TermService\0\0
    WudfServiceGroup REG_MULTI_SZ WUDFSvc\0\0

    *newlycreated* - HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\LEGACY_WINIO

    -- End of ComboScan: finished at 2007-03-01 at 12:01:33 -------------------------

    Voilà pour le rapport, encore merci bien pour votre aide.
    Je me connais assez en info mais la je sèche.
    Merci encore
    0
  3. Utilisateur anonyme
     
    ¤ Relance HijackThis, choisis "do a scan only" coche la case devant les lignes ci-dessous et clic en bas sur "fix checked"

    O2 - BHO: (no name) - {0D6B220B-BAC0-4DF0-869B-4224BADE8CED} - C:\WINDOWS\system32\geebb.dll (file missing)
    O2 - BHO: (no name) - {6A2F9A88-9B42-4C8D-9C62-C863A95A75B4} - C:\WINDOWS\system32\vtstu.dll
    O2 - BHO: (no name) - {C47A9554-195A-4769-9B13-04F15B450A39} - C:\WINDOWS\system32\rqrsspo.dll
    O2 - BHO: (no name) - {E03C740E-BB24-4d3c-B92A-6F84DE1DD99C} - C:\WINDOWS\system32\diqgdxke.dll (file missing)
    O2 - BHO: (no name) - {E316122B-3CFF-4F29-A02F-61F1D0962ECC} - C:\WINDOWS\system32\jkhfd.dll (file missing)
    O2 - BHO: (no name) - {EA4BA9F8-86F1-4ACA-B5CD-9ED4D62703EE} - C:\WINDOWS\system32\ddabc.dll (file missing)
    O20 - Winlogon Notify: rqrsspo - C:\WINDOWS\SYSTEM32\rqrsspo.dll
    O20 - Winlogon Notify: vtstu - C:\WINDOWS\system32\vtstu.dll

    ¤ Désinstalle ce logiciel inutile ta cam en a pas besoin pour fonctionner

    - Desktop Messenger

    ¤ Retélécharge VundoFix (ne l'exécute pas)
    http://www.atribune.org/ccount/click.php?id=4

    Redémarre ton PC. Dès l'allumage de celui-ci tapote la touche F8 (ou F5 si F8 ne fonctionne pas), à l'écran qui va apparaître choisis "mode sans echec" attends un peu..

    double clic dessus choisis "start for vundo"
    attends quelques minutes, quand le scan est terminé clic sur "remove vundo"
    un message te demandera si tu veux supprimes les fichiers sur "yes"
    Quand il a terminé, clic sur "yes" ton ordinateur devrait redemarrer sinon, fais le par toit même
    Une fois qu'il a redemarré colle le rapport C:\vundofix.txt et un nouveau rapport hijackthis stp

    A++

    0
  4. volt999 Messages postés 98 Date d'inscription   Statut Membre Dernière intervention   22
     
    Bon, dans le dossier Hijackthis il y a Hijackthis.exe et Stéphane.exe

    Donc voilà le rapport de Stéphane.exe:
    Logfile of HijackThis v1.99.1
    Scan saved at 13:00:59, on 01/03/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Avast\aswUpdSv.exe
    C:\Program Files\Avast\ashServ.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Avast\ashMaiSv.exe
    C:\Program Files\Avast\ashWebSv.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\htpatch.exe
    C:\WINDOWS\Anvshell.exe
    C:\WINDOWS\system32\LVCOMSX.EXE
    C:\PROGRA~1\Avast\ashDisp.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Documents and Settings\Stéphane\Bureau\hijackthis\Stéphane.exe

    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: Shareaza Web Download Hook - {0EEDB912-C5FA-486F-8334-57288578C627} - C:\Program Files\Shareaza\Plugins\RazaWebHook.dll
    O2 - BHO: (no name) - {6A2F9A88-9B42-4C8D-9C62-C863A95A75B4} - C:\WINDOWS\system32\vtstu.dll
    O2 - BHO: (no name) - {C47A9554-195A-4769-9B13-04F15B450A39} - C:\WINDOWS\system32\rqrsspo.dll
    O4 - HKLM\..\Run: [HTpatch] C:\WINDOWS\htpatch.exe
    O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [anvshell] C:\WINDOWS\Anvshell.exe
    O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\Avast\ashDisp.exe
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O8 - Extra context menu item: Download with &Shareaza - res://C:\Program Files\Shareaza\Plugins\RazaWebHook.dll/3000
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
    O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
    O20 - Winlogon Notify: rqrsspo - C:\WINDOWS\SYSTEM32\rqrsspo.dll
    O20 - Winlogon Notify: vtstu - C:\WINDOWS\system32\vtstu.dll
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
    O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Avast\aswUpdSv.exe
    O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Avast\ashServ.exe
    O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Avast\ashMaiSv.exe" /service (file missing)
    O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Avast\ashWebSv.exe" /service (file missing)
    O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: ASUS Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

    ++++++++++Et celui de Hijackthis.exe++++++++++

    Logfile of HijackThis v1.99.1
    Scan saved at 12:56:05, on 01/03/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Avast\aswUpdSv.exe
    C:\Program Files\Avast\ashServ.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Avast\ashMaiSv.exe
    C:\Program Files\Avast\ashWebSv.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\htpatch.exe
    C:\WINDOWS\Anvshell.exe
    C:\WINDOWS\system32\LVCOMSX.EXE
    C:\PROGRA~1\Avast\ashDisp.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Documents and Settings\Stéphane\Bureau\hijackthis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    O4 - HKLM\..\Run: [HTpatch] C:\WINDOWS\htpatch.exe
    O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [anvshell] C:\WINDOWS\Anvshell.exe
    O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\Avast\ashDisp.exe
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O8 - Extra context menu item: Download with &Shareaza - res://C:\Program Files\Shareaza\Plugins\RazaWebHook.dll/3000
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
    O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
    O18 - Protocol: bw+0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw+0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
    O18 - Protocol: bwg0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwg0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0s - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
    O18 - Protocol: offline-8876480 - {0E30F073-E216-4A2D-8564-36DDA8A43828} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Avast\aswUpdSv.exe
    O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Avast\ashServ.exe
    O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Avast\ashMaiSv.exe" /service (file missing)
    O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Avast\ashWebSv.exe" /service (file missing)
    O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: ASUS Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

    Voilà maintenent je redémarre en sans échec et je poste le futur rapport de vundo

    Merci bien
    0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. volt999 Messages postés 98 Date d'inscription   Statut Membre Dernière intervention   22
     
    Voilà le rapport VundoFix

    VundoFix V6.3.9

    Checking Java version...

    Scan started at 18:07:15 28/02/2007

    Listing files found while scanning....

    C:\WINDOWS\system32\awyqcnnk.dll
    C:\WINDOWS\system32\dfhkj.bak1
    C:\WINDOWS\system32\dfhkj.ini
    C:\WINDOWS\system32\jkhfd.dll
    C:\WINDOWS\system32\weotoygr.dll

    Beginning removal...

    Attempting to delete C:\WINDOWS\system32\dfhkj.bak1
    C:\WINDOWS\system32\dfhkj.bak1 Has been deleted!

    Attempting to delete C:\WINDOWS\system32\dfhkj.ini
    C:\WINDOWS\system32\dfhkj.ini Has been deleted!

    Attempting to delete C:\WINDOWS\system32\jkhfd.dll
    C:\WINDOWS\system32\jkhfd.dll Has been deleted!

    Attempting to delete C:\WINDOWS\system32\weotoygr.dll
    C:\WINDOWS\system32\weotoygr.dll Has been deleted!

    Performing Repairs to the registry.
    Done!

    VundoFix V6.3.9

    Checking Java version...

    Scan started at 18:28:50 28/02/2007

    Listing files found while scanning....

    C:\Documents and settings\Stéphane\Application Data\SearchToolbarCorp\Toolbar Vision\PageHistory.txt
    C:\Documents and settings\Stéphane\Application Data\SearchToolbarCorp\Toolbar Vision\WebHistory.txt
    C:\WINDOWS\system32\awyqcnnk.dll
    C:\WINDOWS\system32\bbeeg.bak1
    C:\WINDOWS\system32\bbeeg.ini
    C:\WINDOWS\system32\cjdglbmm.dll
    C:\WINDOWS\system32\crtexqid.dll
    C:\WINDOWS\system32\diqgdxke.dll
    C:\WINDOWS\system32\geebb.dll
    C:\WINDOWS\system32\mmblgdjc.ini
    C:\WINDOWS\system32\yoiitkji.exe

    Beginning removal...

    Attempting to delete C:\Documents and settings\Stéphane\Application Data\SearchToolbarCorp\Toolbar Vision\PageHistory.txt
    C:\Documents and settings\Stéphane\Application Data\SearchToolbarCorp\Toolbar Vision\PageHistory.txt Has been deleted!

    Attempting to delete C:\Documents and settings\Stéphane\Application Data\SearchToolbarCorp\Toolbar Vision\WebHistory.txt
    C:\Documents and settings\Stéphane\Application Data\SearchToolbarCorp\Toolbar Vision\WebHistory.txt Has been deleted!

    Attempting to delete C:\WINDOWS\system32\bbeeg.bak1
    C:\WINDOWS\system32\bbeeg.bak1 Has been deleted!

    Attempting to delete C:\WINDOWS\system32\bbeeg.ini
    C:\WINDOWS\system32\bbeeg.ini Has been deleted!

    Attempting to delete C:\WINDOWS\system32\cjdglbmm.dll
    C:\WINDOWS\system32\cjdglbmm.dll Has been deleted!

    Attempting to delete C:\WINDOWS\system32\diqgdxke.dll
    C:\WINDOWS\system32\diqgdxke.dll Has been deleted!

    Attempting to delete C:\WINDOWS\system32\geebb.dll
    C:\WINDOWS\system32\geebb.dll Has been deleted!

    Attempting to delete C:\WINDOWS\system32\mmblgdjc.ini
    C:\WINDOWS\system32\mmblgdjc.ini Has been deleted!

    Attempting to delete C:\WINDOWS\system32\yoiitkji.exe
    C:\WINDOWS\system32\yoiitkji.exe Has been deleted!

    Performing Repairs to the registry.
    Done!

    VundoFix V6.3.9

    Checking Java version...

    Scan started at 18:52:18 28/02/2007

    Listing files found while scanning....

    C:\Program Files\VSAdd-in\VSAdd-in.dll
    C:\WINDOWS\system32\diqgdxke.dll

    Beginning removal...

    Performing Repairs to the registry.
    Done!

    VundoFix V6.3.9

    Checking Java version...

    Scan started at 19:24:22 28/02/2007

    Listing files found while scanning....

    C:\WINDOWS\system32\cbadd.bak1
    C:\WINDOWS\system32\cbadd.ini
    C:\WINDOWS\system32\ddabc.dll
    C:\WINDOWS\system32\diqgdxke.dll

    Beginning removal...

    Attempting to delete C:\WINDOWS\system32\cbadd.bak1
    C:\WINDOWS\system32\cbadd.bak1 Has been deleted!

    Attempting to delete C:\WINDOWS\system32\cbadd.ini
    C:\WINDOWS\system32\cbadd.ini Has been deleted!

    Attempting to delete C:\WINDOWS\system32\ddabc.dll
    C:\WINDOWS\system32\ddabc.dll Has been deleted!

    Performing Repairs to the registry.
    Done!

    VundoFix V6.3.9

    Checking Java version...

    Scan started at 13:07:00 01/03/2007

    Listing files found while scanning....

    C:\WINDOWS\system32\utstv.bak1
    C:\WINDOWS\system32\utstv.ini
    C:\WINDOWS\system32\vtstu.dll

    Beginning removal...

    Attempting to delete C:\WINDOWS\system32\utstv.bak1
    C:\WINDOWS\system32\utstv.bak1 Has been deleted!

    Attempting to delete C:\WINDOWS\system32\utstv.ini
    C:\WINDOWS\system32\utstv.ini Has been deleted!

    Attempting to delete C:\WINDOWS\system32\vtstu.dll
    C:\WINDOWS\system32\vtstu.dll Could not be deleted.

    Performing Repairs to the registry.
    Done!

    Beginning removal...

    Attempting to delete C:\WINDOWS\system32\utstv.ini
    C:\WINDOWS\system32\utstv.ini Has been deleted!

    Attempting to delete C:\WINDOWS\system32\vtstu.dll
    C:\WINDOWS\system32\vtstu.dll Has been deleted!

    Performing Repairs to the registry.
    Done!

    Merci d'avance
    0
  7. Utilisateur anonyme
     
    Très bien
    Peux tu remettre un rapport hijackthis stp (hijackthis.exe l'autre tu peux le jeter)
    0
  8. volt999 Messages postés 98 Date d'inscription   Statut Membre Dernière intervention   22
     
    Logfile of HijackThis v1.99.1
    Scan saved at 21:28:39, on 01/03/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Avast\aswUpdSv.exe
    C:\Program Files\Avast\ashServ.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Avast\ashMaiSv.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Avast\ashWebSv.exe
    C:\WINDOWS\System32\alg.exe
    C:\WINDOWS\htpatch.exe
    C:\WINDOWS\Anvshell.exe
    C:\WINDOWS\system32\LVCOMSX.EXE
    C:\PROGRA~1\Avast\ashDisp.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\htpatch.exe
    C:\WINDOWS\Anvshell.exe
    C:\WINDOWS\system32\LVCOMSX.EXE
    C:\PROGRA~1\Avast\ashDisp.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\Messenger\msmsgs.exe
    C:\Program Files\Mozilla Firefox\firefox.exe
    C:\Documents and Settings\Stéphane\Bureau\hijackthis\HijackThis.exe

    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    O4 - HKLM\..\Run: [HTpatch] C:\WINDOWS\htpatch.exe
    O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exe
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [anvshell] C:\WINDOWS\Anvshell.exe
    O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\Avast\ashDisp.exe
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O8 - Extra context menu item: Download with &Shareaza - res://C:\Program Files\Shareaza\Plugins\RazaWebHook.dll/3000
    O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\WINDOWS\System32\msjava.dll
    O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
    O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Avast\aswUpdSv.exe
    O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Avast\ashServ.exe
    O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Avast\ashMaiSv.exe" /service (file missing)
    O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Avast\ashWebSv.exe" /service (file missing)
    O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
    O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
    O23 - Service: ASUS Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

    Voilà, mais j'ai du mettre Do a system scan only car l'autre quand il a fini ben il plante.

    Merci beaucoup pour votre aide...

    Entre parenthèse quand j'ai ouvert commentcamarche.net une popup de winantivirus pro 2006 c'est ouverte)
    0

Discussions similaires

Chrome://newtab
Nova -
snoopy35_ -

14 réponses
Softonic,est-ce un virus ?
techmel1 -
techmel1 -

6 réponses
Désinstaller Softonic
Diguimette -
lilidurhone -

5 réponses
MMS d'un numéro inconnu
Akiss72899 -
Akiss72899 -

4 réponses
snapchatteur inconnu
Amelie -
Damien -

2 réponses