Help pour killbox please !

Résolu
brieg -  
bonsoir à tous,

je suis actuellement infecté par des fenêtres intempestives de drive cleaner et autres win anti virus, ...
j'ai essayé de respecter les conseils donnés dans les astuces afin de résoudre mon soucis mais je bloque quand à l'utilisation de killbox.exe !

voici l'infection :

03/05/07 18:47:29 [Info]: BlackLight Engine 1.0.55 initialized
03/05/07 18:47:29 [Info]: OS: 5.1 build 2600 (Service Pack 2)
03/05/07 18:47:29 [Note]: 7019 4
03/05/07 18:47:29 [Note]: 7005 0
03/05/07 18:47:33 [Note]: 7006 0
03/05/07 18:47:33 [Note]: 7011 1876
03/05/07 18:47:33 [Note]: 7026 0
03/05/07 18:47:33 [Note]: 7026 0
03/05/07 18:47:34 [Note]: 7024 3
03/05/07 18:47:34 [Info]: Hidden process: C:\windows\system32\czpguravti.exe
03/05/07 18:47:50 [Note]: FSRAW library version 1.7.1021
03/05/07 18:54:01 [Info]: Hidden file: c:\WINDOWS\system32\czpguravti.dat
03/05/07 18:54:01 [Note]: 10002 1
03/05/07 18:54:01 [Info]: Hidden file: C:\windows\system32\czpguravti.exe
03/05/07 18:54:01 [Note]: 10002 1
03/05/07 18:54:01 [Info]: Hidden file: c:\WINDOWS\system32\czpguravti_nav.dat
03/05/07 18:54:01 [Note]: 10002 1
03/05/07 18:54:02 [Info]: Hidden file: c:\WINDOWS\system32\czpguravti_navps.dat
03/05/07 18:54:02 [Note]: 10002 1
03/05/07 18:55:57 [Note]: 2000 1012

je n'arrive malheureusement pas à accéder ou à respecter la procédure du traitement par killbox !

Voilà, un grand merci d'avance à la personne qui pourra se pencher sur mon soucis !
--
je crois bien que je suis meilleur nageur sur le net que surfeur du net !
Configuration: Windows XP
Internet Explorer 7.0

32 réponses

Résumé de la discussion

Un utilisateur rencontre une infection sous Windows XP provoquant des fenêtres intempestives de Drive Cleaner et d'outils anti-virus, et a du mal à suivre la procédure avec killbox.exe. Plusieurs éléments du fil évoquent des symptômes typiques: processus et fichiers masqués, et des rapports HijackThis détaillant des composants réseau et des extensions de navigateur, rendant l'infection tenace. La réponse centrale propose CCleaner et des protections complémentaires (AVG, Ad-Aware, SpyBot, Windows Defender) et d'évaluer l’efficacité de Defender, tout en analysant le log HijackThis pour identifier les éléments de démarrage et les barres d’outils. Des échanges complémentaires soulignent toutefois que certaines configurations anciennes peuvent accroître la complexité des nettoyages et incitent à évaluer des solutions adaptées à Windows XP.

Bobot (l’IA à votre service)
  1. balltrap34 Contributeur sécurité
    salut
    Telecharge ceci
    Kill Box :

    http://www.downloads.subratam.org/KillBox.exe

    demo http://perso.orange.fr/rginformatique/section%20virus/killbox.htm
    utilise le avec la methode bloc note (voir demo)
    avec ceci
    C:\windows\system32\czpguravti.exe
    c:\WINDOWS\system32\czpguravti.dat
    c:\WINDOWS\system32\czpguravti_nav.dat
    c:\WINDOWS\system32\czpguravti_navps.dat



    ensuite redemarre et refait un rapport blacklite
    1. brieg Auteur
      merci pour ton message balltrap 34,

      le soucis, c'est que lorsque j'appuie sur la croix rouge et blanche, le message qui apparaît est :

      " PendingFileRenameOpérations Registry Data has been Removed by External Process ! "

      Quelle étape ai-je donc due rater ?

      toujours est-il que je bloque ici !

      Quand dois je coller le rapport du bloc note ? Est-ce que tout doit apparaître dans la ligne du chemin de suppression des fichiers ?
      et enfin dois je être en "désactivation de restauration du systeme" ?

      merci d'avance

      brieg
      1. brieg Auteur
        Je m'enerve, impossible de supprimer ces satanés fichiers !!!

        je ne comprends plus rien, pourtant j'ai l'impression de respecter les étapes !!!!

        Si quelqu'un se sent d'attaque à me filer un p'tit coup de pouce, ce serait avec joie ! merci

        1. brieg Auteur
          voici un rapport, si cela peu aider :

          Logfile of HijackThis v1.99.1
          Scan saved at 11:02:01, on 06/03/2007
          Platform: Windows XP SP2 (WinNT 5.01.2600)
          MSIE: Internet Explorer v7.00 (7.00.6000.16414)

          Running processes:
          C:\WINDOWS\System32\smss.exe
          C:\WINDOWS\system32\winlogon.exe
          C:\WINDOWS\system32\services.exe
          C:\WINDOWS\system32\lsass.exe
          C:\WINDOWS\system32\Ati2evxx.exe
          C:\WINDOWS\system32\svchost.exe
          C:\Program Files\Windows Defender\MsMpEng.exe
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\system32\spoolsv.exe
          C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
          C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
          C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
          C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
          C:\WINDOWS\system32\slserv.exe
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\wanmpsvc.exe
          C:\WINDOWS\system32\Ati2evxx.exe
          C:\WINDOWS\Explorer.EXE
          C:\apps\ABoard\ABoard.exe
          C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
          H:\Program files\HP\HP Software Update\HPWuSchd2.exe
          C:\apps\ABoard\AOSD.exe
          C:\WINDOWS\system32\LVCOMSX.EXE
          C:\Program Files\Logitech\Video\LogiTray.exe
          C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
          C:\program files\quicktime\qttask.exe
          C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
          C:\Program Files\Fichiers communs\DriveCleaner 2006 Free\SDRmon.exe
          C:\Program Files\Windows Defender\MSASCui.exe
          C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
          C:\WINDOWS\system32\ctfmon.exe
          C:\Program Files\Messenger\msmsgs.exe
          C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
          C:\PROGRA~1\MSNMES~1\msnmsgr.exe
          H:\Program files\HP\Digital Imaging\bin\hpqtra08.exe
          C:\Program Files\Logitech\Video\FxSvr2.exe
          C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearch.exe
          C:\Program Files\WinZip\WZQKPICK.EXE
          C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearchIndexer.exe
          H:\Program files\HP\Digital Imaging\bin\hpqgalry.exe
          C:\Program Files\HP\hpcoretech\comp\hptskmgr.exe
          C:\Program Files\MSN Messenger\livecall.exe
          C:\Program Files\MSN Messenger\usnsvc.exe
          C:\Program Files\Internet Explorer\iexplore.exe
          C:\Documents and Settings\Brieg\Mes documents\HijackThis.exe

          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.aliceadsl.fr/webmail
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
          R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Alice ADSL
          R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = ;localhost;<local>
          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
          R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
          O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
          O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
          O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
          O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
          O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
          O2 - BHO: Barre d'outils MSN Search Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll
          O3 - Toolbar: Barre d'outils MSN Search - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll
          O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
          O4 - HKLM\..\Run: [ATIPTA] C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
          O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe
          O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon
          O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
          O4 - HKLM\..\Run: [HP Software Update] H:\Program files\HP\HP Software Update\HPWuSchd2.exe
          O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
          O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
          O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
          O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
          O4 - HKLM\..\Run: [QuickTime Task] "C:\program files\quicktime\qttask.exe" -atboottime
          O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
          O4 - HKLM\..\Run: [czpguravti] c:\windows\system32\czpguravti.exe czpguravti
          O4 - HKLM\..\Run: [SDR6V_Check] "C:\Program Files\Fichiers communs\DriveCleaner 2006 Free\SDRmon.exe"
          O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -masquer
          O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
          O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
          O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
          O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
          O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
          O4 - HKCU\..\Run: [msnmsgr] "C:\PROGRA~1\MSNMES~1\msnmsgr.exe" /background
          O4 - Startup: TribalWeb.net.lnk = C:\Program Files\TribalWeb.net\tribalweb.exe
          O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = H:\Program files\HP\Digital Imaging\bin\hpqthb08.exe
          O4 - Global Startup: HP Digital Imaging Monitor.lnk = H:\Program files\HP\Digital Imaging\bin\hpqtra08.exe
          O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
          O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
          O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearch.exe
          O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
          O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll/search.htm
          O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fr-fr\msntabres.dll/229?abb31c9905842b293c4e271548c4f2
          O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fr-fr\msntabres.dll/230?abb31c9905842b293c4e271548c4f2
          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
          O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
          O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
          O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
          O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
          O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O11 - Options group: [INTERNATIONAL] International*
          O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
          O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
          O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - http://www.bitdefender.fr/scan8/oscan8.cab
          O17 - HKLM\System\CCS\Services\Tcpip\..\{F16483DE-9E85-4CD6-92D7-BDDD70A5971A}: NameServer = 212.216.212.112,212.216.172.62
          O18 - Protocol: bw+0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw+0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw-0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw-0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw00 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw00s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw10 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw10s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw20 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw20s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw30 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw30s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw40 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw40s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw50 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw50s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw60 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw60s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw70 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw70s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw80 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw80s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw90 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw90s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwa0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwa0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwb0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwb0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwc0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwc0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwd0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwd0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwe0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwe0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwf0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwf0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
          O18 - Protocol: bwg0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwg0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwh0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwh0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwi0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwi0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwj0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwj0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwk0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwk0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwl0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwl0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwm0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwm0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwn0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwn0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwo0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwo0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwp0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwp0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwq0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwq0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwr0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwr0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bws0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bws0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwt0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwt0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwu0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwu0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwv0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwv0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bww0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bww0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwx0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwx0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwy0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwy0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwz0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwz0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
          O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
          O18 - Protocol: offline-8876480 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
          O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
          O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
          O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
          O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
          O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
          O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
          O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
          O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
          O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
          O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
          O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

          2. Regis59 Contributeur sécurité
            Salut,

            Balltrap a perdu la main mdr

            Prends connaissance du contenu le lien suivant:
            http://www.f-secure.com/products/license-terms/eult_fra.pdf
            Tu as donc pris connaissance et accepté les conditions d'utilisations du programme blacklight qui est inclus dans le dossier compressé navilog1.zip que tu vas télécharger.
            Maintenant fais un clic droit sur ce lien :
            http://perso.orange.fr/il.mafioso/Navifix/navilog1.zip
            Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau.
            Fais un clic droit sur navilog1.zip et choisis "tout extraire"
            Ensuite double clique sur navilog1.bat
            Laisses-toi guider. Au menu principal, choisis 1 et valides.
            (ne fais pas le choix 2 sans notre avis/accord)
            Patientes jusqu'au message :
            *** Analyse Termine le ..... ***
            Appuies sur une touche comme demandé, le blocnote va s'ouvrir.
            Copies-colles l'intégralité dans une réponse. Refermes le blocnote.
            Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)
            1. brieg Auteur
              merci de m'accorder un peu de temps, j'attends que le scan se finisse et j'envois le rapport !
              1. brieg Auteur
                voici donc le résultat du scan :

                Search Navipromo version 1.0.5 commencé le 06/03/2007 à 11:08:27,87

                !!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
                !!! Poster ce rapport sur le forum pour le faire analyser !!!
                !!! Ne pas lancer la partie désinfection sans l'avis d'un spécialiste !!!

                Fix lancé depuis C:\Documents and Settings\Brieg\Bureau
                Mise a jour le 03.03.2007 a 23h00 by IL-MAFIOSO

                Executé en mode normal

                *** Recherche Programmes installes ***

                *** Recherche dossiers dans C:\WINDOWS ***

                *** Recherche dossiers dans C:\Program Files ***

                *** Recherche dossiers dans C:\Documents and Settings\All Users\Application Data ***

                *** Recherche dossiers dans C:\Documents and Settings\Brieg\Application Data ***

                *** Recherche avec BlackLight Engine/F-secure ***
                BlackLight Engine est un produit de F-secure, pour + d'infos :
                https://www.f-secure.com/en

                F-SECURE BLACKLIGHT ROOTKIT ELIMINATOR
                ======================================

                Copyright 2005-2006 F-Secure Corporation. All rights reserved.
                This is a beta version. It will expire on 1st of April, 2007.
                Version information: 2.2.1055.

                [+] Started on 03/06/07 at 11:08:29.
                [+] Initializing ...
                [+] Starting scan, press Ctrl-C to abort.
                [+] Scanning for hidden items ...........................................................................
                [+] Scan complete.
                [+] Summary: 0 hidden item(s) found, 0 scheduled for renaming.
                [+] Exited on 03/06/07 at 11:16:44 (return code = 0).

                *** Recherche fichiers ***

                C:\WINDOWS\pack.epk trouvé !
                C:\WINDOWS\system32\nvs2.inf trouvé !

                *** Recherche cles registre ***

                Recharche dans [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs]

                Recharche dans [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage]

                Recherche Clé Magic Control

                HKEY_CURRENT_USER\Software\Lanconfig trouvé !
                HKEY_USERS\S-1-5-21-2704665550-2350795788-713953497-1008\Software\Lanconfig trouvé !

                *** Module de recherche complémentaire ***
                (recherche fichiers spécifiques)

                1)Recherche nouveaux fichiers connus:

                2)Recherche Heuristique :
                *
                **
                ***
                ****

                *** Analyse Terminé le 06/03/2007 à 11:16:57,79 ***
                1. Regis59 Contributeur sécurité
                  Re,

                  Pas de problemes ;)
                  Mon ami balltrap doit surrement travailler donc je vais l avancer un peu :)

                  ¤Démarre en mode sans échec :
                  Pour cela, tu tapotes la touche F8 dès le début de l’allumage du pc sans t’arrêter
                  Une fenêtre va s’ouvrir tu te déplaces avec les flèches du clavier sur démarrer en mode sans échec puis tape entrée.
                  Une fois sur le bureau s’il n’y a pas toutes les couleurs et autres c’est normal !
                  (Si F8 ne marche pas utilise la touche F5).

                  Double clique sur navilog1.bat
                  Laisses-toi guider. Au menu principal, choisis 3 et valides.
                  Indique le mode de nettoyage "automatique"
                  Laisses toi guider et réponds aux questions éventuelles
                  Ton bureau va disparaitre, c'est normal.
                  Patientes jusqu'au message :
                  *** Nettoyage Termine le ..... ***
                  Appuies sur une touche comme demandé, le blocnote va s'ouvrir.
                  Sauvegardes le rapport de manière à le retrouver
                  Refermes le blocnote. Ton bureau va réapparaitre
                  Redémarres normalement et copies-colles l'intégralité dans une réponse.
                  Le rapport est en outre sauvegardé à la racine du disque (cleannavi.txt)

                  PS:Si ton bureau ne réapparait pas, fais CTRL+ALT+SUPP pour ouvrir le gestionnaire de tâches.
                  Puis rends-toi à l'onglet "processus". Cliques en haut à gauche sur fichiers et choisis "exécuter"
                  Tapes explorer et valides. Celà te fera apparaitre ton bureau
                  1. brieg Auteur
                    excuse moi Régis 59, je vais te paraître légérement "golio" mais je ne trouve pas "mode sans echec" et ce n'est pas de la mauvaise volonté !

                    f8, c'est Device avec les différents lecteurs (cd et dvd) ainsi que IDE1 et IDE0
                    f5, c'est bbios setup je crois,

                    ensuite je ne comprends pas quelle manip effectuer !

                    désolé
                    2. brieg Auteur
                      voici donc le rapport suite au démarrage en mode sans echec :

                      Clean Navipromo version 1.0.5 commencé le 06/03/2007 à 11:50:12,20

                      Fix lancé depuis C:\Documents and Settings\Brieg\Bureau
                      Mise a jour le 03.03.2007 a 23h00 by IL-MAFIOSO

                      Executé en mode sans echec

                      Mode suppression automatique avec prise en charge résultats Blacklight

                      *** fsbl1.txt non trouvé ***
                      (Assurez-vous que Blacklight n'avait rien trouvé lors de la recherche)

                      *** Suppression dossiers dans C:\WINDOWS ***

                      *** Suppression dossiers dans C:\Program Files ***

                      *** Suppression dossiers dans C:\Documents and Settings\All Users\Application Data ***

                      *** Suppression dossiers dans C:\Documents and Settings\Brieg\Application Data ***

                      *** Suppression fichiers ***

                      C:\WINDOWS\pack.epk supprimé !
                      C:\WINDOWS\system32\nvs2.inf supprimé !

                      *** Suppression fichiers temporaires ***

                      Nettoyage contenu C:\WINDOWS\Temp effectué !
                      Nettoyage contenu C:\Documents and Settings\Brieg\Local Settings\Temp effectué !

                      *** Sauvegarde du registre vers dossier Backupnavi***

                      sauvegarde du registre réalisée avec succès !

                      *** Nettoyage registre ***

                      Nettoyage registre Ok

                      *** Traitement Recherche complémentaire ***

                      1)Recherche/Suppressions nouveaux fichiers connus:

                      2)Recherche Heuristique (Fichiers à supprimer si nécéssaire):
                      *
                      **
                      ***
                      ****

                      *** Nettoyage termine le 06/03/2007 à 11:51:01,39 ***

                      1. brieg Auteur
                        bonjour,

                        Je viens de refaire un scan avec black light, 0 items founds, est-ce bon signe ?

                        je l'éspère en tout cas !

                        je reposte quand même un rapport au cas où, pour avoir votre avis, merci d'avance :

                        Logfile of HijackThis v1.99.1
                        Scan saved at 12:55:27, on 06/03/2007
                        Platform: Windows XP SP2 (WinNT 5.01.2600)
                        MSIE: Internet Explorer v7.00 (7.00.6000.16414)

                        Running processes:
                        C:\WINDOWS\System32\smss.exe
                        C:\WINDOWS\system32\winlogon.exe
                        C:\WINDOWS\system32\services.exe
                        C:\WINDOWS\system32\lsass.exe
                        C:\WINDOWS\system32\Ati2evxx.exe
                        C:\WINDOWS\system32\svchost.exe
                        C:\Program Files\Windows Defender\MsMpEng.exe
                        C:\WINDOWS\System32\svchost.exe
                        C:\WINDOWS\system32\spoolsv.exe
                        C:\WINDOWS\system32\Ati2evxx.exe
                        C:\WINDOWS\Explorer.EXE
                        C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
                        C:\apps\ABoard\ABoard.exe
                        C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
                        H:\Program files\HP\HP Software Update\HPWuSchd2.exe
                        C:\WINDOWS\system32\LVCOMSX.EXE
                        C:\Program Files\Logitech\Video\LogiTray.exe
                        C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
                        C:\program files\quicktime\qttask.exe
                        C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
                        C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
                        C:\Program Files\Fichiers communs\DriveCleaner 2006 Free\SDRmon.exe
                        C:\apps\ABoard\AOSD.exe
                        C:\Program Files\Windows Defender\MSASCui.exe
                        C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
                        C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
                        C:\WINDOWS\system32\ctfmon.exe
                        C:\Program Files\Messenger\msmsgs.exe
                        C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
                        C:\PROGRA~1\MSNMES~1\msnmsgr.exe
                        H:\Program files\HP\Digital Imaging\bin\hpqtra08.exe
                        C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
                        C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearch.exe
                        C:\Program Files\WinZip\WZQKPICK.EXE
                        C:\WINDOWS\system32\slserv.exe
                        C:\WINDOWS\System32\svchost.exe
                        C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearchIndexer.exe
                        C:\WINDOWS\wanmpsvc.exe
                        C:\Program Files\Logitech\Video\FxSvr2.exe
                        H:\Program files\HP\Digital Imaging\bin\hpqgalry.exe
                        C:\Program Files\HP\hpcoretech\comp\hptskmgr.exe
                        C:\Program Files\MSN Messenger\usnsvc.exe
                        C:\Program Files\Internet Explorer\iexplore.exe
                        C:\Documents and Settings\Brieg\Mes documents\HijackThis.exe

                        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.aliceadsl.fr/webmail
                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                        R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
                        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Alice ADSL
                        R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = ;localhost;<local>
                        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                        R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
                        O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
                        O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                        O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
                        O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                        O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
                        O2 - BHO: Barre d'outils MSN Search Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll
                        O3 - Toolbar: Barre d'outils MSN Search - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll
                        O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
                        O4 - HKLM\..\Run: [ATIPTA] C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
                        O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe
                        O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon
                        O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
                        O4 - HKLM\..\Run: [HP Software Update] H:\Program files\HP\HP Software Update\HPWuSchd2.exe
                        O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
                        O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
                        O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
                        O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
                        O4 - HKLM\..\Run: [QuickTime Task] "C:\program files\quicktime\qttask.exe" -atboottime
                        O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
                        O4 - HKLM\..\Run: [czpguravti] c:\windows\system32\czpguravti.exe czpguravti
                        O4 - HKLM\..\Run: [SDR6V_Check] "C:\Program Files\Fichiers communs\DriveCleaner 2006 Free\SDRmon.exe"
                        O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -masquer
                        O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
                        O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                        O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
                        O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
                        O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
                        O4 - HKCU\..\Run: [msnmsgr] "C:\PROGRA~1\MSNMES~1\msnmsgr.exe" /background
                        O4 - Startup: TribalWeb.net.lnk = C:\Program Files\TribalWeb.net\tribalweb.exe
                        O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = H:\Program files\HP\Digital Imaging\bin\hpqthb08.exe
                        O4 - Global Startup: HP Digital Imaging Monitor.lnk = H:\Program files\HP\Digital Imaging\bin\hpqtra08.exe
                        O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
                        O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
                        O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearch.exe
                        O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
                        O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll/search.htm
                        O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fr-fr\msntabres.dll/229?abb31c9905842b293c4e271548c4f2
                        O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fr-fr\msntabres.dll/230?abb31c9905842b293c4e271548c4f2
                        O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
                        O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
                        O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
                        O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
                        O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
                        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                        O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                        O11 - Options group: [INTERNATIONAL] International*
                        O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
                        O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
                        O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - http://www.bitdefender.fr/scan8/oscan8.cab
                        O17 - HKLM\System\CCS\Services\Tcpip\..\{F16483DE-9E85-4CD6-92D7-BDDD70A5971A}: NameServer = 212.216.212.112,212.216.172.62
                        O18 - Protocol: bw+0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bw+0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bw-0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bw-0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bw00 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bw00s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bw10 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bw10s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bw20 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bw20s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bw30 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bw30s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bw40 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bw40s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bw50 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bw50s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bw60 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bw60s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bw70 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bw70s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bw80 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bw80s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bw90 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bw90s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwa0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwa0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwb0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwb0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwc0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwc0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwd0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwd0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwe0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwe0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwf0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwf0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
                        O18 - Protocol: bwg0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwg0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwh0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwh0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwi0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwi0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwj0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwj0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwk0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwk0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwl0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwl0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwm0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwm0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwn0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwn0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwo0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwo0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwp0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwp0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwq0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwq0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwr0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwr0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bws0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bws0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwt0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwt0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwu0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwu0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwv0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwv0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bww0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bww0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwx0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwx0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwy0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwy0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwz0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: bwz0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                        O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                        O18 - Protocol: offline-8876480 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                        O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
                        O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
                        O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
                        O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
                        O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
                        O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
                        O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
                        O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                        O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
                        O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
                        O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
                        O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

                        1. Regis59 Contributeur sécurité
                          Salut

                          ¤Relance HijackThis, coche les cases devant ces lignes et ensuite clique sur fix checked :

                          R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)

                          O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

                          O4 - HKLM\..\Run: [czpguravti] c:\windows\system32\czpguravti.exe czpguravti

                          Ferme HijackThis.
                          Dis moi ou en sont tes soucis.

                          A+
                          1. brieg
                            rebonjour regis59, j'ai fait ce que tu m'as demandé pour les 2 premières lignes (R3 et 02) mais n'est pas trouvé celle-ci :

                            O4 - HKLM\..\Run: [czpguravti] c:\windows\system32\czpguravti.exe czpguravti

                            je vais peut-être aller voir à droite à gauche sur CCM pour mieux protéger mon PC pour l'avenir !

                            Veux tu un nouveau rapport ?

                            brieg
                          2. brieg
                            je n'ai pas préciser que R3 et 02 avaient disparues !
                        2. Regis59 Contributeur sécurité
                          Re,

                          Oui, met un nouveau rapport.

                          Pour protéger ton PC, il y a tout ce qu il faut sur CCM, cherche bien ;)
                          1. brieg
                            j'utilise assez régulièrement CCcleaner, protection antivirus : AVG, puis ad-aware, et utilise aussi SpyBot. Est installé récemment windows defender (efficace ou non ?) Penses-tu que je devrais modifier un de ces paramètres ou ajouter une autre protection ?

                            voici le dernier rapport :

                            Logfile of HijackThis v1.99.1
                            Scan saved at 14:26:07, on 06/03/2007
                            Platform: Windows XP SP2 (WinNT 5.01.2600)
                            MSIE: Internet Explorer v7.00 (7.00.6000.16414)

                            Running processes:
                            C:\WINDOWS\System32\smss.exe
                            C:\WINDOWS\system32\winlogon.exe
                            C:\WINDOWS\system32\services.exe
                            C:\WINDOWS\system32\lsass.exe
                            C:\WINDOWS\system32\Ati2evxx.exe
                            C:\WINDOWS\system32\svchost.exe
                            C:\Program Files\Windows Defender\MsMpEng.exe
                            C:\WINDOWS\System32\svchost.exe
                            C:\WINDOWS\system32\spoolsv.exe
                            C:\WINDOWS\system32\Ati2evxx.exe
                            C:\WINDOWS\Explorer.EXE
                            C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
                            C:\apps\ABoard\ABoard.exe
                            C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
                            H:\Program files\HP\HP Software Update\HPWuSchd2.exe
                            C:\WINDOWS\system32\LVCOMSX.EXE
                            C:\Program Files\Logitech\Video\LogiTray.exe
                            C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe
                            C:\program files\quicktime\qttask.exe
                            C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
                            C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
                            C:\Program Files\Fichiers communs\DriveCleaner 2006 Free\SDRmon.exe
                            C:\apps\ABoard\AOSD.exe
                            C:\Program Files\Windows Defender\MSASCui.exe
                            C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
                            C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
                            C:\WINDOWS\system32\ctfmon.exe
                            C:\Program Files\Messenger\msmsgs.exe
                            C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
                            C:\PROGRA~1\MSNMES~1\msnmsgr.exe
                            H:\Program files\HP\Digital Imaging\bin\hpqtra08.exe
                            C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
                            C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearch.exe
                            C:\Program Files\WinZip\WZQKPICK.EXE
                            C:\WINDOWS\system32\slserv.exe
                            C:\WINDOWS\System32\svchost.exe
                            C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearchIndexer.exe
                            C:\WINDOWS\wanmpsvc.exe
                            C:\Program Files\Logitech\Video\FxSvr2.exe
                            H:\Program files\HP\Digital Imaging\bin\hpqgalry.exe
                            C:\Program Files\HP\hpcoretech\comp\hptskmgr.exe
                            C:\Program Files\MSN Messenger\usnsvc.exe
                            C:\Program Files\MSN Messenger\livecall.exe
                            C:\Program Files\Internet Explorer\iexplore.exe
                            C:\Program Files\Internet Explorer\iexplore.exe
                            C:\Documents and Settings\Brieg\Mes documents\HijackThis.exe

                            R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.aliceadsl.fr/webmail
                            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                            R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
                            R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Alice ADSL
                            R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = ;localhost;<local>
                            R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                            O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
                            O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                            O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
                            O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
                            O2 - BHO: Barre d'outils MSN Search Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll
                            O3 - Toolbar: Barre d'outils MSN Search - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll
                            O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
                            O4 - HKLM\..\Run: [ATIPTA] C:\ATI Technologies\ATI Control Panel\atiptaxx.exe
                            O4 - HKLM\..\Run: [ACTIVBOARD] c:\apps\ABoard\ABoard.exe
                            O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon
                            O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
                            O4 - HKLM\..\Run: [HP Software Update] H:\Program files\HP\HP Software Update\HPWuSchd2.exe
                            O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
                            O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
                            O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
                            O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
                            O4 - HKLM\..\Run: [QuickTime Task] "C:\program files\quicktime\qttask.exe" -atboottime
                            O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
                            O4 - HKLM\..\Run: [SDR6V_Check] "C:\Program Files\Fichiers communs\DriveCleaner 2006 Free\SDRmon.exe"
                            O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -masquer
                            O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
                            O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                            O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
                            O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
                            O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
                            O4 - HKCU\..\Run: [msnmsgr] "C:\PROGRA~1\MSNMES~1\msnmsgr.exe" /background
                            O4 - Startup: TribalWeb.net.lnk = C:\Program Files\TribalWeb.net\tribalweb.exe
                            O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = H:\Program files\HP\Digital Imaging\bin\hpqthb08.exe
                            O4 - Global Startup: HP Digital Imaging Monitor.lnk = H:\Program files\HP\Digital Imaging\bin\hpqtra08.exe
                            O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
                            O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
                            O4 - Global Startup: Windows Desktop Search.lnk = C:\Program Files\MSN Toolbar Suite\DS\02.05.0001.1119\fr-fr\bin\WindowsSearch.exe
                            O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
                            O8 - Extra context menu item: &MSN Search - res://C:\Program Files\MSN Toolbar Suite\TB\02.05.0000.1105\fr-fr\msntb.dll/search.htm
                            O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fr-fr\msntabres.dll/229?abb31c9905842b293c4e271548c4f2
                            O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\MSN Toolbar Suite\TAB\02.05.0000.1105\fr-fr\msntabres.dll/230?abb31c9905842b293c4e271548c4f2
                            O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
                            O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
                            O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
                            O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
                            O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
                            O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                            O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                            O11 - Options group: [INTERNATIONAL] International*
                            O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
                            O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
                            O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - http://www.bitdefender.fr/scan8/oscan8.cab
                            O17 - HKLM\System\CCS\Services\Tcpip\..\{F16483DE-9E85-4CD6-92D7-BDDD70A5971A}: NameServer = 212.216.212.112,212.216.172.62
                            O18 - Protocol: bw+0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw+0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw-0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw-0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw00 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw00s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw10 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw10s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw20 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw20s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw30 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw30s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw40 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw40s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw50 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw50s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw60 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw60s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw70 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw70s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw80 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw80s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw90 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw90s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwa0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwa0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwb0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwb0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwc0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwc0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwd0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwd0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwe0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwe0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwf0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwf0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
                            O18 - Protocol: bwg0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwg0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwh0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwh0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwi0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwi0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwj0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwj0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwk0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwk0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwl0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwl0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwm0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwm0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwn0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwn0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwo0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwo0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwp0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwp0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwq0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwq0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwr0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwr0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bws0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bws0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwt0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwt0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwu0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwu0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwv0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwv0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bww0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bww0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwx0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwx0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwy0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwy0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwz0 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwz0s - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                            O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                            O18 - Protocol: offline-8876480 - {53996832-0712-4E6B-A2B4-C9FC921C8943} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
                            O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
                            O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
                            O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
                            O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe
                            O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe
                            O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe
                            O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                            O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
                            O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
                            O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe
                            O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe
                            1. Regis59 Contributeur sécurité
                              Salut,

                              Oui c'est ok !

                              Bonne protection et efficace !
                              Je te conseillerais 2 choses: Un pare feu et un anti-malware.
                              securite

                              Je te conseille de mettre AVG Anti-Spyware et un pare feu de ton choix dans la liste donné ci dessu.

                              A+
                              1. brieg
                                merci beaucoup pour ton aide, si précieuse ! Si je pouvais, j'te ferais livrer un bon café maison !

                                je vais aller bidouiller dans la référence que tu m'as donné,
                                merci encore et bonne continuation !

                                brieg
                                1. Regis59 Contributeur sécurité
                                  lol Je ne bois pas de café ! Ca tombe mal :S
                                  Mais l'intention est vraiment sympa ! :)

                                  Si besoin, tu repasses ;)

                                  A+
                                  1. balltrap34 Contributeur sécurité
                                    salut brieg salut quentin

                                    c est vrai que depuis pres de sept mois j ai pas traiter un log lol
                                    mais c etais une approche a l ancienne
                                    et au passage la killbox avais fait son boulot puisque blacklite ne trouvait plus rien
                                    je pensait lui faire utiliser ensuite navipromo
                                    mais bon navilog de mafioso tous aussi bon
                                    a++
                                    1. Regis59 Contributeur sécurité
                                      Salut Gérard ;)

                                      Pas de soucis, j'ai répondu, j ai cru que tu bosssais

                                      A+
                                      • 1
                                      • 2