Spyware secure, system doctor..etc..

Résolu
lara9 -  
Bonsoir,
J'ai un problème depuis un moment mais je ne me décide que maintenant à me renseigner et j'ai découvert ce super forum..donc j'avai un ancien ordi, nikel mais bon qui se faisait un peu vieux.je m'en suis acheté un autre, un Acer et puis dès que je suis allé sur internet j'avai des fenêtres qui s'affichaient pour "Spyware secure", "System Doctor" et d'autres trucs dans le genre, avec aussi des pub pour sites de rencontres, et parfois de cul..Mais en général ,excepté tout ce que je viens de citer, se sont des pubs en rapport avec les sites que je consulte...par exemple si j vais sur le site de la redoute, une fenetre de pbs de la redoute s'ouvre, etc.. et puis aussi dès le début, sur ma boite mail wanadoo , alors que sur mon ancien ordinateur ça ne m'est jamais arrivé, je recois plein de mails pour le viagra et plein d'autres truc dans le genre... j'ai été obligé de foutre tout ces expéditeurs en indésirable...cmment faire pour ne plus avoir ces fenêtres qui s'affichent et ne plus recevoir ces mails sans avoir à mettre les expéditeurs en indésirable parce que normalement ce n'est pas nécessaire..
Merci d'avance pour votre aide!
Configuration: Windows XP
Internet Explorer 7.0

35 réponses

Résumé de la discussion

Plusieurs pop-ups affichant Spyware Secure et System Doctor, ainsi que des publicités ciblées et des mails suspects, se manifestent sur un PC Windows XP avec Internet Explorer 7. Des mesures de nettoyage ont été proposées, notamment l'exécution de Navipromo en mode sans échec pour détecter et supprimer l'adware, puis la suppression de clés de registre et les sauvegardes associées. Le rapport évoque la détection d'un adware Navipromo (riodkwx.exe), son déplacement vers une sauvegarde, et des entrées de démarrage et modules potentiellement malveillants à supprimer. Pour prévenir les réinfections, il est ensuite recommandé de maintenir le pare-feu et les solutions antivirus à jour, et d'effectuer des analyses complémentaires avec un autre outil de sécurité.

Bobot (l’IA à votre service)
  1. philae83 Contributeur sécurité
    bonsoir,

    * Télécharge Blacklight
    https://europe.f-secure.com/exclude/blacklight/index.shtml
    (de F-Secure)
    (le premier de la page)

    Enregistre le sur ton Bureau.
    Double-clique blbeta.exe
    Clique sur "I ACCEPT" .
    clique Scan puis Next<*gras>

    Tu verras une liste de fichiers détectés apparaître. Tu verras également un rapport,
    sur ton Bureau, nommé <gras>fsbl.xxxxxxx.log     (les xxxxxxx sont des chiffres).

    Copie et colle le contenu de ce rapport dans ta prochaine réponse.
    NE PAS choisir l'option "Rename" de suite : nous devons analyser le rapport,
    car des fichiers légitimes peuvent être présents, tel wbemtest.exe
    0
    1. lara9 Auteur
      Merci pour ta réponse! voila le rapport: mais aurais tu une idée de ce qui a pu faire que le pc ait eu tout ça dès le début?

      03/26/07 00:32:29 [Info]: BlackLight Engine 1.0.55 initialized
      03/26/07 00:32:29 [Info]: OS: 5.1 build 2600 (Service Pack 2)
      03/26/07 00:32:31 [Note]: 7019 4
      03/26/07 00:32:31 [Note]: 7005 0
      03/26/07 00:32:48 [Note]: 7006 0
      03/26/07 00:32:48 [Note]: 7011 1436
      03/26/07 00:32:49 [Note]: 7026 0
      03/26/07 00:32:49 [Note]: 7026 0
      03/26/07 00:32:49 [Note]: 7024 3
      03/26/07 00:32:49 [Info]: Hidden process: C:\windows\system32\riodkwx.exe
      03/26/07 00:33:21 [Note]: FSRAW library version 1.7.1021
      03/26/07 00:34:33 [Info]: Hidden file: C:\windows\system32\riodkwx.exe
      03/26/07 00:34:34 [Info]: Hidden file: c:\WINDOWS\SYSTEM32\RIODKWX.DAT
      03/26/07 00:34:36 [Info]: Hidden file: c:\WINDOWS\SYSTEM32\RIODKW~3.REN
      03/26/07 00:34:37 [Info]: Hidden file: c:\WINDOWS\SYSTEM32\RIODKW~4.REN
      03/26/07 00:34:38 [Info]: Hidden file: c:\WINDOWS\SYSTEM32\RIODKW~1.DAT
      03/26/07 00:34:39 [Info]: Hidden file: c:\WINDOWS\SYSTEM32\RIODKW~2.DAT
      03/26/07 00:34:39 [Info]: Hidden file: c:\WINDOWS\SYSTEM32\IPSINK.AX
      03/26/07 00:34:39 [Note]: 10002 2
      03/26/07 00:34:50 [Note]: 2000 1012
      03/26/07 00:38:05 [Note]: 7007 0
      0
      1. philae83 Contributeur sécurité
        re

        ces manips sont à faire dans l'ordre stp, imprime car il te faudra les faire en mode sans échec

        * Télécharge CCleaner

        http://www.filehippo.com/download_ccleaner.html

        ("Download Latest Version", sur la droite).

        Ce logiciel va permettre de supprimer tous les fichiers temporaires. Avant de cliquer sur le bouton "installer", décoche toutes les "options supplémentaires". Par la suite, laisse-le avec ses réglages par défaut. C'est tout.

        aide en image pour la suite (ne pas tenir compte des noms, c'est juste à titre indicatif)
        ICI
        https://forum.pcastuces.com/default.asp

        à la lettre N ) Installer Brute Force Uninstaller

        * télécharge Brute Force Uninstaller

        http://www.merijn.org/files/bfu.zip

        * FAIS UN CLIC-DROIT sur le lien ci dessous

        http://metallica.geekstogo.com/EGDACCESS.bfu

        et choisis "Enregistrer sous" (dans IE c'est "Enregistrer le lien sous..")

        afin de télécharger EGDACCESS.bfu, Type "Tous les fichiers".

        Sauvegarde dans le dossier créé (c:\BFU)

        * FAIS UN CLIC-DROIT sur le lien ci dessous

        http://perso.numericable.fr/~altshift/Info/Fichiers/Winsoftware.bfu

        et choisis "Enregistrer sous" (dans IE c'est "Enregistrer le lien sous..")

        afin de télécharger Winsoftware.bfu, Type "Tous les fichiers".

        Sauvegarde dans le dossier créé (c:\BFU)

        * télécharge Navipromo.zip (par lazzzy)

        http://perso.numericable.fr/~altshift/Info/Fichiers/Navipromo07H.zip
        et décompresse-le sur ton bureau

        * Copie la suite des instructions dans un fichier texte, sur ton bureau. et redémarre en mode sans échec comme indiqué ici

        https://forum.pcastuces.com/default.asp#haut

        à la lettre C

        Il faudra choisir ta session habituelle, pas le compte "Administrateur" ou autre.

        * lance le fichier Navipromo.bat qui se trouve dans le dossier Navipromo, sur ton bureau.
        * Sélectionne l'option "Recherche et suppression automatique". Patiente.
        S'il trouve quelque chose, tu verras défiler des lignes dans la fenêtre de commande et au bout de quelques instants, il faudra que tu appuies sur une touche pour que le nettoyage soit lancé. Lorsqu'il a terminé, ferme le rapport qui s'est ouvert

        * Relance l'outil, Sélectionne l'option "Suppression Heuristique", et patiente quelques minutes.
        Lorsqu'il a terminé, ferme le rapport qui s'est ouvert

        * Démarre le "Brute Force Uninstaller" en double-cliquant sur BFU.exe.
        Clique sur le petit dossier jaune, à la droite de la boîte "Scriptline to execute", et double-clique sur : EGDACCESS.bfu
        - Dans la boîte "Scriptline to execute", tu devrais maintenant voir ceci : C:\BFU\EGDACCESS.bfu
        Clique sur "Execute" et laisse-le faire son travail.
        Attendre que "Complete script execution" apparaîsse et clique sur OK.
        Clique exit pour fermer le programme BFU.
        Recommence encore une fois.

        * Démarre encore le "Brute Force Uninstaller" en double-cliquant sur BFU.exe.
        * Clique sur le petit dossier jaune, à la droite de la boîte "Scriptline to execute", et double-clique sur : Winsoftware.bfu
        - Dans la boîte "Scriptline to execute", tu devrais maintenant voir ceci : C:\BFU\Winsoftware.bfu
        * Clique sur "Execute" et laisse-le faire son travail.
        Attendre que "Complete script execution" apparaîsse et clique sur OK.
        * Clique exit pour fermer le programme BFU.
        Recommence encore une fois

        * Démarrer -> panneau de configuration -> options internet

        Clique sur l'onglet "Contenu" puis onglet "Certificats" et si tu trouves ceci, en particulier dans "éditeurs approuvés" :

        electronic-group - egroup - Montorgueil - VIP - "Sunny Day Design Ltd"

        => Supprime-les tous

        * lance Ccleaner pour un nettoyage complet.

        * redémarre normalement et poste le contenu du fichier Navipromo.txt qui se trouve dans Poste de travail > disque C:\

        Précise les difficultés que tu as eu (ce que tu n'as pas pu faire...) ainsi que l'évolution de la situation.
        0
        1. lara9 Auteur
          ok merci de ta réponse je vais faire tout ça c'est en train d'imprimer, mais purais tu me dire ce que tu en penses? quelle serait la cause?
          0
          2. philae83 Contributeur sécurité
            ce que j'en pense ? c'est à dire ?
            tu as été infecté par un rootkit, je te donne la manip pour le supprimer

            quant à savoir comment tu l'as attrapé....
            mauvaise protection
            mauvaises habitudes de surf
            clic malencontreux
            etc...
            0
            1. lara9 Auteur
              ok,c'est bizarre quand même d'atrapeer ça sans avoir encore sur le net..enfin bon..wowww c'est long quand même..en fait la c'est la session du forum ma copine je fais ça pour elle mais bon vu que c'est long je voulais savoir si c'était possible que je te fasse ça pour mardi parce queje préfère le faire avec elle pour que je ne sois pas le seul responsable d'un fausse manip sur son pc!! parce que je risque gros après sinon!lol..et la elle est fatiguée..je te poste le résultat mardi alors??et après tout ça c'est encore long?merci bonne nuit!
              0
              1. philae83 Contributeur sécurité
                tu peux le faire mardi si tu veux
                après tout dépend faudra faire une vérif
                0
                1. lara9 Auteur
                  Bonjour,
                  Voila j'ai ait tout ce qui était demandé jusqu'a l'etape J inclu je vous envoi le rapport pouvez vous me dire ce que je doit faire a l'etape suivante
                  merci

                  Logfile of HijackThis v1.99.1
                  Scan saved at 20:09:34, on 27/03/2007
                  Platform: Windows XP SP2 (WinNT 5.01.2600)
                  MSIE: Internet Explorer v7.00 (7.00.6000.16414)

                  Running processes:
                  C:\WINDOWS\System32\smss.exe
                  C:\WINDOWS\system32\winlogon.exe
                  C:\WINDOWS\system32\services.exe
                  C:\WINDOWS\system32\lsass.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\WINDOWS\Explorer.EXE
                  C:\hijackthis\HijackThis.exe

                  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.orange.fr/portail
                  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
                  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
                  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                  R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\WANADOO\SEARCH~1.DLL
                  O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
                  O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                  O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
                  O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
                  O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
                  O4 - HKLM\..\Run: [riodkwx] c:\windows\system32\riodkwx.exe riodkwx
                  O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                  O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
                  O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                  O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
                  O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                  O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                  O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
                  O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
                  O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
                  O11 - Options group: [INTERNATIONAL] International*
                  O16 - DPF: {FBF65A16-C9AB-465E-AECE-D2D9D5AB5E60} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1067_XP.cab
                  O18 - Protocol: bw+0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw+0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw-0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw-0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw00 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw00s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw10 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw10s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw20 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw20s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw30 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw30s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw40 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw40s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw50 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw50s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw60 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw60s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw70 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw70s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw80 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw80s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw90 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw90s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwa0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwa0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwb0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwb0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwc0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwc0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwd0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwd0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwe0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwe0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwf0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwf0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
                  O18 - Protocol: bwg0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwg0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwh0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwh0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwi0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwi0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwj0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwj0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwk0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwk0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwl0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwl0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwm0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwm0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwn0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwn0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwo0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwo0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwp0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwp0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwq0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwq0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwr0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwr0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bws0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bws0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwt0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwt0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwu0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwu0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwv0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwv0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bww0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bww0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwx0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwx0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwy0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwy0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwz0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwz0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
                  O18 - Protocol: offline-8876480 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O20 - AppInit_DLLs: MsgPlusLoader.dll
                  O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
                  O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
                  O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
                  O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                  O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                  O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
                  O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
                  O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
                  O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                  O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
                  O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
                  O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
                  O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
                  O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
                  O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
                  O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZONELABS\vsmon.exe
                  0
                  1. philae83 Contributeur sécurité
                    bonsoir,

                    le rapport a été fait en mode sans échec ?
                    0
                    1. lara9 Auteur
                      oui il a ete fait en mode sans echec!
                      0
                      1. philae83 Contributeur sécurité
                        ok, tu pourras en reposter un en mode normal stp
                        0
                        1. sebeh
                          Bonjours,
                          voila le rapport en mode normal!!
                          merci

                          Logfile of HijackThis v1.99.1
                          Scan saved at 16:09:51, on 28/03/2007
                          Platform: Windows XP SP2 (WinNT 5.01.2600)
                          MSIE: Internet Explorer v7.00 (7.00.6000.16414)

                          Running processes:
                          C:\WINDOWS\System32\smss.exe
                          C:\WINDOWS\system32\winlogon.exe
                          C:\WINDOWS\system32\services.exe
                          C:\WINDOWS\system32\lsass.exe
                          C:\WINDOWS\system32\svchost.exe
                          C:\WINDOWS\System32\svchost.exe
                          C:\WINDOWS\system32\ZONELABS\vsmon.exe
                          C:\WINDOWS\Explorer.EXE
                          C:\WINDOWS\system32\LEXBCES.EXE
                          C:\WINDOWS\system32\LEXPPS.EXE
                          C:\WINDOWS\system32\spoolsv.exe
                          c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
                          C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
                          C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                          C:\Program Files\MSN Messenger\msnmsgr.exe
                          C:\WINDOWS\system32\ctfmon.exe
                          C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                          C:\Program Files\Alwil Software\Avast4\ashServ.exe
                          C:\WINDOWS\System32\FTRTSVC.exe
                          C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
                          C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
                          C:\WINDOWS\system32\svchost.exe
                          C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                          C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                          C:\WINDOWS\System32\svchost.exe
                          C:\hijackthis\HijackThis.exe

                          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://www.orange.fr/portail
                          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
                          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                          R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
                          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
                          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                          R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\WANADOO\SEARCH~1.DLL
                          O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
                          O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
                          O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
                          O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
                          O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
                          O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                          O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
                          O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                          O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
                          O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                          O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                          O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
                          O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
                          O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
                          O11 - Options group: [INTERNATIONAL] International*
                          O16 - DPF: {FBF65A16-C9AB-465E-AECE-D2D9D5AB5E60} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1067_XP.cab
                          O18 - Protocol: bw+0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bw+0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bw-0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bw-0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bw00 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bw00s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bw10 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bw10s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bw20 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bw20s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bw30 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bw30s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bw40 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bw40s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bw50 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bw50s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bw60 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bw60s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bw70 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bw70s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bw80 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bw80s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bw90 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bw90s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwa0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwa0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwb0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwb0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwc0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwc0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwd0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwd0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwe0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwe0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwf0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwf0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
                          O18 - Protocol: bwg0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwg0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwh0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwh0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwi0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwi0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwj0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwj0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwk0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwk0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwl0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwl0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwm0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwm0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwn0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwn0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwo0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwo0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwp0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwp0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwq0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwq0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwr0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwr0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bws0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bws0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwt0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwt0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwu0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwu0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwv0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwv0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bww0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bww0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwx0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwx0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwy0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwy0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwz0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwz0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
                          O18 - Protocol: offline-8876480 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O20 - AppInit_DLLs: MsgPlusLoader.dll
                          O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
                          O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
                          O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
                          O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                          O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                          O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
                          O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
                          O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
                          O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                          O23 - Service: iPod Service - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe
                          O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
                          O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
                          O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
                          O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
                          O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
                          O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZONELABS\vsmon.exe

                          0
                          1. philae83 Contributeur sécurité
                            re

                            oui mais je crois que tu as oublié de le coller le rapport.....:)
                            0
                            2. philae83 Contributeur sécurité
                              ok, je regarde le rapport, réponse dans qq minutes
                              0
                              1. philae83 Contributeur sécurité
                                re

                                lance hijackthis puis coche et fixe ces lignes

                                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
                                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
                                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
                                R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
                                R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\WANADOO\SEARCH~1.DLL
                                O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
                                O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
                                O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
                                O16 - DPF: {FBF65A16-C9AB-465E-AECE-D2D9D5AB5E60} - http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1067_XP.cab
                                O18 - Protocol: bw+0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw+0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw-0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw-0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw00 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw00s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw10 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw10s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw20 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw20s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw30 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw30s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw40 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw40s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw50 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw50s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw60 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw60s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw70 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw70s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw80 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw80s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw90 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw90s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwa0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwa0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwb0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwb0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwc0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwc0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwd0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwd0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwe0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwe0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwf0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwf0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
                                O18 - Protocol: bwg0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwg0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwh0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwh0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwi0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwi0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwj0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwj0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwk0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwk0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwl0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwl0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwm0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwm0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwn0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwn0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwo0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwo0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwp0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwp0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwq0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwq0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwr0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwr0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bws0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bws0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwt0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwt0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwu0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwu0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwv0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwv0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bww0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bww0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwx0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwx0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwy0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwy0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwz0 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwz0s - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
                                O18 - Protocol: offline-8876480 - {D82EB8B0-E009-49B6-90A1-104A96867E75} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

                                et
                                fait un scan antivirus en ligne

                                https://www.bitdefender.fr/
                                et copie colle le résultat ici
                                * En bas, à gauche de la fenêtre, clique sur BitDefender SCAN ONLINE
                                * Dans la nouvelle fenêtre, clique sur I agree
                                * La fenêtre change encore, clique sur Click here to scan
                                * Les signatures se chargent, etc.

                                tuto en image

                                http://pageperso.aol.fr/rginformatique/mapage/defender.htm
                                0
                                1. lara9 Auteur
                                  Voici le rapport du scan antivirus en ligne!!

                                  BitDefender Online Scanner

                                  Rapport d'analyse généré à: Wed, Mar 28, 2007 - 21:20:33

                                  Voie d'analyse: C:\;D:\;E:\;F:\;G:\;H:\;I:\;J:\;

                                  Statistiques

                                  Temps
                                  01:44:40

                                  Fichiers
                                  548459

                                  Directoires
                                  4549

                                  Secteurs de boot
                                  4

                                  Archives
                                  7055

                                  Paquets programmes
                                  84470

                                  Résultats

                                  Virus identifiés
                                  0

                                  Fichiers infectés
                                  0

                                  Fichiers suspects
                                  0

                                  Avertissements
                                  0

                                  Désinfectés
                                  0

                                  Fichiers effacés
                                  0

                                  Info sur les moteurs

                                  Définition virus
                                  408581

                                  Version des moteurs
                                  AVCORE v1.0 (build 2397) (i386) (Feb 8 2007 14:24:08)

                                  Analyse des plugins
                                  14

                                  Archive des plugins
                                  38

                                  Unpack des plugins
                                  6

                                  E-mail plugins
                                  6

                                  Système plugins
                                  1

                                  Paramètres d'analyse

                                  Première action
                                  Désinfecté

                                  Seconde Action
                                  Supprimé

                                  Heuristique
                                  Oui

                                  Acceptez les avertissements
                                  Oui

                                  Extensions analysées
                                  *;

                                  Excludez les extensions

                                  Analyse d'emails
                                  Oui

                                  Analyse des Archives
                                  Oui

                                  Analyser paquets programmes
                                  Oui

                                  Analyse des fichiers
                                  Oui

                                  Analyse de boot
                                  Oui

                                  Fichier analysé
                                  Statut

                                  Aucun virus trouvé.
                                  0
                                  1. philae83 Contributeur sécurité
                                    bonsoir,

                                    parfait, as tu encore d'autres problèmes ?
                                    0
                                    1. lara9 Auteur
                                      Ba en faite j'ai encore des pubs de toute sorte !!
                                      0
                                      1. philae83 Contributeur sécurité
                                        bonsoir,

                                        les mêmes qu'avant ?
                                        0
                                        • 1
                                        • 2

                                        Discussions similaires

                                        Rétrodiffusion "Mail Delivery System"
                                        baissaoui

                                        0 réponse
                                        comment faire si on a un mail delivery system
                                        angeldu5954

                                        5 réponses
                                        System Fan (90B)
                                        MaryMoumou

                                        17 réponses
                                        suite au message "secure boot violation" impossible d'accéder à window
                                        Walloute

                                        9 réponses
                                        Ma messagerie est envahie de "mail delivery system"
                                        noelotte

                                        2 réponses