[Publicité] Affichage de publicité en masse

Temp_Area -  
Bonjours,

Depuis se matin, sur mon PC, apres une installation, plein de publicité s'ouvre quand j'ouvre Internet Explorer ou des bannière s'ajoute à la page (Meme sur google O_o)

Je n'ai aucun moyen d'identifié le fichier qui me fait apparaître sa. J'ai donner un coup de SpyBot mais les pub son toujours présent.

Je voudrais donc savoir comment identifier le fichier et aussi comment m'en débarasser. Merci
Configuration: Windows XP
Internet Explorer 6.0

39 réponses

Résumé de la discussion

Des publicités s'ouvrent massivement après une installation sur un PC Windows XP avec Internet Explorer 6, et l'utilisateur peine à identifier le fichier responsable malgré SpyBot. Plusieurs conseils proposent l'usage d'outils spécialisés comme HijackThis pour analyser les entrées suspectes, GenProc pour générer un rapport et détecter les processus, puis restaurer des fichiers système. Des réponses détaillent des modifications du fichier hosts, la suppression de barres d'outils et de BHO indésirables telles que SweetIM, ainsi que des éléments de démarrage et des services à nettoyer. En cas de prolongement, les échanges évoquent des alternatives comme la restauration du fichier hosts et l'usage d'outils additionnels, tandis que les logs HijackThis et les rapports GenProc guident la suite des actions.

Bobot (l’IA à votre service)
  1. papyber Contributeur sécurité
    télécharge et installe le logiciel HijackThis v1.99.1
    http://pchelpbordeaux.free.fr/logiciels.html
    Tutorial
    http://pchelpbordeaux.free.fr/tuto.html
    poste 1 rapport hijack
    0
    1. Temp_Area Auteur
      Merci de m'avoir répondu aussi vite :)

      Voila le rapport :

      Logfile of HijackThis v1.99.1
      Scan saved at 22:35:31, on 31/03/2007
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      C:\Program Files\Alwil Software\Avast4\ashServ.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\nvsvc32.exe
      C:\WINDOWS\system32\HPZipm12.exe
      C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
      C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
      C:\Program Files\DAEMON Tools\daemon.exe
      C:\WINDOWS\system32\ElkCtrl.exe
      C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
      C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\rundll32.exe
      C:\Program Files\TheTurtle\TheTurtle.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
      C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      C:\WINDOWS\system32\WgaTray.exe
      C:\WINDOWS\System32\alg.exe
      C:\Program Files\MSN Messenger\usnsvc.exe
      X:\eMule\emule.exe
      C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32.exe
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\Program Files\Internet Explorer\IEXPLORE.EXE
      C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll
      O1 - Hosts: 65.54.239.80 dp.msnmessenger.akadns.net
      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
      O2 - BHO: SWEETIE - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - C:\PROGRA~1\MACROG~1\SWEETI~1\toolbar.dll
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O2 - BHO: (no name) - {57E218E6-5A80-4f0c-AB25-83598F25D7E9} - C:\WINDOWS\system32\nfcdseqb.dll
      O2 - BHO: (no name) - {733FD72F-103E-4B9E-BCB9-A76064AF3C72} - C:\WINDOWS\system32\pmnllml.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
      O2 - BHO: (no name) - {DB5EF4B9-27A4-4014-9385-579FB45E992F} - C:\WINDOWS\system32\ddcya.dll
      O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
      O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
      O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
      O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
      O4 - HKLM\..\Run: [LogitechCameraService(E)] C:\WINDOWS\system32\ElkCtrl.exe /automation
      O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [WinFlyer32.dll] "rundll32.exe" C:\WINDOWS\system32\WinFlyer32.dll,Run
      O4 - HKLM\..\Run: [SoundService] rundll32.exe "C:\WINDOWS\system32\fjqxmajw.dll",setvm
      O4 - HKCU\..\Run: [TheTurtle] C:\Program Files\TheTurtle\TheTurtle.exe
      O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
      O4 - Startup: Microsoft Recherche accélérée.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
      O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O18 - Protocol: bw+0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw+0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
      O18 - Protocol: bwg0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwg0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: offline-8876480 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\FICHIE~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
      O20 - Winlogon Notify: ddcya - C:\WINDOWS\system32\ddcya.dll
      O20 - Winlogon Notify: pmnllml - C:\WINDOWS\SYSTEM32\pmnllml.dll
      O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
      O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
      O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
      O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
      O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Fichiers communs\PCSuite\Services\ServiceLayer.exe
      O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
      O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
      0
      1. papyber Contributeur sécurité
        télécharge GenProc sur ton bureau
        http://www.alt-shift-return.org/Info/Fichiers/GenProc.zip

        dézippe le dossier, double-clique sur GenProc.bat et poste le contenu du rapport qui s'ouvre

        Aide en images : http://www.alt-shift-return.org/Info/GenProc-HowTo.html
        0
        1. Temp_Area Auteur
          Hum, Je fait ce qu'il dit ? 

          Rapport GenProc 0.33 effectué le sam. 31/03/2007 à 22:41:50,06 - SystemRoot = C:\WINDOWS 

Dans CCleaner, clique sur "Options", "Avancé" et décoche la case "Effacer uniquement les fichiers, du dossier Temp de Windows, plus vieux que 48 heures". Par la suite, laisse-le avec ses réglages par défaut. C'est tout.
 
# Etape 1/ Télécharge :  
  
- VundoFix.exe  (par Atribune) http://www.atribune.org/ccount/click.php?id=4 sur ton Bureau 
 
 
***** Copie ce qui suit dans un fichier texte et redémarre en mode sans échec comme indiqué ici https://docs.microsoft.com/en-us/?mfr=true (choisis ta session courante "Christian") ***** 
 
 
# Etape 2/ 
 
Double-clique VundoFix.exe afin de le lancer
Clique sur le bouton Scan for Vundo
Lorsque le scan est complété, clique sur le bouton "Remove Vundo"
Une invite te demandera si tu veux supprimer les fichiers, clique YES
Après avoir cliqué Yes, le Bureau disparaîtra un moment lors de la suppression des fichiers
Tu verras une invite qui t'annonce que ton PC va redémarrer; clique OK

Note: Il est possible que VundoFix soit confronté à un fichier qu'il ne peut supprimer. Si tel est le cas, l'outil se lancera au prochain redémarrage; il faut simplement suivre les instructions ci-haut, à partir de "clique sur le bouton Scan for Vundo 
 
# Etape 3/ 
 
Lance CCleaner : "Nettoyeur"/"lancer le nettoyage" et c'est tout. 
 
# Etape 4/ 

Redémarre normalement et poste : 
- Un nouveau rapport HijackThis, toutes fenêtres et applications fermées si tu ne l'as pas tu trouveras HijackThis ici http://www.trendsecure.com/portal/en-US/threat_analytics/HiJackThis_v2.exe ; 
- Le contenu du rapport situé dans C:\vundofix.txt ; 


Précise les difficultés que tu as eu (ce que tu n'as pas pu faire...) ainsi que l'évolution de la situation.
          0
          2. papyber Contributeur sécurité
            t'as tout compris, au travail
            0
            1. Temp_Area Auteur
              Le nouveau rapport de HijackThis :

              Logfile of HijackThis v1.99.1
              Scan saved at 23:14:36, on 31/03/2007
              Platform: Windows XP SP2 (WinNT 5.01.2600)
              MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

              Running processes:
              C:\WINDOWS\System32\smss.exe
              C:\WINDOWS\system32\csrss.exe
              C:\WINDOWS\system32\winlogon.exe
              C:\WINDOWS\system32\services.exe
              C:\WINDOWS\system32\lsass.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\System32\svchost.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\system32\spoolsv.exe
              C:\WINDOWS\Explorer.EXE
              C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
              C:\Program Files\Alwil Software\Avast4\ashServ.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\system32\nvsvc32.exe
              C:\WINDOWS\system32\HPZipm12.exe
              C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
              C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
              C:\WINDOWS\system32\svchost.exe
              C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
              C:\WINDOWS\System32\alg.exe
              C:\WINDOWS\system32\WgaTray.exe
              C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
              C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe
              C:\Program Files\DAEMON Tools\daemon.exe
              C:\WINDOWS\system32\ElkCtrl.exe
              C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
              C:\WINDOWS\system32\rundll32.exe
              C:\Program Files\TheTurtle\TheTurtle.exe
              C:\Program Files\MSN Messenger\msnmsgr.exe
              C:\WINDOWS\system32\ctfmon.exe
              C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
              C:\Program Files\Hijackthis Version Française\hijackthis vf.exe
              C:\WINDOWS\system32\wuauclt.exe
              C:\Program Files\MSN Messenger\usnsvc.exe

              R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
              R3 - URLSearchHook: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll
              O1 - Hosts: 65.54.239.80 dp.msnmessenger.akadns.net
              O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
              O2 - BHO: (no name) - {19A4A408-3BAE-4AD2-89D2-984DFD140959} - C:\WINDOWS\system32\ddcya.dll
              O2 - BHO: SWEETIE - {1A0AADCD-3A72-4b5f-900F-E3BB5A838E2A} - C:\PROGRA~1\MACROG~1\SWEETI~1\toolbar.dll
              O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
              O2 - BHO: (no name) - {57E218E6-5A80-4f0c-AB25-83598F25D7E9} - C:\WINDOWS\system32\nfcdseqb.dll (file missing)
              O2 - BHO: (no name) - {733FD72F-103E-4B9E-BCB9-A76064AF3C72} - C:\WINDOWS\system32\pmnllml.dll
              O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
              O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
              O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
              O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
              O3 - Toolbar: SweetIM For Internet Explorer - {BC4FFE41-DE9F-46fa-B455-AAD49B9F9938} - C:\Program Files\Macrogaming\SweetIMBarForIE\toolbar.dll
              O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
              O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
              O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
              O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_11\bin\jusched.exe"
              O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
              O4 - HKLM\..\Run: [LogitechCameraService(E)] C:\WINDOWS\system32\ElkCtrl.exe /automation
              O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
              O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
              O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
              O4 - HKLM\..\Run: [WinFlyer32.dll] "rundll32.exe" C:\WINDOWS\system32\WinFlyer32.dll,Run
              O4 - HKLM\..\Run: [SoundService] rundll32.exe "C:\WINDOWS\system32\fjqxmajw.dll",setvm
              O4 - HKCU\..\Run: [TheTurtle] C:\Program Files\TheTurtle\TheTurtle.exe
              O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
              O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
              O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
              O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
              O4 - Startup: Microsoft Recherche accélérée.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
              O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
              O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
              O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
              O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_11\bin\ssv.dll
              O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
              O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
              O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
              O18 - Protocol: bw+0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw+0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw-0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw-0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw00 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw00s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw10 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw10s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw20 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw20s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw30 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw30s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw40 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw40s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw50 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw50s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw60 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw60s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw70 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw70s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw80 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw80s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw90 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw90s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwa0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwa0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwb0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwb0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwc0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwc0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwd0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwd0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwe0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwe0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwf0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwf0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
              O18 - Protocol: bwg0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwg0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwh0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwh0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwi0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwi0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwj0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwj0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwk0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwk0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwl0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwl0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwm0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwm0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwn0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwn0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwo0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwo0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwp0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwp0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwq0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwq0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwr0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwr0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bws0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bws0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwt0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwt0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwu0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwu0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwv0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwv0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bww0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bww0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwx0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwx0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwy0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwy0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwz0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwz0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
              O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll
              O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
              O18 - Protocol: offline-8876480 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\FICHIE~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
              O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
              O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
              O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
              O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
              O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
              O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
              O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
              O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
              O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
              O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
              O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
              O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Fichiers communs\PCSuite\Services\ServiceLayer.exe
              O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
              O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe

              --------------------------------------------------------------------------

              La rapport de Vundofix :

              VundoFix V6.3.18

              Checking Java version...

              Java version is 1.5.0.6
              Old versions of java are exploitable and should be removed.

              Java version is 1.5.0.8
              Old versions of java are exploitable and should be removed.

              Java version is 1.5.0.9
              Old versions of java are exploitable and should be removed.

              Java version is 1.5.0.10

              Java version is 1.5.0.11

              Scan started at 22:52:09 31/03/2007

              Listing files found while scanning....

              C:\WINDOWS\system32\aycdd.bak1
              C:\WINDOWS\system32\aycdd.bak2
              C:\WINDOWS\system32\aycdd.ini
              C:\WINDOWS\system32\ddcya.dll
              C:\WINDOWS\system32\fhkmp.ini
              C:\WINDOWS\system32\fjqxmajw.dll
              C:\WINDOWS\system32\nfcdseqb.dll
              C:\WINDOWS\system32\pmkhf.dll
              C:\WINDOWS\system32\pmnllml.dll
              C:\WINDOWS\system32\qommlig.dll
              C:\WINDOWS\system32\sstqq.dll
              C:\WINDOWS\system32\vtutqpn.dll
              C:\WINDOWS\system32\wjamxqjf.ini
              C:\WINDOWS\system32\yayxwts.dll

              Beginning removal...

              Attempting to delete C:\WINDOWS\system32\aycdd.bak1
              C:\WINDOWS\system32\aycdd.bak1 Has been deleted!

              Attempting to delete C:\WINDOWS\system32\aycdd.bak2
              C:\WINDOWS\system32\aycdd.bak2 Has been deleted!

              Attempting to delete C:\WINDOWS\system32\aycdd.ini
              C:\WINDOWS\system32\aycdd.ini Has been deleted!

              Attempting to delete C:\WINDOWS\system32\ddcya.dll
              C:\WINDOWS\system32\ddcya.dll Could not be deleted.

              Attempting to delete C:\WINDOWS\system32\fhkmp.ini
              C:\WINDOWS\system32\fhkmp.ini Has been deleted!

              Attempting to delete C:\WINDOWS\system32\fjqxmajw.dll
              C:\WINDOWS\system32\fjqxmajw.dll Has been deleted!

              Attempting to delete C:\WINDOWS\system32\nfcdseqb.dll
              C:\WINDOWS\system32\nfcdseqb.dll Has been deleted!

              Attempting to delete C:\WINDOWS\system32\pmkhf.dll
              C:\WINDOWS\system32\pmkhf.dll Has been deleted!

              Attempting to delete C:\WINDOWS\system32\pmnllml.dll
              C:\WINDOWS\system32\pmnllml.dll Could not be deleted.

              Attempting to delete C:\WINDOWS\system32\qommlig.dll
              C:\WINDOWS\system32\qommlig.dll Has been deleted!

              Attempting to delete C:\WINDOWS\system32\sstqq.dll
              C:\WINDOWS\system32\sstqq.dll Has been deleted!

              Attempting to delete C:\WINDOWS\system32\vtutqpn.dll
              C:\WINDOWS\system32\vtutqpn.dll Has been deleted!

              Attempting to delete C:\WINDOWS\system32\wjamxqjf.ini
              C:\WINDOWS\system32\wjamxqjf.ini Has been deleted!

              Attempting to delete C:\WINDOWS\system32\yayxwts.dll
              C:\WINDOWS\system32\yayxwts.dll Has been deleted!

              Performing Repairs to the registry.
              Done!

              VundoFix V6.3.18

              Checking Java version...

              Java version is 1.5.0.6
              Old versions of java are exploitable and should be removed.

              Java version is 1.5.0.8
              Old versions of java are exploitable and should be removed.

              Java version is 1.5.0.9
              Old versions of java are exploitable and should be removed.

              Java version is 1.5.0.10

              Java version is 1.5.0.11

              Scan started at 23:03:54 31/03/2007

              Listing files found while scanning....

              C:\WINDOWS\system32\aycdd.ini
              C:\WINDOWS\system32\ddcya.dll
              C:\WINDOWS\system32\pmnllml.dll

              Beginning removal...

              Attempting to delete C:\WINDOWS\system32\aycdd.ini
              C:\WINDOWS\system32\aycdd.ini Has been deleted!

              Attempting to delete C:\WINDOWS\system32\ddcya.dll
              C:\WINDOWS\system32\ddcya.dll Could not be deleted.

              Attempting to delete C:\WINDOWS\system32\pmnllml.dll
              C:\WINDOWS\system32\pmnllml.dll Could not be deleted.

              Performing Repairs to the registry.
              Done!

              --------------------------------------------------------------------

              Au redémarrage, Avast un trouver un virus, j'ai cliquer sur suprimmer.
              0
              2. Temp_Area Auteur
                Ok je scan avec Panda, les publicités qui s'affiche son toujours sur WinAntiSpy ou DriveCleaner. Avast lui détecte un virus "Win32:CTX" ... Si sa peu aidé a identifier le problème.

                Scan en cours avec Panda :)

                [Edit] : Hum, Win32:CTX c'est panda ? :/ quand je lance le scan, sa détecte sa. J'ai coupé avast en attendant :)

                [Edit 2] : Erreur survenue au cours de l’installationUne erreur s'est produite lors du téléchargement de Panda ActiveScan. Recommencez l'opération. Si l'erreur se produit de nouveau, redémarrez votre ordinateur et essayer une nouvelle foisLes raisons de l’erreur peuvent être:

                Ne pas autoriser le téléchargement du contrôle ActiveScan de l’application.

                Des problèmes avec la connexion Internet.

                Une erreur est survenue au cours de l’installation d’ActiveScan. Merci de vérifier que votre connexion Internet fonctionne puis cliquez sur 'Réessayer'.

                J'essaye avec le 2ème lien
                0
                2. papyber Contributeur sécurité
                  oui pour panda, tu as raison, avast et panda ne s'aiment pas

                  colle moi le rapport kaspersky dès que possible, je le regarderais

                  fais aussi ceci

                  Télécharge Blacklight (le 1er de la page)
                  https://europe.f-secure.com/exclude/blacklight/index.shtml

                  Enregistre le sur ton Bureau.
                  Double-clique blbeta.exe
                  Clique sur "I ACCEPT" .
                  clique Scan puis Next

                  Tu verras une liste de fichiers détectés apparaître. Tu verras également un rapport,
                  sur ton Bureau, nommé fsbl.xxxxxxx.log (les xxxxxxx sont des chiffres).

                  poste ce rapport dans ta prochaine réponse.
                  NE PAS choisir l'option "Rename" de suite car des fichiers légitimes peuvent être présents, tel wbemtest.exe
                  0
                  1. Temp_Area Auteur
                    C'est long :( Kaspersky est a 31% et sa fait plus d'une heure qu'il scan :@
                    0
                    1. papyber Contributeur sécurité
                      cela peut durer quelques heures cela dépend de tonDD
                      0
                      1. Temp_Area Auteur
                        Rapport de Kaspersky :

                        C:\Documents and Settings\Christian\Cookies\index.dat L'objet est verrouillé ignoré
                        C:\Documents and Settings\Christian\Local Settings\Application Data\Microsoft\Messenger\***40@hotmail.com\SharingMetadata\Logs\Dfsr00005.log L'objet est verrouillé ignoré
                        C:\Documents and Settings\Christian\Local Settings\Application Data\Microsoft\Messenger\***40@hotmail.com\SharingMetadata\pending.dat L'objet est verrouillé ignoré
                        C:\Documents and Settings\Christian\Local Settings\Application Data\Microsoft\Messenger\***40@hotmail.com\SharingMetadata\Working\database_EEB8_B147_B8B1_F59\dfsr.db L'objet est verrouillé ignoré
                        C:\Documents and Settings\Christian\Local Settings\Application Data\Microsoft\Messenger\***40@hotmail.com\SharingMetadata\Working\database_EEB8_B147_B8B1_F59\fsr.log L'objet est verrouillé ignoré
                        C:\Documents and Settings\Christian\Local Settings\Application Data\Microsoft\Messenger\***40@hotmail.com\SharingMetadata\Working\database_EEB8_B147_B8B1_F59\fsrtmp.log L'objet est verrouillé ignoré
                        C:\Documents and Settings\Christian\Local Settings\Application Data\Microsoft\Messenger\***40@hotmail.com\SharingMetadata\Working\database_EEB8_B147_B8B1_F59\tmp.edb L'objet est verrouillé ignoré
                        C:\Documents and Settings\Christian\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré
                        C:\Documents and Settings\Christian\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré
                        C:\Documents and Settings\Christian\Local Settings\Application Data\Microsoft\Windows Live Contacts\***40@hotmail.com\real\members.stg L'objet est verrouillé ignoré
                        C:\Documents and Settings\Christian\Local Settings\Application Data\Microsoft\Windows Live Contacts\***40@hotmail.com\shadow\members.stg L'objet est verrouillé ignoré
                        C:\Documents and Settings\Christian\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré
                        C:\Documents and Settings\Christian\Local Settings\Historique\History.IE5\MSHist012007040120070402\index.dat L'objet est verrouillé ignoré
                        C:\Documents and Settings\Christian\Local Settings\Temp\Perflib_Perfdata_f60.dat L'objet est verrouillé ignoré
                        C:\Documents and Settings\Christian\Local Settings\Temp\~DF40F3.tmp L'objet est verrouillé ignoré
                        C:\Documents and Settings\Christian\Local Settings\Temp\~DF6A90.tmp L'objet est verrouillé ignoré
                        C:\Documents and Settings\Christian\Local Settings\Temp\~DF9041.tmp L'objet est verrouillé ignoré
                        C:\Documents and Settings\Christian\Local Settings\Temp\~DF904F.tmp L'objet est verrouillé ignoré
                        C:\Documents and Settings\Christian\Local Settings\Temp\~DF99B5.tmp L'objet est verrouillé ignoré
                        C:\Documents and Settings\Christian\Local Settings\Temp\~DF99C3.tmp L'objet est verrouillé ignoré
                        C:\Documents and Settings\Christian\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré
                        C:\Documents and Settings\Christian\NTUSER.DAT L'objet est verrouillé ignoré
                        C:\Documents and Settings\Christian\NTUSER.DAT.LOG L'objet est verrouillé ignoré
                        C:\Documents and Settings\LocalService\Cookies\index.dat L'objet est verrouillé ignoré
                        C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré
                        C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré
                        C:\Documents and Settings\LocalService\Local Settings\Historique\History.IE5\index.dat L'objet est verrouillé ignoré
                        C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat L'objet est verrouillé ignoré
                        C:\Documents and Settings\LocalService\NTUSER.DAT L'objet est verrouillé ignoré
                        C:\Documents and Settings\LocalService\ntuser.dat.LOG L'objet est verrouillé ignoré
                        C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat L'objet est verrouillé ignoré
                        C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG L'objet est verrouillé ignoré
                        C:\Documents and Settings\NetworkService\NTUSER.DAT L'objet est verrouillé ignoré
                        C:\Documents and Settings\NetworkService\ntuser.dat.LOG L'objet est verrouillé ignoré
                        C:\ms32.sys Infecté : Trojan-Downloader.Win32.Small.ccn ignoré
                        C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\logs\starwind.2007-03-31.23-12-50.log L'objet est verrouillé ignoré
                        C:\Program Files\Alwil Software\Avast4\DATA\aswResp.dat L'objet est verrouillé ignoré
                        C:\Program Files\Alwil Software\Avast4\DATA\Avast4.db L'objet est verrouillé ignoré
                        C:\Program Files\Alwil Software\Avast4\DATA\integ\avast.int L'objet est verrouillé ignoré
                        C:\Program Files\Alwil Software\Avast4\DATA\log\nshield.log L'objet est verrouillé ignoré
                        C:\Program Files\Alwil Software\Avast4\DATA\report\Protection résidente.txt L'objet est verrouillé ignoré
                        C:\System Volume Information\MountPointManagerRemoteDatabase L'objet est verrouillé ignoré
                        C:\System Volume Information\_restore{E90DBE04-D49F-4C17-92F6-FE83B220E181}\RP390\A0091163.dll Infecté : Trojan.Win32.BHO.g ignoré
                        C:\System Volume Information\_restore{E90DBE04-D49F-4C17-92F6-FE83B220E181}\RP390\change.log L'objet est verrouillé ignoré
                        C:\VundoFix Backups\nfcdseqb.dll.bad Infecté : Trojan.Win32.BHO.g ignoré
                        C:\WINDOWS\Debug\PASSWD.LOG L'objet est verrouillé ignoré
                        C:\WINDOWS\SchedLgU.Txt L'objet est verrouillé ignoré
                        C:\WINDOWS\SoftwareDistribution\EventCache\{3B79B7DA-C07C-4B22-A660-930DA6A1DC0D}.bin L'objet est verrouillé ignoré
                        C:\WINDOWS\SoftwareDistribution\ReportingEvents.log L'objet est verrouillé ignoré
                        C:\WINDOWS\Sti_Trace.log L'objet est verrouillé ignoré
                        C:\WINDOWS\system32\CatRoot2\edb.log L'objet est verrouillé ignoré
                        C:\WINDOWS\system32\CatRoot2\tmp.edb L'objet est verrouillé ignoré
                        C:\WINDOWS\system32\config\Antivirus.Evt L'objet est verrouillé ignoré
                        C:\WINDOWS\system32\config\AppEvent.Evt L'objet est verrouillé ignoré
                        C:\WINDOWS\system32\config\default L'objet est verrouillé ignoré
                        C:\WINDOWS\system32\config\default.LOG L'objet est verrouillé ignoré
                        C:\WINDOWS\system32\config\ODiag.evt L'objet est verrouillé ignoré
                        C:\WINDOWS\system32\config\OSession.evt L'objet est verrouillé ignoré
                        C:\WINDOWS\system32\config\SAM L'objet est verrouillé ignoré
                        C:\WINDOWS\system32\config\SAM.LOG L'objet est verrouillé ignoré
                        C:\WINDOWS\system32\config\SecEvent.Evt L'objet est verrouillé ignoré
                        C:\WINDOWS\system32\config\SECURITY L'objet est verrouillé ignoré
                        C:\WINDOWS\system32\config\SECURITY.LOG L'objet est verrouillé ignoré
                        C:\WINDOWS\system32\config\software L'objet est verrouillé ignoré
                        C:\WINDOWS\system32\config\software.LOG L'objet est verrouillé ignoré
                        C:\WINDOWS\system32\config\SysEvent.Evt L'objet est verrouillé ignoré
                        C:\WINDOWS\system32\config\system L'objet est verrouillé ignoré
                        C:\WINDOWS\system32\config\system.LOG L'objet est verrouillé ignoré
                        C:\WINDOWS\system32\drivers\dtscsi.sys L'objet est verrouillé ignoré
                        C:\WINDOWS\system32\drivers\sptd.sys L'objet est verrouillé ignoré
                        C:\WINDOWS\system32\drivers\sptd5037.sys L'objet est verrouillé ignoré
                        C:\WINDOWS\system32\drivers\vaxscsi.sys L'objet est verrouillé ignoré
                        C:\WINDOWS\system32\h323log.txt L'objet est verrouillé ignoré
                        C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR L'objet est verrouillé ignoré
                        C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP L'objet est verrouillé ignoré
                        C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER L'objet est verrouillé ignoré
                        C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MAP L'objet est verrouillé ignoré
                        C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MAP L'objet est verrouillé ignoré
                        C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA L'objet est verrouillé ignoré
                        C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP L'objet est verrouillé ignoré
                        C:\WINDOWS\Temp\Perflib_Perfdata_690.dat L'objet est verrouillé ignoré
                        C:\WINDOWS\wiadebug.log L'objet est verrouillé ignoré
                        C:\WINDOWS\wiaservc.log L'objet est verrouillé ignoré
                        C:\WINDOWS\WindowsUpdate.log L'objet est verrouillé ignoré

                        --------------------------------------------------------------

                        Blacklight est en cours :)
                        0
                        1. Temp_Area Auteur
                          Rapport de BlackLight :

                          04/01/07 21:40:11 [Info]: BlackLight Engine 1.0.61 initialized
                          04/01/07 21:40:11 [Info]: OS: 5.1 build 2600 (Service Pack 2)
                          04/01/07 21:40:11 [Note]: 7019 4
                          04/01/07 21:40:11 [Note]: 7005 0
                          04/01/07 21:40:13 [Note]: 7006 0
                          04/01/07 21:40:13 [Note]: 7011 3936
                          04/01/07 21:40:13 [Note]: 7026 0
                          04/01/07 21:40:14 [Note]: 7026 0
                          04/01/07 21:40:19 [Note]: FSRAW library version 1.7.1021
                          04/01/07 21:48:04 [Note]: 4013 70625
                          04/01/07 21:48:04 [Note]: 4020 29 65536
                          04/01/07 21:48:04 [Note]: 4018 29 65536
                          04/01/07 21:48:04 [Note]: 4013 70618
                          04/01/07 21:48:04 [Note]: 4020 29 65536
                          04/01/07 21:48:04 [Note]: 4018 29 65536
                          04/01/07 21:48:48 [Note]: 2000 1012
                          04/01/07 21:48:48 [Note]: 2000 1012
                          0
                          1. papyber Contributeur sécurité
                            télécharge GenProc sur ton bureau
                            http://www.alt-shift-return.org/Info/Fichiers/GenProc.zip

                            dézippe le dossier, double-clique sur GenProc.bat et poste le contenu du rapport qui s'ouvre

                            Aide en images : http://www.alt-shift-return.org/Info/GenProc-HowTo.html
                            0
                            1. papyber Contributeur sécurité
                              O1 - Hosts: 65.54.239.80 dp.msnmessenger.akadns.net
                              c'est toi qui a inscrit ce site dans ton fichier host?
                              0
                              1. papyber Contributeur sécurité
                                lance hijack pour un scan et coches ces lignes

                                O2 - BHO: (no name) - {57E218E6-5A80-4f0c-AB25-83598F25D7E9} - C:\WINDOWS\system32\nfcdseqb.dll (file missing)

                                O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                                O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000

                                O18 - Protocol: bw+0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw+0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw-0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw-0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw00 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw00s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw10 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw10s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw20 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw20s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw30 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw30s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw40 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw40s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw50 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw50s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw60 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw60s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw70 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw70s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw80 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw80s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw90 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw90s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwa0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwa0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwb0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwb0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwc0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwc0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwd0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwd0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwe0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwe0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwf0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwf0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
                                O18 - Protocol: bwg0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwg0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwh0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwh0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwi0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwi0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwj0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwj0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwk0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwk0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwl0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwl0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwm0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwm0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwn0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwn0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwo0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwo0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwp0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwp0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwq0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwq0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwr0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwr0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bws0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bws0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwt0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwt0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwu0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwu0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwv0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwv0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bww0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bww0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwx0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwx0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwy0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwy0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwz0 - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwz0s - {A541D18A-1E8D-4272-965D-82B724C08360} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

                                ferme toutes tes fenêtres y compris internet et clic sur fixer l'objet

                                remets moi un nouveau rapport hijack this

                                installe toi un bon pare feu car celui de windows, ce n'est pas la panacée...
                                tu auras des renseignements ici
                                https://forum.pcastuces.com/default.asp
                                0
                                1. Temp_Area Auteur
                                  Voila j'ai cocher et fixé les cases que tu m'as dit

                                  Je voudrais bien installer un par feu, mais c'est pas trop mon PC, et le gars qui utilise plus souvent le PC que moi ne veux pas d'un par feu qui boufferai encore plus de ressource :/
                                  0
                                  1. papyber Contributeur sécurité
                                    oui mais il réinfecte au fur et à mesure
                                    à lui de voir..
                                    que donne le rapport GenProc demandé hier dans ma réponse N° 15
                                    et au sujet de la question de ma réponse N°16
                                    0
                                    1. Temp_Area Auteur
                                      Pour la question dans le post N°16, non je n'ai rien modifier,ou du moin je ne m'em rapelle pas :/

                                      Rapport de VundoFix (Vu que GenProc dit de donner le rapport hijackthis, que j'ai fait plus haut, et VundoFix) :

                                      VundoFix V6.3.18

                                      Checking Java version...

                                      Java version is 1.5.0.6
                                      Old versions of java are exploitable and should be removed.

                                      Java version is 1.5.0.8
                                      Old versions of java are exploitable and should be removed.

                                      Java version is 1.5.0.9
                                      Old versions of java are exploitable and should be removed.

                                      Java version is 1.5.0.10

                                      Java version is 1.5.0.11

                                      Scan started at 22:52:09 31/03/2007

                                      Listing files found while scanning....

                                      C:\WINDOWS\system32\aycdd.bak1
                                      C:\WINDOWS\system32\aycdd.bak2
                                      C:\WINDOWS\system32\aycdd.ini
                                      C:\WINDOWS\system32\ddcya.dll
                                      C:\WINDOWS\system32\fhkmp.ini
                                      C:\WINDOWS\system32\fjqxmajw.dll
                                      C:\WINDOWS\system32\nfcdseqb.dll
                                      C:\WINDOWS\system32\pmkhf.dll
                                      C:\WINDOWS\system32\pmnllml.dll
                                      C:\WINDOWS\system32\qommlig.dll
                                      C:\WINDOWS\system32\sstqq.dll
                                      C:\WINDOWS\system32\vtutqpn.dll
                                      C:\WINDOWS\system32\wjamxqjf.ini
                                      C:\WINDOWS\system32\yayxwts.dll

                                      Beginning removal...

                                      Attempting to delete C:\WINDOWS\system32\aycdd.bak1
                                      C:\WINDOWS\system32\aycdd.bak1 Has been deleted!

                                      Attempting to delete C:\WINDOWS\system32\aycdd.bak2
                                      C:\WINDOWS\system32\aycdd.bak2 Has been deleted!

                                      Attempting to delete C:\WINDOWS\system32\aycdd.ini
                                      C:\WINDOWS\system32\aycdd.ini Has been deleted!

                                      Attempting to delete C:\WINDOWS\system32\ddcya.dll
                                      C:\WINDOWS\system32\ddcya.dll Could not be deleted.

                                      Attempting to delete C:\WINDOWS\system32\fhkmp.ini
                                      C:\WINDOWS\system32\fhkmp.ini Has been deleted!

                                      Attempting to delete C:\WINDOWS\system32\fjqxmajw.dll
                                      C:\WINDOWS\system32\fjqxmajw.dll Has been deleted!

                                      Attempting to delete C:\WINDOWS\system32\nfcdseqb.dll
                                      C:\WINDOWS\system32\nfcdseqb.dll Has been deleted!

                                      Attempting to delete C:\WINDOWS\system32\pmkhf.dll
                                      C:\WINDOWS\system32\pmkhf.dll Has been deleted!

                                      Attempting to delete C:\WINDOWS\system32\pmnllml.dll
                                      C:\WINDOWS\system32\pmnllml.dll Could not be deleted.

                                      Attempting to delete C:\WINDOWS\system32\qommlig.dll
                                      C:\WINDOWS\system32\qommlig.dll Has been deleted!

                                      Attempting to delete C:\WINDOWS\system32\sstqq.dll
                                      C:\WINDOWS\system32\sstqq.dll Has been deleted!

                                      Attempting to delete C:\WINDOWS\system32\vtutqpn.dll
                                      C:\WINDOWS\system32\vtutqpn.dll Has been deleted!

                                      Attempting to delete C:\WINDOWS\system32\wjamxqjf.ini
                                      C:\WINDOWS\system32\wjamxqjf.ini Has been deleted!

                                      Attempting to delete C:\WINDOWS\system32\yayxwts.dll
                                      C:\WINDOWS\system32\yayxwts.dll Has been deleted!

                                      Performing Repairs to the registry.
                                      Done!

                                      VundoFix V6.3.18

                                      Checking Java version...

                                      Java version is 1.5.0.6
                                      Old versions of java are exploitable and should be removed.

                                      Java version is 1.5.0.8
                                      Old versions of java are exploitable and should be removed.

                                      Java version is 1.5.0.9
                                      Old versions of java are exploitable and should be removed.

                                      Java version is 1.5.0.10

                                      Java version is 1.5.0.11

                                      Scan started at 23:03:54 31/03/2007

                                      Listing files found while scanning....

                                      C:\WINDOWS\system32\aycdd.ini
                                      C:\WINDOWS\system32\ddcya.dll
                                      C:\WINDOWS\system32\pmnllml.dll

                                      Beginning removal...

                                      Attempting to delete C:\WINDOWS\system32\aycdd.ini
                                      C:\WINDOWS\system32\aycdd.ini Has been deleted!

                                      Attempting to delete C:\WINDOWS\system32\ddcya.dll
                                      C:\WINDOWS\system32\ddcya.dll Could not be deleted.

                                      Attempting to delete C:\WINDOWS\system32\pmnllml.dll
                                      C:\WINDOWS\system32\pmnllml.dll Could not be deleted.

                                      Performing Repairs to the registry.
                                      Done!
                                      0
                                      • 1
                                      • 2

                                      Discussions similaires

                                      Message "Un bloqueur de publicité empêche la lecture..."
                                      pistouri

                                      0 réponse
                                      M6 Replay désactiver le bloqueur de publicité
                                      katydel88

                                      14 réponses
                                      comment desactiver un bloqueur de pub
                                      amour10

                                      4 réponses
                                      league of legend impossible d'initialiser le dispositif d'affichage
                                      pascontent

                                      5 réponses