Infecté par un spyware

Résolu
scan14 -  
scan14 Messages postés 4 Statut Membre -
Bonsoir a tous
J'ai un problème avec mon ordi, lorsque je suis sur internet, il y a plein de fenetres de publicités qui s'ouvrent sans que je l'ai demandé.De plus, il a des fenetres qui me proposent des antispywares tel que drive cleaner,et mon ordi tourne au ralentit.
On m'a dit que j'avais un spyware,j'aimerais bien m'en debarrasser le plus rapidement possible.
Merci d'avance.
Au fait ,je ne suis pas très douée en informatique.
Configuration: Windows 98
Internet Explorer 6.0

21 réponses

  • 1
  • 2
  1. philae83 Messages postés 12854 Statut Contributeur sécurité 206
     
    bonsoir,

    * Télécharge Blacklight
    https://europe.f-secure.com/exclude/blacklight/index.shtml
    (de F-Secure)
    (le premier de la page)

    Enregistre le sur ton Bureau.
    Double-clique fsbl.exe
    Clique sur "I ACCEPT" .
    clique Scan puis Next

    Tu verras une liste de fichiers détectés apparaître. Tu verras également un rapport,
    sur ton Bureau, nommé fsbl.xxxxxxx.log (les xxxxxxx sont des chiffres).

    Copie et colle le contenu de ce rapport dans ta prochaine réponse.
    NE PAS choisir l'option "Rename" de suite : nous devons analyser le rapport,
    car des fichiers légitimes peuvent être présents, tel wbemtest.exe
    0
  2. scan14 Messages postés 4 Statut Membre
     
    bonjour, merci d'avoir répondu
    j'ai téléchargé Blacklight mais j'ai un souci quand je double clique sur fsbl.exe
    Le message d'erreur est: erreur de démarrage du programme, un fichier .DLL requis, USERENV.DLL, n'a pas été trouvé
    Donc, je n'ai pas pu suivre les instruction suivantes.
    0
  3. philae83 Messages postés 12854 Statut Contributeur sécurité 206
     
    bonjour,

    tu es sous quel OS ? XP ?
    0
  4. scan14 Messages postés 4 Statut Membre
     
    quand tu parle de OS et XP tu veut dire quoi?Desole pas très doue en informatique.
    Moi j'ai un windows 98, le vieux ordi qui fonctionne bien pour le peu de chose que je fais avec.
    0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. philae83 Messages postés 12854 Statut Contributeur sécurité 206
     
    quand je parle d'OS et d'XP, justement je voulais connaitre ton système d'exploitation. Bon c'est donc normal car Blacklight ne fonctionne pas sous windows98, et moi j'aime pas du tout .....trop loin dans mes souvenirs.

    on va faire autre chose

    * Télécharge HijackThis et poste le rapport stp

    http://pchelpbordeaux.free.fr/logiciels.html
    Tutorial
    http://pchelpbordeaux.free.fr/tuto.html
    Démo en image
    http://pageperso.aol.fr/balltrap34/demohijack.htm
    0
  7. scan14 Messages postés 4 Statut Membre
     
    Voici le rapport que tu as demandé:

    Logfile of HijackThis v1.99.1
    Scan saved at 22:47:08, on 21/05/07
    Platform: Windows 98 SE (Win9x 4.10.2222A)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\SYSTEM\KERNEL32.DLL
    C:\WINDOWS\SYSTEM\MSGSRV32.EXE
    C:\WINDOWS\SYSTEM\SPOOL32.EXE
    C:\WINDOWS\SYSTEM\MPREXE.EXE
    C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
    C:\WINDOWS\SYSTEM\KB918547\KB918547.EXE
    C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHSERV.EXE
    C:\PROGRAM FILES\MESSENGERPLUS! 3\MSGPLUS.EXE
    C:\WINDOWS\SYSTEM\mmtask.tsk
    C:\WINDOWS\EXPLORER.EXE
    C:\WINDOWS\SYSTEM\RPCSS.EXE
    C:\WINDOWS\PTSNOOP.EXE
    C:\WINDOWS\TASKMON.EXE
    C:\WINDOWS\SYSTEM\SYSTRAY.EXE
    C:\WINDOWS\SYSTEM\ATIPTAXX.EXE
    C:\WINDOWS\SYSTEM\STIMON.EXE
    C:\WINDOWS\LOADQM.EXE
    C:\WINDOWS\SYSTEM\LVCOMSX.EXE
    C:\PROGRAM FILES\LOGITECH\VIDEO\LOGITRAY.EXE
    C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHWEBSV.EXE
    C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHMAISV.EXE
    C:\WINDOWS\SYSTEM\MSTASK.EXE
    C:\PROGRAM FILES\FICHIERS COMMUNS\DRIVECLEANER FREE\UDCSDR.EXE
    C:\WINDOWS\SYSTEM\XFHKSDPAV.EXE
    C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\LOGITECHDESKTOPMESSENGER.EXE
    C:\OPLIMIT\OCRAWARE.EXE
    C:\PROGRAM FILES\MICROSOFT OFFICE\OFFICE\OSA.EXE
    C:\PROGRAM FILES\MICROSOFT OFFICE\OFFICE\FINDFAST.EXE
    C:\OPLIMIT\OCRAWR32.EXE
    C:\PROGRAM FILES\CAERE\PAGEKEEPER30\SYSTEM\PKJOBS.EXE
    C:\PROGRAM FILES\WANADOO\TASKBARICON.EXE
    C:\PROGRAM FILES\SAGEM\SAGEM F@ST 800-840\DSLMON.EXE
    C:\PROGRAM FILES\NIKON\NKVIEW6\NKVMON.EXE
    C:\PROGRAM FILES\TOOX\GROOM\GROOMAGENT.EXE
    C:\WINDOWS\SYSTEM\WMIEXE.EXE
    C:\WINDOWS\SYSTEM\WBEM\WINMGMT.EXE
    C:\WINDOWS\SYSTEM\TAPISRV.EXE
    C:\PROGRAM FILES\CAERE\PAGEKEEPER30\SYSTEM\PKTOPASS.EXE
    C:\PROGRAM FILES\CAERE\PAGEKEEPER30\SYSTEM\PKSLAPI.EXE
    C:\PROGRAM FILES\LOGITECH\VIDEO\FXSVR2.EXE
    C:\PROGRAM FILES\WANADOO\GESTIONNAIREINTERNET.EXE
    C:\PROGRAM FILES\WANADOO\COMCOMP.EXE
    C:\PROGRAM FILES\WANADOO\TOASTER.EXE
    C:\PROGRAM FILES\WANADOO\INACTIVITY.EXE
    C:\PROGRAM FILES\WANADOO\POLLINGMODULE.EXE
    C:\WINDOWS\SYSTEM32\ALERTMODULE\ALERTMODULE.EXE
    C:\PROGRAM FILES\WANADOO\WATCH.EXE
    C:\WINDOWS\SYSTEM\DDHELP.EXE
    C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE
    C:\WINDOWS\SYSTEM\RNAAPP.EXE
    C:\WINDOWS\SYSTEM\PSTORES.EXE
    C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
    C:\PROGRAM FILES\HIJACKTHIS VERSION FRANçAISE\HIJACKTHIS VF.EXE

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\WANADOO\SEARCH~2.DLL
    F1 - win.ini: load=ptsnoop.exe
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
    O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
    O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
    O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
    O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\Run: [AtiPTA] Atiptaxx.exe
    O4 - HKLM\..\Run: [CDApplet] CoolTool.exe
    O4 - HKLM\..\Run: [CriticalUpdate] C:\WINDOWS\SYSTEM\wucrtupd.exe -startup
    O4 - HKLM\..\Run: [AtiCwd32] Aticwd32.exe
    O4 - HKLM\..\Run: [AtiQiPcl] AtiQiPcl.exe
    O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
    O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\WANADOO\Watch.exe
    O4 - HKLM\..\Run: [LoadQM] loadqm.exe
    O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\SYSTEM\LVCOMSX.EXE
    O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
    O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
    O4 - HKLM\..\Run: [DXM6Patch_9904] C:\WINDOWS\p_9904.exe /Q:A
    O4 - HKLM\..\Run: [avast! Web Scanner] C:\PROGRA~1\ALWILS~1\AVAST4\ASHWEBSV.EXE
    O4 - HKLM\..\Run: [ashMaiSv] C:\PROGRA~1\ALWILS~1\AVAST4\ashmaisv.exe
    O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\WANADOO\GestMaj.exe TaskBarIcon.exe
    O4 - HKLM\..\Run: [SDR6V_Check] "C:\PROGRAM FILES\FICHIERS COMMUNS\DRIVECLEANER FREE\UDCSDR.EXE"
    O4 - HKLM\..\Run: [xfhksdpav] c:\windows\system\xfhksdpav.exe
    O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\RunServices: [ATIPOLAB] ati2evxx.exe
    O4 - HKLM\..\RunServices: [KB891711] C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
    O4 - HKLM\..\RunServices: [KB918547] C:\WINDOWS\SYSTEM\KB918547\KB918547.EXE
    O4 - HKLM\..\RunServices: [avast!] C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O4 - HKLM\..\RunServices: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
    O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\PROGRAM FILES\LOGITECH\VIDEO\MANIFESTENGINE.EXE" boot
    O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    O4 - HKCU\..\Run: [WOOKIT] C:\PROGRAM FILES\WANADOO\GestMaj.exe GestionnaireInternet.exe
    O4 - Startup: OCRAWARE.lnk = C:\OPLIMIT\OCRAWARE.EXE
    O4 - Startup: Démarrage d'Office.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE
    O4 - Startup: Microsoft Recherche accélérée.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
    O4 - Startup: Travaux PageKeeper.lnk = C:\Program Files\Caere\PageKeeper30\system\PKJobs.exe
    O4 - Startup: EPSON Status Monitor 3 Environment Check.lnk = C:\WINDOWS\SYSTEM\E_SRCV03.EXE
    O4 - Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
    O4 - Startup: NkvMon.exe.lnk = C:\Program Files\Nikon\NkView6\NkvMon.exe
    O4 - Startup: Commandes MS-DOS.pif = C:\WINDOWS\COMMAND.COM
    O4 - Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
    O4 - Startup: Groom Agent.lnk = C:\Program Files\TooX\Groom\GroomAgent.exe
    O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
    O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
    O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
    O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - https://www.touslesdrivers.com/index.php?v_page=29
    O17 - HKLM\System\CCS\Services\VxD\MSTCP: SearchList = 212.27.32.176,212.27.32.177
    O18 - Protocol: offline-8876480 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw00 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw00s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw10 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw10s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw20 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw20s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw30 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw30s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw40 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw40s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw50 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw50s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw60 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw60s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw70 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw70s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw80 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw80s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw90 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw90s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwa0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwa0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwb0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwb0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwc0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwc0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwd0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwd0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwe0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwe0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwf0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwf0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwg0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwg0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwh0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwh0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwi0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwi0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwj0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwj0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwk0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwk0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwl0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwl0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwm0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwm0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwn0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwn0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwo0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwo0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwp0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwp0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwq0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwq0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwr0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwr0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bws0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bws0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwt0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwt0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwu0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwu0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwv0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwv0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bww0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bww0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwx0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwx0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwy0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwy0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwz0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwz0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw-0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw-0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw+0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw+0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\GAPLUGPROTOCOL-8876480.DLL
    0
  8. philae83 Messages postés 12854 Statut Contributeur sécurité 206
     
    re

    * lance hijackthis pour un "scan seulement" puis coche ces lignes :

    R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\WANADOO\SEARCH~2.DLL
    F1 - win.ini: load=ptsnoop.exe
    O4 - HKLM\..\Run: [CriticalUpdate] C:\WINDOWS\SYSTEM\wucrtupd.exe -startup
    O4 - HKLM\..\Run: [DXM6Patch_9904] C:\WINDOWS\p_9904.exe /Q:A
    O4 - HKLM\..\Run: [SDR6V_Check] "C:\PROGRAM FILES\FICHIERS COMMUNS\DRIVECLEANER FREE\UDCSDR.EXE"
    O4 - HKLM\..\Run: [xfhksdpav] c:\windows\system\xfhksdpav.exe
    O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
    O4 - Startup: Démarrage d'Office.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE
    O4 - Startup: Microsoft Recherche accélérée.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
    O4 - Startup: Commandes MS-DOS.pif = C:\WINDOWS\COMMAND.COM
    O4 - Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
    O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
    O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
    O18 - Protocol: offline-8876480 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw00 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw00s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw10 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw10s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw20 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw20s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw30 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw30s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw40 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw40s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw50 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw50s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw60 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw60s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw70 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw70s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw80 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw80s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw90 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw90s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwa0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwa0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwb0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwb0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwc0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwc0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwd0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwd0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwe0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwe0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwf0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwf0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwg0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwg0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwh0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwh0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwi0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwi0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwj0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwj0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwk0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwk0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwl0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwl0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwm0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwm0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwn0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwn0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwo0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwo0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwp0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwp0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwq0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwq0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwr0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwr0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bws0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bws0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwt0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwt0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwu0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwu0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwv0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwv0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bww0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bww0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwx0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwx0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwy0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwy0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwz0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwz0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw-0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw-0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw+0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bw+0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\GAPLUGPROTOCOL-8876480.DLL

    * ferme toutes les applications ouvertes y compris Internet Explorer et clique sur "fixer objet"

    puis
    pour pouvoir continuer, il faudrait faire un scan antivirus en ligne sur Panda et poster le rapport ici ensuite

    https://www.pandasecurity.com/?ref=www.pandasoftware.com/activescan/fr/activescan_principal.htm
    (désactive ton AV pendant le scan)
    * tuto en image
    http://pageperso.aol.fr/loraline60/panda_scan.htm
    0
  9. scan14
     
    Salut j'ai fais ce que tu m'as demandé, donc voici le rapport:

    Incident Statut Analyse

    Adware:adware/navipromo No Désinfecté C:\WINDOWS\SYSTEM\xfhksdpav_navps.dat
    Adware:Adware/NaviPromo No Désinfecté C:\WINDOWS\TEMP\Install_WMP.exe[²ÜÇ\NSUtils.dll]
    Outil indésirable:Application/Webmediaplayer No Désinfecté C:\WINDOWS\TEMP\Install_WMP.exe[WebMediaPlayer.exe]
    Outil indésirable:Application/SystemDoctor2006 No Désinfecté C:\WINDOWS\Downloaded Program Files\CONFLICT.1\USDR6V_0001_D18M3107NetInstaller.exe
    Spyware:Cookie/Xiti No Désinfecté C:\WINDOWS\Cookies\suzanne@xiti[1].txt
    Spyware:Cookie/RealMedia No Désinfecté C:\WINDOWS\Cookies\suzanne@247realmedia[1].txt
    Outil indésirable:Application/DriveCleaner No Désinfecté C:\Program Files\Fichiers communs\DriveCleaner Free\udcsdr.exe
    0
  10. Utilisateur anonyme
     
    Bonsoir scan14
    ...Philae est absente quelques jours
    A sa demande je peux reprendre si tu le souhaites

    A te lire /c Bonne réception
    0
  11. scan14
     
    Bonsoir
    je suis d'accord pour que tu m'aide, je te remercie
    j'attend la suite
    merci
    0
  12. Utilisateur anonyme
     
    Re Scan14--->Désolé du retard ( plusieurs forum en meme temps !! )

    / Télécharge : Brute Force Uninstaller http://www.merijn.org/files/bfu.zip et décompresse-le dans un dossier propre à lui (C:\BFU)

    FAIS UN CLIC-DROIT sur ce lien : http://metallica.geekstogo.com/EGDACCESS.bfu
    et choisis "Enregistrer sous" (dans IE c'est "Enregistrer le lien sous..")
    afin de télécharger EGDACCESS.bfu, Type "Tous les fichiers". Sauvegarde dans le dossier créé (c:\BFU)

    / Navipromo.zip http://www.alt-shift-return.org/Info/Fichiers/Navipromo073.zip et décompresse-le sur ton bureau (merci Lazzzy)

    Copie la suite des instructions dans un fichier texte, sur ton bureau. et redémarre en mode sans échec comme indiqué ici http://www.microsoft.com/windows2000/fr/server/help/default.asp?url=/windows2000/fr/server/help/boot_failsafe.htm
    Il faudra choisir ta session habituelle, pas le compte "Administrateur" ou autre.

    / lance le fichier Navipromo.bat qui se trouve dans le dossier Navipromo, sur ton bureau.

    Options :

    * sélectionne d'abord l'option "Vérifications", et patiente quelques minutes. Lorsqu'il a terminé, ferme le rapport qui s'est ouvert
    * Sélectionne l'option "Recherche et suppression automatique". Patiente.
    S'il trouve quelque chose, tu verras défiler des lignes dans la fenêtre de commande et au bout de quelques instants, il faudra que tu appuies sur une touche pour que le nettoyage soit lancé.

    * Relance l'outil, Sélectionne l'option "Suppression Heuristique", et patiente quelques minutes... Lorsqu'il a terminé, ferme le rapport qui s'est ouvert

    / Démarre le "Brute Force Uninstaller" en double-cliquant sur BFU.exe.
    Clique sur le petit dossier jaune, à la droite de la boîte "Scriptline to execute", et double-clique sur : EGDACCESS.bfu
    - Dans la boîte "Scriptline to execute", tu devrais maintenant voir ceci : C:\BFU\EGDACCESS.bfu
    Clique sur "Execute" et laisse-le faire son travail.
    Attendre que "Complete script execution" apparaîsse et clique sur OK. Clique exit pour fermer le programme BFU.
    Recommence encore une fois.

    / Démarrer -> panneau de configuration -> options internet
    Clique sur l'onglet "Contenu" puis onglet "Certificats" et si tu trouves ceci, en particulier dans "éditeurs approuvés" :

    electronic-group - egroup - Montorgueil - VIP - "Sunny Day Design Ltd"

    => Supprime-les tous

    / redémarre normalement et poste le contenu du fichier Navipromo.txt qui se trouve dans Poste de travail > disque C:\

    puis, un nouveau log HJT

    Nota: il faudra que je revienne pour " DriveCleaner " / OK

    ...Bonne réception
    0
  13. scan14
     
    bonsoir,

    J'ai fait comme tu me l'as demandé mais lorsque je redemarre en mode sans echec et que je lance le fichier Navipromo.bat, cela ne fonctionne pas et cela marque:

    Navipromo.zip n'est pas ou pas encore compatible avec votre systeme d'exploitation, le programme va donc fermer

    Donc que dois je faire

    Merci
    0
  14. Utilisateur anonyme
     
    Re Scan14
    ...OUI, désolé c'est de ma faute, Win98 est incompatible avec ma proposition de désinfection " Navipromo "
    ...Je me renseigne auprès des Amis / Ok
    Ne t'inquiètes pas
    Bonne réception
    0
  15. Utilisateur anonyme
     
    Re Scan14
    ...J'ai des propositions en BFU ( script / OK )

    Nous voyons cela demain, car demain job pour Evasion600

    Bonne nuit, à demain
    0
  16. Utilisateur anonyme
     
    RE Bonsoir
    Imprime ceci.
    Télécharge Brute Force Uninstaller (de Merijn).
    Créé un nouveau dossier directement sur le C:\ et nomme-le BFU.
    Décompresse le fichier téléchargé dans ce nouveau dossier au moyen d'un clic droit (Extraire vers...C:\BFU).
    Ouvre le bloc-note de windows.
    Copie-colle ces lignes dans la fenêtre du bloc-note :

    OptionUnloadShell
    RegDeleteKey HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\xfhksdpav
    RegDelValue HKLM\Software\Microsoft\Windows\CurrentVersion\Run|xfhksdpav
    FileDelete %SYSDIR%\xfhksdpav*.dat
    FileDelete %SYSDIR%\xfhksdpav.exe
    FileDelete C:\WINDOWS\Downloaded Program Files\CONFLICT.1\U*_*_*NetInstaller.exe
    FolderDelete C:\Program Files\Fichiers communs\DriveCleaner Free
    SystemEmptyInternetCache
    SystemEmptyTempFolder
    SystemEmptyRecycleBin

    Enregistre le fichier sur le bureau en fix.txt
    Fais un clic droit sur ce fichier, choisis Renommer et dans la case, indique le nom fix.BFU.
    Déplace-le dans le même dossier que Brute Force Uninstaller soit dans c:\BFU
    Tu dois maintenant avoir deux fichiers dans le dossier C:\BFU : fix.bfu et BFU.exe (très important).
    Redémarre en mode Sans Échec : au redémarrage, tapote immédiatement la touche F8 (ou F5); tu verras un écran avec choix de démarrages apparaître. Utilisant les flèches du clavier, choisis "Mode Sans Échec" et valide avec "Entrée". Choisis ton compte usuel, et non Administrateur.
    Démarre le "Brute Force Uninstaller" en double-cliquant BFU.exe (du dossier C:\BFU).
    Clique sur le petit dossier jaune, à la droite de la boîte Scriptline to execute, et double-clique sur : fix.bfu.
    Dans la boîte "Scriptline to execute", tu devrais maintenant voir ceci : C:\BFU\fix.bfu
    Clique sur Execute et laisse-le faire son travail.
    Attendre que Complete script execution apparaîsse et clique sur OK.
    Clique Exit pour fermer le programme BFU.
    Redémarre normalement ton PC.

    Reviens dans ta prochaine réponse avec un nouveau log HijackThis / STP

    Bonne réception
    0
  17. scan14
     
    bonsoir
    Voici le nouveau log HijackThis/

    Logfile of HijackThis v1.99.1
    Scan saved at 20:55:21, on 29/05/07
    Platform: Windows 98 SE (Win9x 4.10.2222A)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\SYSTEM\KERNEL32.DLL
    C:\WINDOWS\SYSTEM\MSGSRV32.EXE
    C:\WINDOWS\SYSTEM\MPREXE.EXE
    C:\WINDOWS\SYSTEM\mmtask.tsk
    C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
    C:\WINDOWS\SYSTEM\KB918547\KB918547.EXE
    C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHSERV.EXE
    C:\PROGRAM FILES\MESSENGERPLUS! 3\MSGPLUS.EXE
    C:\WINDOWS\EXPLORER.EXE
    C:\WINDOWS\SYSTEM\RPCSS.EXE
    C:\WINDOWS\TASKMON.EXE
    C:\WINDOWS\SYSTEM\SYSTRAY.EXE
    C:\WINDOWS\SYSTEM\ATIPTAXX.EXE
    C:\WINDOWS\SYSTEM\STIMON.EXE
    C:\WINDOWS\LOADQM.EXE
    C:\WINDOWS\SYSTEM\LVCOMSX.EXE
    C:\PROGRAM FILES\LOGITECH\VIDEO\LOGITRAY.EXE
    C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHWEBSV.EXE
    C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHMAISV.EXE
    C:\PROGRAM FILES\LOGITECH\VIDEO\MANIFESTENGINE.EXE
    C:\OPLIMIT\OCRAWARE.EXE
    C:\PROGRAM FILES\CAERE\PAGEKEEPER30\SYSTEM\PKJOBS.EXE
    C:\OPLIMIT\OCRAWR32.EXE
    C:\PROGRAM FILES\WANADOO\TASKBARICON.EXE
    C:\PROGRAM FILES\SAGEM\SAGEM F@ST 800-840\DSLMON.EXE
    C:\PROGRAM FILES\NIKON\NKVIEW6\NKVMON.EXE
    C:\WINDOWS\SYSTEM\SPOOL32.EXE
    C:\WINDOWS\SYSTEM\WMIEXE.EXE
    C:\PROGRAM FILES\LOGITECH\VIDEO\FXSVR2.EXE
    C:\PROGRAM FILES\CAERE\PAGEKEEPER30\SYSTEM\PKTOPASS.EXE
    C:\PROGRAM FILES\CAERE\PAGEKEEPER30\SYSTEM\PKSLAPI.EXE
    C:\PROGRAM FILES\HIJACKTHIS VERSION FRANçAISE\HIJACKTHIS VF.EXE

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
    O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
    O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
    O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
    O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\Run: [AtiPTA] Atiptaxx.exe
    O4 - HKLM\..\Run: [CDApplet] CoolTool.exe
    O4 - HKLM\..\Run: [AtiCwd32] Aticwd32.exe
    O4 - HKLM\..\Run: [AtiQiPcl] AtiQiPcl.exe
    O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
    O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\WANADOO\Watch.exe
    O4 - HKLM\..\Run: [LoadQM] loadqm.exe
    O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\SYSTEM\LVCOMSX.EXE
    O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
    O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
    O4 - HKLM\..\Run: [avast! Web Scanner] C:\PROGRA~1\ALWILS~1\AVAST4\ASHWEBSV.EXE
    O4 - HKLM\..\Run: [ashMaiSv] C:\PROGRA~1\ALWILS~1\AVAST4\ashmaisv.exe
    O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\WANADOO\GestMaj.exe TaskBarIcon.exe
    O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\RunServices: [ATIPOLAB] ati2evxx.exe
    O4 - HKLM\..\RunServices: [KB891711] C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
    O4 - HKLM\..\RunServices: [KB918547] C:\WINDOWS\SYSTEM\KB918547\KB918547.EXE
    O4 - HKLM\..\RunServices: [avast!] C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O4 - HKLM\..\RunServices: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
    O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\PROGRAM FILES\LOGITECH\VIDEO\MANIFESTENGINE.EXE" boot
    O4 - HKCU\..\Run: [WOOKIT] C:\PROGRAM FILES\WANADOO\GestMaj.exe GestionnaireInternet.exe
    O4 - Startup: OCRAWARE.lnk = C:\OPLIMIT\OCRAWARE.EXE
    O4 - Startup: Travaux PageKeeper.lnk = C:\Program Files\Caere\PageKeeper30\system\PKJobs.exe
    O4 - Startup: EPSON Status Monitor 3 Environment Check.lnk = C:\WINDOWS\SYSTEM\E_SRCV03.EXE
    O4 - Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
    O4 - Startup: NkvMon.exe.lnk = C:\Program Files\Nikon\NkView6\NkvMon.exe
    O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - https://www.touslesdrivers.com/index.php?v_page=29
    O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
    O17 - HKLM\System\CCS\Services\VxD\MSTCP: SearchList = 212.27.32.176,212.27.32.177
    0
  18. Utilisateur anonyme
     
    Bonsoir scan14
    ...Dis il a sauté cet Adware : c:\windows\system\xfhksdpav.exe
    ...Le BFU s'est bien passé ?
    ...Ns continuons / OK :

    -2- Lance CCleaner, pour un nettoyage, supprime tout ce qu'il trouve

    -3- Lance EasyCleaner, pour deux scans : " Inutile ", puis " Registre ", (pas autre chose)
    Dans les deux scans supprime tout ce qu'il trouve

    -4- Fais moi un scan antivirus en ligne avec Bitdefender:
    fais ce scan en ligne : http://www.bitdefender.fr/bd/site/page.php?tab=0#
    Clique, en bas à gauche, sur "scan on line (nouveau)"
    Accepte ensuite la licence puis laisse-lui installer l'ActiveX
    Laisse-toi guider.

    Tuto en images pour le scan online : Tuto en image : http://pageperso.aol.fr/rginformatique/mapage/defender.htm

    Poste le rapport du scan online, puis un nouveau log HijackThis dans ta prochaine réponse

    Bonne réception
    0
  19. scan14
     
    bonsoir a toi

    voici le premier rapport:

    BitDefender Online Scanner - Rapport virus en temps réel

    Généré à: Wed, May 30, 2007 - 21:21:29

    --------------------------------------------------------------------------------

    Info d'analyse

    Fichiers scannés
    57454

    Infectés Fichiers
    0

    Virus Détectés

    Aucun virus trouvé.

    --------------------------------------------------------------------------------

    Ce sommaire du processus d'analyse sera utilisé par les laboratoires Antivirus BitDefender pour créer des statistiques agréguées sur l'activité des virus dans le monde.

    et voici le 2 eme rapport:

    Logfile of HijackThis v1.99.1
    Scan saved at 21:23:57, on 30/05/07
    Platform: Windows 98 SE (Win9x 4.10.2222A)
    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

    Running processes:
    C:\WINDOWS\SYSTEM\KERNEL32.DLL
    C:\WINDOWS\SYSTEM\MSGSRV32.EXE
    C:\WINDOWS\SYSTEM\MPREXE.EXE
    C:\WINDOWS\SYSTEM\mmtask.tsk
    C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
    C:\WINDOWS\SYSTEM\KB918547\KB918547.EXE
    C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHSERV.EXE
    C:\PROGRAM FILES\MESSENGERPLUS! 3\MSGPLUS.EXE
    C:\WINDOWS\EXPLORER.EXE
    C:\WINDOWS\SYSTEM\RPCSS.EXE
    C:\WINDOWS\TASKMON.EXE
    C:\WINDOWS\SYSTEM\SYSTRAY.EXE
    C:\WINDOWS\SYSTEM\ATIPTAXX.EXE
    C:\WINDOWS\SYSTEM\STIMON.EXE
    C:\WINDOWS\LOADQM.EXE
    C:\WINDOWS\SYSTEM\LVCOMSX.EXE
    C:\PROGRAM FILES\LOGITECH\VIDEO\LOGITRAY.EXE
    C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHWEBSV.EXE
    C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHMAISV.EXE
    C:\OPLIMIT\OCRAWARE.EXE
    C:\PROGRAM FILES\CAERE\PAGEKEEPER30\SYSTEM\PKJOBS.EXE
    C:\PROGRAM FILES\SAGEM\SAGEM F@ST 800-840\DSLMON.EXE
    C:\PROGRAM FILES\NIKON\NKVIEW6\NKVMON.EXE
    C:\WINDOWS\SYSTEM\SPOOL32.EXE
    C:\PROGRAM FILES\WANADOO\GESTIONNAIREINTERNET.EXE
    C:\OPLIMIT\OCRAWR32.EXE
    C:\WINDOWS\SYSTEM\WMIEXE.EXE
    C:\PROGRAM FILES\WANADOO\COMCOMP.EXE
    C:\PROGRAM FILES\WANADOO\TOASTER.EXE
    C:\PROGRAM FILES\WANADOO\INACTIVITY.EXE
    C:\PROGRAM FILES\WANADOO\POLLINGMODULE.EXE
    C:\PROGRAM FILES\CAERE\PAGEKEEPER30\SYSTEM\PKSLAPI.EXE
    C:\WINDOWS\SYSTEM32\ALERTMODULE\ALERTMODULE.EXE
    C:\PROGRAM FILES\CAERE\PAGEKEEPER30\SYSTEM\PKTOPASS.EXE
    C:\WINDOWS\SYSTEM\TAPISRV.EXE
    C:\WINDOWS\SYSTEM\RNAAPP.EXE
    C:\PROGRAM FILES\LOGITECH\VIDEO\FXSVR2.EXE
    C:\PROGRAM FILES\WANADOO\WATCH.EXE
    C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
    C:\WINDOWS\SYSTEM\DDHELP.EXE
    C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE
    C:\WINDOWS\SYSTEM\PSTORES.EXE
    C:\PROGRAM FILES\HIJACKTHIS VERSION FRANçAISE\HIJACKTHIS VF.EXE

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
    O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
    O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
    O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
    O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\Run: [AtiPTA] Atiptaxx.exe
    O4 - HKLM\..\Run: [CDApplet] CoolTool.exe
    O4 - HKLM\..\Run: [AtiCwd32] Aticwd32.exe
    O4 - HKLM\..\Run: [AtiQiPcl] AtiQiPcl.exe
    O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
    O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\WANADOO\Watch.exe
    O4 - HKLM\..\Run: [LoadQM] loadqm.exe
    O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\SYSTEM\LVCOMSX.EXE
    O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
    O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
    O4 - HKLM\..\Run: [avast! Web Scanner] C:\PROGRA~1\ALWILS~1\AVAST4\ASHWEBSV.EXE
    O4 - HKLM\..\Run: [ashMaiSv] C:\PROGRA~1\ALWILS~1\AVAST4\ashmaisv.exe
    O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\WANADOO\GestMaj.exe TaskBarIcon.exe
    O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
    O4 - HKLM\..\RunServices: [ATIPOLAB] ati2evxx.exe
    O4 - HKLM\..\RunServices: [KB891711] C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
    O4 - HKLM\..\RunServices: [KB918547] C:\WINDOWS\SYSTEM\KB918547\KB918547.EXE
    O4 - HKLM\..\RunServices: [avast!] C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O4 - HKLM\..\RunServices: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
    O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\PROGRAM FILES\LOGITECH\VIDEO\MANIFESTENGINE.EXE" boot
    O4 - HKCU\..\Run: [WOOKIT] C:\PROGRAM FILES\WANADOO\GestMaj.exe GestionnaireInternet.exe
    O4 - HKCU\..\RunServices: [LogitechSoftwareUpdate] "C:\PROGRAM FILES\LOGITECH\VIDEO\MANIFESTENGINE.EXE" boot
    O4 - HKCU\..\RunServices: [WOOKIT] C:\PROGRAM FILES\WANADOO\GestMaj.exe GestionnaireInternet.exe
    O4 - Startup: OCRAWARE.lnk = C:\OPLIMIT\OCRAWARE.EXE
    O4 - Startup: Travaux PageKeeper.lnk = C:\Program Files\Caere\PageKeeper30\system\PKJobs.exe
    O4 - Startup: EPSON Status Monitor 3 Environment Check.lnk = C:\WINDOWS\SYSTEM\E_SRCV03.EXE
    O4 - Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
    O4 - Startup: NkvMon.exe.lnk = C:\Program Files\Nikon\NkView6\NkvMon.exe
    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
    O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
    O9 - Extra button: Groom - {66F83792-DAE1-4823-8F20-ADA94B33A4FF} - C:\PROGRAM FILES\TOOX\Groom\Groom.exe (HKCU)
    O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - https://www.touslesdrivers.com/index.php?v_page=29
    O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
    O17 - HKLM\System\CCS\Services\VxD\MSTCP: SearchList = 212.27.32.176,212.27.32.177
    0
  20. Utilisateur anonyme
     
    Bonsoir Scan14

    ...Pour moi, c'est clean !!!
    Si tu n'as plus de disfonctionnements, tu peux marquer ton sujet comme "Résolu"
    ...Bonne continuation, attention au Web ( navigations )

    Evasion
    0
  21. scan14
     
    bonsoir

    Je te remercie de ton aide ainsi qu'a philae83, je n'ai plus de disfonctionnement et mon ordi va plus vite

    Merci encore, bonne continuation et bonne soirée

    Scan14
    0
  • 1
  • 2