Alerte : Message détecté en tant que Vundo

IndiaDance -  
Bonjour à tous,

Je ne m'y connais pas du tout en informatique ou très peu, et j'ai depuis aujourd'hui, beaucoup de messages détectés en tant que Vundo par mon VirusScan !
J'ai essayé de me renseigner un peu sur le net, et j'ai télécharger les logiciels : hijackthis.zip et FixVundo.exe, des fois que ça puisse me servir tout au long de cette démarche.

Merci de votre aide,
@ très vite ...
Configuration: Windows XP
Internet Explorer 7.0

27 réponses

Résumé de la discussion

Des messages détectés comme Vundo par VirusScan sur Windows XP avec Internet Explorer 7 déclenchent une recherche de solutions et l’utilisation d’outils tels que HijackThis, FixVundo et OAD. Plusieurs réponses orientent vers des actions concrètes: enregistrer un script de registre via un fichier .reg, installer et exécuter VundoFix, puis compléter avec un nouveau log HijackThis. Des rapports détaillent des éléments malveillants comme ddabccc.dll et SpOrder.dll, avec des scans OAD pour localiser les fichiers et évaluer les entrées de registre, et des remontées sur WinAntiVirus et WinFixer. En complément, des vérifications additionnelles évoquent Java (versions 1.5.x, puis 1.6.0_02) et des chemins d’installation suspects, suggérant de nettoyer les composants résiduels et de repérer les programmes pouvant réactiver les alertes.

Bobot (l’IA à votre service)
  1. IndiaDance Auteur
    ReBonjour,

    Suite à mon message, j'essaie de gagner un peu de temps, et je me suis permise de faire un scan à l'aide du logiciel hijackthis.exe renommé en scanner.exe :

    Logfile of HijackThis v1.99.1
    Scan saved at 22:57:01, on 18/07/2007
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16473)

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\Ati2evxx.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
    C:\Program Files\Network Associates\VirusScan\Mcshield.exe
    C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\htpatch.exe
    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    C:\WINDOWS\Dit.exe
    C:\Program Files\Medion Home CinemaXL\PowerCinema\PCMService.exe
    C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
    C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
    C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe
    C:\Program Files\Logitech\Video\LogiTray.exe
    C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
    C:\WINDOWS\DitExp.exe
    C:\Program Files\Adobe\Adobe Acrobat 7.0\Distillr\Acrotray.exe
    C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
    C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
    C:\Program Files\QuickTime\qttask.exe
    C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe
    C:\WINDOWS\SOUNDMAN.EXE
    C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
    C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
    C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
    C:\WINDOWS\system32\LVComS.exe
    C:\Program Files\Fichiers communs\Nokia\MPAPI\MPAPI3s.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
    C:\Program Files\MSN Messenger\msnmsgr.exe
    C:\Program Files\MSN Messenger\usnsvc.exe
    C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\Acrobat.exe
    C:\DOCUME~1\AURLIE~1\LOCALS~1\Temp\Adobelm_Cleanup.0001
    C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
    C:\DOCUME~1\AURLIE~1\LOCALS~1\Temp\Adobelm_Cleanup.0001
    C:\Program Files\Internet Explorer\iexplore.exe
    C:\Documents and Settings\Aurélie\Bureau\Sanner.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.aldi.com/
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Adobe Acrobat 7.0\ActiveX\AcroIEHelper.dll
    O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - C:\Program Files\Microsoft Money\System\mnyside.dll
    O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
    O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
    O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
    O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
    O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
    O4 - HKLM\..\Run: [HTpatch] C:\WINDOWS\htpatch.exe
    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
    O4 - HKLM\..\Run: [Dit] Dit.exe
    O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe
    O4 - HKLM\..\Run: [VOBRegCheck] C:\WINDOWS\System32\VOBREGCheck.exe -CheckReg
    O4 - HKLM\..\Run: [PCMService] C:\Program Files\Medion Home CinemaXL\PowerCinema\PCMService.exe
    O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
    O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
    O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe"
    O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
    O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
    O4 - HKLM\..\Run: [Adobe Version Cue CS2] "C:\Program Files\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe"
    O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Adobe Acrobat 7.0\Distillr\Acrotray.exe"
    O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [mmtask] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe"
    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
    O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
    O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
    O4 - HKLM\..\Run: [NI.UWA7P_0001_N91M0809] "C:\Documents and Settings\Aurélie\Local Settings\Temp\Setup(6).exe" -nag
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
    O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.8472\GoogleToolbarNotifier.exe
    O8 - Extra context menu item: Convertir en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
    O8 - Extra context menu item: Convertir en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
    O8 - Extra context menu item: Convertir la cible du lien en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
    O8 - Extra context menu item: Convertir la cible du lien en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
    O8 - Extra context menu item: Convertir la sélection en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
    O8 - Extra context menu item: Convertir la sélection en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
    O8 - Extra context menu item: Convertir les liens sélectionnés en fichier Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
    O8 - Extra context menu item: Convertir les liens sélectionnés en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
    O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
    O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dll
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O11 - Options group: [INTERNATIONAL] International*
    O14 - IERESET.INF: START_PAGE_URL=https://www.aldi.com/
    O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://jeuxenligne.orange.fr/Gameshell/GameHost/1.0/OberonGameHost.cab
    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
    O17 - HKLM\System\CCS\Services\Tcpip\..\{62B2097C-249E-4928-8087-81663965ABDC}: NameServer = 193.252.19.3,193.252.19.4
    O18 - Protocol: bw+0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw+0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw-0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw00s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw10s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw20s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw30s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw40s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw50s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw60s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw70s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw80s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bw90s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwa0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwb0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwc0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwd0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwe0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwf0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
    O18 - Protocol: bwg0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwg0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwh0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwi0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwj0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwk0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwl0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwm0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwn0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwo0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwp0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwq0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwr0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bws0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwt0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwu0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwv0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bww0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwx0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwy0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: bwz0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
    O18 - Protocol: offline-8876480 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
    O20 - AppInit_DLLs: c:\windows\system32\ddabccc.dll
    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
    O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
    O23 - Service: Adobe Version Cue CS2 - Unknown owner - C:\Program Files\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe" -win32service (file missing)
    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
    O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
    O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
    O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
    O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe

    Merci de votre aide,
    @ très vite
    0
    1. Lyonnais92 Contributeur sécurité
      Bonsoir,

      Rends toi sur ce site :
      http://www.virustotal.com/xhtml/virustotal_en.html

      Clique sur parcourir et cherche ce fichier : C:\Documents and Settings\Aurélie\Local Settings\Temp\Setup(6).exe
      Clique sur send.

      Un rapport va s'élaborer ligne à ligne.

      Attends la fin. Il doit comprendre la taille du fichier envoyé.

      Sauvegarde le rapport avec le bloc-note.

      Copie le dans ta réponse.

      Recommence avec :
      c:\windows\system32\ddabccc.dll

      @+
      0
      1. IndiaDance Auteur
        Rebonjour,

        J'ai donc cliqué sur ton lien, mais j'ai une page d'erreur HTTP 404 Non trouvé !

        @ tout de suite ...
        0
        3. IndiaDance Auteur
          ReBonsoir,

          Tout d'abord, merci de ton aide ... et en cherchant un peu j'ai réussi à trouver le vrai lien ! Pas bête la fille !

          Bon, revenons aux choses sérieuses, voici les résultats que j'ai obtenu :

          Résultat pour le fichier Setup(6).exe :

          Antivirus Version Last Update Result
          AhnLab-V3 2007.7.18.0 2007.07.18 Win-Trojan/Winfixer.88272
          AntiVir 7.4.0.44 2007.07.18 no virus found
          Authentium 4.93.8 2007.07.18 W32/Downloader2.HCI
          Avast 4.7.997.0 2007.07.18 Win32:Winfixer-F
          AVG 7.5.0.476 2007.07.18 Potentially harmful program WinFixer.AZ
          BitDefender 7.2 2007.07.18 Trojan.Downloader.AQI
          CAT-QuickHeal 9.00 2007.07.18 Downloader.WinFixer.o (Not a Virus)
          ClamAV devel-20070416 2007.07.18 Adware.Downloader-7
          DrWeb 4.33 2007.07.18 Trojan.DownLoader.10963
          eSafe 7.0.15.0 2007.07.17 no virus found
          eTrust-Vet 30.8.3791 2007.07.18 no virus found
          Ewido 4.0 2007.07.18 Not-A-Virus.Downloader.Win32.WinFixer.o
          FileAdvisor 1 2007.07.18 High threat detected
          Fortinet 2.91.0.0 2007.07.18 Misc/WinFixer
          F-Prot 4.3.2.48 2007.07.17 W32/Backdoor.ATJS
          F-Secure 6.70.13030.0 2007.07.18 no virus found
          Ikarus T3.1.1.8 2007.07.18 not-a-virus:Downloader.Win32.WinFixer.o
          Kaspersky 4.0.2.24 2007.07.18 not-a-virus:Downloader.Win32.WinFixer.o
          McAfee 5077 2007.07.18 potentially unwanted program Winfixer
          Microsoft 1.2704 2007.07.18 Program:Win32/WinSoftware.WinAntiVirus
          NOD32v2 2405 2007.07.18 Win32/Adware.WinFixer
          Norman 5.80.02 2007.07.18 W32/WinFixer.LO
          Panda 9.0.0.4 2007.07.18 Application/Winantivirus2006
          Sophos 4.19.0 2007.07.17 WinAntiVirusPro Installer
          Sunbelt 2.2.907.0 2007.07.18 WinSoftware Corporation, Inc. (v)
          Symantec 10 2007.07.18 ErrorSafe
          TheHacker 6.1.7.149 2007.07.18 Aplicacion/WinFixer.o
          VBA32 3.12.2.1 2007.07.18 Downloader.Win32.WinFixer.o
          VirusBuster 4.3.23:9 2007.07.18 no virus found
          Webwasher-Gateway 6.0.1 2007.07.18 Riskware.Dldr.WinFixer.O.87
          Aditional information
          File size: 87248 bytes
          MD5: 1396fdaf236bcaaf49a99b4433e474f0
          SHA1: 6fccc5fa9cc92b6157da46eb0e9fee3f0e5df077
          Bit9 info: http://fileadvisor.bit9.com/services/extinfo.aspx?md5=1396fdaf236bcaaf49a99b4433e474f0

          Résultat pour le fichier : ddabccc.dll

          Antivirus Version Last Update Result
          AhnLab-V3 2007.7.18.0 2007.07.18 Win-Trojan/Conhook.12494
          AntiVir 7.4.0.44 2007.07.18 TR/Crypt.XPACK.Gen
          Authentium 4.93.8 2007.07.18 W32/Downloader2.AJEZ
          Avast 4.7.997.0 2007.07.18 Win32:Conhook-BP
          AVG 7.5.0.476 2007.07.18 Obfustat.CX
          BitDefender 7.2 2007.07.18 Trojan.Conhook.CV
          CAT-QuickHeal 9.00 2007.07.18 TrojanDownloader.ConHook.bg
          ClamAV devel-20070416 2007.07.18 no virus found
          DrWeb 4.33 2007.07.18 Trojan.DownLoader.27523
          eSafe 7.0.15.0 2007.07.17 no virus found
          eTrust-Vet 30.8.3791 2007.07.18 Win32/Darksma.BE
          Ewido 4.0 2007.07.18 no virus found
          FileAdvisor 1 2007.07.18 no virus found
          Fortinet 2.91.0.0 2007.07.18 no virus found
          F-Prot 4.3.2.48 2007.07.17 W32/Downloader2.AJE
          F-Secure 6.70.13030.0 2007.07.18 no virus found
          Ikarus T3.1.1.8 2007.07.18 no virus found
          Kaspersky 4.0.2.24 2007.07.18 no virus found
          McAfee 5077 2007.07.18 no virus found
          Microsoft 1.2704 2007.07.18 no virus found
          NOD32v2 2405 2007.07.18 no virus found
          Norman 5.80.02 2007.07.18 Virtumonde.GYA
          Panda 9.0.0.4 2007.07.18 Trj/ConHook.CV
          Sophos 4.19.0 2007.07.17 no virus found
          Sunbelt 2.2.907.0 2007.07.18 VIPRE.Suspicious
          Symantec 10 2007.07.18 no virus found
          TheHacker 6.1.7.149 2007.07.18 no virus found
          VBA32 3.12.2.1 2007.07.18 Trojan-Downloader.Win32.ConHook.bg
          VirusBuster 4.3.23:9 2007.07.18 no virus found
          Webwasher-Gateway 6.0.1 2007.07.18 Trojan.Crypt.XPACK.Gen
          Aditional information
          File size: 12494 bytes
          MD5: 1609d140c64ab7991dbc30e2017c4b30
          SHA1: f296c75cc689d903aaf9dc758c3404e284b0029c
          Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.
          0
          1. Lyonnais92 Contributeur sécurité
            Re,

            la pas blonde, on continue.

            Télécharge VundoFix.exe (par Atribune) sur ton Bureau.
            http://www.atribune.org/ccount/click.php?id=4
            Double-clique VundoFix.exe afin de le lancer.

            Clique sur le bouton Scan for Vundo.
            Lorsque le scan est complété, clique sur le bouton Remove Vundo.
            Une invite te demandera si tu veux supprimer les fichiers, clique YES
            Après avoir cliqué "Yes", le Bureau disparaîtra un moment lors de la suppression des fichiers.
            Tu verras une invite qui t'annonce que ton PC va s'éteindre ("shutdown") ; clique OK
            Démarre ton PC à nouveau.

            Mets le rapport de Vundofix dans ta réponse (c:\vundofix.txt sauf erreur).

            @+
            0
            1. IndiaDance Auteur
              Rebonsoir,

              Un autre souci, à présent en plus d'avoir des messages détectés en tant que Vundo, j'ai eu un WinFixer ! Sinon, voici le rapport VundoFix.txt :

              VundoFix V6.5.6

              Checking Java version...

              Java version is 1.5.0.8
              Old versions of java are exploitable and should be removed.

              Java version is 1.5.0.10

              Java version is 1.5.0.11

              Scan started at 23:54:53 18/07/2007

              Listing files found while scanning....

              C:\windows\system32\ddabccc.dll

              Beginning removal...

              Attempting to delete C:\windows\system32\ddabccc.dll
              C:\windows\system32\ddabccc.dll Could not be deleted.

              Performing Repairs to the registry.
              Done!
              0
              1. Lyonnais92 Contributeur sécurité
                Re,

                1) Double-clique VundoFix.exe afin de le lancer.

                Fais un clic droit dans la fenêtre blanche et clique "Add more files?"

                Dans la nouvelle fenêtre qui apparait, Copie/colle le chemin du fichier suivant dans la première case (au haut):

                C:\WINDOWS\system32ddabccc.dll

                Clique sur le bouton "Add File(s)"

                Clique sur le bouton "Close Window".

                Clique à nouveau sur "Remove Vundo"

                Une invite te demandera si tu veux supprimer les fichiers, clique YES

                Après avoir cliqué "Yes", le Bureau disparaîtra un moment lors de la suppression des fichiers.

                Tu verras une invite qui t'annonce que ton PC va s'éteindre ("shutdown"); clique OK

                2) Tu télécharges AVG anti-spyware (gratuit même après la période d'essai) ici :

                http://www.grisoft.com/doc/downloads-results/lng/fr/tpl/tpl01?prd=triasw

                Tu enregistres le fichier dans un dossier.

                A la fin du téléchargement, tu ouvres le dossier et tu doubles click sur avgas-setup-7.5.0.47.exe Tu suis les instructions.

                Si on te demande de redémarrer ton ordinateur, tu le fais.

                Pour lancer AVG anti spyware tu doubles click sur l'icone qui s'est créé sur le bureau.

                La première fois que tu l'utilises, tu configures le logiciel.
                Sur la page "état", tu choisis inactif pour le bouclier résident.

                Sur la page "mise à jour", tu coches les cases sur les mises à jour automatiques et tu fais une mise à jour manuelle (commencer la mise à jour). Tu redémarres l'ordinateur si nécessaire.
                Sur la page "analyse", tu choisis d'abord l'onglet "paramètres". Tu coches "générer un rapport après chaque analyse" et "uniquement en cas de menaces". Tu choisis aussi l'option "quarantaine" pour "comment réagir", 'définir l'action par défaut ...'
                Tu choisis l'onglet analyser, nouvelle analyse, analyse complète du système.
                Aa fin de l'analyse, tu cliques sur "action", "appliquer toutes les actions" puis "enregistrer le rapport" puis "enregistrer le rapport sous". Tu suis les instructions dans la fenêtre qui s'ouvre.
                Ensuite, tu ouvres le rapport avec le bloc-notes pour le copier/coller avec ta réponse.

                3) remets un log Hijackthis ainsi que le rapport de Vundofix.

                @+
                0
                1. IndiaDance Auteur
                  Bonsoir,

                  J'ai bien fait l'analyse avec toutes les propriétés que tu m'a indiqué, j'ai eu une longue liste de fichiers faible, deux en moyen, et un élevé suceptibles d'être dangereux ! Par contre, je n'ai pas eu la possibilité d'avoir un rapport ! Est-ce normal, mais vu qu'on a indiqué qu'on veut un rapport après chaque analyse mais uniquement en cas de menaces, c'est peut être normal ! En attendant, j'ai toujours des menaces d'alerte avec mon VirusScan. Je te donne les résulats de mes nouveaux Scan avec VundoFix et Hijackthis :

                  Résultat du scan avec hijackthis :

                  Logfile of HijackThis v1.99.1
                  Scan saved at 22:03:35, on 19/07/2007
                  Platform: Windows XP SP2 (WinNT 5.01.2600)
                  MSIE: Internet Explorer v7.00 (7.00.6000.16473)

                  Running processes:
                  C:\WINDOWS\System32\smss.exe
                  C:\WINDOWS\system32\winlogon.exe
                  C:\WINDOWS\system32\services.exe
                  C:\WINDOWS\system32\lsass.exe
                  C:\WINDOWS\system32\Ati2evxx.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\WINDOWS\System32\svchost.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\WINDOWS\system32\Ati2evxx.exe
                  C:\WINDOWS\system32\spoolsv.exe
                  C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                  C:\WINDOWS\Explorer.EXE
                  C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
                  C:\WINDOWS\htpatch.exe
                  C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                  C:\WINDOWS\Dit.exe
                  C:\Program Files\Medion Home CinemaXL\PowerCinema\PCMService.exe
                  C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
                  C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
                  C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe
                  C:\Program Files\Logitech\Video\LogiTray.exe
                  C:\Program Files\Network Associates\VirusScan\Mcshield.exe
                  C:\Program Files\Adobe\Adobe Acrobat 7.0\Distillr\Acrotray.exe
                  C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
                  C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
                  C:\Program Files\QuickTime\qttask.exe
                  C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe
                  C:\WINDOWS\SOUNDMAN.EXE
                  C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
                  C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
                  C:\WINDOWS\system32\ctfmon.exe
                  C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
                  C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
                  C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
                  C:\WINDOWS\DitExp.exe
                  C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
                  C:\WINDOWS\System32\svchost.exe
                  C:\WINDOWS\system32\LVComS.exe
                  C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
                  C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
                  C:\Program Files\Fichiers communs\Nokia\MPAPI\MPAPI3s.exe
                  C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
                  C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
                  C:\Program Files\Internet Explorer\iexplore.exe
                  C:\Program Files\WinRAR\WinRAR.exe
                  C:\DOCUME~1\AURLIE~1\LOCALS~1\Temp\Rar$EX00.203\HijackThis.exe

                  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
                  R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.aldi.com/
                  R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
                  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                  O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Adobe Acrobat 7.0\ActiveX\AcroIEHelper.dll
                  O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - C:\Program Files\Microsoft Money\System\mnyside.dll
                  O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll
                  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
                  O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                  O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
                  O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
                  O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
                  O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
                  O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
                  O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
                  O4 - HKLM\..\Run: [HTpatch] C:\WINDOWS\htpatch.exe
                  O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                  O4 - HKLM\..\Run: [Dit] Dit.exe
                  O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe
                  O4 - HKLM\..\Run: [VOBRegCheck] C:\WINDOWS\System32\VOBREGCheck.exe -CheckReg
                  O4 - HKLM\..\Run: [PCMService] C:\Program Files\Medion Home CinemaXL\PowerCinema\PCMService.exe
                  O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
                  O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
                  O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe"
                  O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
                  O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
                  O4 - HKLM\..\Run: [Adobe Version Cue CS2] "C:\Program Files\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe"
                  O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Adobe Acrobat 7.0\Distillr\Acrotray.exe"
                  O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
                  O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
                  O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                  O4 - HKLM\..\Run: [mmtask] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe"
                  O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
                  O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
                  O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
                  O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
                  O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
                  O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
                  O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
                  O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.8472\GoogleToolbarNotifier.exe
                  O8 - Extra context menu item: Convertir en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
                  O8 - Extra context menu item: Convertir en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
                  O8 - Extra context menu item: Convertir la cible du lien en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
                  O8 - Extra context menu item: Convertir la cible du lien en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
                  O8 - Extra context menu item: Convertir la sélection en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
                  O8 - Extra context menu item: Convertir la sélection en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
                  O8 - Extra context menu item: Convertir les liens sélectionnés en fichier Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
                  O8 - Extra context menu item: Convertir les liens sélectionnés en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
                  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\npjpi160_02.dll
                  O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\npjpi160_02.dll
                  O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
                  O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dll
                  O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
                  O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
                  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                  O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                  O11 - Options group: [INTERNATIONAL] International*
                  O14 - IERESET.INF: START_PAGE_URL=https://www.aldi.com/
                  O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://jeuxenligne.orange.fr/Gameshell/GameHost/1.0/OberonGameHost.cab
                  O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
                  O17 - HKLM\System\CCS\Services\Tcpip\..\{62B2097C-249E-4928-8087-81663965ABDC}: NameServer = 193.252.19.3,193.252.19.4
                  O18 - Protocol: bw+0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw+0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw-0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw-0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw00 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw00s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw10 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw10s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw20 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw20s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw30 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw30s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw40 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw40s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw50 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw50s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw60 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw60s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw70 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw70s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw80 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw80s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw90 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw90s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwa0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwa0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwb0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwb0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwc0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwc0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwd0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwd0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwe0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwe0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwf0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwf0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
                  O18 - Protocol: bwg0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwg0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwh0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwh0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwi0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwi0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwj0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwj0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwk0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwk0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwl0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwl0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwm0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwm0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwn0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwn0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwo0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwo0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwp0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwp0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwq0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwq0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwr0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwr0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bws0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bws0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwt0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwt0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwu0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwu0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwv0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwv0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bww0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bww0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwx0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwx0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwy0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwy0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwz0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwz0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                  O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                  O18 - Protocol: offline-8876480 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O20 - AppInit_DLLs: c:\windows\system32\ddabccc.dll
                  O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
                  O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
                  O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
                  O23 - Service: Adobe Version Cue CS2 - Unknown owner - C:\Program Files\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe" -win32service (file missing)
                  O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
                  O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
                  O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                  O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
                  O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                  O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
                  O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
                  O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
                  O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
                  O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe

                  Résulat du scan avec VundoFix :

                  VundoFix V6.5.6

                  Checking Java version...

                  Java version is 1.5.0.8
                  Old versions of java are exploitable and should be removed.

                  Java version is 1.5.0.10

                  Java version is 1.5.0.11

                  Scan started at 23:47:43 18/07/2007

                  Listing files found while scanning....

                  C:\windows\system32\ddabccc.dll

                  Beginning removal...

                  Attempting to delete C:\windows\system32\ddabccc.dll
                  C:\windows\system32\ddabccc.dll Could not be deleted.

                  Performing Repairs to the registry.
                  Done!

                  Beginning removal...

                  VundoFix V6.5.6

                  Checking Java version...

                  Java version is 1.5.0.8
                  Old versions of java are exploitable and should be removed.

                  Java version is 1.5.0.10

                  Java version is 1.5.0.11

                  Scan started at 23:54:53 18/07/2007

                  Listing files found while scanning....

                  C:\windows\system32\ddabccc.dll

                  Beginning removal...

                  Attempting to delete C:\windows\system32\ddabccc.dll
                  C:\windows\system32\ddabccc.dll Could not be deleted.

                  Performing Repairs to the registry.
                  Done!

                  Beginning removal...

                  Attempting to delete C:\windows\system32\ddabccc.dll
                  C:\windows\system32\ddabccc.dll Could not be deleted.

                  Performing Repairs to the registry.
                  Done!

                  VundoFix V6.5.6

                  Checking Java version...

                  Java version is 1.5.0.8
                  Old versions of java are exploitable and should be removed.

                  Java version is 1.5.0.10

                  Java version is 1.5.0.11

                  Scan started at 22:04:26 19/07/2007

                  Listing files found while scanning....

                  C:\windows\system32\ddabccc.dll

                  Beginning removal...

                  Attempting to delete C:\windows\system32\ddabccc.dll
                  C:\windows\system32\ddabccc.dll Could not be deleted.

                  Performing Repairs to the registry.
                  Done!
                  0
                  1. Lyonnais92 Contributeur sécurité
                    Re,

                    il résiste !

                    Ouvre le Bloc Notes.
                    Copie le texte ci-dessous (entre les * mais sans les *) avec le texte qui se trouve dans l'espace ci-dessous (copie/colle) :

                    *****************************
                    REGEDIT4

                    [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs]
                    "c:\windows\system32\ddabccc.dll "=-
                    *****************************
                    Clique sur "Fichier", "Enregistrer sous".
                    Clique sur Bureau (dans la colonne de gauche)
                    Dans Nom du fichier tu écris fix.reg
                    Pour Type tu choisis "tous les fichiers" avec le menu déroulant.
                    Tu cliques sur Enregistrer.
                    Tu fermes le Bloc-notes

                    Sur ton bureau, tu double-clique sur l'icône de Fix.reg
                    Tu acceptes l'avertissement concernant la fusion
                    Le fix va travailler sans se manifester.
                    A la fin, tu vas voir un message disant que la fusion est terminée. Tu valides.

                    2) recommence le point 1 du post 8 et poste le rapport.

                    remets un log Hijackthis.
                    @+
                    0
                    1. IndiaDance Auteur
                      Re,

                      J'ai fait les manip' que tu m'as indiqué et voilà ce qu'il en ressort :

                      Résultat VundoFix :

                      VundoFix V6.5.6

                      Checking Java version...

                      Java version is 1.5.0.8
                      Old versions of java are exploitable and should be removed.

                      Java version is 1.5.0.10

                      Java version is 1.5.0.11

                      Scan started at 23:23:47 19/07/2007

                      Listing files found while scanning....

                      Beginning removal...

                      Performing Repairs to the registry.
                      Done!

                      Résultat HijackThis :

                      Logfile of HijackThis v1.99.1
                      Scan saved at 23:28:18, on 19/07/2007
                      Platform: Windows XP SP2 (WinNT 5.01.2600)
                      MSIE: Internet Explorer v7.00 (7.00.6000.16473)

                      Running processes:
                      C:\WINDOWS\System32\smss.exe
                      C:\WINDOWS\system32\winlogon.exe
                      C:\WINDOWS\system32\services.exe
                      C:\WINDOWS\system32\lsass.exe
                      C:\WINDOWS\system32\Ati2evxx.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\WINDOWS\System32\svchost.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\WINDOWS\system32\Ati2evxx.exe
                      C:\WINDOWS\system32\spoolsv.exe
                      C:\WINDOWS\Explorer.EXE
                      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                      C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
                      C:\WINDOWS\htpatch.exe
                      C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                      C:\WINDOWS\Dit.exe
                      C:\Program Files\Medion Home CinemaXL\PowerCinema\PCMService.exe
                      C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
                      C:\Program Files\Network Associates\VirusScan\Mcshield.exe
                      C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
                      C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe
                      C:\Program Files\Logitech\Video\LogiTray.exe
                      C:\Program Files\Adobe\Adobe Acrobat 7.0\Distillr\Acrotray.exe
                      C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
                      C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
                      C:\Program Files\QuickTime\qttask.exe
                      C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe
                      C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
                      C:\WINDOWS\SOUNDMAN.EXE
                      C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
                      C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
                      C:\WINDOWS\DitExp.exe
                      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
                      C:\WINDOWS\system32\ctfmon.exe
                      C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
                      C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
                      C:\WINDOWS\System32\svchost.exe
                      C:\WINDOWS\system32\LVComS.exe
                      C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
                      C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
                      C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
                      C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
                      C:\Program Files\Fichiers communs\Nokia\MPAPI\MPAPI3s.exe
                      C:\WINDOWS\system32\wuauclt.exe
                      C:\Documents and Settings\Aurélie\Bureau\Scan.exe

                      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
                      R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.aldi.com/
                      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
                      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Adobe Acrobat 7.0\ActiveX\AcroIEHelper.dll
                      O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - C:\Program Files\Microsoft Money\System\mnyside.dll
                      O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll
                      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
                      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
                      O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
                      O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
                      O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
                      O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
                      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
                      O4 - HKLM\..\Run: [HTpatch] C:\WINDOWS\htpatch.exe
                      O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                      O4 - HKLM\..\Run: [Dit] Dit.exe
                      O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe
                      O4 - HKLM\..\Run: [VOBRegCheck] C:\WINDOWS\System32\VOBREGCheck.exe -CheckReg
                      O4 - HKLM\..\Run: [PCMService] C:\Program Files\Medion Home CinemaXL\PowerCinema\PCMService.exe
                      O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
                      O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
                      O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe"
                      O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
                      O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
                      O4 - HKLM\..\Run: [Adobe Version Cue CS2] "C:\Program Files\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe"
                      O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Adobe Acrobat 7.0\Distillr\Acrotray.exe"
                      O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
                      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
                      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                      O4 - HKLM\..\Run: [mmtask] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe"
                      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
                      O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
                      O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
                      O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
                      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
                      O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
                      O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
                      O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.8472\GoogleToolbarNotifier.exe
                      O8 - Extra context menu item: Convertir en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
                      O8 - Extra context menu item: Convertir en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
                      O8 - Extra context menu item: Convertir la cible du lien en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
                      O8 - Extra context menu item: Convertir la cible du lien en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
                      O8 - Extra context menu item: Convertir la sélection en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
                      O8 - Extra context menu item: Convertir la sélection en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
                      O8 - Extra context menu item: Convertir les liens sélectionnés en fichier Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
                      O8 - Extra context menu item: Convertir les liens sélectionnés en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
                      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
                      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
                      O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
                      O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dll
                      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
                      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
                      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                      O11 - Options group: [INTERNATIONAL] International*
                      O14 - IERESET.INF: START_PAGE_URL=https://www.aldi.com/
                      O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://jeuxenligne.orange.fr/Gameshell/GameHost/1.0/OberonGameHost.cab
                      O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
                      O17 - HKLM\System\CCS\Services\Tcpip\..\{62B2097C-249E-4928-8087-81663965ABDC}: NameServer = 193.252.19.3,193.252.19.4
                      O18 - Protocol: bw+0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw+0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw-0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw-0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw00 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw00s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw10 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw10s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw20 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw20s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw30 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw30s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw40 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw40s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw50 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw50s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw60 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw60s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw70 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw70s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw80 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw80s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw90 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw90s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwa0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwa0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwb0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwb0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwc0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwc0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwd0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwd0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwe0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwe0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwf0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwf0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
                      O18 - Protocol: bwg0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwg0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwh0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwh0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwi0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwi0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwj0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwj0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwk0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwk0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwl0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwl0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwm0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwm0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwn0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwn0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwo0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwo0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwp0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwp0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwq0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwq0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwr0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwr0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bws0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bws0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwt0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwt0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwu0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwu0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwv0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwv0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bww0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bww0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwx0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwx0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwy0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwy0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwz0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwz0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                      O18 - Protocol: offline-8876480 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O20 - AppInit_DLLs: c:\windows\system32\ddabccc.dll
                      O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
                      O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
                      O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
                      O23 - Service: Adobe Version Cue CS2 - Unknown owner - C:\Program Files\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe" -win32service (file missing)
                      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
                      O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
                      O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                      O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
                      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                      O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
                      O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
                      O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
                      O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
                      O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
                      0
                      1. Lyonnais92 Contributeur sécurité
                        Re,

                        ça n'as pas fonctionné.

                        On verra ça au jour.
                        @+
                        0
                        1. IndiaDance Auteur
                          Re,

                          D'accord, on vois ça plus tard, mais en tout cas, merci pour ton aide !

                          @+
                          0
                          1. Lyonnais92 Contributeur sécurité
                            RE,

                            Normal que ça n'ait pas fontionné. On fait comme ça :

                            Ouvre le Bloc Notes.
                            Copie le texte ci-dessous (entre les * mais sans les *) avec le texte qui se trouve dans l'espace ci-dessous (copie/colle) :

                            *****************************
                            REGEDIT4

                            [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
                            "AppInit_DLLs"=-
                            *****************************
                            Clique sur "Fichier", "Enregistrer sous".
                            Clique sur Bureau (dans la colonne de gauche)
                            Dans Nom du fichier tu écris fix.reg
                            Pour Type tu choisis "tous les fichiers" avec le menu déroulant.
                            Tu cliques sur Enregistrer.
                            Tu fermes le Bloc-notes

                            Sur ton bureau, tu double-clique sur l'icône de Fix.reg
                            Tu acceptes l'avertissement concernant la fusion
                            Le fix va travailler sans se manifester.
                            A la fin, tu vas voir un message disant que la fusion est terminée. Tu valides.

                            remets un log Hijackthis.

                            @+
                            0
                            1. IndiaDance Auteur
                              Bonsoir,

                              Je viens de faire les quelques manip' que tu m'as indiqués, à présent mon pc rame pas mal, mais le message de VirusScan a changé, j'ai eu Downloader.DBF ou un tuc se rapprochant concernant le fichier ddabccc.dll, et quelques autres Vundo encore !

                              Voici le nouveau log HijackThis :

                              Logfile of HijackThis v1.99.1
                              Scan saved at 00:54:15, on 21/07/2007
                              Platform: Windows XP SP2 (WinNT 5.01.2600)
                              MSIE: Internet Explorer v7.00 (7.00.6000.16473)

                              Running processes:
                              C:\WINDOWS\System32\smss.exe
                              C:\WINDOWS\system32\winlogon.exe
                              C:\WINDOWS\system32\services.exe
                              C:\WINDOWS\system32\lsass.exe
                              C:\WINDOWS\system32\Ati2evxx.exe
                              C:\WINDOWS\system32\svchost.exe
                              C:\WINDOWS\System32\svchost.exe
                              C:\WINDOWS\system32\svchost.exe
                              C:\WINDOWS\system32\Ati2evxx.exe
                              C:\WINDOWS\system32\spoolsv.exe
                              C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                              C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
                              C:\Program Files\Network Associates\VirusScan\Mcshield.exe
                              C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
                              C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
                              C:\WINDOWS\System32\svchost.exe
                              C:\WINDOWS\Explorer.EXE
                              C:\WINDOWS\htpatch.exe
                              C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                              C:\WINDOWS\Dit.exe
                              C:\Program Files\Medion Home CinemaXL\PowerCinema\PCMService.exe
                              C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
                              C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
                              C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe
                              C:\Program Files\Logitech\Video\LogiTray.exe
                              C:\Program Files\Adobe\Adobe Acrobat 7.0\Distillr\Acrotray.exe
                              C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
                              C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
                              C:\Program Files\QuickTime\qttask.exe
                              C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe
                              C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
                              C:\WINDOWS\SOUNDMAN.EXE
                              C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
                              C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
                              C:\WINDOWS\system32\ctfmon.exe
                              C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
                              C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
                              C:\WINDOWS\DitExp.exe
                              C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
                              C:\Program Files\Fichiers communs\Nokia\MPAPI\MPAPI3s.exe
                              C:\WINDOWS\system32\LVComS.exe
                              C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
                              C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
                              C:\Documents and Settings\Aurélie\Bureau\Scan.exe
                              C:\Documents and Settings\Aurélie\Bureau\Scan.exe
                              C:\Documents and Settings\Aurélie\Bureau\Scan.exe

                              R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
                              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                              R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
                              R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.aldi.com/
                              R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
                              R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                              O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Adobe Acrobat 7.0\ActiveX\AcroIEHelper.dll
                              O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - C:\Program Files\Microsoft Money\System\mnyside.dll
                              O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll
                              O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
                              O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                              O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
                              O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
                              O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
                              O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
                              O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
                              O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
                              O4 - HKLM\..\Run: [HTpatch] C:\WINDOWS\htpatch.exe
                              O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                              O4 - HKLM\..\Run: [Dit] Dit.exe
                              O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe
                              O4 - HKLM\..\Run: [VOBRegCheck] C:\WINDOWS\System32\VOBREGCheck.exe -CheckReg
                              O4 - HKLM\..\Run: [PCMService] C:\Program Files\Medion Home CinemaXL\PowerCinema\PCMService.exe
                              O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
                              O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
                              O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe"
                              O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
                              O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
                              O4 - HKLM\..\Run: [Adobe Version Cue CS2] "C:\Program Files\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe"
                              O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Adobe Acrobat 7.0\Distillr\Acrotray.exe"
                              O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
                              O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
                              O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                              O4 - HKLM\..\Run: [mmtask] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe"
                              O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
                              O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
                              O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
                              O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
                              O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
                              O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
                              O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
                              O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.8472\GoogleToolbarNotifier.exe
                              O8 - Extra context menu item: Convertir en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
                              O8 - Extra context menu item: Convertir en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
                              O8 - Extra context menu item: Convertir la cible du lien en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
                              O8 - Extra context menu item: Convertir la cible du lien en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
                              O8 - Extra context menu item: Convertir la sélection en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
                              O8 - Extra context menu item: Convertir la sélection en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
                              O8 - Extra context menu item: Convertir les liens sélectionnés en fichier Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
                              O8 - Extra context menu item: Convertir les liens sélectionnés en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
                              O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
                              O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
                              O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
                              O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dll
                              O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
                              O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
                              O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                              O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                              O11 - Options group: [INTERNATIONAL] International*
                              O14 - IERESET.INF: START_PAGE_URL=https://www.aldi.com/
                              O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://jeuxenligne.orange.fr/Gameshell/GameHost/1.0/OberonGameHost.cab
                              O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
                              O17 - HKLM\System\CCS\Services\Tcpip\..\{62B2097C-249E-4928-8087-81663965ABDC}: NameServer = 193.252.19.3,193.252.19.4
                              O18 - Protocol: bw+0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bw+0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bw-0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bw-0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bw00 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bw00s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bw10 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bw10s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bw20 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bw20s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bw30 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bw30s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bw40 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bw40s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bw50 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bw50s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bw60 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bw60s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bw70 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bw70s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bw80 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bw80s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bw90 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bw90s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwa0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwa0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwb0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwb0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwc0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwc0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwd0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwd0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwe0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwe0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwf0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwf0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
                              O18 - Protocol: bwg0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwg0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwh0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwh0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwi0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwi0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwj0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwj0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwk0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwk0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwl0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwl0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwm0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwm0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwn0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwn0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwo0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwo0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwp0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwp0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwq0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwq0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwr0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwr0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bws0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bws0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwt0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwt0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwu0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwu0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwv0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwv0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bww0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bww0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwx0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwx0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwy0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwy0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwz0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: bwz0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                              O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                              O18 - Protocol: offline-8876480 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                              O20 - AppInit_DLLs: c:\windows\system32\ddabccc.dll
                              O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
                              O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
                              O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
                              O23 - Service: Adobe Version Cue CS2 - Unknown owner - C:\Program Files\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe" -win32service (file missing)
                              O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
                              O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
                              O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                              O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
                              O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                              O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
                              O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
                              O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
                              O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
                              O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
                              0
                              1. IndiaDance Auteur
                                Bonjour,

                                Ce matin, à l'ouverture de mon ordinateur, j'ai remarqué qu'il ramait pas mal, mais aussi, je ne vois plus VirusScan dans mes barre des tâches, est-ce normal ?!?

                                Après mes manip' de cette nuit, il y a t-il d'autres choses à faire ? J'ai eu quelques messages d'alerte détectés mais à l'ouverture de mon ordinateur, j'ai pas l'impression d'en avoir depuis !

                                Merci beaucoup !
                                0
                                1. Lyonnais92 Contributeur sécurité
                                  Bonjour,

                                  redémarre l'ordi et mets à jour ton avis virus "à la main".

                                  vérifie qu'il est actif.

                                  Si tu as un doute, remets un log Hijackthis.
                                  @+
                                  0
                                  1. IndiaDance Auteur
                                    Re,

                                    Je viens de redémarrer comme tu m'as dit, il a marché sans problème, et mon VirusScan est bien là. J'ai fais la mise à jour, j'ai quand même fait un log Hijackthis pour être sûr. Je voudrais savoir si tu me conseilles de garder AVG Antispyware ? VundoFix et Hijackthis ?

                                    Merci beaucoup pour ton aide.

                                    Voici le log Hijackthis :

                                    Logfile of HijackThis v1.99.1
                                    Scan saved at 14:38:10, on 21/07/2007
                                    Platform: Windows XP SP2 (WinNT 5.01.2600)
                                    MSIE: Internet Explorer v7.00 (7.00.6000.16473)

                                    Running processes:
                                    C:\WINDOWS\System32\smss.exe
                                    C:\WINDOWS\system32\winlogon.exe
                                    C:\WINDOWS\system32\services.exe
                                    C:\WINDOWS\system32\lsass.exe
                                    C:\WINDOWS\system32\Ati2evxx.exe
                                    C:\WINDOWS\system32\svchost.exe
                                    C:\WINDOWS\System32\svchost.exe
                                    C:\WINDOWS\system32\svchost.exe
                                    C:\WINDOWS\system32\Ati2evxx.exe
                                    C:\WINDOWS\system32\spoolsv.exe
                                    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                                    C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
                                    C:\Program Files\Network Associates\VirusScan\Mcshield.exe
                                    C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
                                    C:\WINDOWS\Explorer.EXE
                                    C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
                                    C:\WINDOWS\System32\svchost.exe
                                    C:\WINDOWS\htpatch.exe
                                    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                                    C:\WINDOWS\Dit.exe
                                    C:\Program Files\Medion Home CinemaXL\PowerCinema\PCMService.exe
                                    C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
                                    C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
                                    C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe
                                    C:\Program Files\Logitech\Video\LogiTray.exe
                                    C:\Program Files\Adobe\Adobe Acrobat 7.0\Distillr\Acrotray.exe
                                    C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
                                    C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
                                    C:\Program Files\QuickTime\qttask.exe
                                    C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe
                                    C:\WINDOWS\SOUNDMAN.EXE
                                    C:\WINDOWS\DitExp.exe
                                    C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
                                    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
                                    C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
                                    C:\WINDOWS\system32\ctfmon.exe
                                    C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
                                    C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
                                    C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
                                    C:\WINDOWS\system32\LVComS.exe
                                    C:\Program Files\Fichiers communs\Nokia\MPAPI\MPAPI3s.exe
                                    C:\WINDOWS\system32\wuauclt.exe
                                    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
                                    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
                                    C:\Program Files\Internet Explorer\iexplore.exe
                                    C:\Documents and Settings\Aurélie\Bureau\Scan.exe

                                    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
                                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                                    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
                                    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.aldi.com/
                                    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
                                    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                                    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Adobe Acrobat 7.0\ActiveX\AcroIEHelper.dll
                                    O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - C:\Program Files\Microsoft Money\System\mnyside.dll
                                    O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll
                                    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
                                    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                                    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
                                    O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
                                    O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
                                    O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
                                    O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
                                    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
                                    O4 - HKLM\..\Run: [HTpatch] C:\WINDOWS\htpatch.exe
                                    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                                    O4 - HKLM\..\Run: [Dit] Dit.exe
                                    O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe
                                    O4 - HKLM\..\Run: [VOBRegCheck] C:\WINDOWS\System32\VOBREGCheck.exe -CheckReg
                                    O4 - HKLM\..\Run: [PCMService] C:\Program Files\Medion Home CinemaXL\PowerCinema\PCMService.exe
                                    O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
                                    O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
                                    O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe"
                                    O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
                                    O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
                                    O4 - HKLM\..\Run: [Adobe Version Cue CS2] "C:\Program Files\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe"
                                    O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Adobe Acrobat 7.0\Distillr\Acrotray.exe"
                                    O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
                                    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
                                    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                                    O4 - HKLM\..\Run: [mmtask] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe"
                                    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
                                    O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
                                    O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
                                    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
                                    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
                                    O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
                                    O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
                                    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.8472\GoogleToolbarNotifier.exe
                                    O8 - Extra context menu item: Convertir en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
                                    O8 - Extra context menu item: Convertir en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
                                    O8 - Extra context menu item: Convertir la cible du lien en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
                                    O8 - Extra context menu item: Convertir la cible du lien en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
                                    O8 - Extra context menu item: Convertir la sélection en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
                                    O8 - Extra context menu item: Convertir la sélection en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
                                    O8 - Extra context menu item: Convertir les liens sélectionnés en fichier Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
                                    O8 - Extra context menu item: Convertir les liens sélectionnés en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
                                    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
                                    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
                                    O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
                                    O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dll
                                    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
                                    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
                                    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                                    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                                    O11 - Options group: [INTERNATIONAL] International*
                                    O14 - IERESET.INF: START_PAGE_URL=https://www.aldi.com/
                                    O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game10.zylom.com/activex/zylomgamesplayer.cab
                                    O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://jeuxenligne.orange.fr/Gameshell/GameHost/1.0/OberonGameHost.cab
                                    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
                                    O17 - HKLM\System\CCS\Services\Tcpip\..\{62B2097C-249E-4928-8087-81663965ABDC}: NameServer = 193.252.19.3,193.252.19.4
                                    O18 - Protocol: bw+0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bw+0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bw-0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bw-0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bw00 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bw00s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bw10 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bw10s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bw20 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bw20s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bw30 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bw30s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bw40 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bw40s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bw50 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bw50s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bw60 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bw60s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bw70 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bw70s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bw80 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bw80s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bw90 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bw90s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwa0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwa0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwb0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwb0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwc0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwc0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwd0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwd0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwe0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwe0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwf0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwf0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
                                    O18 - Protocol: bwg0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwg0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwh0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwh0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwi0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwi0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwj0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwj0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwk0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwk0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwl0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwl0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwm0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwm0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwn0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwn0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwo0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwo0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwp0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwp0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwq0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwq0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwr0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwr0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bws0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bws0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwt0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwt0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwu0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwu0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwv0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwv0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bww0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bww0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwx0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwx0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwy0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwy0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwz0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwz0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                                    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                                    O18 - Protocol: offline-8876480 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O20 - AppInit_DLLs: c:\windows\system32\ddabccc.dll
                                    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
                                    O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
                                    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
                                    O23 - Service: Adobe Version Cue CS2 - Unknown owner - C:\Program Files\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe" -win32service (file missing)
                                    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
                                    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
                                    O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                                    O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
                                    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                                    O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
                                    O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
                                    O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
                                    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
                                    O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
                                    0
                                    1. Lyonnais92 Contributeur sécurité
                                      Re,

                                      ==> Télécharge OAD http://sosvirus.changelog.fr/OAD.exe
                                      - Enregistre le sur ton bureau

                                      Double clique sur le OAD pour le lancer

                                      - nom de fichier à rechercher tape ou fais un copier coller de : ddabccc
                                      - Type de recherche : sélectionne l'option 6 puis valide [entree]

                                      OAD va maintenant rechercher le fichier. Laisse le travailler jusqu'à ce qu'il en ai terminé.
                                      Le rapport de recherche s'affichera automatiquement à dès qu'il en aura terminé.

                                      - Fais un copier / coller de ce rapport dans ton prochain post.

                                      Note importante : Suivant la taille des disques dur cette recherche peut prendre plusieurs minutes. Sois patient
                                      @+
                                      0
                                      1. IndiaDance Auteur
                                        Re,

                                        Voici le rapport de la recherche OAD :

                                        21/07/2007 ---- 16:17:18,09

                                        ----------------------------------
                                        §§§§§§ [ddabccc] §§§§§§
                                        ----------------------------------
                                        [X] Registre

                                        -------------- [ ] rapide
                                        -- Fichier --- [ ] disque systeme
                                        ------------- [X] complete

                                        ********************
                                        [Registre]
                                        ********************

                                        [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
                                        "AppInit_DLLs"="c:\\windows\\system32\\ddabccc.dll"

                                        [HKEY_USERS\S-1-5-21-2601252467-3177116611-3549611948-1007\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU\*]
                                        "f"="C:\\WINDOWS\\system32\\ddabccc.dll"

                                        [HKEY_USERS\S-1-5-21-2601252467-3177116611-3549611948-1007\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU\dll]
                                        "a"="C:\\WINDOWS\\system32\\ddabccc.dll"

                                        *******************
                                        [Fichier]
                                        *******************

                                        c:\VundoFix Backups\ddabccc.dll.bad
                                        c:\WINDOWS\system32\ddabccc.dll.vir

                                        *********************
                                        [Même date]
                                        *********************

                                        C:\VundoFix
                                        C:\WINDOWS\system32\SpOrder.dll
                                        C:\WINDOWS\system32\wpa.dbl
                                        C:\WINDOWS\system32\ddabccc.dll.vir
                                        C:\Program Files\WinAntiVirus

                                        Outil Aide Diagnostic By !aur3n7 Version 1.02
                                        ----------------------------------
                                        §§§§§ Fin Rapport §§§§§
                                        ----------------------------------
                                        0
                                        • 1
                                        • 2

                                        Discussions similaires

                                        Comment créer une alerte leboncoin
                                        Marc L.

                                        19 réponses
                                        se debarasser de fausses alerte virus
                                        Evka

                                        1 réponse
                                        Créer une alerte sous Excel
                                        Sandy

                                        17 réponses
                                        COMMENT CREER UNE ALERTE SUR EXCEL?
                                        DELPHINE

                                        10 réponses
                                        Mise a jour pour alerte gps G300
                                        naunau

                                        22 réponses