proposition d'anti-spyware? Résolu

Question

bonjour

est-ce que quelqu'un peut me doner un lien pour télécharger Ad-Aware mais la version plus ancienne que celle de 2007 parce qu'il parait qu'elle est moins bien.

ou sinon un bon logiciel (gratuit s'il vous plait) contre les spyware parce que mon PC est infecté mais AVG anti-spyware ne les détecte pas.

Merci d'avance

martien10 · Answer

Bien au contraire ad aware 2007 c'est la mieux...
Maintenant il y aussi spybot search and destroy...

moK´s@ · Answer

salut Ayeuh,

* Télécharge HijackThis et poste le rapport stp

http://pchelpbordeaux.free.fr/logiciels.html
Tutorial
http://pchelpbordeaux.free.fr/tuto.html
Démo en image
http://pageperso.aol.fr/balltrap34/demohijack.htm

@+

Ayeuh · Answer

jai lu quelque part sur le net que cette version faisait ramer le PC
déjà que le mien n'en a pa besoin... 
mais ad-aware 2007 est payant non? comment je fait?

moK´s@ · Answer

re,

non adaware n´est pas payant ( tu prends la version personnel) mais si tu es infecté adaware ne pourra pas grand chose si avg n´y arrive pas, post le rapport hijack this je vais regarder...

sinon pour adaware :

ad aware

@+

moK´s@ · Answer

ok

Ayeuh · Answer

voilà voilà


Logfile of HijackThis v1.99.1
Scan saved at 18:50:45, on 03/08/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 

(7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Avast4\aswUpdSv.exe
C:\Program Files\Avast4\ashServ.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
c:\program files\fichiers 

communs\logitech\lvmvfm\LVPrcSrv.exe
C:\windows\system\hpsysdrv.exe
C:\HP\KBD\KBD.EXE
G:\PROGRAMME\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\ALCXMNTR.EXE
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\Program Files\D-Link\AirPlus G\AirGCFG.exe
C:\Program Files\ANI\ANIWZCS2 

Service\WZCSLDR2.exe
C:\PROGRA~1\Avast4\ashDisp.exe
C:\Program 

Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\Fichiers communs\Microsoft 

Shared\VS7Debug\mdm.exe
C:\Program Files\Fichiers 

communs\Logitech\LComMgr\Communications_Helpe

r.exe
C:\Program Files\Fichiers 

communs\Logitech\LComMgr\LVComSX.exe
G:\PROGRAMME\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Avast4\ashWebSv.exe
C:\Program Files\Avast4\ashMaiSv.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Internet 

Explorer\IEXPLORE.EXE
G:\PROGRAMME\Hijackthis Version 

Française\hijackthis vf.exe

R1 - HKCU\Software\Microsoft\Internet 

Explorer\Main,Default_Search_URL = 

http://srch-qfr9.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet 

Explorer\Main,Search Page = 

http://srch-qfr9.hpwis.com/
R0 - HKCU\Software\Microsoft\Internet 

Explorer\Main,Start Page = 

https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet 

Explorer\Main,Default_Page_URL = 

https://www.01net.com/telecharger/
R1 - HKLM\Software\Microsoft\Internet 

Explorer\Main,Default_Search_URL = 

https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet 

Explorer\Main,Search Bar = 

http://srch-qfr9.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet 

Explorer\Main,Search Page = 

https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet 

Explorer\Main,Start Page = 

https://www.01net.com/telecharger/
R0 - HKCU\Software\Microsoft\Internet 

Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - 

{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - 

C:\Program Files\Adobe\Acrobat 

5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: SSVHelper Class - 

{761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - 

C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: (no name) - 

{7E853D72-626A-48EC-A868-BA8D5E23E045} - (no 

file)
O4 - HKLM\..\Run: [hpsysdrv] 

c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HotKeysCmds] 

C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] 

C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE 

C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe 

/installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM\..\Run: [PS2] 

C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [Realtime Audio Engine] 

mmrtkrnl.exe
O4 - HKLM\..\Run: [D-Link AirPlus G] 

C:\Program Files\D-Link\AirPlus G\AirGCFG.exe
O4 - HKLM\..\Run: [ANIWZCS2Service] 

C:\Program Files\ANI\ANIWZCS2 

Service\WZCSLDR2.exe
O4 - HKLM\..\Run: [avast!] 

C:\PROGRA~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] 

"C:\Program 

Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [Logitech Hardware 

Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: 

[LogitechCommunicationsManager] "C:\Program 

Files\Fichiers 

communs\Logitech\LComMgr\Communications_Helpe

r.exe"
O4 - HKLM\..\Run: [LVCOMSX] "C:\Program 

Files\Fichiers 

communs\Logitech\LComMgr\LVComSX.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] 

"G:\PROGRAMME\AVG Anti-Spyware 7.5\avgas.exe" 

/minimized
O4 - HKCU\..\Run: [NVIEW] rundll32.exe 

nview.dll,nViewLoadHook
O4 - HKCU\..\Run: [ctfmon.exe] 

C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program 

Files\MSN Messenger\msnmsgr.exe" /background
O8 - Extra context menu item: Add to AMV 

Converter... - 

G:\PROGRAMME\MP3NEO\AMVConverter\grab.html
O8 - Extra context menu item: E&xporter vers 

Microsoft Excel - 

res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE

/3000
O8 - Extra context menu item: MediaManager 

tool grab multimedia file - 

G:\PROGRAMME\MP3NEO\MediaManager\grab.html
O9 - Extra button: (no name) - 

{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - 

C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java 

(Sun) - 

{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - 

C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Recherche - 

{92780B25-18CC-41C8-B9BE-3C9C571A8263} - 

C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - 

{CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no 

file)
O9 - Extra button: (no name) - 

{e2e2dd38-d088-4134-82b7-f2ba38496583} - 

%windir%\Network Diagnostic\xpnetdiag.exe 

(file missing)
O9 - Extra 'Tools' menuitem: 

@xpsp3res.dll,-20001 - 

{e2e2dd38-d088-4134-82b7-f2ba38496583} - 

%windir%\Network Diagnostic\xpnetdiag.exe 

(file missing)
O9 - Extra button: Messenger - 

{FB5F1910-F110-11d2-BB9E-00C04F795683} - 

C:\Program Files\Messenger\msmsgs.exe (file 

missing)
O9 - Extra 'Tools' menuitem: Windows 

Messenger - 

{FB5F1910-F110-11d2-BB9E-00C04F795683} - 

C:\Program Files\Messenger\msmsgs.exe (file 

missing)
O11 - Options group: [INTERNATIONAL] 

International*
O16 - DPF: 

{17492023-C23A-453E-A040-C7C580BBF700} 

(Windows Genuine Advantage Validation Tool) - 

http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: 

{4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN 

Photo Upload Tool) - 

http://gfx1.mail.live.com/mail/w1/resources/M

SNPUpld.cab
O16 - DPF: 

{5D6F45B3-9043-443D-A792-115447494D24} 

(UnoCtrl Class) - 

http://messenger.zone.msn.com/FR-FR/a-UNO1/GA

ME_UNO1.cab
O16 - DPF: 

{9122D757-5A4F-4768-82C5-B4171D8556A7} 

(PhotoPickConvert Class) - 

http://appdirectory.messenger.msn.com/AppDire

ctory/P4Apps/PhotoSwap/PhtPkMSN.cab
O16 - DPF: 

{C3F79A2B-B9B4-4A66-B012-3EE46475B072} 

(MessengerStatsClient Class) - 

http://messenger.zone.msn.com/binary/Messenge

rStatsPAClient.cab56907.cab
O16 - DPF: 

{CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA} 

(Environnement d'exécution Java 1.4.1_02) - 
O18 - Protocol: bw+0 - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bw+0s - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bw-0 - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bw-0s - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bw00 - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bw00s - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bw10 - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bw10s - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bw20 - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bw20s - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bw30 - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bw30s - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bw40 - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bw40s - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bw50 - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bw50s - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bw60 - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bw60s - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bw70 - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bw70s - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bw80 - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bw80s - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bw90 - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bw90s - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwa0 - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwa0s - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwb0 - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwb0s - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwc0 - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwc0s - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwd0 - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwd0s - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwe0 - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwe0s - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwf0 - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwf0s - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwfile-8876480 - 

{9462A756-7B47-47BC-8C80-C34B9B80B32B} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\GAPlugProtocol-8876

480.dll
O18 - Protocol: bwg0 - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwg0s - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwh0 - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwh0s - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwi0 - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwi0s - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwj0 - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwj0s - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwk0 - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwk0s - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwl0 - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwl0s - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwm0 - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwm0s - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwn0 - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwn0s - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwo0 - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwo0s - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwp0 - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwp0s - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwq0 - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwq0s - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwr0 - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwr0s - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bws0 - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bws0s - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwt0 - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwt0s - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwu0 - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwu0s - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwv0 - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwv0s - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bww0 - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bww0s - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwx0 - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwx0s - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwy0 - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwy0s - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwz0 - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: bwz0s - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O18 - Protocol: livecall - 

{828030A1-22C1-4009-854F-8E305202313F} - 

C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - 

{828030A1-22C1-4009-854F-8E305202313F} - 

C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - 

{0222BCE6-F056-489A-9543-704B2895BF09} - 

G:\PROGRAMME\Logitech\Desktop 

Messenger\8876480\Program\BWPlugProtocol-8876

480.dll
O20 - Winlogon Notify: igfxcui - 

C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WgaLogon - 

C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - 

{AAA288BA-9A4C-45B0-95D7-94D524869DB5} - 

C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: ANIWZCSd Service 

(ANIWZCSdService) - Alpha Networks Inc. - 

C:\Program Files\ANI\ANIWZCS2 

Service\ANIWZCSdS.exe
O23 - Service: avast! iAVS4 Control Service 

(aswUpdSv) - ALWIL Software - C:\Program 

Files\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI 

Technologies Inc. - 

C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - 

C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL 

Software - C:\Program 

Files\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown 

owner - C:\Program Files\Avast4\ashMaiSv.exe" 

/service (file missing)
O23 - Service: avast! Web Scanner - Unknown 

owner - C:\Program Files\Avast4\ashWebSv.exe" 

/service (file missing)
O23 - Service: AVG Anti-Spyware Guard - 

GRISOFT s.r.o. - G:\PROGRAMME\AVG 

Anti-Spyware 7.5\guard.exe
O23 - Service: C-DillaCdaC11BA - Macrovision 

- C:\WINDOWS\System32\drivers\CDAC11BA.EXE
O23 - Service: Google Updater Service (gusvc) 

- Google - C:\Program 

Files\Google\Common\Google 

Updater\GoogleUpdaterService.exe
O23 - Service: Process Monitor (LVPrcSrv) - 

Logitech Inc. - c:\program files\fichiers 

communs\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. 

- C:\Program Files\Fichiers 

communs\Logitech\SrvLnch\SrvLnch.exe
O23 - Service: NVIDIA Driver Helper Service 

(NVSvc) - NVIDIA Corporation - 

C:\WINDOWS\System32
vsvc32.exe

moK´s@ · Answer

re,

désolé mais c´est illisible :

ca doit ressembler a ca :

Logfile of HijackThis v1.99.1
Scan saved at 19:57:38, on 3.8.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\WINDOWS\system32
vsvc32.exe
C:\WINDOWS\system32\oodag.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\RocketDock\RocketDock.exe
C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
C:\PROGRA~1\COMMON~1\PCSuite\DATALA~1\DATALA~1.EXE
C:\Program Files\foobar2000\foobar2000.exe
C:\Program Files\eMule\emule.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: NTIECatcher Class - {C56CB6B0-0D96-11D6-8C65-B2868B609932} - C:\Program Files\Xi\NetTransport 2\NTIEHelper.dll
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
O8 - Extra context menu item: &Télécharger avec NetTransport - C:\Program Files\Xi\NetTransport 2\NTAddLink.html
O8 - Extra context menu item: Tout t&élécharger avec NetTransport - C:\Program Files\Xi\NetTransport 2\NTAddList.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin
pjpi160_02.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin
pjpi160_02.dll
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - 
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} - 
O16 - DPF: {CAFEEFAC-0015-0000-0009-ABCDEFFEDCBA} (Java Plug-in 1.5.0_09) - 
O16 - DPF: {CAFEEFAC-0015-0000-0010-ABCDEFFEDCBA} (Java Plug-in 1.5.0_10) - 
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe


peux tu le reposter sous cette forme

moK´s@ · Answer

bah si tu compare mon rapport et le tien tu voie la difference non?

moK´s@ · Answer

ok c´est mieux je le regarde et je te dis...

Ayeuh · Answer

dacc merci ^^

moK´s@ · Answer

re,

rien de méchant a signaler...

coche ceci ce sont des entrées superflues :

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [AlcxMonitor] ALCXMNTR.EXE
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)

quitte tes applications et navigateur et fix les lignes ci dessus

comment fixer :

Démo en image
http://pageperso.aol.fr/balltrap34/demohijack.htm 

je voie cependant que tu n´as pas de par feu!!!

il faudrait en installer un...

je peux te donner un lien vers un site de telechargement si tu le souhaite.

c´est quoid ton souci au juste? avast a-t-il détécté quelque chose?

dis moi quoi

@+

Ayeuh · Answer

non avast n'avait rien détecté mais deux fenêtres s'affichent en me disant que j'ai des spywares et que mon oridnateur est infecté.

Pour le pare feu j'ai pourtant le pare feu windows qui est activé! il ne suffit pas?

moK´s@ · Answer

re,

le par feu de windows est une passoire si tu veux...

pour ton probleme passe ceci :

Fais un clic droit sur ce lien :
http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe
Enregistrer la cible (du lien) sous... et enregistre-le sur ton bureau.
Ensuite double clique sur navilog1.exe pour lancer l'installation.
Une fois l'installation terminée, le fix s'exécutera automatiquement.
(Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau).

Laisse-toi guider. Au menu principal, choisis 1 et valides.
(ne fais pas le choix 2,3 ou 4 sans notre avis/accord)

Patiente jusqu'au message :
*** Analyse Termine le ..... ***
Appuie sur une touche comme demandé, le blocnote va s'ouvrir.
Copie-colle l'intégralité dans une réponse. Referme le blocnote.
Le rapport est en outre sauvegardé à la racine du disque (fixnavi.txt)

@+

Ayeuh · Answer

Voilà ce que j'ai obtenu:



Search Navipromo version 2.0.5 commencé le 03/08/2007 à 20:41:34,12
 
!!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
!!! Poster ce rapport sur le forum pour le faire analyser !!!
!!! Ne pas lancer la partie désinfection sans l'avis d'un spécialiste !!!

Fix lancé depuis C:\Program Files
avilog1
Mise a jour le 01.07.2007 a 12h00 by IL-MAFIOSO

Executé en mode normal

*** Recherche Programmes installes *** 

 


*** Recherche dossiers dans C:\WINDOWS ***




*** Recherche dossiers dans C:\Program Files ***




*** Recherche dossiers dans C:\Documents and Settings\All Users\Application Data ***




*** Recherche dossiers dans C:\Documents and Settings\Propri‚taire\Application Data ***


...\Application Data\MessengerSkinner trouvé !

*** Recherche avec BlackLight Engine/F-secure ***
BlackLight Engine est un produit de F-secure, pour + d'infos :
https://www.f-secure.com/en

Fichier(s) caché(s) dans C:\WINDOWS\system32 :

c:\WINDOWS\system32\xisbmwhqbl.dat 
C:\windows\system32\xisbmwhqbl.exe 
c:\WINDOWS\system32\xisbmwhqbl_nav.dat 
c:\WINDOWS\system32\xisbmwhqbl_navps.dat 

Processus caché(s) dans C:\WINDOWS\system32 :

C:\windows\system32\xisbmwhqbl.exe 


*** Recherche fichiers *** 


C:\WINDOWS\pack.epk trouvé !
C:\WINDOWS\system32
vs2.inf trouvé !


*** Recherche cles registre ***


Recherche dans [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDLLs] 
 
 

Recherche dans [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ModuleUsage] 
 
 

Recherche Clé Magic Control 
 
HKEY_CURRENT_USER\Software\Lanconfig trouvé ! 
HKEY_USERS\S-1-5-21-4027402318-3071016102-74283315-1003\Software\Lanconfig trouvé !  
 
 
*** Module de Recherche complémentaire *** 
(Recherche fichiers spécifiques) 
 
1)Recherche fichiers connus:


2)Recherche Heuristique :
* 
C:\WINDOWS\system32\xisbmwhqbl.dat trouvé !
** 
C:\WINDOWS\system32\xisbmwhqbl.dat trouvé !
*** 
**** 
C:\WINDOWS\system32\xisbmwhqbl_navps.dat trouvé !
***** 
****** 
******* 
******** 

3)Recherche Certificats :

Certificat Egroup trouvé !


*** Analyse Terminé le 03/08/2007 à 20:45:06,39 ***

moK´s@ · Answer

re,

ton infection est du a messenger skinner...

Double clique sur le raccourci Navilog1 présent sur le bureau et laisse-toi guider.
Au menu principal, choisis 2 et valide.

Le fix va t'informer qu'il va alors redémarrer ton PC
Ferme toutes les fenêtres ouvertes et enregistre tes documents personnels ouverts
Appuie sur une touche comme demandé.
(si ton Pc ne redémarre pas automatiquement, fais le toi même)
Au redémarrage de ton PC, choisis ta session habituelle.

Patiente jusqu'au message :
*** Nettoyage Termine le ..... ***
Le blocnote va s'ouvrir.
Sauvegarde le rapport de manière à le retrouver
Referme le blocnote. Ton bureau va réapparaitre

PS:Si ton bureau ne réapparait pas, fais CTRL+ALT+SUPP pour ouvrir le gestionnaire de tâches.
Puis rends-toi à l'onglet "processus". Clique en haut à gauche sur fichiers et choisis "exécuter"
Tape explorer et valide. Celà te fera apparaitre ton bureau. 

post le rapport stp

@+

Ayeuh · Answer

Voilà le rapport:

c bizarre tu me dit que c à cause de messenger skinner mais ej l'ai désinstallé. Mais bon je te fait confiance


 le rapport:

Clean Navipromo version 2.0.5 commencé le 03/08/2007 à 21:01:28,81

Fix lancé depuis C:\Program Files
avilog1
Mise a jour le 01.07.2007 a 12h00 by IL-MAFIOSO

Mode suppression automatique avec prise en charge résultats Blacklight


*** Creation backups fichiers trouvés par Blacklight *** 

Copie vers "C:\Program Files
avilog1\Backupnavi"


*** Suppression des fichiers trouvés avec Blacklight ***

c:\WINDOWS\system32\xisbmwhqbl.dat supprimé ! 
C:\windows\system32\xisbmwhqbl.exe supprimé ! 
c:\WINDOWS\system32\xisbmwhqbl_nav.dat supprimé ! 
c:\WINDOWS\system32\xisbmwhqbl_navps.dat supprimé ! 
 
** 2ème passage ** 
 
C:\WINDOWS\system32\xisbmwhqbl.exe absent ! 
C:\WINDOWS\system32\xisbmwhqbl.dat absent ! 
C:\WINDOWS\system32\xisbmwhqbl_nav.dat absent ! 
C:\WINDOWS\system32\xisbmwhqbl_navps.dat absent ! 
C:\WINDOWS\system32\xisbmwhqbl_navup.dat absent ! 
C:\WINDOWS\system32\xisbmwhqbl_navtmp.dat absent ! 
C:\WINDOWS\system32\xisbmwhqbl_m2s.xml absent ! 


C:\WINDOWS\prefetch\xisbmwhqbl*.pf trouvé ! 
Copie C:\WINDOWS\prefetch\xisbmwhqbl*.pf réalise avec succes !
C:\WINDOWS\prefetch\xisbmwhqbl*.pf supprimé !

*** Suppression dossiers dans C:\WINDOWS ***


*** Suppression dossiers dans C:\Program Files ***


*** Suppression dossiers dans C:\Documents and Settings\All Users\Application Data ***


*** Suppression dossiers dans C:\Documents and Settings\Propri‚taire\Application Data ***

...\Application Data\MessengerSkinner ...suppression... 
...\Application Data\MessengerSkinner supprimé ! 



*** Suppression fichiers ***

C:\WINDOWS\pack.epk supprimé !
C:\WINDOWS\system32
vs2.inf supprimé !

*** Suppression fichiers temporaires ***

Nettoyage contenu C:\WINDOWS\Temp effectué !
Nettoyage contenu C:\Documents and Settings\Propri‚taire\Local Settings\Temp effectué !

 
*** Sauvegarde du registre vers dossier Backupnavi*** 
 
 
sauvegarde du registre réalise avec succes !


*** Nettoyage registre ***


Nettoyage registre Ok

*** Traitement Recherche complémentaire ***
(Recherche fichiers spécifiques)

1)Recherche fichiers connus:


2)Recherche et Suppression Heuristique :

* 
** 
*** 
**** 
***** 
****** 
******* 
******** 

3)Contrôle présence clés Rootkit dans le registre :

Aucune autre clés présente dans le registre !

4)Certificats :

Certificat Egroup supprimé !

*** Nettoyage termine le 03/08/2007 à 21:06:49,01 ***

moK´s@ · Answer

oui mais le hic avec messengerskinner c´est qu´il installe un tas de saloperie avec lui...

¤ Télécharge Clean
----> http://www.malekal.com/download/clean.zip

Dézippe tout le contenu dans le même dossier. Double clic sur clean ou clean.cmd choisissez l'option 1.
Un rapport va s'ouvrir, copie et colle le contenu ici

@+

Ayeuh · Answer

04/08/2007 a  0:47:44,28 
 
*** Recherche des fichiers dans C: 
 
*** Recherche des fichiers dans C:\WINDOWS\ 
C:\WINDOWS\ALCXMNTR.EXE FOUND 
 
*** Recherche des fichiers dans C:\WINDOWS\system32 
 
*** Recherche des fichiers dans C:\Program Files 
"C:\Program Files\Fichiers communs\Totem Shared\" FOUND 
*** Fin du rapport !

Ayeuh · Answer

et pour le pare feu tu me conseille quoi?

moK´s@ · Answer

re,

Redémarre en mode sans échec  : 

¤Démarre en mode sans échec :
Pour cela, tu tapote la touche F8 des le début de l allumage du pc sans t arrêter
Une fenêtre va s’ouvrir tu te déplaces avec les flèches du clavier sur démarrer en mode sans échec puis tape entrée.
Une fois sur le bureau si il n y a pas toutes les couleurs et autres c est normal !
(Si F8 ne marche pas utilise la touche F5) 

Puis ouvre le dossier clean et ouvre clean.cmd et choisis l'option 2.
Redémarre normalement et poste le log clean. 

pour le par feu :

https://kerio.probb.fr/t1-tuto-pour-kerio-4-2

puis tu peux installer ca aussi :

http://www.brightfort.com/spywareblaster.html

c´est un resident, il suffit de le mettre a jour de temps en temps car la version gratuite ne le fait pas toute seul , une fois installé et mis a jour tu mets toutes les protections sur "enable"

telecharge aussi cet anti spyware il a aussi un resident le teatimer :

spybot

spybot

@+

Ayeuh · Answer

j'ai installé kerio mais il me parait bien compliqué pour les débutants, et ce malgré les tuto. Il n'y en a pas des plus simples? Par exemple Avast peut faire anti virus aussi non?

et kerio me met à chaque fois un écran : "tentative d'intrusion bloquée" avec ce fichier:
c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe(new line)

Je clique à chaque fois sur Fermer mais je l'ai plusieurs fois.

Pour ce qui est du spyware, j'ai téléchargé Spyware Terminator, il est simple d'utilisation et me semble efficace

Ayeuh · Answer

J'ai désinstallé Kerio, trop de probleme avec ce logiciel, et j'ai installé AVG anti-virus + pare feu. Est-ce que je peux désinstaller Spyware terminator pour installer AVG anti spyware pour que cela soit plus compatible??

moK´s@ · Answer

ok ,je voie que tu rame un peu avec les regles...

tu peux garder avg et spyware terminator...

repost un hijack this stp...

@+

Ayeuh · Answer

Logfile of HijackThis v1.99.1
Scan saved at 18:36:17, on 04/08/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Avast4\aswUpdSv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\windows\system\hpsysdrv.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\system32\spoolsv.exe
c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
C:\Program Files\D-Link\AirPlus G\AirGCFG.exe
C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
C:\PROGRA~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\Fichiers communs\Logitech\LComMgr\Communications_Helper.exe
C:\Program Files\Fichiers communs\Logitech\LComMgr\LVComSX.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\Grisoft\AVG7\avgfwsrv.exe
C:\Program Files\Avast4\ashMaiSv.exe
C:\Program Files\Avast4\ashWebSv.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Logitech\QuickCam10\QuickCam10.exe
C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\Internet Explorer\iexplore.exe
G:\PROGRAMME\Hijackthis Version Française\hijackthis vf.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-qfr9.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-qfr9.hpwis.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.01net.com/telecharger/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-qfr9.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.01net.com/telecharger/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [D-Link AirPlus G] C:\Program Files\D-Link\AirPlus G\AirGCFG.exe
O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\Logitech\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LVCOMSX] "C:\Program Files\Fichiers communs\Logitech\LComMgr\LVComSX.exe"
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O8 - Extra context menu item: Add to AMV Converter... - G:\PROGRAMME\MP3NEO\AMVConverter\grab.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: MediaManager tool grab multimedia file - G:\PROGRAMME\MP3NEO\MediaManager\grab.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin
pjpi160_02.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin
pjpi160_02.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.mail.live.com/mail/w1/resources/MSNPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {9122D757-5A4F-4768-82C5-B4171D8556A7} (PhotoPickConvert Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/PhtPkMSN.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA} (Environnement d'exécution Java 1.4.1_02) - 
O18 - Protocol: bw+0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: offline-8876480 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Alpha Networks Inc. - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: AVG Firewall (AVGFwSrv) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgfwsrv.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\Logitech\SrvLnch\SrvLnch.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32
vsvc32.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe

moK´s@ · Answer

tu tu sert vraiment de :

G:\PROGRAMME\Logitech\Desktop Messenger???

moK´s@ · Answer

dans ce cas la supprime comme ceci :

avec hijack this coche ceci :

O18 - Protocol: bw+0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop

quitte ton navigateur et tes applications et fix les lignes ci dessus


et 

télécharge OTMoveIt http://download.bleepingcomputer.com/oldtimer/OTMoveIt.exe (de Old_Timer) sur ton Bureau.
double-clique sur OTMoveIt.exe pour le lancer.
copie la liste qui se trouve en citation ci-dessous,
et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved.

    Citation :

G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
G:\PROGRAMME\Logitech\Desktop Messenger

clique sur MoveIt! pour lancer la suppression.
le résultat apparaitra dans le cadre "Results".
clique sur Exit pour fermer.
poste le rapport situé dans C:\_OTMoveIt\MovedFiles.

il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes.
http://img137.imageshack.us/img137/3558/refaitjk8.th.jpg

post le rapport de ot move it et un nouveau hijack this
+

Ayeuh · Answer

voici le rapport ot move it:
G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll unregistered successfully.
G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll moved successfully.
G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Users\Propriétaire\Misc\Temp moved successfully.
G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Users\Propriétaire\Misc\Backup moved successfully.
G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Users\Propriétaire\Misc moved successfully.
G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Users\Propriétaire\Data\GenFlash\1 moved successfully.
G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Users\Propriétaire\Data\GenFlash moved successfully.
G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Users\Propriétaire\Data\ddb moved successfully.
G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Users\Propriétaire\Data\b1e moved successfully.
G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Users\Propriétaire\Data\a58\a9a3f17 moved successfully.
G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Users\Propriétaire\Data\a58\a9a3ef0 moved successfully.
G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Users\Propriétaire\Data\a58\a9a3e54 moved successfully.
G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Users\Propriétaire\Data\a58\a9a3e53 moved successfully.
G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Users\Propriétaire\Data\a58\a9a3e36 moved successfully.
G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Users\Propriétaire\Data\a58 moved successfully.
G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Users\Propriétaire\Data\4c3a\Upstream moved successfully.
G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Users\Propriétaire\Data\4c3a moved successfully.
G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Users\Propriétaire\Data moved successfully.
G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Users\Propriétaire moved successfully.
G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Users moved successfully.
G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\Scripts\RuleExec moved successfully.
G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\Scripts\Enable_OAS moved successfully.
G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\Scripts moved successfully.
G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\8876480\Propriétaire moved successfully.
G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\8876480 moved successfully.
G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program moved successfully.
G:\PROGRAMME\Logitech\Desktop Messenger\8876480\InitData\Data\GenFlash\1 moved successfully.
G:\PROGRAMME\Logitech\Desktop Messenger\8876480\InitData\Data\GenFlash moved successfully.
G:\PROGRAMME\Logitech\Desktop Messenger\8876480\InitData\Data moved successfully.
G:\PROGRAMME\Logitech\Desktop Messenger\8876480\InitData moved successfully.
G:\PROGRAMME\Logitech\Desktop Messenger\8876480 moved successfully.
G:\PROGRAMME\Logitech\Desktop Messenger moved successfully.
 
Created on 08/05/2007 01:03:48

Ayeuh · Answer

Puis le rapport Hijackthis:


Logfile of HijackThis v1.99.1
Scan saved at 01:05:51, on 05/08/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Avast4\aswUpdSv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\windows\system\hpsysdrv.exe
C:\HP\KBD\KBD.EXE
C:\WINDOWS\system32\spoolsv.exe
c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
C:\Program Files\D-Link\AirPlus G\AirGCFG.exe
C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
C:\PROGRA~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\Fichiers communs\Logitech\LComMgr\Communications_Helper.exe
C:\Program Files\Fichiers communs\Logitech\LComMgr\LVComSX.exe
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\Grisoft\AVG7\avgfwsrv.exe
C:\Program Files\Avast4\ashMaiSv.exe
C:\Program Files\Avast4\ashWebSv.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Logitech\QuickCam10\QuickCam10.exe
C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
C:\Program Files\Internet Explorer\iexplore.exe
G:\PROGRAMME\Hijackthis Version Française\hijackthis vf.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-qfr9.hpwis.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-qfr9.hpwis.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.01net.com/telecharger/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-qfr9.hpwis.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.01net.com/telecharger/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [D-Link AirPlus G] C:\Program Files\D-Link\AirPlus G\AirGCFG.exe
O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\Logitech\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LVCOMSX] "C:\Program Files\Fichiers communs\Logitech\LComMgr\LVComSX.exe"
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O8 - Extra context menu item: Add to AMV Converter... - G:\PROGRAMME\MP3NEO\AMVConverter\grab.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: MediaManager tool grab multimedia file - G:\PROGRAMME\MP3NEO\MediaManager\grab.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.mail.live.com/mail/w1/resources/MSNPUpld.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {9122D757-5A4F-4768-82C5-B4171D8556A7} (PhotoPickConvert Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/PhtPkMSN.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA} (Environnement d'exécution Java 1.4.1_02) - 
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Alpha Networks Inc. - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: AVG Firewall (AVGFwSrv) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgfwsrv.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\Logitech\SrvLnch\SrvLnch.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32
vsvc32.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe

moK´s@ · Answer

re,

bon nous voila debarrassé d´une belle m...e

coche ceci avec hijack this :

O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\Logitech\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LVCOMSX] "C:\Program Files\Fichiers communs\Logitech\LComMgr\LVComSX.exe"

quitte tes application et navigateur et fix les lignes ci dessus

comment va ton pc?

@+

Ayeuh · Answer

oui ça m'a l'air mieux mais je te dirai ça plus tard parce que là il y a le scan de AVG + la mise à jour de windows en même temps donc la rapidité du PC n'est pas top mais je te tiens au courant quand tout ça est terminé.

A part ça, l'installation du pare feu a éliminé toute les fenêtres publicitaires intempestives que j'avait avant. Pour les spyware ça à l'air d'être mieux, je n'ai plus de fenêtre qui s'ouvraient comme avant me disant que le PC était infecté. Est-ce que je peux supprimer Avast anti virus maintenant? étant doné que AVG le fait aussi ou alors c mieux de laisser les deux?

voilà donc merci beaucoup pour ton aide, je te tiens donc au courant dans pas longtemps

;-)

moK´s@ · Answer

ok

tiens moi au courrant, n´instale pas deux anti virus!!!!

@+

Ayeuh · Answer

ok je désinstalle avast ce soir.
sinon je voualis savoir aussi, une fois que la période d'essai d'AVG sera terminée, comment je fait pour le renouveller sans acheter? Est-ce que je peux désinstaller, puis réinstaller à partir de télécharger.com ou alors il me faut un crack?

moK´s@ · Answer

Ayeuh,

le truc avec avg c´est qu´il est payant apres  les 30 jours d´utilisation, comme tu sais > donc les fonctions tel que l´anti virus et le par feu vont  expirer, il ne te restera plus que le scanner, je ne crois pas que le simple fait de le réinstaller le fasse durer; et n´utilise surtout  pas de crack pour ce genre de truc!!! ( j´en ai fais les frais avec bitdefender...) 

pour l´antivirus de avg :

a ta place je garderais avast...

pour le par feu de avg :

prends celui la a la place :

kerio :

https://kerio.probb.fr/t1-tuto-pour-kerio-4-2

pour la protection en temps réel de avg :

je peux te proposer quelques logiciels qui font la meme chose : (gratuit)

spyware blaster :

http://www.brightfort.com/spywareblaster.html

c´est un resident, il suffit de le mettre a jour de temps en temps car la version gratuite ne le fait pas toute seul , une fois installé et mis a jour tu mets toutes les protections sur "enable"

telecharge aussi cet anti spyware il a aussi un resident le teatimer :

spybot

spybot

puis celui la aussi : spyware gard :

http://www.tout-savoir.net/logitheque/logiciels/telechargement/cat/programme/code/207/spywareguard/

tous les trois sont complementaires, alors si tu veux; tu peux tous les installer...

@+

Ayeuh · Answer

le truc c'est que j'avais installé kerio ce week end mais il ma posé bcp de pb et la paramétrage et la configuration m'ont paru très compliqué!!

moK´s@ · Answer

meme avec le tutoriel?

Ayeuh · Answer

ben écoute oui enfin il me semble, je suis peut etre allée trop vite mais ce qui m'a paru compliqué c'éait tout ce qui était connexions entrantes/sortantes, autoriser ou non etc...
je peux réessayer à moins que tu n'en connaisse un autre peut être plus simple d'utilisation?

moK´s@ · Answer

c´est pas tres compliqué quand tu as compris le system...

il y a deja des regles préetablies, tu aurras pas nécessairement besoin d´en etablir...

là tu as toute une liste :

http://www.clubic.com/logiciel-windows-237-0-0-firewall.html

ps :zone alarm n´est pas compatible avec avast...

@+

Ayeuh · Answer

ok bon jai vu que PC tools était compatible, je vais essayer ce soir et je désinstalle AVG

moK´s@ · Answer

ok

fais ca...

tu peux quand meme installé les residents que je t´ai prposé plus haut...

dis moi quoi

@+

Ayeuh · Answer

ça y est la désinstallation d'AVG est faite, j'ai PC tools comme Firewall et j'ai installé aussi spybot, spyware blaster, et spyware guard. tout ça en + de spyware terminator que j'avais avant.

est-ce que j'ai vraiment besoin de tout ça??

moK´s@ · Answer

ok

tu as gardé avast alors comme anti virus?

les résidents que je t´ai proposés vont te protégé tout en fesant oublié, alors ?!

moi j´ai :

avast 
kerio
spywareblaster 
spywaregard
et le tea timer de spybot

faut ce qu´il faut non?

@+

Ayeuh · Answer

oui j'ai gardé Avast. bon je te remercie c quand même bcp mieux qu'au début ^^.
mon PC rame un peu en naviguant sur internet mais bon je suis en Wi-fi ça doit être normal!

merci encore MoK' s@!

moK´s@ · Answer

de rien,
 
bonne soirée

,-)

Proposition d'anti-spyware?

43 réponses

Votre réponse

Discussions similaires

Newsletters