trop de page qui s'ouvrent publiçitées Fermé

Question

Bonjour,a tous:j'ai beaucoup de pub ,des pags qui s'ouvrent sans demander
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 08:57:48, on 17/02/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16608)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\system32\cisvc.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Fichiers communs\Logitech\LComMgr\Communications_Helper.exe
C:\WINDOWS\system32\wbcsvc.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32undll32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://home.neuf.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Program Files\Share_Accelerator_MM	bSha1.dll
O3 - Toolbar: Share Accelerator MM Toolbar - {4596013b-6c31-408b-a266-deae5c086dc2} - C:\Program Files\Share_Accelerator_MM	bSha1.dll
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\Logitech\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechSetup] D:\Setup\Setup.exe /restart /l:fra
O4 - HKLM\..\Run: [Windows Messenger Panel] wbcsvc.exe
O4 - HKLM\..\Run: [f0dd9d6e] rundll32.exe "C:\WINDOWS\system32\dqolkxtn.dll",b
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32
wprovau.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase4009.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} - 
O18 - Protocol: bw+0 - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {EE0BFDD1-D2A2-4742-8379-2BFFF9C1D758} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - Unknown owner - C:\Program Files\Spyware Doctor\svcntaux.exe (file missing)
O23 - Service: PC Tools Security Service (sdCoreService) - Unknown owner - C:\Program Files\Spyware Doctor\swdsvc.exe (file missing)
O23 - Service: SmartLinkService (SLService) - Smart Link - C:\WINDOWS\SYSTEM32\slserv.exe
mail:bougie1_57250@msn.com

06046slim · Answer

merçi pour ta reponse,jvais faire ça tout de suite est je poste le log.

06046slim · Answer

[1772] C:\WINDOWS\system32\wbcsvc.exe -> Backdoor.IRCBot.alo : Aucune action entreprise.
C:\Documents and Settings\allaoua\Cookies\allaoua@247realmedia[2].txt -> TrackingCookie.247realmedia : Aucune action entreprise.
C:\Documents and Settings\allaoua\Cookies\allaoua@2o7[2].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\allaoua\Cookies\allaoua@2o7[3].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\allaoua\Cookies\allaoua@sonyeurope.112.2o7[1].txt -> TrackingCookie.2o7 : Aucune action entreprise.
C:\Documents and Settings\allaoua\Cookies\allaoua@ads.addynamix[2].txt -> TrackingCookie.Addynamix : Aucune action entreprise.
C:\Documents and Settings\allaoua\Cookies\allaoua@adtech[1].txt -> TrackingCookie.Adtech : Aucune action entreprise.
C:\Documents and Settings\allaoua\Cookies\allaoua@advertising[2].txt -> TrackingCookie.Advertising : Aucune action entreprise.
C:\Documents and Settings\allaoua\Cookies\allaoua@advertising[3].txt -> TrackingCookie.Advertising : Aucune action entreprise.
C:\Documents and Settings\allaoua\Cookies\allaoua@atdmt[2].txt -> TrackingCookie.Atdmt : Aucune action entreprise.
C:\Documents and Settings\allaoua\Cookies\allaoua@atdmt[3].txt -> TrackingCookie.Atdmt : Aucune action entreprise.
C:\Documents and Settings\allaoua\Cookies\allaoua@bluestreak[1].txt -> TrackingCookie.Bluestreak : Aucune action entreprise.
C:\Documents and Settings\allaoua\Cookies\allaoua@bluestreak[2].txt -> TrackingCookie.Bluestreak : Aucune action entreprise.
C:\Documents and Settings\allaoua\Cookies\allaoua@doubleclick[1].txt -> TrackingCookie.Doubleclick : Aucune action entreprise.
C:\Documents and Settings\allaoua\Cookies\allaoua@doubleclick[2].txt -> TrackingCookie.Doubleclick : Aucune action entreprise.
C:\Documents and Settings\allaoua\Cookies\allaoua@estat[1].txt -> TrackingCookie.Estat : Aucune action entreprise.
C:\Documents and Settings\allaoua\Cookies\allaoua@estat[2].txt -> TrackingCookie.Estat : Aucune action entreprise.
C:\Documents and Settings\allaoua\Cookies\allaoua@overture[1].txt -> TrackingCookie.Overture : Aucune action entreprise.
C:\Documents and Settings\allaoua\Cookies\allaoua@overture[2].txt -> TrackingCookie.Overture : Aucune action entreprise.
C:\Documents and Settings\allaoua\Cookies\allaoua@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
C:\Documents and Settings\allaoua\Cookies\allaoua@bs.serving-sys[2].txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
C:\Documents and Settings\allaoua\Cookies\allaoua@serving-sys[1].txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
C:\Documents and Settings\allaoua\Cookies\allaoua@serving-sys[2].txt -> TrackingCookie.Serving-sys : Aucune action entreprise.
C:\Documents and Settings\allaoua\Cookies\allaoua@smartadserver[1].txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
C:\Documents and Settings\allaoua\Cookies\allaoua@smartadserver[2].txt -> TrackingCookie.Smartadserver : Aucune action entreprise.
C:\Documents and Settings\allaoua\Cookies\allaoua@h.starware[1].txt -> TrackingCookie.Starware : Aucune action entreprise.
C:\Documents and Settings\allaoua\Cookies\allaoua@try.starware[2].txt -> TrackingCookie.Starware : Aucune action entreprise.
C:\Documents and Settings\allaoua\Cookies\allaoua@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Aucune action entreprise.
C:\Documents and Settings\allaoua\Cookies\allaoua@weborama[2].txt -> TrackingCookie.Weborama : Aucune action entreprise.
C:\Documents and Settings\allaoua\Cookies\allaoua@weborama[3].txt -> TrackingCookie.Weborama : Aucune action entreprise.
C:\Documents and Settings\allaoua\Cookies\allaoua@ad.yieldmanager[1].txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.
C:\Documents and Settings\allaoua\Cookies\allaoua@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Aucune action entreprise.


Fin du rapport

06046slim · Answer

bonjour:j'ai posté le rapport comme prevu,j'attends de vous une solution pour ces pages de pub qui s'ouvrent sans les solicité,merçi a vous.

Le sioux · Answer

Bonjour Slim Pour ce que t'a trouvé AVG Antispyware, as tu cliqué sur appliquer toutes les actions ? car dans ton rapport, il est mentionné "Aucune action entreprise" ... si cela n'a pas été fait, on verra cela ulterieurement ensemble. A) Il te faut mieux gerer tes cookies -- Avec I.E outils/options/ onglet confidentialité/avancés/ *Cocher ignorer gestion automatique des cookies *Cocher accepter cookies interne et refuser cookies tierce puis appliquer et ok -- Avec Firefox outils/options/vie privée *conserver les cookies --> jusqu a la fermeture de Firefox sur PC Astuces">Firefox *dans paramètres , cocher cookies *puis cocher "toujours effacer mes informations personnelles a la fermeture de Firefox puis valider par ok Sinon, pour FF, il y a des extensions pour cela (au moins 4 a C) --> https://www.hugedomains.com/domain_profile.cfm?d=geckozone&e=org#C Passer CCleaner régulièrement, fonction nettoyeur Cookies (biscuit) Un cookie est un enregistrement d'informations par le serveur dans un fichier texte situé sur l'ordinateur client. Il se compose d'un ensemble de variables que le client et le serveur s'échangent lors de transactions HTTP,ce qui permet d'éviter de se connecter à nouveau sur un forum par exemple ,ou d'aller directement sur la page d'un site, etc...... Sans problème quand ils sont utilisés par des "entités",ils peuvent se révéler trés dangereux mal employés. En effet, ils peuvent stocker une multitudes de renseignements, qui récoltés par un spyware, permet de se connecter au service Web sous le compte de l'utilisateur. extrait de https://forum.pcastuces.com/sujet.asp?f=25&s=14911 gigrionne B) Adware backweb Regarde ici "comment fixer/corriger des lignes via HijackThis " http://pageperso.aol.fr/balltrap34/demohijack.htm Lance HijackThis. Je te conseille d'enregistrer toutes les lignes a fixer puis de copier cette sélection dans un fichier texte sur ton PC pour pouvoir appliquer la procédure correctement. Lance Hijackthis en double cliquant sur son raccourci sur le Bureau. Clique sur Scan Only et coche les lignes suivantes : Toutes tes lignes O18 Ferme toutes les autres fenêtres, tous les autres programmes. Pas de connections Internet. Clique sur Fix Checked puis clique sur OK Puis ferme HijackThis. Si certaines lignes sont absentes, signale les en fin de procédure C) Infection Vundo gras>1) Télécharge * Combofix.exe de sUBs sur ton Bureau --> http://download.bleepingcomputer.com/sUBs/ComboFix.exe N'y touche pas pour le moment. * VundoFix.exe par Atribune --> http://www.atribune.org/content/view/24/2/ sur ton Bureau. 2) VundoFix.exe par Atribune * Double-clique sur VundoFix.exe afin de le lancer * Clique sur le bouton Scan for Vundo * Lorsque le scan est terminé, clique sur le bouton Remove Vundo * Une invite te demandera si tu veux supprimer les fichiers, clique YES * Après avoir cliqué "Yes", le Bureau disparaîtra un moment lors de la suppression des fichiers * Tu verras une invite qui t'annonce que ton PC va redémarrer; clique sur OK Note: Il est possible que VundoFix soit confronté à un fichier qu'il ne peut supprimer. Si tel est le cas, l'outil se lancera au prochain redémarrage; il faut simplement suivre les instructions ci-haut, à partir de "clique sur le bouton Scan for Vundo". 3) Combofix.exe de sUBs Déconnecte toi du net et désactive ton antivirus pour que Combofix puisse s'exécuter normalement Double clique sur Combofix.exe Mets le en langue française F Tape sur la touche 1 (Yes) pour démarrer le scan Lorsque le scan sera terminé, un rapport apparaîtra. 4) Rapports : Poste en réponse : * Le rapport VundoFix situé dans C:\vundofix.txt * Le rapport de ComboFix qui se se trouve là : C:\Combofix.txt+ * Un nouveau rapport HijackThis. @ suivre

Trop de page qui s'ouvrent publiçitées

4 réponses

Discussions similaires