Pb ordi lent, page intempestive et port ouver

benjal -  
sKe69 Messages postés 21955 Statut Contributeur sécurité -
Bonjour,
j'ai deja fais appel a un forum de se genre et cela m avait beaucoup aider, donc voila, depuis quelque temps, j'ai mon ordi qui rame de plus en plus, des pages pub qui apparaissent et pour courounner le tout, sur m a livebox j'ai un truc qui m ouvre un port a repetition, (MSNmSGR) un truc dans le genre...
merci d avance pour une reponce..
sinon, j'ai windows xp, antivirus d orange, ccleaner, pc tools spyware doctor et j'ai suprimer spyboot car on m avait dit qu il y avait des versions verrolés ( mais est ce vrai?)

merci a biento
Configuration: Windows XP
Firefox 3.0.1

12 réponses

  1.
    sKe69 Messages postés 21955 Statut Contributeur sécurité 463
     
    Salut,

    commences par ce-ci :

    Télécharges et installes le logiciel HijackThis :

    ici : ftp://ftp.commentcamarche.com/download/HJTInstall.exe
    ou ici : http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe
    ou ici : https://www.clubic.com/telecharger-fiche17891-hijackthis.html

    1- Cliques sur le setup pour lancer l'installe : laisses toi guider et ne modifies pas les paramètres d'installation .
    A la fin de l'installe , le prg ce lance automatiquement : fermes le en cliquant sur la croix rouge .
    Au final, tu dois avoir un raccourci sur ton bureau et aussi un cheminement comme : "C:\ program files\Trend Micro\HijackThis\HijackThis.exe " .
    Supprimes le raccourcis stp ...

    Important :
    Renommer le prg HijackThis (pour contrer une éventuelle infection Vundo):
    Rends toi sur ton PC ici "C:\ program files\Trend Micro\HijackThis\HijackThis.exe"<---cliques droit sur ce dernier et choisis "renommer" : tapes monjack et valides .
    Puis cliques droit sur "monjack.exe" et choisis "envoyer vers" -> le bureau ( créer un raccourci ).

    tuto pour utilisation
    Regardes ici, c'est parfaitement expliqué en images (merci balltrap34) :
    http://perso.orange.fr/rginformatique/section%20virus/demohijack.htm
    ( Ne fixes encore AUCUNE ligne, cela pourrait empêcher ton PC de fonctionner correctement )

    2-!! Déconnectes toi et fermes toute tes applications en cours !!

    Cliques sur le raccourci du bureau pour lancer le prg :
    fais un scan "monjack" (ou HijackThis renommé) en cliquant sur : "Do a system scan and save a logfile"

    ---> Postes le rapport généré pour analyse ...

    0
    1. benjal
       
      bonjour et merci de repondre aussi vite...
      donc voila, j'ai fais ce que tu m as dis et voila le scan monjack

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 14:29:13, on 31/08/2008
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16705)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      C:\PROGRA~1\ANTIVI~1\backweb\6588780\Program\SERVIC~1.EXE
      C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
      C:\Program Files\AntivirusFirewall\Anti-Virus\fsgk32st.exe
      C:\Program Files\AntivirusFirewall\Anti-Virus\FSGK32.EXE
      C:\Program Files\AntivirusFirewall\backweb\6588780\program\fsbwsys.exe
      C:\Program Files\AntivirusFirewall\Anti-Virus\fssm32.exe
      C:\Program Files\AntivirusFirewall\Common\FSMA32.EXE
      C:\Program Files\AntivirusFirewall\Common\FSMB32.EXE
      C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
      C:\Program Files\Spyware Doctor\pctsAuxs.exe
      C:\Program Files\AntivirusFirewall\backweb\6588780\Program\fspex.exe
      C:\Program Files\AntivirusFirewall\Common\FCH32.EXE
      C:\Program Files\Spyware Doctor\pctsSvc.exe
      C:\Program Files\AntivirusFirewall\Anti-Virus\fsqh.exe
      C:\Program Files\AntivirusFirewall\Common\FAMEH32.EXE
      C:\Program Files\AntivirusFirewall\Anti-Virus\fsrw.exe
      C:\Program Files\Spyware Doctor\pctsTray.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
      C:\Program Files\AntivirusFirewall\Anti-Virus\fsav32.exe
      C:\Program Files\AntivirusFirewall\FWES\Program\fsdfwd.exe
      C:\WINDOWS\System32\alg.exe
      C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
      C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe
      C:\WINDOWS\system32\wbem\wmiprvse.exe
      C:\WINDOWS\system32\hkcmd.exe
      C:\WINDOWS\system32\igfxpers.exe
      C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      C:\Program Files\HP\QuickPlay\QPService.exe
      C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
      C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
      C:\Program Files\AntivirusFirewall\Common\FSM32.EXE
      C:\WINDOWS\System32\svchost.exe
      C:\PROGRA~1\ANTIVI~1\ANTI-S~1\fsaw.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\PROGRA~1\hpq\Shared\HPQTOA~1.EXE
      C:\Program Files\AntivirusFirewall\FSGUI\ispnews.exe
      C:\WINDOWS\V0220Mon.exe
      C:\Program Files\AntivirusFirewall\FSGUI\fsguidll.exe
      C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
      C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
      C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
      C:\Program Files\Logitech\SetPoint\SetPoint.exe
      C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
      C:\Program Files\Fichiers communs\Logitech\khalshared\KHALMNPR.EXE
      C:\Program Files\Mozilla Firefox\firefox.exe
      C:\Program Files\Trend Micro\HijackThis\monjack.exe
      C:\WINDOWS\system32\wbem\wmiprvse.exe
      C:\WINDOWS\system32\igfxsrvc.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=compaq-notebook.msn.com&ocid=HPDHP&pc=CPNTDF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
      O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
      O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe"
      O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
      O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
      O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
      O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] CHDAudPropShortcut.exe
      O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
      O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
      O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
      O4 - HKLM\..\Run: [Cpqset] C:\Program Files\Hewlett-Packard\Default Settings\cpqset.exe
      O4 - HKLM\..\Run: [RecGuard] C:\Windows\SMINST\RecGuard.exe
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\AntivirusFirewall\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\AntivirusFirewall\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\AntivirusFirewall\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [News Service] "C:\Program Files\AntivirusFirewall\FSGUI\ispnews.exe"
      O4 - HKLM\..\Run: [V0220Mon.exe] C:\WINDOWS\V0220Mon.exe
      O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] "C:\Program Files\Fichiers communs\Logitech\khalshared\KHALMNPR.EXE"
      O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
      O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
      O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
      O4 - Global Startup: Antivirus Firewall.lnk = C:\Program Files\AntivirusFirewall\backweb\6588780\Program\fspex.exe
      O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
      O4 - Global Startup: Logitech SetPoint.lnk = ?
      O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
      O9 - Extra button: Protection Internet Explorer - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\AntivirusFirewall\Anti-Spyware\ieshield.dll
      O9 - Extra 'Tools' menuitem: Protection Internet Explorer... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\AntivirusFirewall\Anti-Spyware\ieshield.dll
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O14 - IERESET.INF: START_PAGE_URL=https://www.msn.com/fr-fr?cobrand=compaq-notebook.msn.com&ocid=HPDHP&pc=CPNTDF
      O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
      O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
      O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
      O18 - Protocol: bw+0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw+0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
      O18 - Protocol: bwg0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwg0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: offline-8876480 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
      O23 - Service: AddFiltr - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\AddFiltr.exe
      O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      O23 - Service: Antivirus Firewall (BackWeb Plug-in - 6588780) - Securitoo Portal - C:\PROGRA~1\ANTIVI~1\backweb\6588780\Program\SERVIC~1.EXE
      O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
      O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\AntivirusFirewall\Anti-Virus\fsgk32st.exe
      O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\AntivirusFirewall\backweb\6588780\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\AntivirusFirewall\FWES\Program\fsdfwd.exe
      O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\AntivirusFirewall\Common\FSMA32.EXE
      O23 - Service: Google Desktop Manager 5.7.802.22438 (GoogleDesktopManager-022208-143751) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
      O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
      O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe
      O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe
      O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/Antonine/LOCALS~1/Temp/msohtml1/01/clip_image002.jpg
      O24 - Desktop Component 1: (no name) - file:///C:/DOCUME~1/Antonine/LOCALS~1/Temp/msohtmlclip1/01/clip_image002.gif
      0
  2. sKe69 Messages postés 21955 Statut Contributeur sécurité 463
     
    bon ...

    fais ce-ci pour approfondir stp :

    Télécharge DiagHelp.zip sur ton bureau :
    ( note : si ton anti-virus s'affolle lors du téléchargement ou de l'installe, c'est normal , ignore l'alerte ).

    -> http://www.malekal.com/download/DiagHelp.zip

    !! déconnectes toi et fermes toutes tes applications en cours !!

    Fais un clic droit sur le fichier et extraire tout .

    --> Un nouveau dossier va être créé : "DiagHelp"
    Ouvres le et double-clic sur go.cmd et pas sur autre chose ! (le .cmd peut ne pas apparaître )

    --> Une fenêtre va s'ouvrir, choisis l'option 1
    L'analyse va commencer, ce-ci peut durer quelques minutes, laisses faire et appuies sur une touche quand on te le demandera :
    une page IE va s'ouvrir , fermes la .
    Re-appuis sur une touche, le bloc-note s'ouvre :
    Sauvegardes ce rapport de façon à le retrouver et postes tout son contenu dans ta prochaine réponse ...
    0
    1. benjal
       
      l'approfondissement! j'imagine que ca doit pas etre trés bon tout ca!
      enfin, je m en doutais un peu! enfin voila, j'ai fais ce que tu m as dis, et voilou...

      DiagHelp version v1.4 - http://www.malekal.com
      excute le 31/08/2008 à 15:17:53,67


      Liste des derniers fichies modifies/crees dans windir\system32 et prefetch
      C:\WINDOWS\prefetch\VERCLSID.EXE-3667BD89.pf -->31/08/2008 15:12:24
      C:\WINDOWS\prefetch\CMD.EXE-087B4001.pf -->31/08/2008 15:11:58
      C:\WINDOWS\prefetch\CHCP.COM-18156052.pf -->31/08/2008 15:11:53
      C:\WINDOWS\prefetch\NOTEPAD.EXE-336351A9.pf -->31/08/2008 15:11:42
      C:\WINDOWS\prefetch\WINRAR.EXE-39C6DAD9.pf -->31/08/2008 15:10:07
      C:\WINDOWS\prefetch\KHALMNPR.EXE-1D21F6ED.pf -->31/08/2008 15:09:31
      C:\WINDOWS\prefetch\REGSVR32.EXE-25EEFE2F.pf -->31/08/2008 15:09:30
      C:\WINDOWS\prefetch\LOGITECHUPDATE.EXE-2F890CDB.pf -->31/08/2008 15:09:27
      C:\WINDOWS\prefetch\LULNCHR.EXE-113736AD.pf -->31/08/2008 15:09:26
      C:\WINDOWS\prefetch\SETPOINT.EXE-015059E8.pf -->31/08/2008 15:09:17

      C:\WINDOWS\System32\drivers\mbamcatchme.sys -->07/07/2008 17:35:36
      C:\WINDOWS\System32\drivers\mbam.sys -->07/07/2008 17:35:30
      C:\WINDOWS\System32\drivers\tcpip.sys -->20/06/2008 12:45:13
      C:\WINDOWS\System32\drivers\afd.sys -->20/06/2008 12:44:38
      C:\WINDOWS\System32\drivers\tcpip6.sys -->20/06/2008 11:52:06
      C:\WINDOWS\System32\drivers\pavboot.sys -->19/06/2008 17:24:30
      C:\WINDOWS\System32\drivers\bthport.sys -->14/06/2008 19:59:52

      C:\WINDOWS\System32\wpa.dbl -->31/08/2008 15:08:37
      C:\WINDOWS\System32\rmoc3260.dll -->23/08/2008 08:39:46
      C:\WINDOWS\System32\pndx5032.dll -->23/08/2008 08:39:20
      C:\WINDOWS\System32\pndx5016.dll -->23/08/2008 08:39:20
      C:\WINDOWS\System32\msvcr71.dll -->23/08/2008 08:39:10
      C:\WINDOWS\System32\pncrt.dll -->23/08/2008 08:39:09
      C:\WINDOWS\System32\msvcp71.dll -->23/08/2008 08:39:09
      C:\WINDOWS\System32\TZLog.log -->17/08/2008 23:08:55
      C:\WINDOWS\System32\MRT.exe -->05/08/2008 20:11:01
      C:\WINDOWS\System32\tzchange.exe -->14/07/2008 13:09:18
      C:\WINDOWS\System32\TuneUpDefragService.exe -->13/07/2008 16:58:22
      C:\WINDOWS\System32\PerfStringBackup.INI -->11/07/2008 19:59:45
      C:\WINDOWS\System32\perfh00C.dat -->11/07/2008 19:59:45
      C:\WINDOWS\System32\perfh009.dat -->11/07/2008 19:59:45
      C:\WINDOWS\System32\perfc00C.dat -->11/07/2008 19:59:45
      C:\WINDOWS\System32\perfc009.dat -->11/07/2008 19:59:45
      C:\WINDOWS\System32\es.dll -->07/07/2008 22:31:48
      C:\WINDOWS\System32\mscms.dll -->24/06/2008 18:23:56
      C:\WINDOWS\System32\mshtml.dll -->24/06/2008 10:28:24
      C:\WINDOWS\System32\wininet.dll -->23/06/2008 18:28:23
      C:\WINDOWS\System32\webcheck.dll -->23/06/2008 18:28:23
      C:\WINDOWS\System32\urlmon.dll -->23/06/2008 18:28:23
      C:\WINDOWS\System32\url.dll -->23/06/2008 18:28:22
      C:\WINDOWS\System32\pngfilt.dll -->23/06/2008 18:28:22
      C:\WINDOWS\System32\occache.dll -->23/06/2008 18:28:22

      C:\WINDOWS\0.log -->31/08/2008 15:07:57
      C:\WINDOWS\wiadebug.log -->31/08/2008 15:07:43
      C:\WINDOWS\WindowsUpdate.log -->31/08/2008 15:07:42
      C:\WINDOWS\wiaservc.log -->31/08/2008 15:07:42
      C:\WINDOWS\bootstat.dat -->31/08/2008 15:07:11
      C:\WINDOWS\SchedLgU.Txt -->31/08/2008 15:06:10
      C:\WINDOWS\tsoc.log -->17/08/2008 23:12:22
      C:\WINDOWS\setupapi.log -->17/08/2008 23:12:22
      C:\WINDOWS\ocmsn.log -->17/08/2008 23:12:22
      C:\WINDOWS\ocgen.log -->17/08/2008 23:12:22
      C:\WINDOWS\ntdtcsetup.log -->17/08/2008 23:12:22
      C:\WINDOWS\msgsocm.log -->17/08/2008 23:12:22
      C:\WINDOWS\KB952954.log -->17/08/2008 23:12:22
      C:\WINDOWS\imsins.log -->17/08/2008 23:12:22
      C:\WINDOWS\iis6.log -->17/08/2008 23:12:22

      winlogon.exe
      svchost.exe
      ws2_32.dll
      user32.dll
      tcpip.sys
      ndis.sys
      null.sys


      ListDLLs v2.25 - DLL lister for Win9x/NT
      Copyright (C) 1997-2004 Mark Russinovich
      Sysinternals - www.sysinternals.com

      ------------------------------------------------------------------------------
      explorer.exe pid: 1364
      Command line: C:\WINDOWS\Explorer.EXE

      Base Size Version Path
      0x44080000 0xd0000 7.00.6000.16705 C:\WINDOWS\system32\WININET.dll
      0x00400000 0x9000 6.00.5441.0000 C:\WINDOWS\system32\Normaliz.dll
      0x43e00000 0x45000 7.00.6000.16705 C:\WINDOWS\system32\iertutil.dll
      0x58b50000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\comctl32.dll
      0x76f80000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL
      0x77000000 0xd4000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll
      0x636e0000 0x28000 5.05.0000.0051 C:\Program Files\Spyware Doctor\smumhook.dll
      0x44360000 0x5cd000 7.00.6000.16705 C:\WINDOWS\system32\ieframe.dll
      0x44160000 0x127000 7.00.6000.16705 C:\WINDOWS\system32\urlmon.dll
      0x44a40000 0x374000 7.00.6000.16705 C:\WINDOWS\system32\mshtml.dll
      0x746c0000 0x29000 3.10.0349.0000 C:\WINDOWS\system32\msls31.dll
      0x76ac0000 0x11000 3.05.2284.0000 C:\WINDOWS\system32\ATL.DLL
      0x7d200000 0x2be000 3.01.4000.4039 C:\WINDOWS\system32\msi.dll
      0x442b0000 0x3c000 7.00.6000.16705 C:\WINDOWS\system32\webcheck.dll
      0x164a0000 0x23000 5.02.5721.5145 C:\WINDOWS\system32\WPDShServiceObj.dll
      0x109c0000 0x2c000 5.02.5721.5145 C:\WINDOWS\system32\PortableDeviceTypes.dll
      0x10930000 0x49000 5.02.5721.5145 C:\WINDOWS\system32\PortableDeviceApi.dll
      0x02930000 0x8000 0.01.0000.0010 C:\Program Files\AntivirusFirewall\Spam Control\fsscoehk.dll
      0x10100000 0xf000 3.01.0116.0000 C:\Program Files\Logitech\SetPoint\lgscroll.dll
      0x78130000 0x9b000 8.00.50727.1433 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\MSVCR80.dll
      0x7c420000 0x87000 8.00.50727.1433 C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.1433_x-ww_5cf844d2\MSVCP80.dll
      0x021d0000 0x6000 7.02.0000.0157 C:\DOCUME~1\Antonine\LOCALS~1\Temp\IadHide5.dll
      0x03700000 0x5b000 8.01.0000.0000 C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\PDFShell.dll
      0x03760000 0x4c000 8.00.0000.0000 C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\PDFShell.FRA
      0x038c0000 0x9000 2.00.0000.0004 C:\Program Files\TuneUp Utilities 2008\SDShelEx-win32.dll
      0x038d0000 0x2a000 7.05.0001.0036 C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\context.dll
      0x03910000 0x9000 5.50.9200.0000 C:\Program Files\AntivirusFirewall\Common\fpshx.dll
      0x17000000 0x16000 6.05.8452.0000 C:\Program Files\AntivirusFirewall\Common\FSMA32.dll
      0x76010000 0x65000 6.02.3104.0000 C:\WINDOWS\system32\MSVCP60.dll
      0x18000000 0x11000 6.05.8452.0000 C:\Program Files\AntivirusFirewall\Common\FSPMAPI.dll
      0x73d20000 0xfe000 6.02.4131.0000 C:\WINDOWS\system32\MFC42.DLL
      0x61d70000 0xe000 6.00.8665.0000 C:\WINDOWS\system32\MFC42LOC.DLL
      0x03a50000 0x2c000 C:\Program Files\WinRAR\rarext.dll
      0x03e80000 0x8000 1.00.0000.0000 C:\Program Files\Malwarebytes' Anti-Malware\mbamext.dll
      0x00ea0000 0x13000 7.05.0001.0036 C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\shellexecutehook.dll
      0x00b60000 0x26000 3.00.0000.4543 C:\WINDOWS\system32\igfxpph.dll
      0x02d20000 0x13000 3.00.0000.4543 C:\WINDOWS\system32\hccutils.DLL
      0x02d50000 0x25000 3.00.0000.4543 C:\WINDOWS\system32\igfxres.dll
      0x04390000 0x16f000 3.00.0000.4543 C:\WINDOWS\system32\igfxress.dll
      0x02e00000 0xf000 3.00.0000.4543 C:\WINDOWS\system32\igfxsrvc.dll

      ListDLLs v2.25 - DLL lister for Win9x/NT
      Copyright (C) 1997-2004 Mark Russinovich
      Sysinternals - www.sysinternals.com

      ------------------------------------------------------------------------------
      winlogon.exe pid: 712
      Command line: winlogon.exe

      Base Size Version Path
      0x01000000 0x81000 \??\C:\WINDOWS\system32\winlogon.exe
      0x58b50000 0x9a000 5.82.2900.2982 C:\WINDOWS\system32\COMCTL32.dll
      0x74730000 0x3d000 3.525.1117.0000 C:\WINDOWS\system32\ODBC32.dll
      0x20000000 0x18000 3.525.1117.0000 C:\WINDOWS\system32\odbcint.dll
      0x01190000 0x3b000 1.07.0018.0005 C:\WINDOWS\system32\WgaLogon.dll
      0x76f80000 0x7f000 2001.12.4414.0308 C:\WINDOWS\system32\CLBCATQ.DLL
      0x77000000 0xd4000 2001.12.4414.0258 C:\WINDOWS\system32\COMRes.dll
      0x636e0000 0x28000 5.05.0000.0051 C:\Program Files\Spyware Doctor\smumhook.dll


      Le volume dans le lecteur C n'a pas de nom.
      Le numéro de série du volume est 3FBD-5464

      Répertoire de C:\WINDOWS\system32

      05/08/2004 23:00 6 144 csrss.exe
      1 fichier(s) 6 144 octets
      0 Rép(s) 22 123 749 376 octets libres

      Contenu de Downloaded Program Files
      Le volume dans le lecteur C n'a pas de nom.
      Le numéro de série du volume est 3FBD-5464

      Répertoire de C:\WINDOWS\Downloaded Program Files

      14/07/2008 10:24 <REP> .
      14/07/2008 10:24 <REP> ..
      30/06/2008 10:39 128 256 as2stubie.dll
      27/06/2008 16:47 289 as2stubie.inf
      10/05/2006 06:25 65 desktop.ini
      26/07/2002 02:13 24 576 dwusplay.dll
      26/07/2002 02:13 196 608 dwusplay.exe
      28/07/2004 00:48 323 584 isusweb.dll
      09/11/2006 17:04 896 jinstall-1_5_0_10.inf
      11/12/2006 17:44 367 LegitCheckControl.inf
      29/05/2003 16:00 160 864 messengerstatsclient.dll
      29/05/2003 16:00 84 064 minesweeper.dll
      11/06/2007 12:21 5 021 swflash.inf
      11 fichier(s) 924 590 octets

      Total des fichiers listés :
      11 fichier(s) 924 590 octets
      2 Rép(s) 22 123 745 280 octets libres

      Recherche de rootkit! (Merci S!Ri)

      Recherche d'infections connues

      Export des clefs sensibles..


      Liste des fichiers en exception sur le pare-feu XP SP2

      "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
      "C:\\Program Files\\AOL 9.0\\waol.exe"="C:\\Program Files\\AOL 9.0\\waol.exe:*:Enabled:AOL France"
      "C:\\Program Files\\AntivirusFirewall\\backweb\\6588780\\Program\\fspex.exe"="C:\\Program Files\\AntivirusFirewall\\backweb\\6588780\\Program\\fspex.exe:*:Enabled:Antivirus Firewall"
      "C:\\Program Files\\MSN Messenger\\msncall.exe"="C:\\Program Files\\MSN Messenger\\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
      "C:\\Program Files\\eMule\\emule.exe"="C:\\Program Files\\eMule\\emule.exe:*:Enabled:eMule"
      "C:\\Program Files\\BitTorrent\\bittorrent.exe"="C:\\Program Files\\BitTorrent\\bittorrent.exe:*:Enabled:BitTorrent"
      "C:\\Documents and Settings\\Antonine\\Bureau\\utorrent.exe"="C:\\Documents and Settings\\Antonine\\Bureau\\utorrent.exe:*:Enabled:µTorrent"
      "%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
      "C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"="C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE:*:Enabled:Microsoft Office Outlook"
      "C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
      "C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
      "C:\\Program Files\\Skype\\Phone\\Skype.exe"="C:\\Program Files\\Skype\\Phone\\Skype.exe:*:Enabled:Skype"
      "C:\\Program Files\\Odebit Multimédia\\V3\\Odebit.exe"="C:\\Program Files\\Odebit Multimédia\\V3\\Odebit.exe:*:Enabled:Odébit Multimédia"
      "C:\\Program Files\\DMV\\MaxTV\\MaxTV.exe"="C:\\Program Files\\DMV\\MaxTV\\MaxTV.exe:*:Enabled:MaxTV"
      "C:\\Program Files\\DMV\\MaxTV\\recorder.exe"="C:\\Program Files\\DMV\\MaxTV\\recorder.exe:*:Enabled:recorder"
      "C:\\Program Files\\VideoLAN\\VLC\\vlc.exe"="C:\\Program Files\\VideoLAN\\VLC\\vlc.exe:*:Enabled:VLC media player"
      "C:\\Program Files\\SopCast\\SopCast.exe"="C:\\Program Files\\SopCast\\SopCast.exe:*:Enabled:SopCast Main Application"
      "C:\\Documents and Settings\\Antonine\\Application Data\\SopCast\\adv\\SopAdver.exe"="C:\\Documents and Settings\\Antonine\\Application Data\\SopCast\\adv\\SopAdver.exe:*:Enabled:SopCast Adver"
      "C:\\Program Files\\TVAnts\\Tvants.exe"="C:\\Program Files\\TVAnts\\Tvants.exe:*:Enabled:TVAnts"
      "C:\\Program Files\\iTunes\\iTunes.exe"="C:\\Program Files\\iTunes\\iTunes.exe:*:Enabled:iTunes"
      "C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"="C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"
      "C:\\Program Files\\Winamp Remote\\bin\\Orb.exe"="C:\\Program Files\\Winamp Remote\\bin\\Orb.exe:*:Enabled:Orb"
      "C:\\Program Files\\Winamp Remote\\bin\\OrbTray.exe"="C:\\Program Files\\Winamp Remote\\bin\\OrbTray.exe:*:Enabled:OrbTray"
      "C:\\Program Files\\Winamp Remote\\bin\\OrbStreamerClient.exe"="C:\\Program Files\\Winamp Remote\\bin\\OrbStreamerClient.exe:*:Enabled:Orb Stream Client"
      "C:\\Program Files\\SightSpeed\\SightSpeed.exe"="C:\\Program Files\\SightSpeed\\SightSpeed.exe:*:Enabled:SightSpeed"
      "C:\\Program Files\\Internet Explorer\\iexplore.exe"="C:\\Program Files\\Internet Explorer\\iexplore.exe:*:Enabled:Internet Explorer"
      "C:\\Program Files\\Mozilla Firefox\\firefox.exe"="C:\\Program Files\\Mozilla Firefox\\firefox.exe:*:Enabled:Mozilla Firefox"

      "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
      "C:\\Program Files\\AntivirusFirewall\\backweb\\6588780\\Program\\fspex.exe"="C:\\Program Files\\AntivirusFirewall\\backweb\\6588780\\Program\\fspex.exe:*:Enabled:Antivirus Firewall"
      "C:\\Program Files\\MSN Messenger\\msncall.exe"="C:\\Program Files\\MSN Messenger\\msncall.exe:*:Enabled:Windows Live Messenger 8.0 (Phone)"
      "%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
      "C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
      "C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
      "C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"="C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"

      Export de la clef SharedTaskScheduler

      [SharedTaskScheduler]
      "{438755C2-A8BA-11D1-B96B-00A0C90312E1}"="Pré-chargeur Browseui"
      "{8C7461EF-2B13-11d2-BE35-3078302C2030}"="Démon de cache des catégories de composant"

      REGEDIT4

      [taskmgr.exe]


      exports des policies
      REGEDIT4

      [system]
      "dontdisplaylastusername"=dword:00000000
      "legalnoticecaption"=""
      "legalnoticetext"=""
      "shutdownwithoutlogon"=dword:00000001
      "undockwithoutlogon"=dword:00000001



      Export des clefs sensibles..
      Rechercher adresses sensibles dans le fichier HOSTS...
      catchme 0.3.1351 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
      Rootkit scan 2008-08-31 15:19:35
      Windows 5.1.2600 Service Pack 2 NTFS

      detected NTDLL code modification:
      ZwClose

      scanning hidden services & system hive ...

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg]
      "s1"=dword:2df9c43f
      "s2"=dword:110480d0
      "h0"=dword:00000001

      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
      "h0"=dword:00000000
      "ujdew"=hex:ea,ce,01,70,e8,46,b2,20,e0,a6,47,c8,87,92,6b,57,78,f7,2d,0b,d8,..
      [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\sptd\Cfg\0D79C293C1ED61418462E24595C90D04]
      "h0"=dword:00000000
      "ujdew"=hex:ea,ce,01,70,e8,46,b2,20,e0,a6,47,c8,87,92,6b,57,78,f7,2d,0b,d8,..

      scanning hidden registry entries ...

      [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
      "moqgs"=""c:\documents and settings\antonine\local settings\application data\moqgs.exe" moqgs"

      scanning hidden files ...

      scan completed successfully
      hidden services: 0
      hidden files: 0


      KProcCheck Version 0.2-beta1 Proof-of-Concept by SIG^2 (www.security.org.sg)

      Process list by traversal of KiWaitListHead

      4 - System
      188 - FSMA32.EXE
      228 - fssm32.exe
      296 - FSMB32.EXE
      344 - GoogleUpdaterSe
      600 - MDM.EXE
      648 - FSAW.exe
      672 - fspex.exe
      680 - pctsAuxs.exe
      688 - csrss.exe
      712 - winlogon.exe
      756 - services.exe
      768 - lsass.exe
      864 - fsguidll.exe
      912 - svchost.exe
      988 - svchost.exe
      1028 - svchost.exe
      1092 - V0220Mon.exe
      1108 - FCH32.EXE
      1116 - cmd.exe
      1208 - FAMEH32.EXE
      1228 - fsqh.exe
      1308 - pctsSvc.exe
      1328 - ctfmon.exe
      1364 - explorer.exe
      1372 - svchost.exe
      1472 - ispnews.exe
      1512 - HPQTOA~1.EXE
      1644 - spoolsv.exe
      1752 - AppleMobileDevi
      1772 - guard.exe
      1816 - SAgent2.exe
      1908 - FSRW.exe
      1980 - fsgk32.exe
      2024 - fsbwsys.exe
      2028 - GoogleDesktop.e
      2292 - pctsTray.exe
      2520 - LogitechDesktop
      2544 - moqgs.exe
      2664 - FSAV32.exe
      2992 - GoogleDesktop.e
      3232 - fsdfwd.exe
      3368 - alg.exe
      3644 - wmiprvse.exe
      3792 - SynTPEnh.exe
      3816 - QPService.exe
      3876 - QLBCTRL.exe
      3996 - FSM32.EXE

      Total number of processes = 48
      NOTE: Under WinXP, this will not show all processes.

      KProcCheck Version 0.2-beta1 Proof-of-Concept by SIG^2 (www.security.org.sg)

      Driver/Module list by traversal of PsLoadedModuleList

      804D7000 - \WINDOWS\system32\ntkrnlpa.exe
      806E2000 - \WINDOWS\system32\hal.dll
      F7ABE000 - \WINDOWS\system32\KDCOM.DLL
      F79CE000 - \WINDOWS\system32\BOOTVID.dll
      F73BF000 - spqh.sys
      F7AC0000 - \WINDOWS\System32\Drivers\WMILIB.SYS
      F73A7000 - \WINDOWS\System32\Drivers\SCSIPORT.SYS
      F7378000 - ACPI.sys
      F7367000 - pci.sys
      F75BE000 - ohci1394.sys
      F75CE000 - \WINDOWS\system32\DRIVERS\1394BUS.SYS
      F75DE000 - isapnp.sys
      F79D2000 - compbatt.sys
      F79D6000 - \WINDOWS\system32\DRIVERS\BATTC.SYS
      F7B86000 - pciide.sys
      F783E000 - \WINDOWS\system32\DRIVERS\PCIIDEX.SYS
      F7AC2000 - intelide.sys
      F7AC4000 - viaide.sys
      F7AC6000 - aliide.sys
      F7349000 - pcmcia.sys
      F75EE000 - MountMgr.sys
      F732A000 - ftdisk.sys
      F79DA000 - ACPIEC.sys
      F7B87000 - \WINDOWS\system32\DRIVERS\OPRGHDLR.SYS
      F7846000 - PartMgr.sys
      F784E000 - pavboot.sys
      F75FE000 - sfsync02.sys
      F760E000 - VolSnap.sys
      F7312000 - atapi.sys
      F723C000 - iaStor.sys
      F761E000 - disk.sys
      F762E000 - \WINDOWS\system32\DRIVERS\CLASSPNP.SYS
      F721C000 - fltMgr.sys
      F720A000 - sr.sys
      F763E000 - ikfilesec.sys
      F764E000 - PxHelp20.sys
      F71F3000 - KSecDD.sys
      F7166000 - Ntfs.sys
      F7154000 - fsdfw.sys
      F7127000 - \WINDOWS\System32\drivers\NDIS.SYS
      F765E000 - \WINDOWS\System32\drivers\fsndis5.sys
      F7116000 - Serial.sys
      F7856000 - sfhlp02.sys
      F7105000 - sfdrv01.sys
      F70EA000 - Mup.sys
      F778E000 - \SystemRoot\system32\DRIVERS\intelppm.sys
      BA88D000 - \SystemRoot\system32\DRIVERS\cpqbttn.sys
      F779E000 - \SystemRoot\system32\DRIVERS\HIDCLASS.SYS
      F7936000 - \SystemRoot\system32\DRIVERS\HIDPARSE.SYS
      BA889000 - \SystemRoot\system32\DRIVERS\wmiacpi.sys
      BA754000 - \SystemRoot\system32\DRIVERS\ialmnt5.sys
      BA740000 - \SystemRoot\system32\DRIVERS\VIDEOPRT.SYS
      BA71B000 - \SystemRoot\system32\DRIVERS\HDAudBus.sys
      BA6B3000 - \SystemRoot\system32\DRIVERS\bcmwl5.sys
      F793E000 - \SystemRoot\system32\DRIVERS\usbuhci.sys
      BA690000 - \SystemRoot\system32\DRIVERS\USBPORT.SYS
      F7946000 - \SystemRoot\system32\DRIVERS\usbehci.sys
      BA67C000 - \SystemRoot\system32\DRIVERS\Rtnicxp.sys
      BA885000 - \SystemRoot\system32\DRIVERS\CmBatt.sys
      F77AE000 - \SystemRoot\system32\DRIVERS\i8042prt.sys
      BA881000 - \SystemRoot\system32\DRIVERS\L8042Kbd.sys
      F794E000 - \SystemRoot\system32\DRIVERS\kbdclass.sys
      BA64C000 - \SystemRoot\system32\DRIVERS\SynTP.sys
      F7B0A000 - \SystemRoot\system32\DRIVERS\USBD.SYS
      F7956000 - \SystemRoot\system32\DRIVERS\mouclass.sys
      F77BE000 - \SystemRoot\system32\DRIVERS\imapi.sys
      F77CE000 - \SystemRoot\system32\DRIVERS\cdrom.sys
      F77DE000 - \SystemRoot\system32\DRIVERS\redbook.sys
      BA629000 - \SystemRoot\system32\DRIVERS\ks.sys
      F795E000 - \SystemRoot\System32\Drivers\GEARAspiWDM.sys
      F7BA6000 - \SystemRoot\system32\DRIVERS\audstub.sys
      F77EE000 - \SystemRoot\system32\DRIVERS\rasl2tp.sys
      BA879000 - \SystemRoot\system32\DRIVERS\ndistapi.sys
      BA612000 - \SystemRoot\system32\DRIVERS\ndiswan.sys
      F77FE000 - \SystemRoot\system32\DRIVERS\raspppoe.sys
      F780E000 - \SystemRoot\system32\DRIVERS\raspptp.sys
      F7966000 - \SystemRoot\system32\DRIVERS\TDI.SYS
      BA601000 - \SystemRoot\system32\DRIVERS\psched.sys
      F781E000 - \SystemRoot\system32\DRIVERS\msgpc.sys
      B1F45000 - \SystemRoot\system32\DRIVERS\ptilink.sys
      B1F3D000 - \SystemRoot\system32\DRIVERS\raspti.sys
      B20EF000 - \SystemRoot\system32\DRIVERS\termdd.sys
      B20BB000 - \SystemRoot\system32\DRIVERS\swenum.sys
      AF93C000 - \SystemRoot\system32\DRIVERS\update.sys
      B2085000 - \SystemRoot\system32\DRIVERS\mssmbios.sys
      B2081000 - \SystemRoot\system32\DRIVERS\kbdhid.sys
      B20DF000 - \SystemRoot\System32\Drivers\NDProxy.SYS
      B20BF000 - \SystemRoot\system32\DRIVERS\usbhub.sys
      9F7E7000 - \SystemRoot\system32\drivers\CHDAud.sys
      9F7C3000 - \SystemRoot\system32\drivers\portcls.sys
      B1C1C000 - \SystemRoot\system32\drivers\drmk.sys
      9F791000 - \SystemRoot\system32\DRIVERS\HSFHWAZL.sys
      9F694000 - \SystemRoot\system32\DRIVERS\HSF_DPV.sys
      9F5E4000 - \SystemRoot\system32\DRIVERS\HSF_CNXT.sys
      B1F35000 - \SystemRoot\System32\Drivers\Modem.SYS
      9C50A000 - \SystemRoot\system32\drivers\iksysflt.sys
      9CFA4000 - \SystemRoot\system32\drivers\KCOM.SYS
      9C4F3000 - \SystemRoot\system32\drivers\iksyssec.sys
      F7B7A000 - \SystemRoot\System32\Drivers\i2omgmt.SYS
      F7B7C000 - \SystemRoot\System32\Drivers\Fs_Rec.SYS
      9CA02000 - \SystemRoot\System32\Drivers\Null.SYS
      F7B7E000 - \SystemRoot\System32\Drivers\Beep.SYS
      9CA01000 - \SystemRoot\System32\DRIVERS\AvgAsCln.sys
      B62C0000 - \SystemRoot\System32\drivers\vga.sys
      F7B80000 - \SystemRoot\System32\Drivers\mnmdd.SYS
      F7B82000 - \SystemRoot\System32\DRIVERS\RDPCDD.sys
      B6031000 - \SystemRoot\System32\Drivers\Msfs.SYS
      B6029000 - \SystemRoot\System32\Drivers\Npfs.SYS
      B1FB3000 - \SystemRoot\system32\DRIVERS\rasacd.sys
      9C4C0000 - \SystemRoot\system32\DRIVERS\ipsec.sys
      9C468000 - \SystemRoot\system32\DRIVERS\tcpip.sys
      9C440000 - \SystemRoot\system32\DRIVERS\netbt.sys
      9C41E000 - \SystemRoot\System32\drivers\afd.sys
      9CF94000 - \SystemRoot\system32\DRIVERS\netbios.sys
      F7B84000 - \SystemRoot\system32\DRIVERS\eabfiltr.sys
      9C3F3000 - \SystemRoot\system32\DRIVERS\rdbss.sys
      9C384000 - \SystemRoot\system32\DRIVERS\mrxsmb.sys
      9CF84000 - \SystemRoot\System32\Drivers\Fips.SYS
      9C363000 - \SystemRoot\system32\DRIVERS\ipnat.sys
      9CF74000 - \SystemRoot\system32\DRIVERS\wanarp.sys
      9C943000 - \??\C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.sys
      9C340000 - \SystemRoot\System32\Drivers\Fastfat.SYS
      B6009000 - \SystemRoot\system32\DRIVERS\usbccgp.sys
      9C8F9000 - \SystemRoot\system32\DRIVERS\hidusb.sys
      B6001000 - \SystemRoot\system32\DRIVERS\LHidKE.Sys
      9C8F5000 - \SystemRoot\system32\DRIVERS\mouhid.sys
      9C32E000 - \SystemRoot\system32\DRIVERS\LMouKE.Sys
      9C258000 - \SystemRoot\System32\Drivers\dump_iaStor.sys
      BF800000 - \SystemRoot\System32\win32k.sys
      B1F9B000 - \SystemRoot\System32\drivers\Dxapi.sys
      B5B2E000 - \SystemRoot\System32\watchdog.sys
      BF9C3000 - \SystemRoot\System32\drivers\dxg.sys
      9D2A3000 - \SystemRoot\System32\drivers\dxgthk.sys
      BF9E4000 - \SystemRoot\System32\ialmdnt5.dll
      BF9D5000 - \SystemRoot\System32\ialmrnt5.dll
      BFA06000 - \SystemRoot\System32\ialmdev5.DLL
      BFA41000 - \SystemRoot\System32\ialmdd5.DLL
      B5EC7000 - \SystemRoot\system32\DRIVERS\ndisuio.sys
      9C1B4000 - \SystemRoot\system32\DRIVERS\mrxdav.sys
      F787E000 - \??\C:\Program Files\AntivirusFirewall\Anti-Virus\Win2K\FSrec.sys
      9C127000 - \SystemRoot\system32\drivers\wdmaud.sys
      B8DAB000 - \SystemRoot\system32\drivers\sysaudio.sys
      9BE9F000 - \SystemRoot\system32\DRIVERS\srv.sys
      F7C6C000 - \SystemRoot\System32\Drivers\LBeepKE.sys
      9BF65000 - \SystemRoot\system32\DRIVERS\mdmxsdk.sys
      F76FE000 - \??\C:\Program Files\AntivirusFirewall\Anti-Virus\Win2K\FSfilter.sys
      9C7D4000 - \??\C:\Program Files\AntivirusFirewall\Anti-Virus\Win2K\FSgk.sys
      F7BF9000 - \??\C:\WINDOWS\system32\Drivers\mchInjDrv.sys
      9B53B000 - \SystemRoot\System32\Drivers\HTTP.sys
      F7C51000 - \SystemRoot\System32\DRIVERS\KProcCheck.sys

      Total number of drivers = 150

      Liste des programmes installes

      Adobe Flash Player Plugin
      Adobe Reader 8.1.2 - Français
      Advanced Video FX Engine
      Amélioration de nos services
      Amélioration de nos services
      AntiVirus Firewall
      Apple Mobile Device Support
      Apple Software Update
      Archiveur WinRAR
      Audacity 1.2.6
      AVG Anti-Spyware 7.5
      BufferChm
      CCleaner (remove only)
      Conexant HD Audio
      Connexion Facile à Internet
      Connexion Facile à Internet
      Correctif pour Windows Internet Explorer 7 (KB947864)
      Correctif pour Windows XP (KB952287)
      CP_AtenaShokunin1Config
      CP_CalendarTemplates1
      cp_LightScribeConfig
      cp_OnlineProjectsConfig
      CP_Package_Basic1
      CP_Package_Variety1
      CP_Package_Variety2
      CP_Package_Variety3
      CP_Panorama1Config
      cp_PosterPrintConfig
      cp_UpdateProjectsConfig
      Creative Live! Cam Center
      Creative Live! Cam Manager
      Creative Live! Cam Video IM Driver (1.01.01.00)
      Creative System Information
      CueTour
      DeepBurner v1.8.0.224
      Destinations
      DeviceManagementQFolder
      DivX Content Uploader
      DivX Web Player
      DS-Monkey Audio Source 1.00
      eMule
      EPSON Logiciel imprimante
      Everest Poker (Remove Only)
      FullDPAppQFolder
      Google Desktop
      Google Earth
      HDAUDIO Soft Data Fax Modem with SmartCP
      HijackThis 2.0.2
      HP DVD Play 2.3
      HP Help and Support
      HP Imaging Device Functions 6.0
      HP Photosmart Premier Software 6.0
      HP Quick Launch Buttons 6.10 A1
      HP Software Update
      HP User Guides--System Recovery
      HP User Guides 0037
      HP Wireless Assistant 2.00 G2
      HpSdpAppCoreApp
      InstantShareDevices
      Intel(R) Graphics Media Accelerator Driver
      iTunes
      J2SE Runtime Environment 5.0 Update 10
      J2SE Runtime Environment 5.0 Update 6
      J2SE Runtime Environment 5.0 Update 9
      Java(TM) 6 Update 2
      Java(TM) 6 Update 3
      Java(TM) 6 Update 5
      Java(TM) 6 Update 6
      Java(TM) SE Runtime Environment 6 Update 1
      KhalSetup
      Lecteur Windows Media 11
      livebox
      Logitech Desktop Messenger
      Logitech SetPoint
      Macromedia Flash Player 8
      Malwarebytes' Anti-Malware
      Microsoft .NET Framework 1.1
      Microsoft .NET Framework 1.1
      Microsoft .NET Framework 1.1 French Language Pack
      Microsoft .NET Framework 1.1 Hotfix (KB928366)
      Microsoft .NET Framework 2.0 Service Pack 1
      Microsoft Compression Client Pack 1.0 for Windows XP
      Microsoft Internationalized Domain Names Mitigation APIs
      Microsoft National Language Support Downlevel APIs
      Microsoft Office Access MUI (French) 2007
      Microsoft Office Excel MUI (French) 2007
      Microsoft Office InfoPath MUI (French) 2007
      Microsoft Office Outlook MUI (French) 2007
      Microsoft Office PowerPoint MUI (French) 2007
      Microsoft Office Professional Plus 2007
      Microsoft Office Professional Plus 2007
      Microsoft Office Proof (Arabic) 2007
      Microsoft Office Proof (Dutch) 2007
      Microsoft Office Proof (English) 2007
      Microsoft Office Proof (French) 2007
      Microsoft Office Proof (German) 2007
      Microsoft Office Proof (Spanish) 2007
      Microsoft Office Proofing (French) 2007
      Microsoft Office Publisher MUI (French) 2007
      Microsoft Office Shared MUI (French) 2007
      Microsoft Office Word MUI (French) 2007
      Microsoft Software Update for Web Folders (French) 12
      Microsoft User-Mode Driver Framework Feature Pack 1.0
      Microsoft Visual C++ 2005 Redistributable
      Microsoft Works
      Mise à jour de sécurité pour Windows Internet Explorer 7 (KB928090)
      Mise à jour de sécurité pour Windows Internet Explorer 7 (KB929969)
      Mise à jour de sécurité pour Windows Internet Explorer 7 (KB931768)
      Mise à jour de sécurité pour Windows Internet Explorer 7 (KB933566)
      Mise à jour de sécurité pour Windows Internet Explorer 7 (KB937143)
      Mise à jour de sécurité pour Windows Internet Explorer 7 (KB938127)
      Mise à jour de sécurité pour Windows Internet Explorer 7 (KB939653)
      Mise à jour de sécurité pour Windows Internet Explorer 7 (KB942615)
      Mise à jour de sécurité pour Windows Internet Explorer 7 (KB944533)
      Mise à jour de sécurité pour Windows Internet Explorer 7 (KB950759)
      Mise à jour de sécurité pour Windows Internet Explorer 7 (KB953838)
      Mise à jour de sécurité pour Windows XP (KB946648)
      Mise à jour de sécurité pour Windows XP (KB950974)
      Mise à jour de sécurité pour Windows XP (KB951066)
      Mise à jour de sécurité pour Windows XP (KB952954)
      Mise à jour de sécurité pour Windows XP (KB953839)
      Mise à jour pour Windows XP (KB912945)
      Mise à jour pour Windows XP (KB951072-v2)
      Mozilla Firefox (3.0.1)
      MSN
      MSXML 4.0 SP2 (KB927978)
      MSXML 4.0 SP2 (KB936181)
      NetWaiting
      Norton Security Scan
      OptionalContentQFolder
      Outil de mise à jour Google
      PhotoGallery
      Photorécit 3 pour Windows
      Picasa 2
      QuickTime
      RandMap
      RealPlayer
      Security Update for 2007 Microsoft Office System (KB951596)
      Security Update for CAPICOM (KB931906)
      Security Update for CAPICOM (KB931906)
      Security Update for Microsoft Office Excel 2007 (KB951546)
      Security Update for Microsoft Office PowerPoint 2007 (KB951338)
      Security Update for Microsoft Office Publisher 2007 (KB950114)
      Security Update for Microsoft Office system 2007 (KB951808)
      Security Update for Microsoft Office Word 2007 (KB950113)
      Security Update for Office 2007 (KB934062)
      Security Update for the 2007 Microsoft Office System (KB936960)
      Security Update for Visio 2007 (KB947590)
      SightSpeed (remove only)
      SkinsHP1
      Skype 2.5
      SmartAudio
      SmartMovie Converter (for Symbian phones)
      Sonic Audio Module
      Sonic Copy Module
      Sonic Data Module
      Sonic Express Labeler
      Sonic MyDVD Plus
      Sonic Update Manager
      Sonic_PrimoSDK
      SopCast 1.1.2
      Spyware Doctor 5.5
      Synaptics Pointing Device Driver
      Tony Hawks Pro Skater 4
      TuneUp Utilities 2008
      TVAnts 1.0
      Unload
      Update for Microsoft Office Outlook 2007 (KB952142)
      Update for Office 2007 (KB932080)
      Update for Office 2007 (KB934391)
      Update for Office 2007 (KB946691)
      Update for Outlook 2007 Junk Email Filter (kb955433)
      VideoLAN VLC media player 0.8.6h
      WebFldrs XP
      Windows Internet Explorer 7
      Windows Live installer
      Windows Live Messenger
      Windows Media Format 11 runtime
      Windows Media Format 11 runtime
      Windows Media Player 11



      Le volume dans le lecteur C n'a pas de nom.
      Le numéro de série du volume est 3FBD-5464

      Répertoire de C:\Program Files

      31/08/2008 14:25 <REP> .
      31/08/2008 14:25 <REP> ..
      11/07/2008 19:53 <REP> Adobe
      03/02/2008 13:16 <REP> Alcohol Soft
      14/11/2006 15:43 <REP> AntivirusFirewall
      30/12/2007 18:33 <REP> Apple Software Update
      03/02/2008 13:41 <REP> Aspyr
      09/07/2007 21:02 <REP> Astonsoft
      04/05/2008 20:45 <REP> Audacity
      21/01/2007 13:28 <REP> BitTorrent
      29/12/2006 21:09 <REP> Canopy Games
      09/10/2007 19:55 <REP> CCleaner
      19/08/2006 05:18 <REP> ComPlus Applications
      18/08/2006 22:11 <REP> CONEXANT
      15/06/2007 16:29 <REP> Creative
      16/09/2007 14:57 <REP> DivX
      11/09/2007 16:56 <REP> DMV
      04/05/2008 17:52 <REP> DS-Monkey Audio Source
      19/07/2008 03:47 <REP> eMule
      13/12/2006 20:48 <REP> EPSON
      19/04/2008 01:08 <REP> Everest Poker
      04/05/2008 20:42 <REP> Exact Audio Copy
      23/08/2008 08:40 <REP> Fichiers communs
      03/02/2008 13:45 <REP> GameSpy Arcade
      15/07/2008 19:39 <REP> Google
      27/01/2007 01:14 <REP> Grisoft
      18/08/2006 21:59 <REP> Hewlett-Packard
      11/09/2007 12:18 <REP> Hijackthis Version Française
      18/08/2006 21:55 <REP> HP
      14/10/2006 18:20 <REP> HPQ
      18/08/2006 21:28 <REP> Intel
      17/08/2008 23:08 <REP> Internet Explorer
      30/12/2007 18:55 <REP> iPod
      30/12/2007 18:56 <REP> iTunes
      01/06/2008 20:20 <REP> Java
      14/07/2008 18:13 <REP> Lavasoft
      21/04/2008 22:22 <REP> Logitech
      05/05/2007 11:15 <REP> Lonely Cat Games
      15/07/2008 19:40 <REP> Malwarebytes' Anti-Malware
      17/08/2008 23:12 <REP> Messenger
      30/09/2007 17:21 <REP> Microsoft CAPICOM 2.1.0.2
      19/08/2006 05:18 <REP> microsoft frontpage
      08/04/2007 15:17 <REP> Microsoft Office
      05/11/2006 19:29 <REP> Microsoft Visual Studio
      08/04/2007 15:06 <REP> Microsoft Visual Studio 8
      08/04/2007 15:18 <REP> Microsoft Works
      08/04/2007 15:16 <REP> Microsoft.NET
      19/08/2006 05:18 <REP> Movie Maker
      31/08/2008 14:19 <REP> Mozilla Firefox
      08/04/2007 15:18 <REP> MSBuild
      10/11/2006 19:47 <REP> MSN
      19/08/2006 05:18 <REP> MSN Gaming Zone
      09/04/2007 19:03 <REP> MSN Messenger
      18/11/2006 02:46 <REP> MSXML 4.0
      19/08/2006 05:18 <REP> NetMeeting
      18/08/2006 22:10 <REP> NetWaiting
      18/07/2008 15:00 <REP> Norton Security Scan
      11/09/2007 15:10 <REP> Odebit Multimédia
      19/08/2006 05:18 <REP> Online Services
      14/06/2007 02:58 <REP> Outlook Express
      04/05/2007 13:27 <REP> Photo Story 3 for Windows
      13/07/2008 15:56 <REP> Picasa2
      30/12/2007 18:49 <REP> QuickTime
      27/11/2006 00:31 <REP> Real
      13/07/2008 14:59 <REP> SAGEM
      10/02/2008 12:59 <REP> Samsung
      15/12/2007 15:06 <REP> SAS
      18/08/2006 21:57 <REP> Services en ligne
      05/12/2006 23:16 <REP> Sierra On-Line
      10/05/2007 16:15 <REP> SightSpeed
      14/11/2006 17:54 <REP> Skype
      19/08/2006 05:18 <REP> Sonic
      26/02/2008 22:34 <REP> SopCast
      30/08/2008 11:03 <REP> Spyware Doctor
      14/11/2006 15:45 <REP> Symantec
      18/08/2006 21:48 <REP> Synaptics
      31/08/2008 14:25 <REP> Trend Micro
      13/07/2008 16:59 <REP> TuneUp Utilities 2008
      20/04/2008 18:15 <REP> TVAnts
      05/11/2006 19:35 <REP> VideoLAN
      29/09/2007 10:03 <REP> Windows Live
      11/09/2007 15:00 <REP> Windows Media Connect 2
      18/12/2006 01:08 <REP> Windows Media Player
      19/08/2006 05:18 <REP> Windows NT
      27/08/2008 07:57 <REP> WinRAR
      17/06/2007 13:33 <REP> WinZip
      19/08/2006 05:18 <REP> xerox
      0 fichier(s) 0 octets
      87 Rép(s) 22 123 593 728 octets libres
      Le volume dans le lecteur C n'a pas de nom.
      Le numéro de série du volume est 3FBD-5464

      Répertoire de C:\Program Files\fichiers communs

      23/08/2008 08:40 <REP> .
      23/08/2008 08:40 <REP> ..
      11/07/2008 19:54 <REP> Adobe
      30/12/2007 18:28 <REP> Apple
      08/04/2007 15:17 <REP> DESIGNER
      13/12/2006 20:50 <REP> EPSON
      19/08/2006 05:18 <REP> HP
      16/10/2007 20:04 <REP> InstallShield
      19/08/2006 05:18 <REP> Java
      21/04/2008 22:21 <REP> Logitech
      08/04/2007 15:26 <REP> Microsoft Shared
      19/08/2006 05:18 <REP> MSSoap
      20/01/2007 12:32 <REP> NSV
      19/08/2006 05:18 <REP> ODBC
      23/08/2008 08:39 <REP> Real
      19/08/2006 05:18 <REP> Services
      19/08/2006 05:18 <REP> Sonic Shared
      19/08/2006 05:18 <REP> SpeechEngines
      19/08/2006 05:18 <REP> SureThing Shared
      20/07/2008 10:28 <REP> Symantec Shared
      14/06/2007 02:58 <REP> System
      19/08/2006 05:18 <REP> TiVo Shared
      15/07/2008 19:38 <REP> Wise Installation Wizard
      23/08/2008 08:40 <REP> xing shared
      0 fichier(s) 0 octets
      24 Rép(s) 22 123 593 728 octets libres
      Le volume dans le lecteur C n'a pas de nom.
      Le numéro de série du volume est 3FBD-5464

      Répertoire de C:\Program Files\fichiers communs\Microsoft Shared\Web Folders

      08/04/2007 15:24 <REP> .
      08/04/2007 15:24 <REP> ..
      05/11/2006 19:29 <REP> 1033
      08/04/2007 15:26 <REP> 1036
      26/10/2006 19:49 970 528 MSONSEXT.DLL
      26/10/2006 20:12 40 256 MSOSV.DLL
      03/06/1999 20:09 122 937 MSOWS409.DLL
      07/03/2001 15:00 127 033 MSOWS40c.DLL
      11/07/2003 03:25 80 448 PKMWS.DLL
      5 fichier(s) 1 341 202 octets
      4 Rép(s) 22 123 577 344 octets libres




      c:\Documents and Settings\Administrateur\Application Data\Microsoft\Installer\{6815FCDD-401D-481E-BA88-31B4754C2B46}\ARPPRODUCTICON.exe
      c:\Documents and Settings\All Users\Application Data\Apple Computer\Installer Cache\iTunes 7.5.0.20\iTunesSetupAdmin.exe
      c:\Documents and Settings\Antonine\Application Data\Adobe\Acrobat\7.0\Updater\AdbeRdr709_fr_FR.exe
      c:\Documents and Settings\Antonine\Application Data\Microsoft\Installer\{EE7B9A8D-19F0-450D-8E94-3E391E6044CD}\ARPPRODUCTICON.exe
      c:\Documents and Settings\Antonine\Application Data\ppStream\update.exe
      c:\Documents and Settings\Antonine\Application Data\Real\Update\setup\schedule.exe
      c:\Documents and Settings\Antonine\Application Data\Real\Update\setup\setup.exe
      c:\Documents and Settings\Antonine\Application Data\SopCast\adv\SopAdver.exe
      c:\Documents and Settings\Antonine\Bureau\coke.exe
      c:\Documents and Settings\Antonine\Bureau\Google Updater.exe
      c:\Documents and Settings\Antonine\Bureau\synertel.exe
      c:\Documents and Settings\Antonine\Bureau\utorrent.exe
      c:\Documents and Settings\Antonine\Bureau\DiagHelp\DiagHelp\catchme.exe
      c:\Documents and Settings\Antonine\Bureau\DiagHelp\DiagHelp\diff.exe
      c:\Documents and Settings\Antonine\Bureau\DiagHelp\DiagHelp\dumphive.exe
      c:\Documents and Settings\Antonine\Bureau\DiagHelp\DiagHelp\FilesInfoCmd.exe
      c:\Documents and Settings\Antonine\Bureau\DiagHelp\DiagHelp\find2.exe
      c:\Documents and Settings\Antonine\Bureau\DiagHelp\DiagHelp\Fport.exe
      c:\Documents and Settings\Antonine\Bureau\DiagHelp\DiagHelp\grep.exe
      c:\Documents and Settings\Antonine\Bureau\DiagHelp\DiagHelp\gzip.exe
      c:\Documents and Settings\Antonine\Bureau\DiagHelp\DiagHelp\KProcCheck.exe
      c:\Documents and Settings\Antonine\Bureau\DiagHelp\DiagHelp\LFiles.exe
      c:\Documents and Settings\Antonine\Bureau\DiagHelp\DiagHelp\LISTDLLS.exe
      c:\Documents and Settings\Antonine\Bureau\DiagHelp\DiagHelp\md5sums.exe
      c:\Documents and Settings\Antonine\Bureau\DiagHelp\DiagHelp\pslist.exe
      c:\Documents and Settings\Antonine\Bureau\DiagHelp\DiagHelp\sigcheck.exe
      c:\Documents and Settings\Antonine\Bureau\DiagHelp\DiagHelp\streams.exe
      c:\Documents and Settings\Antonine\Bureau\DiagHelp\DiagHelp\swreg.exe
      c:\Documents and Settings\Antonine\Bureau\DiagHelp\DiagHelp\tar.exe
      c:\Documents and Settings\Antonine\Local Settings\Application Data\moqgs.exe
      c:\Documents and Settings\Antonine\Mes documents\benjamin\microsoft office 2003.fr.1 cd.word.exel.outlok.access.power point.publisher.infopath.+patch\SETUP.EXE
      c:\Documents and Settings\Antonine\Mes documents\benjamin\microsoft office 2003.fr.1 cd.word.exel.outlok.access.power point.publisher.infopath.+patch\FILES\OWC10\SETUP.EXE
      c:\Documents and Settings\Antonine\Mes documents\benjamin\microsoft office 2003.fr.1 cd.word.exel.outlok.access.power point.publisher.infopath.+patch\FILES\OWC11\SETUP.EXE
      c:\Documents and Settings\Antonine\Mes documents\benjamin\microsoft office 2003.fr.1 cd.word.exel.outlok.access.power point.publisher.infopath.+patch\FILES\PFILES\COMMON\MSSHARED\DW\DW20.EXE
      c:\Documents and Settings\Antonine\Mes documents\benjamin\microsoft office 2003.fr.1 cd.word.exel.outlok.access.power point.publisher.infopath.+patch\FILES\PFILES\COMMON\MSSHARED\DW\DWTRIG20.EXE
      c:\Documents and Settings\Antonine\Mes documents\benjamin\microsoft office 2003.fr.1 cd.word.exel.outlok.access.power point.publisher.infopath.+patch\FILES\PFILES\MSOFFICE\OFFICE11\OFFCLN.EXE
      c:\Documents and Settings\Antonine\Mes documents\benjamin\microsoft office 2003.fr.1 cd.word.exel.outlok.access.power point.publisher.infopath.+patch\FILES\SETUP\OSE.EXE
      c:\Documents and Settings\Antonine\Mes documents\benjamin\microsoft office 2003.fr.1 cd.word.exel.outlok.access.power point.publisher.infopath.+patch\MSDE2000\MSDE2KS3.EXE
      c:\Documents and Settings\Antonine\Temporary Internet Files\Content.IE5\CDB19ACT\RealPlayer11GOLD_fr[1].exe
      c:\Documents and Settings\Default User\Application Data\Microsoft\Installer\{6815FCDD-401D-481E-BA88-31B4754C2B46}\ARPPRODUCTICON.exe
      c:\Documents and Settings\All Users\Application Data\Grisoft\AVG Anti-Spyware 7.5\Downloads\help.dll
      c:\Documents and Settings\All Users\Application Data\Microsoft\IdentityCRL\production\ppcrlconfig.dll
      c:\Documents and Settings\Antonine\Application Data\Microsoft\IdentityCRL\Production\ppcrlconfig.dll
      c:\Documents and Settings\Antonine\Application Data\Real\Update\setup\data\RUP\control.dll
      c:\Documents and Settings\LocalService\Application Data\Microsoft\UPnP Device Host\upnphost\udhisapi.dll

      ****** Fin du rapport DiagHelp

      merci,
      0
  3. sKe69 Messages postés 21955 Statut Contributeur sécurité 463
     
    Bon ...

    1-Vas dans panneau de config/ajout et suppression de prg .
    regardes dans la listes si tu trouves un prg comme : " CID Help ", "Circle Developement" ou
    "Adverts" --->si ils s'y trouvent , supprimes les .

    2- Télécharges Lop S&D :
    https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/LopSD.exe?attachauth=ANoY7co3ntqUavpZ3q1BG-h4pc13vqDZmhcNeEPChtsyrgAykRbhE8bZzhk979EfQD4AgwtQUHCaQ7ZQwNYMo3_0kA8htAspckDJtu2K5t6J9z6dLW4fpZyH4FpFL1tVMBZ8H-KnN7afZ5vt-WxZRpnynk-a0XmV_Y0C0q6DxGEDKie1TnPT7gFoZnoCnspzBmbW6ZzxA4fNr3oEDlbelNZON-LjF8nOmQ%3D%3D&attredirects=2

    Déconnetes toi et fermes toutes tes applications en cours .

    Double cliques sur sur l'.exe que tu viens de télécharger pour lancer l'installe .

    Une fois l'installation faite, cliques sur le raccourci pour lancer l'outil .

    Là,laisses toi guider:
    --->choisis l'option 1 (recherche) et valides.

    (Tu ne fais pas l'option de nettoyage ( 2 ou 3) ).

    Une fois le scan terminer ,le Bloc-Notes contenant le rapport va s'ouvrir.
    Postes ce rapport dans ta prochaine réponse pour analyse .

    Tuto : https://sites.google.com/site/eric71mespages/lop.sd.exe
    0
    1. benjal
       
      voila pour la suite.... j'ai pas trouver dans le panneau de config ajout/sup. les noms que tu m avais demandé..

      voila la log suivante, merci


      --------------------\\ Lop S&D 4.2.3-7 XP/Vista

      Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 2
      X86-based PC ( Multiprocessor Free : Intel(R) Celeron(R) M CPU 420 @ 1.60GHz )
      BIOS : Ver 1.00PARTTBL
      USER : Antonine ( Administrator )
      BOOT : Normal boot
      Antivirus : AntiVirus Firewall 6.15 6.15 (Activated)
      Firewall : AntiVirus Firewall 6.15 6.15 (Activated)

      "C:\Lop SD" ( MAJ : 30-08-2008|19:45 )
      Option : [1] ( 31/08/2008|15:44 )

      --------------------\\ Listing des dossiers dans APPLIC~1

      [10/05/2006|08:16] C:\DOCUME~1\ADMINI~1\APPLIC~1\desktop.ini
      [19/08/2006|05:18] C:\DOCUME~1\ADMINI~1\APPLIC~1\Identities
      [14/07/2008|14:24] C:\DOCUME~1\ADMINI~1\APPLIC~1\ispnews
      [18/08/2006|21:47] C:\DOCUME~1\ADMINI~1\APPLIC~1\Macromedia
      [19/08/2006|05:18] C:\DOCUME~1\ADMINI~1\APPLIC~1\Microsoft

      [11/07/2008|19:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Adobe
      [30/12/2007|18:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple
      [30/12/2007|18:55] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Apple Computer
      [18/08/2006|21:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\CyberLink
      [10/05/2006|08:16] C:\DOCUME~1\ALLUSE~1\APPLIC~1\desktop.ini
      [14/11/2006|15:43] C:\DOCUME~1\ALLUSE~1\APPLIC~1\F-Secure
      [15/07/2008|19:39] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google
      [30/08/2008|10:54] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Google Updater
      [11/09/2007|16:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Grisoft
      [18/08/2006|21:49] C:\DOCUME~1\ALLUSE~1\APPLIC~1\HP
      [10/05/2006|06:53] C:\DOCUME~1\ALLUSE~1\APPLIC~1\hpzinstall.log
      [19/08/2006|05:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\InstallShield
      [02/02/2008|14:59] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
      [21/04/2008|22:36] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Logitech
      [15/07/2008|19:40] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Malwarebytes
      [02/02/2008|14:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft
      [17/08/2008|23:11] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Microsoft Help
      [19/08/2006|05:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\SBSI
      [19/08/2006|05:18] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Sonic
      [07/07/2008|23:35] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
      [14/11/2006|15:45] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Symantec
      [31/08/2008|15:28] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TEMP
      [13/07/2008|16:57] C:\DOCUME~1\ALLUSE~1\APPLIC~1\TuneUp Software
      [07/12/2006|20:42] C:\DOCUME~1\ALLUSE~1\APPLIC~1\Windows Genuine Advantage
      [17/06/2007|13:33] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WinZip
      [29/09/2007|10:03] C:\DOCUME~1\ALLUSE~1\APPLIC~1\WLInstaller

      [04/05/2008|18:50] C:\DOCUME~1\Antonine\APPLIC~1\AccurateRip
      [13/07/2008|17:28] C:\DOCUME~1\Antonine\APPLIC~1\Adobe
      [15/05/2008|19:15] C:\DOCUME~1\Antonine\APPLIC~1\AdobeUM
      [26/01/2008|15:37] C:\DOCUME~1\Antonine\APPLIC~1\Apple Computer
      [05/01/2007|14:48] C:\DOCUME~1\Antonine\APPLIC~1\BitTorrent
      [10/05/2007|16:24] C:\DOCUME~1\Antonine\APPLIC~1\Creative
      [01/12/2006|18:35] C:\DOCUME~1\Antonine\APPLIC~1\CyberLink
      [09/07/2007|22:55] C:\DOCUME~1\Antonine\APPLIC~1\DeepBurner
      [10/05/2006|08:16] C:\DOCUME~1\Antonine\APPLIC~1\desktop.ini
      [08/07/2007|17:05] C:\DOCUME~1\Antonine\APPLIC~1\dvdcss
      [14/11/2006|17:43] C:\DOCUME~1\Antonine\APPLIC~1\F-Secure
      [05/12/2006|18:13] C:\DOCUME~1\Antonine\APPLIC~1\Google
      [17/12/2006|22:41] C:\DOCUME~1\Antonine\APPLIC~1\Help
      [01/12/2006|18:35] C:\DOCUME~1\Antonine\APPLIC~1\HP
      [19/08/2006|05:18] C:\DOCUME~1\Antonine\APPLIC~1\Identities
      [14/11/2006|15:45] C:\DOCUME~1\Antonine\APPLIC~1\ispnews
      [14/07/2008|18:14] C:\DOCUME~1\Antonine\APPLIC~1\Lavasoft
      [18/12/2006|17:24] C:\DOCUME~1\Antonine\APPLIC~1\Leadertech
      [21/04/2008|22:27] C:\DOCUME~1\Antonine\APPLIC~1\Logitech
      [12/07/2008|19:48] C:\DOCUME~1\Antonine\APPLIC~1\Macromedia
      [15/07/2008|19:40] C:\DOCUME~1\Antonine\APPLIC~1\Malwarebytes
      [12/11/2007|12:49] C:\DOCUME~1\Antonine\APPLIC~1\Microsoft
      [30/08/2008|11:03] C:\DOCUME~1\Antonine\APPLIC~1\Mozilla
      [10/09/2007|15:21] C:\DOCUME~1\Antonine\APPLIC~1\OTVREG
      [13/07/2008|15:58] C:\DOCUME~1\Antonine\APPLIC~1\PC Tools
      [14/11/2006|16:12] C:\DOCUME~1\Antonine\APPLIC~1\PEX
      [20/01/2007|18:27] C:\DOCUME~1\Antonine\APPLIC~1\ppStream
      [02/04/2007|15:02] C:\DOCUME~1\Antonine\APPLIC~1\Real
      [25/05/2007|02:16] C:\DOCUME~1\Antonine\APPLIC~1\Skype
      [18/12/2006|17:25] C:\DOCUME~1\Antonine\APPLIC~1\Sonic
      [16/02/2008|17:45] C:\DOCUME~1\Antonine\APPLIC~1\SopCast
      [15/11/2006|22:29] C:\DOCUME~1\Antonine\APPLIC~1\Sun
      [15/10/2006|17:36] C:\DOCUME~1\Antonine\APPLIC~1\Template
      [13/07/2008|16:58] C:\DOCUME~1\Antonine\APPLIC~1\TuneUp Software
      [15/06/2007|17:38] C:\DOCUME~1\Antonine\APPLIC~1\Uniblue
      [30/08/2008|18:06] C:\DOCUME~1\Antonine\APPLIC~1\uTorrent
      [05/11/2006|19:36] C:\DOCUME~1\Antonine\APPLIC~1\vlc
      [15/10/2006|17:36] C:\DOCUME~1\Antonine\APPLIC~1\wklnhst.dat

      [10/05/2006|08:16] C:\DOCUME~1\DEFAUL~1\APPLIC~1\desktop.ini
      [19/08/2006|05:18] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Identities
      [18/08/2006|21:47] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Macromedia
      [19/08/2006|05:18] C:\DOCUME~1\DEFAUL~1\APPLIC~1\Microsoft

      [14/11/2006|16:35] C:\DOCUME~1\LOCALS~1\APPLIC~1\Microsoft

      [18/08/2006|21:23] C:\DOCUME~1\NETWOR~1\APPLIC~1\Microsoft

      --------------------\\ Tâches planifiées dans C:\WINDOWS\tasks

      [31/08/2008 15:07][--a------] C:\WINDOWS\tasks\Maintenance en 1 clic.job
      [18/07/2008 20:20][--a------] C:\WINDOWS\tasks\Norton Security Scan.job
      [29/05/2008 10:46][--a------] C:\WINDOWS\tasks\AppleSoftwareUpdate.job
      [31/08/2008 11:11][--a------] C:\WINDOWS\tasks\Scheduled scanning task.job
      [31/08/2008 15:07][--ah-----] C:\WINDOWS\tasks\SA.DAT
      [05/08/2004 23:00][-rah-----] C:\WINDOWS\tasks\desktop.ini

      --------------------\\ Listing des dossiers dans C:\Program Files

      [11/07/2008|19:53] C:\Program Files\Adobe
      [03/02/2008|13:16] C:\Program Files\Alcohol Soft
      [14/11/2006|15:43] C:\Program Files\AntivirusFirewall
      [30/12/2007|18:33] C:\Program Files\Apple Software Update
      [03/02/2008|13:41] C:\Program Files\Aspyr
      [09/07/2007|21:02] C:\Program Files\Astonsoft
      [04/05/2008|20:45] C:\Program Files\Audacity
      [21/01/2007|13:28] C:\Program Files\BitTorrent
      [29/12/2006|21:09] C:\Program Files\Canopy Games
      [09/10/2007|19:55] C:\Program Files\CCleaner
      [19/08/2006|05:18] C:\Program Files\ComPlus Applications
      [18/08/2006|22:11] C:\Program Files\CONEXANT
      [15/06/2007|16:29] C:\Program Files\Creative
      [16/09/2007|14:57] C:\Program Files\DivX
      [11/09/2007|16:56] C:\Program Files\DMV
      [04/05/2008|17:52] C:\Program Files\DS-Monkey Audio Source
      [19/07/2008|03:47] C:\Program Files\eMule
      [13/12/2006|20:48] C:\Program Files\EPSON
      [19/04/2008|01:08] C:\Program Files\Everest Poker
      [04/05/2008|20:42] C:\Program Files\Exact Audio Copy
      [23/08/2008|08:40] C:\Program Files\Fichiers communs
      [03/02/2008|13:45] C:\Program Files\GameSpy Arcade
      [15/07/2008|19:39] C:\Program Files\Google
      [27/01/2007|01:14] C:\Program Files\Grisoft
      [18/08/2006|21:59] C:\Program Files\Hewlett-Packard
      [11/09/2007|12:18] C:\Program Files\Hijackthis Version Fran‡aise
      [18/08/2006|21:55] C:\Program Files\HP
      [14/10/2006|18:20] C:\Program Files\HPQ
      [13/07/2008|14:59] C:\Program Files\InstallShield Installation Information
      [18/08/2006|21:28] C:\Program Files\Intel
      [17/08/2008|23:08] C:\Program Files\Internet Explorer
      [30/12/2007|18:55] C:\Program Files\iPod
      [30/12/2007|18:56] C:\Program Files\iTunes
      [01/06/2008|20:20] C:\Program Files\Java
      [14/07/2008|18:13] C:\Program Files\Lavasoft
      [21/04/2008|22:22] C:\Program Files\Logitech
      [05/05/2007|11:15] C:\Program Files\Lonely Cat Games
      [15/07/2008|19:40] C:\Program Files\Malwarebytes' Anti-Malware
      [17/08/2008|23:12] C:\Program Files\Messenger
      [30/09/2007|17:21] C:\Program Files\Microsoft CAPICOM 2.1.0.2
      [19/08/2006|05:18] C:\Program Files\microsoft frontpage
      [08/04/2007|15:17] C:\Program Files\Microsoft Office
      [05/11/2006|19:29] C:\Program Files\Microsoft Visual Studio
      [08/04/2007|15:06] C:\Program Files\Microsoft Visual Studio 8
      [08/04/2007|15:18] C:\Program Files\Microsoft Works
      [08/04/2007|15:16] C:\Program Files\Microsoft.NET
      [19/08/2006|05:18] C:\Program Files\Movie Maker
      [31/08/2008|15:24] C:\Program Files\Mozilla Firefox
      [08/04/2007|15:18] C:\Program Files\MSBuild
      [10/11/2006|19:47] C:\Program Files\MSN
      [19/08/2006|05:18] C:\Program Files\MSN Gaming Zone
      [09/04/2007|19:03] C:\Program Files\MSN Messenger
      [18/11/2006|02:46] C:\Program Files\MSXML 4.0
      [19/08/2006|05:18] C:\Program Files\NetMeeting
      [18/08/2006|22:10] C:\Program Files\NetWaiting
      [18/07/2008|15:00] C:\Program Files\Norton Security Scan
      [11/09/2007|15:10] C:\Program Files\Odebit Multim‚dia
      [19/08/2006|05:18] C:\Program Files\Online Services
      [14/06/2007|02:58] C:\Program Files\Outlook Express
      [04/05/2007|13:27] C:\Program Files\Photo Story 3 for Windows
      [13/07/2008|15:56] C:\Program Files\Picasa2
      [30/12/2007|18:49] C:\Program Files\QuickTime
      [27/11/2006|00:31] C:\Program Files\Real
      [13/07/2008|14:59] C:\Program Files\SAGEM
      [10/02/2008|12:59] C:\Program Files\Samsung
      [15/12/2007|15:06] C:\Program Files\SAS
      [18/08/2006|21:57] C:\Program Files\Services en ligne
      [05/12/2006|23:16] C:\Program Files\Sierra On-Line
      [10/05/2007|16:15] C:\Program Files\SightSpeed
      [14/11/2006|17:54] C:\Program Files\Skype
      [19/08/2006|05:18] C:\Program Files\Sonic
      [26/02/2008|22:34] C:\Program Files\SopCast
      [30/08/2008|11:03] C:\Program Files\Spyware Doctor
      [14/11/2006|15:45] C:\Program Files\Symantec
      [18/08/2006|21:48] C:\Program Files\Synaptics
      [31/08/2008|14:25] C:\Program Files\Trend Micro
      [13/07/2008|16:59] C:\Program Files\TuneUp Utilities 2008
      [20/04/2008|18:15] C:\Program Files\TVAnts
      [19/08/2006|05:18] C:\Program Files\Uninstall Information
      [05/11/2006|19:35] C:\Program Files\VideoLAN
      [29/09/2007|10:03] C:\Program Files\Windows Live
      [11/09/2007|15:00] C:\Program Files\Windows Media Connect 2
      [18/12/2006|01:08] C:\Program Files\Windows Media Player
      [19/08/2006|05:18] C:\Program Files\Windows NT
      [19/08/2006|05:18] C:\Program Files\WindowsUpdate
      [27/08/2008|07:57] C:\Program Files\WinRAR
      [17/06/2007|13:33] C:\Program Files\WinZip
      [19/08/2006|05:18] C:\Program Files\xerox

      --------------------\\ Listing des dossiers dans C:\Program Files\Fichiers communs

      [11/07/2008|19:54] C:\Program Files\Fichiers communs\Adobe
      [30/12/2007|18:28] C:\Program Files\Fichiers communs\Apple
      [08/04/2007|15:17] C:\Program Files\Fichiers communs\DESIGNER
      [13/12/2006|20:50] C:\Program Files\Fichiers communs\EPSON
      [19/08/2006|05:18] C:\Program Files\Fichiers communs\HP
      [16/10/2007|20:04] C:\Program Files\Fichiers communs\InstallShield
      [19/08/2006|05:18] C:\Program Files\Fichiers communs\Java
      [21/04/2008|22:21] C:\Program Files\Fichiers communs\Logitech
      [08/04/2007|15:26] C:\Program Files\Fichiers communs\Microsoft Shared
      [19/08/2006|05:18] C:\Program Files\Fichiers communs\MSSoap
      [20/01/2007|12:32] C:\Program Files\Fichiers communs\NSV
      [19/08/2006|05:18] C:\Program Files\Fichiers communs\ODBC
      [23/08/2008|08:39] C:\Program Files\Fichiers communs\Real
      [19/08/2006|05:18] C:\Program Files\Fichiers communs\Services
      [19/08/2006|05:18] C:\Program Files\Fichiers communs\Sonic Shared
      [19/08/2006|05:18] C:\Program Files\Fichiers communs\SpeechEngines
      [19/08/2006|05:18] C:\Program Files\Fichiers communs\SureThing Shared
      [20/07/2008|10:28] C:\Program Files\Fichiers communs\Symantec Shared
      [14/06/2007|02:58] C:\Program Files\Fichiers communs\System
      [19/08/2006|05:18] C:\Program Files\Fichiers communs\TiVo Shared
      [15/07/2008|19:38] C:\Program Files\Fichiers communs\Wise Installation Wizard
      [23/08/2008|08:40] C:\Program Files\Fichiers communs\xing shared

      --------------------\\ Process

      ( 67 Processus )

      ... OK !

      --------------------\\ Recherche avec S_Lop

      Aucun fichier / dossier Lop trouvé !

      --------------------\\ Recherche de Fichiers / Dossiers Lop

      Aucun fichier / dossier Lop trouvé !

      --------------------\\ Verification du Registre

      ..... OK !

      --------------------\\ Verification du fichier Hosts

      Fichier Hosts PROPRE


      --------------------\\ Recherche de fichiers avec Catchme

      catchme 0.3.1353 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
      Rootkit scan 2008-08-31 15:46:29
      Windows 5.1.2600 Service Pack 2 NTFS
      detected NTDLL code modification:
      ZwClose
      scanning hidden processes ...
      scanning hidden files ...
      C:\DOCUME~1\Antonine\LOCALS~1\APPLIC~1\moqgs.dat 5385 bytes
      C:\DOCUME~1\Antonine\LOCALS~1\APPLIC~1\moqgs.exe 299008 bytes executable
      C:\DOCUME~1\Antonine\LOCALS~1\APPLIC~1\moqgs_nav.dat 289934 bytes
      C:\DOCUME~1\Antonine\LOCALS~1\APPLIC~1\moqgs_navps.dat 1558 bytes
      scan completed successfully
      hidden processes: 0
      hidden files: 8

      --------------------\\ Recherche d'autres infections


      C:\DOCUME~1\Antonine\LOCALS~1\APPLIC~1\moqgs.dat
      C:\DOCUME~1\Antonine\LOCALS~1\APPLIC~1\moqgs.exe
      C:\DOCUME~1\Antonine\LOCALS~1\APPLIC~1\moqgs_nav.dat
      C:\DOCUME~1\Antonine\LOCALS~1\APPLIC~1\moqgs_navps.dat
      [b]==> EGDACCESS <==/b



      [F:55][D:14]-> C:\DOCUME~1\Antonine\LOCALS~1\Temp
      [F:47][D:0]-> C:\DOCUME~1\Antonine\Cookies
      [F:1852][D:12]-> C:\DOCUME~1\Antonine\TEMPOR~1\content.IE5

      --------------------\\ Fin du rapport a 15:48:08
      0
  4. sKe69 Messages postés 21955 Statut Contributeur sécurité 463
     
    Vu ! ... infection Navipromo pour commencer ...

    Fais ce-ci maintenant :

    Télécharges Navilog1 sur ton bureau :

    http://perso.orange.fr/il.mafioso/Navifix/Navilog1.exe

    !! Déconnectes toi,désactives tes défences( anti-virus,anti-spyware ) et fermes bien toutes tes applications le temps de la manipe !!

    Ensuite double clique sur navilog1.exe pour lancer l'installation.
    Une fois l'installation terminée, le fix s'exécutera automatiquement.
    (Si ce n'est pas le cas, double-clique sur le raccourci Navilog1 présent sur le bureau).

    Laisses-toi guider. Au menu principal, choisis 1 et valides.
    (ne fais pas le choix 2,3 ou 4 sans notre avis/accord)

    Patiente jusqu'au message :
    *** Analyse Termine le ..... ***

    Appuies sur une touche comme demandé, le bloc-note va s'ouvrir.
    Copie-colle l'intégralité de son contenu dans ta prochaine réponse et attends la suite .

    (Le rapport est en outre sauvegardé à la racine du disque "C\:fixnavi.txt" )

    TUTO (aide) : http://www.malekal.com/Adware.Magic_Control.php#mozTocId595901
    0
    1. benjal
       
      infection navipromo, ca consiste en quoi? c est grave? gros virus?

      bon, j'ai fais ce que tu m as demandais... merci encore de repondre aussi vite

      Search Navipromo version 3.6.5 commencé le 31/08/2008 à 16:26:39,25

      !!! Attention,ce rapport peut indiquer des fichiers/programmes légitimes!!!
      !!! Postez ce rapport sur le forum pour le faire analyser !!!
      !!! Ne lancez pas la partie désinfection sans l'avis d'un spécialiste !!!

      Outil exécuté depuis C:\Program Files\navilog1
      Session actuelle : "Antonine"

      Mise à jour le 22.08.2008 à 17h30 par IL-MAFIOSO


      Microsoft Windows XP [version 5.1.2600]
      Internet Explorer : 7.0.5730.11
      Système de fichiers : NTFS

      Recherche executé en mode normal

      *** Recherche Programmes installés ***


      *** Recherche dossiers dans "C:\WINDOWS" ***


      *** Recherche dossiers dans "C:\Program Files" ***


      *** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" ***


      *** Recherche dossiers dans "C:\Documents and Settings\All Users\menudm~1" ***


      *** Recherche dossiers dans "c:\docume~1\alluse~1\applic~1" ***


      *** Recherche dossiers dans "C:\Documents and Settings\Antonine\applic~1" ***


      *** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\applic~1" ***


      *** Recherche dossiers dans "C:\Documents and Settings\Antonine\locals~1\applic~1" ***


      *** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" ***


      *** Recherche dossiers dans "C:\Documents and Settings\Antonine\menudm~1\progra~1" ***


      *** Recherche dossiers dans "C:\DOCUME~1\ADMINI~1\menudm~1\progra~1" ***


      *** Recherche avec Catchme-rootkit/stealth malware detector par gmer ***
      pour + d'infos : http://www.gmer.net

      Fichier(s) caché(s) :

      C:\Documents and Settings\Antonine\Local Settings\Application Data\moqgs.dat
      C:\Documents and Settings\Antonine\Local Settings\Application Data\moqgs.exe
      C:\Documents and Settings\Antonine\Local Settings\Application Data\moqgs_nav.dat
      C:\Documents and Settings\Antonine\Local Settings\Application Data\moqgs_navps.dat


      *** Recherche avec GenericNaviSearch ***
      !!! Tous ces résultats peuvent révéler des fichiers légitimes !!!
      !!! A vérifier impérativement avant toute suppression manuelle !!!

      * Recherche dans "C:\WINDOWS\system32" *

      * Recherche dans "C:\Documents and Settings\Antonine\locals~1\applic~1" *

      * Recherche dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" *



      *** Recherche fichiers ***



      *** Recherche clés spécifiques dans le Registre ***

      HKEY_CURRENT_USER\Software\Lanconfig trouvé !

      *** Module de Recherche complémentaire ***
      (Recherche fichiers spécifiques)

      1)Recherche nouveaux fichiers Instant Access :


      2)Recherche Heuristique :

      * Dans "C:\WINDOWS\system32" :


      * Dans "C:\Documents and Settings\Antonine\locals~1\applic~1" :


      * Dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" :


      3)Recherche Certificats :

      Certificat Egroup trouvé !
      Certificat Electronic-Group trouvé !
      Certificat Montorgueil absent !
      Certificat OOO-Favorit trouvé !
      Certificat Sunny-Day-Design-Ltd absent !

      4)Recherche fichiers connus :



      *** Analyse terminée le 31/08/2008 à 16:32:07,95 ***
      0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. sKe69 Messages postés 21955 Statut Contributeur sécurité 463
     
    Navipromo , c'est ce qui provoque tes pub CID et les ralentissement ! ^^

    La suite :

    !! Déconnectes toi, désactives tes défenses ( anti-virus,anti-spyware ) et fermes bien toutes tes applications le temps de la manipe !!

    --->Double-cliques sur le raccourci Navilog1

    Arriver au menu principal, choisir l'option 2 et valider (nettoyage "automatique" ).

    Le fix demandera ensuite de "redémarrer le PC", fermer toutes les fenêtres ouvertes
    et appuyer sur une touche comme demandé.( important : si le PC ne redémarre pas automatiquement, le faire manuellement )
    Au redémarrage du PC, choisir la session habituelle si nécessaire.

    Patienter jusqu'au message : "Nettoyage Terminé le ..."

    Le bureau revient, puis le bloc-note s'ouvre .
    Sauvegarder ce rapport de manière à le retrouver, puis fermer le bloc-note ...
    (Le rapport sera en outre sauvegardé à la racine du disque "C\:cleannavi.txt")

    Postes ce rapport dans ta nouvelle réponse accompagné d'un nouveau rapport hijacthis pour analyse et attends la suite ...

    (PS : Si le bureau ne réapparaît pas, faire CTRL+ALT+SUPPR pour ouvrir le gestionnaire de tâches.
    Choisir l'onglet processus. Cliquer en haut à gauche sur fichiers et choisir exécuter,
    Taper explorer et valider.)
    0
    1. benjal
       
      ok, donc voila, c'est fait, voici les scans:

      Clean Navipromo version 3.6.5 commencé le 31/08/2008 à 16:43:48,48

      Outil exécuté depuis C:\Program Files\navilog1
      Session actuelle : "Antonine"

      Mise à jour le 22.08.2008 à 17h30 par IL-MAFIOSO


      Microsoft Windows XP [version 5.1.2600]
      Internet Explorer : 7.0.5730.11
      Système de fichiers : NTFS

      Mode suppression automatique
      avec prise en charge résultats Catchme et GNS


      Nettoyage exécuté au redémarrage de l'ordinateur

      *** Creation backups fichiers trouvés par Catchme ***

      Copie vers "C:\Program Files\navilog1\Backupnavi"

      Copie C:\Documents and Settings\Antonine\Local Settings\Application Data\moqgs.dat réalisée avec succès !
      Copie C:\Documents and Settings\Antonine\Local Settings\Application Data\moqgs.exe réalisée avec succès !
      Copie C:\Documents and Settings\Antonine\Local Settings\Application Data\moqgs_nav.dat réalisée avec succès !
      Copie C:\Documents and Settings\Antonine\Local Settings\Application Data\moqgs_navps.dat réalisée avec succès !

      *** Suppression des fichiers trouvés avec Catchme ***

      C:\Documents and Settings\Antonine\Local Settings\Application Data\moqgs.dat supprimé !
      C:\Documents and Settings\Antonine\Local Settings\Application Data\moqgs.exe supprimé !
      C:\Documents and Settings\Antonine\Local Settings\Application Data\moqgs_nav.dat supprimé !
      C:\Documents and Settings\Antonine\Local Settings\Application Data\moqgs_navps.dat supprimé !

      ** 2ème passage avec résultats Catchme **

      * Dans "C:\WINDOWS\system32" *


      C:\WINDOWS\prefetch\moqgs*.pf trouvé !
      Copie C:\WINDOWS\prefetch\moqgs*.pf réalisée avec succès !
      C:\WINDOWS\prefetch\moqgs*.pf supprimé !


      * Dans "C:\Documents and Settings\Antonine\locals~1\applic~1" *



      *** Suppression avec sauvegardes résultats GenericNaviSearch ***

      * Suppression dans "C:\WINDOWS\System32" *


      * Suppression dans "C:\Documents and Settings\Antonine\locals~1\applic~1" *


      * Suppression dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" *


      *** Suppression dossiers dans "C:\WINDOWS" ***


      *** Suppression dossiers dans "C:\Program Files" ***


      *** Suppression dossiers dans "C:\Documents and Settings\All Users\menudm~1\progra~1" ***


      *** Suppression dossiers dans "C:\Documents and Settings\All Users\menudm~1" ***


      *** Suppression dossiers dans "c:\docume~1\alluse~1\applic~1" ***


      *** Suppression dossiers dans "C:\Documents and Settings\Antonine\applic~1" ***


      *** Suppression dossiers dans "C:\DOCUME~1\ADMINI~1\applic~1" ***


      *** Suppression dossiers dans "C:\Documents and Settings\Antonine\locals~1\applic~1" ***


      *** Suppression dossiers dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" ***


      *** Suppression dossiers dans "C:\Documents and Settings\Antonine\menudm~1\progra~1" ***


      *** Suppression dossiers dans "C:\DOCUME~1\ADMINI~1\menudm~1\progra~1" ***



      *** Suppression fichiers ***


      *** Suppression fichiers temporaires ***

      Nettoyage contenu C:\WINDOWS\Temp effectué !
      Nettoyage contenu C:\Documents and Settings\Antonine\locals~1\Temp effectué !

      *** Traitement Recherche complémentaire ***
      (Recherche fichiers spécifiques)

      1)Suppression avec sauvegardes nouveaux fichiers Instant Access :

      2)Recherche, création sauvegardes et suppression Heuristique :


      * Dans "C:\WINDOWS\system32" *


      * Dans "C:\Documents and Settings\Antonine\locals~1\applic~1" *


      * Dans "C:\DOCUME~1\ADMINI~1\locals~1\applic~1" *


      *** Sauvegarde du Registre vers dossier Safebackup ***

      sauvegarde du Registre réalisée avec succès !

      *** Nettoyage Registre ***

      Nettoyage Registre Ok


      *** Certificats ***

      Certificat Egroup supprimé !
      Certificat Electronic-Group supprimé !
      Certificat Montorgueil absent !
      Certificat OOO-Favorit supprimé !
      Certificat Sunny-Day-Design-Ltdt absent !

      *** Nettoyage terminé le 31/08/2008 à 16:52:00,07 ***





      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 16:53:41, on 31/08/2008
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16705)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      C:\PROGRA~1\ANTIVI~1\backweb\6588780\Program\SERVIC~1.EXE
      C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
      C:\Program Files\AntivirusFirewall\Anti-Virus\fsgk32st.exe
      C:\Program Files\AntivirusFirewall\Anti-Virus\FSGK32.EXE
      C:\Program Files\AntivirusFirewall\backweb\6588780\program\fsbwsys.exe
      C:\Program Files\AntivirusFirewall\Common\FSMA32.EXE
      C:\Program Files\AntivirusFirewall\Anti-Virus\fssm32.exe
      C:\Program Files\AntivirusFirewall\Common\FSMB32.EXE
      C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      C:\Program Files\AntivirusFirewall\Common\FCH32.EXE
      C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
      C:\Program Files\Spyware Doctor\pctsAuxs.exe
      C:\Program Files\AntivirusFirewall\Anti-Virus\fsqh.exe
      C:\Program Files\AntivirusFirewall\Common\FAMEH32.EXE
      C:\Program Files\AntivirusFirewall\Anti-Virus\fsrw.exe
      C:\Program Files\AntivirusFirewall\backweb\6588780\Program\fspex.exe
      C:\Program Files\Spyware Doctor\pctsSvc.exe
      C:\Program Files\Spyware Doctor\pctsTray.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
      C:\Program Files\AntivirusFirewall\Anti-Virus\fsav32.exe
      C:\Program Files\AntivirusFirewall\FWES\Program\fsdfwd.exe
      C:\WINDOWS\system32\wscntfy.exe
      C:\WINDOWS\System32\alg.exe
      C:\WINDOWS\system32\wbem\wmiprvse.exe
      C:\WINDOWS\system32\wuauclt.exe
      C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
      C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe
      C:\WINDOWS\system32\hkcmd.exe
      C:\WINDOWS\system32\igfxpers.exe
      C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      C:\Program Files\HP\QuickPlay\QPService.exe
      C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
      C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
      C:\Program Files\AntivirusFirewall\Common\FSM32.EXE
      C:\WINDOWS\system32\wbem\wmiprvse.exe
      C:\PROGRA~1\ANTIVI~1\ANTI-S~1\fsaw.exe
      C:\Program Files\AntivirusFirewall\FSGUI\ispnews.exe
      C:\WINDOWS\V0220Mon.exe
      C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
      C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
      C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
      C:\Program Files\AntivirusFirewall\FSGUI\fsguidll.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\PROGRA~1\hpq\Shared\HPQTOA~1.EXE
      C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
      C:\Program Files\Logitech\SetPoint\SetPoint.exe
      C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
      C:\Program Files\Fichiers communs\Logitech\khalshared\KHALMNPR.EXE
      C:\Program Files\Trend Micro\HijackThis\monjack.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=compaq-notebook.msn.com&ocid=HPDHP&pc=CPNTDF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
      O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
      O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe"
      O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
      O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
      O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
      O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] CHDAudPropShortcut.exe
      O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
      O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
      O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
      O4 - HKLM\..\Run: [Cpqset] C:\Program Files\Hewlett-Packard\Default Settings\cpqset.exe
      O4 - HKLM\..\Run: [RecGuard] C:\Windows\SMINST\RecGuard.exe
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\AntivirusFirewall\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\AntivirusFirewall\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\AntivirusFirewall\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [News Service] "C:\Program Files\AntivirusFirewall\FSGUI\ispnews.exe"
      O4 - HKLM\..\Run: [V0220Mon.exe] C:\WINDOWS\V0220Mon.exe
      O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] "C:\Program Files\Fichiers communs\Logitech\khalshared\KHALMNPR.EXE"
      O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
      O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
      O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
      O4 - Global Startup: Antivirus Firewall.lnk = C:\Program Files\AntivirusFirewall\backweb\6588780\Program\fspex.exe
      O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
      O4 - Global Startup: Logitech SetPoint.lnk = ?
      O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
      O9 - Extra button: Protection Internet Explorer - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\AntivirusFirewall\Anti-Spyware\ieshield.dll
      O9 - Extra 'Tools' menuitem: Protection Internet Explorer... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\AntivirusFirewall\Anti-Spyware\ieshield.dll
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O14 - IERESET.INF: START_PAGE_URL=https://www.msn.com/fr-fr?cobrand=compaq-notebook.msn.com&ocid=HPDHP&pc=CPNTDF
      O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
      O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
      O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
      O18 - Protocol: bw+0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw+0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
      O18 - Protocol: bwg0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwg0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: offline-8876480 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
      O23 - Service: AddFiltr - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\AddFiltr.exe
      O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      O23 - Service: Antivirus Firewall (BackWeb Plug-in - 6588780) - Securitoo Portal - C:\PROGRA~1\ANTIVI~1\backweb\6588780\Program\SERVIC~1.EXE
      O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
      O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\AntivirusFirewall\Anti-Virus\fsgk32st.exe
      O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\AntivirusFirewall\backweb\6588780\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\AntivirusFirewall\FWES\Program\fsdfwd.exe
      O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\AntivirusFirewall\Common\FSMA32.EXE
      O23 - Service: Google Desktop Manager 5.7.802.22438 (GoogleDesktopManager-022208-143751) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
      O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
      O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe
      O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe
      O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/Antonine/LOCALS~1/Temp/msohtml1/01/clip_image002.jpg
      O24 - Desktop Component 1: (no name) - file:///C:/DOCUME~1/Antonine/LOCALS~1/Temp/msohtmlclip1/01/clip_image002.gif
      0
  7. sKe69 Messages postés 21955 Statut Contributeur sécurité 463
     
    Très bien ...

    1- Télécharges : - CCleaner
    https://www.pcastuces.com/logitheque/ccleaner.htm
    Ce logiciel va permettre de supprimer tous les fichiers temporaires et de corrigé ton registre .Lors de l'installation, avant de cliquer sur le bouton "installer", décoche toutes les "options supplémentaires" sauf les 2 première.
    Une fois le prg instalé et lancé, Clique sur "Options", "Avancé" et décoche la case "Effacer uniquement les fichiers, du dossier Temp de Windows, plus vieux que 48 heures"( Par la suite, laisse-le avec ses réglages par défaut. C'est tout ).

    Un tuto ( aide ):
    http://perso.orange.fr/jesses/Docs/Logiciels/CCleaner.htm

    ---> Utilisation:
    ! déconnectes toi et fermes toutes applications en cours !
    * vas dans "nettoyeur" : fait analyse puis nettoyage
    * vas dans "registre" : fait chercher les erreurs et réparer ( plusieurs fois jusqu'à ce qu'il n'y est plus d'erreur ) .

    ( CCleaner : soft à garder sur son PC , super utile pour de bons nettoyages ... )

    2- Télécharges MSNFix.zip (de !aur3n7) :
    http://sosvirus.changelog.fr/MSNFix.zip
    ---> décompresses-le sur le Bureau et pas ailleurs ( = extraire tout ).

    Impératif : Démarrer en mode sans echec :
    Comment aller en Mode sans échec
    1) Redémarres ton ordi
    2) Tapotes la touche F8 immédiatement, (F5 sur certains PC) juste après le "Bip"
    3) Tu verras un écran avec options de démarrage apparaître
    4) Choisis la première option : Sans Échec, et valide avec "Entrée"
    5) Choisis ton compte habituel, et non Administrateur (si besoin ... )
    (attention : pas de connexion possible en mode sans échec , donc copies ou imprimes bien la manipe pour éviter les erreur ...)

    Lances le fichier MSNFix.bat qui se trouve dans le dossier MSNfix, sur le bureau.
    - Exécute l'option R (recherche).
    - Si l'infection est détectée, exécute l'option N (nettoyage) .
    ---> Une fois finit, sauvegardes le rapport généré sur ton bureau .

    Redémarres ton PC ( = retour au mode normal ),

    -> postes moi ce rapport accompagné d'un nouveau rapport hijackthis ( fait en mode normal ) dans ta prochaine réponse pour analyse ...
    0
    1. benjal
       
      le msnfix n'as rien trouver...

      MSNFix 1.742

      C:\Documents and Settings\Antonine\Bureau\MSNFix\MSNFix
      Fix exécuté le 31/08/2008 - 17:46:36,50 By Antonine
      mode sans échec

      ************************ Recherche les fichiers présents

      Aucun Fichier trouvé

      ************************ Recherche les dossiers présents

      Aucun dossier trouvé




      ************************ Hostsclean

      Cleanhosts v 0.1.0.7 By Laurent

      -- Backup : C:\WINDOWS\system32\drivers\etc\hosts-20080831174833
      -- original size 0.77 Kb / 20 lines
      -- Start cleaning Hosts file ....



      -- final size 0.77 Kb / 20 lines
      -- entry Found : 0 / Entry check : 310

      End .............................. 19.92 Secondes



      ************************ Fichiers suspects

      Aucun Fichier trouvé


      ************************ HKLM\...\Winlogon\Userinit

      Userinit = C:\WINDOWS\system32\userinit.exe,

      Important : http://msnfix.changelog.fr/index.php/2008/05/18/32-alerte


      ------------------------------------------------------------------------
      Auteur : !aur3n7 Contact: https://www.ionos.fr/
      ------------------------------------------------------------------------

      --------------------------------------------- END ---------------------------------------------


      et voici le jack...

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 17:53:15, on 31/08/2008
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16705)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      C:\PROGRA~1\ANTIVI~1\backweb\6588780\Program\SERVIC~1.EXE
      C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
      C:\Program Files\AntivirusFirewall\Anti-Virus\fsgk32st.exe
      C:\Program Files\AntivirusFirewall\Anti-Virus\FSGK32.EXE
      C:\Program Files\AntivirusFirewall\backweb\6588780\program\fsbwsys.exe
      C:\Program Files\AntivirusFirewall\Common\FSMA32.EXE
      C:\Program Files\AntivirusFirewall\Anti-Virus\fssm32.exe
      C:\Program Files\AntivirusFirewall\Common\FSMB32.EXE
      C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
      C:\Program Files\Spyware Doctor\pctsAuxs.exe
      C:\Program Files\AntivirusFirewall\backweb\6588780\Program\fspex.exe
      C:\Program Files\AntivirusFirewall\Common\FCH32.EXE
      C:\Program Files\AntivirusFirewall\Anti-Virus\fsqh.exe
      C:\Program Files\AntivirusFirewall\Common\FAMEH32.EXE
      C:\Program Files\AntivirusFirewall\Anti-Virus\fsrw.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
      C:\Program Files\AntivirusFirewall\FWES\Program\fsdfwd.exe
      C:\Program Files\AntivirusFirewall\Anti-Virus\fsav32.exe
      C:\WINDOWS\System32\alg.exe
      C:\WINDOWS\system32\wscntfy.exe
      C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
      C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe
      C:\WINDOWS\system32\hkcmd.exe
      C:\WINDOWS\system32\igfxpers.exe
      C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      C:\Program Files\HP\QuickPlay\QPService.exe
      C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
      C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
      C:\Program Files\AntivirusFirewall\Common\FSM32.EXE
      C:\Program Files\AntivirusFirewall\FSGUI\ispnews.exe
      C:\WINDOWS\V0220Mon.exe
      C:\WINDOWS\system32\wbem\wmiprvse.exe
      C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
      C:\PROGRA~1\ANTIVI~1\ANTI-S~1\fsaw.exe
      C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
      C:\Program Files\Spyware Doctor\pctsTray.exe
      C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
      C:\WINDOWS\system32\wbem\wmiprvse.exe
      C:\Program Files\AntivirusFirewall\FSGUI\fsguidll.exe
      C:\PROGRA~1\hpq\Shared\HPQTOA~1.EXE
      C:\Program Files\Spyware Doctor\pctsSvc.exe
      C:\Program Files\Logitech\SetPoint\SetPoint.exe
      C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
      C:\WINDOWS\system32\wuauclt.exe
      C:\Program Files\Fichiers communs\Logitech\khalshared\KHALMNPR.EXE
      C:\Program Files\Trend Micro\HijackThis\monjack.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=compaq-notebook.msn.com&ocid=HPDHP&pc=CPNTDF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
      O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
      O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe"
      O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
      O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
      O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
      O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] CHDAudPropShortcut.exe
      O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
      O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
      O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
      O4 - HKLM\..\Run: [Cpqset] C:\Program Files\Hewlett-Packard\Default Settings\cpqset.exe
      O4 - HKLM\..\Run: [RecGuard] C:\Windows\SMINST\RecGuard.exe
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\AntivirusFirewall\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\AntivirusFirewall\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\AntivirusFirewall\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [News Service] "C:\Program Files\AntivirusFirewall\FSGUI\ispnews.exe"
      O4 - HKLM\..\Run: [V0220Mon.exe] C:\WINDOWS\V0220Mon.exe
      O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] "C:\Program Files\Fichiers communs\Logitech\khalshared\KHALMNPR.EXE"
      O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
      O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
      O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
      O4 - Global Startup: Antivirus Firewall.lnk = C:\Program Files\AntivirusFirewall\backweb\6588780\Program\fspex.exe
      O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
      O4 - Global Startup: Logitech SetPoint.lnk = ?
      O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
      O9 - Extra button: Protection Internet Explorer - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\AntivirusFirewall\Anti-Spyware\ieshield.dll
      O9 - Extra 'Tools' menuitem: Protection Internet Explorer... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\AntivirusFirewall\Anti-Spyware\ieshield.dll
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O14 - IERESET.INF: START_PAGE_URL=https://www.msn.com/fr-fr?cobrand=compaq-notebook.msn.com&ocid=HPDHP&pc=CPNTDF
      O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
      O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
      O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
      O18 - Protocol: bw+0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw+0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
      O18 - Protocol: bwg0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwg0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: offline-8876480 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
      O23 - Service: AddFiltr - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\AddFiltr.exe
      O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      O23 - Service: Antivirus Firewall (BackWeb Plug-in - 6588780) - Securitoo Portal - C:\PROGRA~1\ANTIVI~1\backweb\6588780\Program\SERVIC~1.EXE
      O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
      O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\AntivirusFirewall\Anti-Virus\fsgk32st.exe
      O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\AntivirusFirewall\backweb\6588780\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\AntivirusFirewall\FWES\Program\fsdfwd.exe
      O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\AntivirusFirewall\Common\FSMA32.EXE
      O23 - Service: Google Desktop Manager 5.7.802.22438 (GoogleDesktopManager-022208-143751) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
      O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
      O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe
      O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe
      O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/Antonine/LOCALS~1/Temp/msohtml1/01/clip_image002.jpg
      O24 - Desktop Component 1: (no name) - file:///C:/DOCUME~1/Antonine/LOCALS~1/Temp/msohtmlclip1/01/clip_image002.gif
      0
  8. sKe69 Messages postés 21955 Statut Contributeur sécurité 463
     
    msnfix n'as rien trouver...
    --> et bien tant mieux ^^

    Fais ce-ci maintenant :

    Télécharges MalwareByte's :
    ici ftp://ftp.commentcamarche.com/download/mbam-setup.exe
    ou ici : http://www.malwarebytes.org/mbam.php

    Installes le ( choisis bien "francais" ; ne modifies pas les paramètres d'installe ) et mets le à jour .

    (NB : S'il te manque "COMCTL32.OCX" lors de l'installe, alors télécharges le ici : https://www.malekal.com/tutorial-aboutbuster/ )

    Potasses le tuto pour te familiariser avec le prg : https://forum.pcastuces.com/sujet.asp?f=31&s=3
    ( cela dis, il est très simple d'utilisation ).

    Impératif : redémarres en mode sans échec :
    Comment aller en Mode sans échec
    1) Redémarres ton ordi
    2) Tapote la touche F8 immédiatement, (F5 sur certains PC) juste après le "Bip"
    3) Tu verras un écran avec options de démarrage apparaître
    4) Choisis la première option : Sans Échec, et valide avec "Entrée"
    5) Choisis ton compte habituel, et non Administrateur (si besoin ... )
    (attention : pas de connexion possible en mode sans échec , donc copies ou imprimes bien la manipe pour éviter les erreurs ...)

    Lances Malwarebyte's .

    Fais un scan dit "complet" ( sélectionnes bien tous tes disks avant le scan ! ) et supprimes tout ce qu'il peut trouver, c'est à dire :
    -->Laisses le scan se terminer,puis à la fin tu cliques sur "résultat" .
    -->Vérifies que tous les objets infectés soient validés, puis cliques sur " suppression " .

    Redémarres ton PC ( mode normal ).

    Postes le rapport sauvegardé après la suppression des objets infectés (dans l'onglet "rapport/log"de Malwarebytes, le dernier en date) accompagné d'un nouvel hijackthis ( fait en mode normal ) ...
    0
    1. benjal
       
      ah, il a trouvé un truc... ca fait quoi un rookit?

      Malwarebytes' Anti-Malware 1.25
      Version de la base de données: 1101
      Windows 5.1.2600 Service Pack 2

      19:16:22 31/08/2008
      mbam-log-08-31-2008 (19-16-22).txt

      Type de recherche: Examen complet (C:\|D:\|E:\|)
      Eléments examinés: 126449
      Temps écoulé: 31 minute(s), 8 second(s)

      Processus mémoire infecté(s): 0
      Module(s) mémoire infecté(s): 0
      Clé(s) du Registre infectée(s): 1
      Valeur(s) du Registre infectée(s): 0
      Elément(s) de données du Registre infecté(s): 0
      Dossier(s) infecté(s): 0
      Fichier(s) infecté(s): 0

      Processus mémoire infecté(s):
      (Aucun élément nuisible détecté)

      Module(s) mémoire infecté(s):
      (Aucun élément nuisible détecté)

      Clé(s) du Registre infectée(s):
      HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\poof (Rootkit.Agent) -> Quarantined and deleted successfully.

      Valeur(s) du Registre infectée(s):
      (Aucun élément nuisible détecté)

      Elément(s) de données du Registre infecté(s):
      (Aucun élément nuisible détecté)

      Dossier(s) infecté(s):
      (Aucun élément nuisible détecté)

      Fichier(s) infecté(s):
      (Aucun élément nuisible détecté)





      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 19:21:41, on 31/08/2008
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16705)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\csrss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      C:\PROGRA~1\ANTIVI~1\backweb\6588780\Program\SERVIC~1.EXE
      C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
      C:\Program Files\AntivirusFirewall\Anti-Virus\fsgk32st.exe
      C:\Program Files\AntivirusFirewall\Anti-Virus\FSGK32.EXE
      C:\Program Files\AntivirusFirewall\backweb\6588780\program\fsbwsys.exe
      C:\Program Files\AntivirusFirewall\Common\FSMA32.EXE
      C:\Program Files\AntivirusFirewall\Anti-Virus\fssm32.exe
      C:\Program Files\AntivirusFirewall\Common\FSMB32.EXE
      C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
      C:\Program Files\Spyware Doctor\pctsAuxs.exe
      C:\Program Files\AntivirusFirewall\Common\FCH32.EXE
      C:\Program Files\Spyware Doctor\pctsSvc.exe
      C:\Program Files\AntivirusFirewall\backweb\6588780\Program\fspex.exe
      C:\Program Files\AntivirusFirewall\Common\FAMEH32.EXE
      C:\Program Files\AntivirusFirewall\Anti-Virus\fsqh.exe
      C:\Program Files\AntivirusFirewall\Anti-Virus\fsrw.exe
      C:\Program Files\Spyware Doctor\pctsTray.exe
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
      C:\Program Files\AntivirusFirewall\Anti-Virus\fsav32.exe
      C:\Program Files\AntivirusFirewall\FWES\Program\fsdfwd.exe
      C:\WINDOWS\system32\wscntfy.exe
      C:\WINDOWS\System32\alg.exe
      C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
      C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe
      C:\WINDOWS\system32\hkcmd.exe
      C:\WINDOWS\system32\igfxpers.exe
      C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      C:\Program Files\HP\QuickPlay\QPService.exe
      C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
      C:\WINDOWS\system32\wbem\wmiprvse.exe
      C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
      C:\Program Files\AntivirusFirewall\Common\FSM32.EXE
      C:\Program Files\AntivirusFirewall\FSGUI\ispnews.exe
      C:\PROGRA~1\ANTIVI~1\ANTI-S~1\fsaw.exe
      C:\WINDOWS\V0220Mon.exe
      C:\WINDOWS\system32\wbem\wmiprvse.exe
      C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\AntivirusFirewall\FSGUI\fsguidll.exe
      C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
      C:\PROGRA~1\hpq\Shared\HPQTOA~1.EXE
      C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
      C:\WINDOWS\system32\wuauclt.exe
      C:\Program Files\Logitech\SetPoint\SetPoint.exe
      C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
      C:\Program Files\Fichiers communs\Logitech\khalshared\KHALMNPR.EXE
      C:\Program Files\Trend Micro\HijackThis\monjack.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=compaq-notebook.msn.com&ocid=HPDHP&pc=CPNTDF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
      O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
      O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe"
      O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
      O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
      O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
      O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] CHDAudPropShortcut.exe
      O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
      O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
      O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
      O4 - HKLM\..\Run: [Cpqset] C:\Program Files\Hewlett-Packard\Default Settings\cpqset.exe
      O4 - HKLM\..\Run: [RecGuard] C:\Windows\SMINST\RecGuard.exe
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\AntivirusFirewall\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\AntivirusFirewall\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\AntivirusFirewall\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [News Service] "C:\Program Files\AntivirusFirewall\FSGUI\ispnews.exe"
      O4 - HKLM\..\Run: [V0220Mon.exe] C:\WINDOWS\V0220Mon.exe
      O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] "C:\Program Files\Fichiers communs\Logitech\khalshared\KHALMNPR.EXE"
      O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
      O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
      O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
      O4 - Global Startup: Antivirus Firewall.lnk = C:\Program Files\AntivirusFirewall\backweb\6588780\Program\fspex.exe
      O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
      O4 - Global Startup: Logitech SetPoint.lnk = ?
      O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
      O9 - Extra button: Protection Internet Explorer - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\AntivirusFirewall\Anti-Spyware\ieshield.dll
      O9 - Extra 'Tools' menuitem: Protection Internet Explorer... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\AntivirusFirewall\Anti-Spyware\ieshield.dll
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O14 - IERESET.INF: START_PAGE_URL=https://www.msn.com/fr-fr?cobrand=compaq-notebook.msn.com&ocid=HPDHP&pc=CPNTDF
      O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
      O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
      O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
      O18 - Protocol: bw+0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw+0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
      O18 - Protocol: bwg0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwg0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: offline-8876480 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
      O23 - Service: AddFiltr - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\AddFiltr.exe
      O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      O23 - Service: Antivirus Firewall (BackWeb Plug-in - 6588780) - Securitoo Portal - C:\PROGRA~1\ANTIVI~1\backweb\6588780\Program\SERVIC~1.EXE
      O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
      O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\AntivirusFirewall\Anti-Virus\fsgk32st.exe
      O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\AntivirusFirewall\backweb\6588780\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\AntivirusFirewall\FWES\Program\fsdfwd.exe
      O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\AntivirusFirewall\Common\FSMA32.EXE
      O23 - Service: Google Desktop Manager 5.7.802.22438 (GoogleDesktopManager-022208-143751) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
      O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
      O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe
      O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe
      O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/Antonine/LOCALS~1/Temp/msohtml1/01/clip_image002.jpg
      O24 - Desktop Component 1: (no name) - file:///C:/DOCUME~1/Antonine/LOCALS~1/Temp/msohtmlclip1/01/clip_image002.gif
      0
  9. sKe69 Messages postés 21955 Statut Contributeur sécurité 463
     
    pour "rookit" ^^ :
    --> http://3psilon.info/Les-rootkits.html

    Fais ce qui suis :

    Télécharges GenProc (de Jean-Chretien1 et Narco4) sur ton bureau (et pas ailleur !) :
    http://www.alt-shift-return.org/Info/Fichiers/GenProc.zip

    !!Déconnectes toi et fermes tes application en cours !!

    Dézippes (extraire tout) le dossier : double-clique sur GenProc.bat et laisses faire...
    Postes le contenu du rapport qui s'ouvre .

    Aide en images ici : http://www.alt-shift-return.org/Info/GenProc-HowTo.html
    IMPORTANT : postes le rapport et ne fait rien d'autre pour l'instant ( souvant il faut ajouter des consignes à la manipe indiquée pour que cela fonctionne parfaitement ) .

    0
    1. benjal
       
      il a rien trouver...
      c est bien ca!

      GenProc 2.021 [1] 31/08/2008 - Windows [XP] : Aucune infection caractéristique trouvée
      0
  10. sKe69 Messages postés 21955 Statut Contributeur sécurité 463
     
    Bon ... si tu n'as plus de prb particulier, on finalise ...

    Dans l'ordre :

    1-Télécharges ToolsCleaner (de A.Rothstein) sur ton Bureau.
    http://pc-system.fr/

    Déconnectes toi et fermes bien toutes tes applications en cours .

    Lances le .
    *Cliques sur Recherche et laisses le scan se terminer (cela peut être long).
    *Cliques sur Suppression pour finaliser.
    *Tu peux, si tu le souhaites, te servir des Options facultatives
    *Click sur "quitter" pour générer un rapport :
    ---> Postes le (TCleaner.txt), il se trouve à la racine de ton disque dur (C:\).

    Note : Ce petit soft va te nettoyer tout les trucs dont on c'est servi pour la désinfection .
    Supprimes tout les outils , dossiers ou rapports consernant la désinfection que Toolscleaner2 n'a pas supprimé .

    ( gardes CCleaner et Malwarebytes : très utiles ! )

    2- Refais un coup de CCleaner ( registre compris ) .

    3- Retélécharges et réinstalles hijackthis ( car supprimé par Toolscleaner2 ) ,

    Télécharges et installes le logiciel HijackThis :

    ici ftp://ftp.commentcamarche.com/download/HJTInstall.exe
    ou ici http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe
    ou ici https://www.clubic.com/telecharger-fiche17891-hijackthis.html

    -> Cliques sur le setup pour lancer l'installe : laisses toi guider et ne modifies pas les paramètres d'installation .
    A la fin de l'installe , le prg ce lance automatiquement : fermes le en cliquant sur la croix rouge .
    Au final, tu dois avoir un raccourci sur ton bureau et aussi un cheminement comme :
    "C:\ program files\Trend Micro\HijackThis\HijackThis.exe " .

    ( ne fais pas de scan pour le momment )

    4- Purge de la restauration système
    *Désactives ta restauration :
    Cliques droit sur poste de travail/propriétés/Restauration système/coche la case désactiver la restauration, appliquer, OK
    --->Redémarres ton PC
    *Réactives ta restauration :
    Cliques droit sur poste de travail/propriétés/Restauration système/décoche la case désactiver la restauration, appliquer, OK
    --->Redémarres ton PC

    5- Fais ce scan en ligne pour vérifier :

    Fais un scan en ligne avec Kaspersky : https://www.kaspersky.fr/?domain=webscanner.kaspersky.fr
    - Sous Démonstration en ligne, on t'explique la marche à suivre, et pour lancer le scan il faut sélectionner < Exécuter l'analyse en ligne >.
    Le scan ne marche que sous Internet Explorer(et pas sous firefox ou autre...).
    - On va te demander de télécharger un contôle active x, accepte .
    - Dans le menu Choisissez la cible de l'analyse, sélectionne Poste de travail. Le scan va commencer.
    - Postes le rapport qui sera généré stp.
    S'il y a un problème, assure toi que les contrôles active x sont bien configurés dans les options internet comme décrit sur ce lien : http://www.inoculer.com/activex.php3
    Rappel : le scan est à faire sous Internet Explorer !
    0
    1. benjal
       
      ouaaa, le scan en ligne a etaitsuper long mais bon, c'est cool il a rien trouver et je t en remerci!

      Total de fichiers analysés : 81523
      Nombre de virus trouvés : 0
      Nombre d'objets infectés : 0
      Nombre d'objets suspects : 0
      Durée de l'analyse : 01:55:22


      j'ai trouver que ca; pas de bloc note automatique


      voila pour l autre scan

      [ Rapport ToolsCleaner version 2.2.3 (par A.Rothstein & dj QUIOU) ]

      -->- Recherche:

      C:\fixnavi.txt: trouvé !
      C:\cleannavi.txt: trouvé !
      C:\lopR.txt: trouvé !
      C:\Lop SD: trouvé !
      C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: trouvé !
      C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1: trouvé !
      C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: trouvé !
      C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1\Navilog1.lnk: trouvé !
      C:\Documents and Settings\Antonine\Bureau\GenProc: trouvé !
      C:\Documents and Settings\Antonine\Bureau\GenProc\GenProc: trouvé !
      C:\Documents and Settings\Antonine\Bureau\virus\LopSD.exe: trouvé !
      C:\Documents and Settings\Antonine\Bureau\virus\DiagHelp.zip: trouvé !
      C:\Documents and Settings\Antonine\Bureau\virus\Msnfix.zip: trouvé !
      C:\Documents and Settings\Antonine\Bureau\virus\GenProc.zip: trouvé !
      C:\Documents and Settings\Antonine\Bureau\virus\Navilog1.exe: trouvé !
      C:\Documents and Settings\Antonine\Bureau\virus\Navilog1.lnk: trouvé !
      C:\Documents and Settings\Antonine\Bureau\virus\DiagHelp: trouvé !
      C:\Documents and Settings\Antonine\Bureau\virus\MsnFix: trouvé !
      C:\Documents and Settings\Antonine\Bureau\virus\DiagHelp\DiagHelp: trouvé !
      C:\Documents and Settings\Antonine\Bureau\virus\MSNFix\MsnFix: trouvé !
      C:\Program Files\Navilog1: trouvé !
      C:\Program Files\Hijackthis Version Française\hijackthis.log: trouvé !
      C:\Program Files\Navilog1\Navilog1.bat: trouvé !
      C:\Program Files\Trend Micro\HijackThis: trouvé !
      C:\Program Files\Trend Micro\HijackThis\hijackthis.log: trouvé !
      C:\WINDOWS\msnfix.txt: trouvé !

      ---------------------------------
      -->- Suppression:

      C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis\HijackThis.lnk: supprimé !
      C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1\Navilog1.lnk: supprimé !
      C:\Documents and Settings\Antonine\Bureau\virus\LopSD.exe: supprimé !
      C:\Documents and Settings\Antonine\Bureau\virus\DiagHelp.zip: supprimé !
      C:\Documents and Settings\Antonine\Bureau\virus\Msnfix.zip: supprimé !
      C:\Documents and Settings\Antonine\Bureau\virus\GenProc.zip: supprimé !
      C:\Documents and Settings\Antonine\Bureau\virus\Navilog1.exe: supprimé !
      C:\Documents and Settings\Antonine\Bureau\virus\Navilog1.lnk: supprimé !
      C:\Program Files\Navilog1\Navilog1.bat: supprimé !
      C:\fixnavi.txt: supprimé !
      C:\cleannavi.txt: supprimé !
      C:\lopR.txt: supprimé !
      C:\Program Files\Hijackthis Version Française\hijackthis.log: supprimé !
      C:\Program Files\Trend Micro\HijackThis\hijackthis.log: supprimé !
      C:\WINDOWS\msnfix.txt: supprimé !
      C:\Lop SD: supprimé !
      C:\Documents and Settings\All Users\Menu Démarrer\Programmes\HijackThis: supprimé !
      C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Navilog1: supprimé !
      C:\Documents and Settings\Antonine\Bureau\GenProc: supprimé !
      C:\Documents and Settings\Antonine\Bureau\virus\DiagHelp: supprimé !
      C:\Documents and Settings\Antonine\Bureau\virus\MsnFix: supprimé !
      C:\Program Files\Navilog1: supprimé !
      C:\Program Files\Trend Micro\HijackThis: supprimé !

      Sauvegarde du registre crée !
      Fichiers temporaires nettoyés !
      Point de restauration crée !
      0
  11. sKe69 Messages postés 21955 Statut Contributeur sécurité 463
     
    Bien ... on va pouvoir finaliser :

    Mets à jours ce qui suit, c'est important ( des versions pas à jours = failles de sécurité ) :
    * pour la console Java :
    aller sur : Démarrer > Panneau de configuration > Icône Java > onglet Mise à jour > "Mettre à jour maintenant" > cocher la case "Automatiser la détection des mises à jour".
    ( puis désinstalles les versions antérieurs via "paneau de configuration" et "ajout/suppression de prg" ...)
    -> si tu ne trouves pas l' icône Java :
    Désinstalles les version antérieurs, puis télécharges et installes la dernière version ici :
    http://www.commentcamarche.net/telecharger/telecharger 34055318 java runtime environment

    * Adobe Reader :
    télécharges et installes la dernière version ici (désinstalles avant l'ancienne version via son propre prg de désinstallation):
    http://www.commentcamarche.net/telecharger/telecharger 27 acrobat reader

    --> une fois fait, repostes moi un dernier hijackthis et attends la suite ...
    0
    1. benjal
       
      hello et merci d avoir encor repondu!!
      boulot oblige, je n'ai pu faire t instruction qu'a l'instant.... donc voila le jack!!!

      parcontre j'aurais un renseignement a te donner voila, je viens de l effacer mais j avais ca qui c'etait m y sur ma livebox , je viens de le suprimer et cela n'est pas revenu et j esper qu il en restera ainsi!!

      msnmsgr (192.168.1.10:13530) 30965 UDP Oui UDP 30965 30965 192.168.1.10

      ca devait m ouvrir un port ! pour quoi?

      sinon, voila le jack, merci encore

      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 21:02:30, on 01/09/2008
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16705)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      C:\PROGRA~1\ANTIVI~1\backweb\6588780\Program\SERVIC~1.EXE
      C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
      C:\Program Files\AntivirusFirewall\Anti-Virus\fsgk32st.exe
      C:\Program Files\AntivirusFirewall\backweb\6588780\program\fsbwsys.exe
      C:\Program Files\AntivirusFirewall\Anti-Virus\FSGK32.EXE
      C:\Program Files\AntivirusFirewall\Common\FSMA32.EXE
      C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      C:\Program Files\AntivirusFirewall\Anti-Virus\fssm32.exe
      C:\Program Files\AntivirusFirewall\Common\FSMB32.EXE
      C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
      C:\WINDOWS\system32\svchost.exe
      C:\Program Files\AntivirusFirewall\Common\FCH32.EXE
      C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
      C:\Program Files\AntivirusFirewall\backweb\6588780\Program\fspex.exe
      C:\Program Files\AntivirusFirewall\Anti-Virus\fsqh.exe
      C:\Program Files\AntivirusFirewall\Common\FAMEH32.EXE
      C:\Program Files\AntivirusFirewall\Anti-Virus\fsrw.exe
      C:\Program Files\AntivirusFirewall\FWES\Program\fsdfwd.exe
      C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
      C:\Program Files\AntivirusFirewall\Anti-Virus\fsav32.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\WINDOWS\system32\hkcmd.exe
      C:\WINDOWS\system32\igfxpers.exe
      C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      C:\Program Files\HP\QuickPlay\QPService.exe
      C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
      C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe
      C:\Program Files\AntivirusFirewall\Common\FSM32.EXE
      C:\Program Files\AntivirusFirewall\FSGUI\ispnews.exe
      C:\WINDOWS\V0220Mon.exe
      C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
      C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
      C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
      C:\PROGRA~1\ANTIVI~1\ANTI-S~1\fsaw.exe
      C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
      C:\Program Files\AntivirusFirewall\FSGUI\fsguidll.exe
      C:\PROGRA~1\hpq\Shared\HPQTOA~1.EXE
      C:\Program Files\Logitech\SetPoint\SetPoint.exe
      C:\WINDOWS\system32\wuauclt.exe
      C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
      C:\Program Files\Fichiers communs\Logitech\khalshared\KHALMNPR.EXE
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=compaq-notebook.msn.com&ocid=HPDHP&pc=CPNTDF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
      O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
      O4 - HKLM\..\Run: [hpWirelessAssistant] C:\Program Files\hpq\HP Wireless Assistant\HP Wireless Assistant.exe
      O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
      O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
      O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
      O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] CHDAudPropShortcut.exe
      O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
      O4 - HKLM\..\Run: [QPService] "C:\Program Files\HP\QuickPlay\QPService.exe"
      O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
      O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
      O4 - HKLM\..\Run: [Cpqset] C:\Program Files\Hewlett-Packard\Default Settings\cpqset.exe
      O4 - HKLM\..\Run: [RecGuard] C:\Windows\SMINST\RecGuard.exe
      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\AntivirusFirewall\Common\FSM32.EXE" /splash
      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\AntivirusFirewall\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW
      O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\AntivirusFirewall\FSGUI\FSSW.EXE" /reboot
      O4 - HKLM\..\Run: [News Service] "C:\Program Files\AntivirusFirewall\FSGUI\ispnews.exe"
      O4 - HKLM\..\Run: [V0220Mon.exe] C:\WINDOWS\V0220Mon.exe
      O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] "C:\Program Files\Fichiers communs\Logitech\khalshared\KHALMNPR.EXE"
      O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
      O4 - Global Startup: Antivirus Firewall.lnk = C:\Program Files\AntivirusFirewall\backweb\6588780\Program\fspex.exe
      O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
      O4 - Global Startup: Logitech SetPoint.lnk = ?
      O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
      O9 - Extra button: Protection Internet Explorer - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\AntivirusFirewall\Anti-Spyware\ieshield.dll
      O9 - Extra 'Tools' menuitem: Protection Internet Explorer... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\AntivirusFirewall\Anti-Spyware\ieshield.dll
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O14 - IERESET.INF: START_PAGE_URL=https://www.msn.com/fr-fr?cobrand=compaq-notebook.msn.com&ocid=HPDHP&pc=CPNTDF
      O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
      O16 - DPF: {2D8ED06D-3C30-438B-96AE-4D110FDC1FB8} (ActiveScan 2.0 Installer Class) - http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab
      O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
      O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
      O18 - Protocol: bw+0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw+0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
      O18 - Protocol: bwg0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwg0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0s - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: offline-8876480 - {4753EF25-2BF2-4160-A4E1-3CECA7F72EBD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
      O23 - Service: AddFiltr - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\AddFiltr.exe
      O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
      O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
      O23 - Service: Antivirus Firewall (BackWeb Plug-in - 6588780) - Securitoo Portal - C:\PROGRA~1\ANTIVI~1\backweb\6588780\Program\SERVIC~1.EXE
      O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
      O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\AntivirusFirewall\Anti-Virus\fsgk32st.exe
      O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\AntivirusFirewall\backweb\6588780\program\fsbwsys.exe
      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\AntivirusFirewall\FWES\Program\fsdfwd.exe
      O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\AntivirusFirewall\Common\FSMA32.EXE
      O23 - Service: Google Desktop Manager 5.7.806.10245 (GoogleDesktopManager-061008-081103) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe
      O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe
      O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/Antonine/LOCALS~1/Temp/msohtml1/01/clip_image002.jpg
      O24 - Desktop Component 1: (no name) - file:///C:/DOCUME~1/Antonine/LOCALS~1/Temp/msohtmlclip1/01/clip_image002.gif
      0
  12. sKe69 Messages postés 21955 Statut Contributeur sécurité 463
     
    bien ...

    1- Fermes toutes tes applications et déconnectes toi .

    Relances Hijackthis mais click sur " Do a scan only "
    Tu vois donc apparaitre le résultat du scan : une multitudes de lignes ,chacunes précédées d'un carré vide .
    Tu vas cliquer sur les carrés des lignes suivantes :

    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

    Coches toutes les lignes 18

    Tu cliques en bas sur le bouton FIX CHECKED et valides .

    Si et seulement si tu n'as plus de prb , fais ce qui suit :

    2- Déconnectes toi et fermes bien toutes tes applications en cours .

    Lances ToolsCleaner2 .
    *Cliques sur Recherche et laisses le scan se terminer (cela peut être long).
    *Cliques sur Suppression pour finaliser.
    *Tu peux, si tu le souhaites, te servir des Options facultatives
    *Click sur "quitter" pour générer un rapport :
    ---> Postes le (TCleaner.txt), il se trouve à la racine de ton disque dur (C:\).

    Note : Ce petit soft va te nettoyer tout les trucs dont on c'est servi pour la désinfection ( tu n'en as plus besion ! ) .
    Supprimes tout les outils , dossiers ou rapports consernant la désinfection que Toolscleaner2 n'a pas supprimé .

    Puis enfin supprimes Toolscleaner2 ...

    3- refais un coup de CCleaner ( registre compris )

    4- fais ce check up :

    ( étape A à faire de suite ! et le reste dès que tu peux mais ne tardes pas trop ;) )

    A-Purge de la restauration système
    *Désactives ta restauration :
    Cliques droit sur poste de travail/propriétés/Restauration système/coche la case désactiver la restauration, appliquer, OK
    --->Redémarres ton PC
    *Réactives ta restauration :
    Cliques droit sur poste de travail/propriétés/Restauration système/décoche la case désactiver la restauration, appliquer, OK
    --->Redémarres ton PC

    Attention : ne pas toucher au PC pendant qu'il travaille !

    B-Nettoyage et Défragmentation de tes Disques
    *Nettoyage :
    Clic droit sur "poste de travail" ==>"ouvrir" ==>clic droit sur le disque C ==>Propriétés ==>onglet "Général"
    Cliques sur le bouton "nettoyage de disque", OK
    tu le fais pour chacun de tes disques

    *Vérifications des erreurs :
    Clic droit sur "poste de travail" ==>"ouvrir" ==>clic droit sur le disque C ==>Propriétés ==>onglet "Outil"
    "Vérifier maintenant", une boîte s'ouvre, cocher les cases :
    -réparer automatiquement les erreurs...
    -rechercher et tenter une récupération...
    --->Démarrer, ok
    Note : s'il te dis de redémarrer ton Pc pour le faire , tu redémarres et tu laisses faire, cela prend un peu de temps c'est normal
    tu le fais pour chacun de tes disques

    ensuite toujours dans le même onglet tu choisis :
    *Défragmentation :
    "défragmenter maintenant", OK
    une boîte s'ouvre, tu sélectionnes le disque à défragmenter, et tu cliques sur "analyser", puis après l'analyse, "défragmenter" . OK
    tu le fais pour chacun de tes disques

    --> une fois terminé, dis moi ce que cela a donné ... =)

    0
    1. benjal
       
      et bien, voila, j 'ai fais tout ce que tu m as dis.... et j avourais que ca marche vraiment mieux... vraiment merci, besoin de fair autre chose?, d aprés ce que tu as pu voir dans les differents rapports, suis je bien protégé? ou aurais tu un conseil ou un logiciel a telecharger qu'il me manquerait?
      enfin, je te remerci pour tout.. on ferme le sujet?
      0
  13. sKe69 Messages postés 21955 Statut Contributeur sécurité 463
     
    Salut,

    Impeccablme alors ... :)

    Content de t'avoir rendu service ...

    potasses ceci à l'avenir :

    Des informations intéressantes pour toi et ton PC :

    => Comportement à adopter avec son PC : http://assiste.com.free.fr/p/abc/a/safe_cex.html
    et pourquoi ( exemple ) : http://assiste.com.free.fr/p/abc/a/zombies_et_botnets.html

    => Surveillance :
    Effectue des scan réguliers de surveillance (une fois tous les 15 jours, par exemple) avec ton antivirus puis avec ton anti-spyware (après les avoir mis à jour bien sur !) et supprime ce qu'ils peuvent trouver (où mets en quarantaine, en pensant à la vider ultérieurement).

    Pourquoi ? Pour éviter de se retrouver dans ce genre de situation par exemple ( peu commune mais ...) :
    -> http://secubox.aldria.com/topic-2373.html

    =============================================================

    => Il faut mettre a jour la console Java régulièrement aussi :

    Rends toi sur https://www.java.com/fr/download/manual.jsp et télécharge la dernière version (si ta version actuelle n'est pas à jour) ou ici https://filehippo.com/download_jre_32/?ex=CORE-116.0
    Après avoir installé la dernière version, désinstalle les anciennes versions (de Java) afin d’éliminer les failles de sécurité présentes dans ces anciennes versions.
    via Démarrer / Paramètres / Panneau de config / et dans Ajout/Suppression de programmes navigue jusqu'aux anciennes versions de la console Java qui s'y trouvent, puis clique sur « Supprimer », suis les invites de commandes dans la boite de dialogue qui va s'ouvrir afin d'amener la désinstallation à son terme.
    Fais cela pour chacune d'elles, une à une, fais redémarrer ton PC quand cela te sera demandé .
    Retourne ensuite chez Java ci-dessus et clique sur le bouton "Vérifier l'installation" pour t'assurer que tout est en ordre.

    =============================================================

    => Afin d’éviter les autres failles de sécurité des différents programmes présents sur ton PC :

    Vérifie tes mises à jours des différents softs régulièrement ici et mets à jour ce qui ne l’est pas. https://www.flexera.com/products/operations/software-vulnerability-management.html
    -Tuto https://www.malekal.com/tester-la-vulnerabilite-de-son-systeme-2/
    -Autre possibilité, t'abonner gratuitement a "la lettre hebdomadaire de secuser.com" ici http://www.secuser.com/ a gauche en bas de page.

    ===========================================================

    => Un complément au pare-feu pour fermer les ports risqués (dangereux, s’ils restent ouverts) :

    ZebProtect (application ne nécessitant pas d’installation à lancer et paramétrer une unique fois) http://telechargement.zebulon.fr/123.html

    -Tuto https://www.zebulon.fr/dossiers/autres/40-zebprotect.html

    ================================================================

    --> Tutorial pour sécuriser Firefox ( si tu utilises ce navigateur ) :
    https://forum.zebulon.fr/topic/69628-s%C3%A9curiser-un-peu-plus-firefox/

    =================================================================
    => Rappel sur les principales causes d'infection :

    * L'utilisation de cracks ou keygens est à proscrire, de même que le surf sur les sites de téléchargement de ceux-ci :

    Les dangers des cracks : http://forum.malekal.com/ftopic893.php

    ->Le crack dans toute sa splendeur, journal d'une infection attendue :
    https://forum.zebulon.fr/topic/93281-pr%C3%A9vention-le-crack-dans-toute-sa-splendeur/

    ->autre exemple en image , où comment s'infiltre une infection par un pseudo crack :
    http://secuboxlabs.fr/archives/computertoday.html

    * Le P2P ( l'utilisation de logiciels comme eMule, Sharazaa, LimeWire, Bit torrent):

    Les conséquences du P2P : https://forum.zebulon.fr/topic/85544-pr%C3%A9vention-le-p2p-et-ses-cons%C3%A9quences/

    Pourquoi éviter le P2P : http://www.speedweb1.org/forum-tesgaz/viewtopic.php?t=1793
    https://lexpansion.lexpress.fr/actualite-economique/

    * Prévention sur deux autres types d'infection d'actualité :

    MSN prévention :
    ->https://forum.zebulon.fr/topic/130590-infection-par-msn-ou-wlm/
    ->autre danger grandissant , le " phishing " (= hameçonnage ) :
    http://msnfix.changelog.fr/index.php/2008/05/18/32-alerte

    Infection par supports amovibles (clefs usb, flash, DD externes ..) :
    https://forum.zebulon.fr/topic/131959-infections-par-supports-amovibles/
    https://forum.malekal.com/viewtopic.php?f=45&t=5544

    =================================================================
    ( merci le sioux )

    voili,voilou ...

    Bonne continuation à toi ... =)

    A+
    0

Discussions similaires

Qu'est-ce qu'un port WSD pour imprimante?
largo99 -
Zebhib -

5 réponses
ping quel port ?
michel -
Géca -

28 réponses