Grosses infections !!!

Résolu
salamort -  
Bonsoir,

j'ai un gros problème...mon petit frère de 9 ans c'est amusé à télécharger toutes sortes de jeux un peu partout, ainsi qu'internet game box et la connexion wifi ne marche plus depuis.

j'ai lancé un scan rapide de MBAM et en 5 min il y a déjà 9 infections...

j'ai également fait un nettoyage du registre avec CCleaner...

je vous joint ci-dessous mon rapport hijackthis, merci de votre aide et de votre soutien :

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:15:18, on 28/11/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Logitech\Bluetooth\LBTSERV.EXE
C:\WINDOWS\system32\spoolsv.exe
c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
C:\Acer\eManager\anbmServ.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
C:\Program Files\Network Associates\VirusScan\Mcshield.exe
C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Blue Coat K9 Web Protection\k9filter.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\system32\Rundll32.exe
C:\WINDOWS\system32\keyhook.exe
C:\Program Files\Arcade\PCMService.exe
C:\Acer\Empowering Technology\eRecovery\Monitor.exe
C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Logitech\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam10\QuickCam10.exe
C:\Program Files\Common Files\Logitech\LComMgr\LVComSX.exe
C:\Program Files\Logitech\SetPoint\LBTWiz.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\WINDOWS\system32\sistray.exe
C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE
C:\Program Files\Logitech\QuickCam10\COCIManager.exe
C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil VoIP Plugin.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.acer.com/worldwide/selection.html
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: GamesBar - {6F282B65-56BF-4BD1-A8B2-A4449A05863D} - C:\Program Files\GamesBar\oberontb.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: GamesBar - {6F282B65-56BF-4BD1-A8B2-A4449A05863D} - C:\Program Files\GamesBar\oberontb.dll
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
O4 - HKLM\..\Run: [SiS Windows KeyHook] C:\WINDOWS\system32\keyhook.exe
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Arcade\PCMService.exe"
O4 - HKLM\..\Run: [LManager] C:\Program Files\Launch Manager\QtZgAcer.EXE
O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\Monitor.exe
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\Logitech\LComMgr\Communications_Helper.exe"
O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam10\QuickCam10.exe" /hide
O4 - HKLM\..\Run: [LVCOMSX] "C:\Program Files\Common Files\Logitech\LComMgr\LVComSX.exe"
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [Logitech BT Wizard] LBTWiz.exe -silent
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-18\..\Run: [ctfmon.exe] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [ctfmon.exe] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: BlueSoleil.lnk = C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: (no name) - {1A93C934-025B-4c3a-B38E-9654A7003239} - C:\Program Files\GamesBar\oberontb.dll
O9 - Extra 'Tools' menuitem: GamesBar - {1A93C934-025B-4c3a-B38E-9654A7003239} - C:\Program Files\GamesBar\oberontb.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {C36112BF-2FA3-4694-8603-3B510EA3B465} (Lycos File Upload Component) - http://f002.mail.caramail.lycos.fr/app/uploader/FileUploader.cab
O18 - Protocol: bw+0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - C:\Acer\eManager\anbmServ.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech Inc. - C:\Program Files\Common Files\Logitech\Bluetooth\LBTSERV.EXE
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\Logitech\SrvLnch\SrvLnch.exe
O23 - Service: McAfee Framework Service (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
O23 - Service: Blue Coat K9 Web Protection (WebFilter) - Unknown owner - C:\Program Files\Blue Coat K9 Web Protection\k9filter.exe

--
End of file - 20445 bytes
Configuration: Windows XP
Firefox 3.0.4

16 réponses

  1.  toptitbal Contributeur sécurité
    Bonjour

    "j'ai lancé un scan rapide de MBAM"

    Dommage ! Tu aurais dû faire l'Hijackthis d'abord...

    Télécharge Toolbar-S&D (Team IDN) sur ton Bureau.
    https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2

    * Lance l'installation du programme en exécutant le fichier téléchargé.
    * Double-clique maintenant sur le raccourci de Toolbar-S&D.
    * Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée.
    * Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche.
    * Poste le rapport généré. (C:\TB.txt)
    0
    1. salamort Auteur
      j'ai lancé hijackthis avant mbam ne t'inquiètes pas ;)

      j'étais sur qu'il fallait utiliser toolbar sd... c'est gamesbar qui te choque non ?

      enfin bref, je te postes le rapport mbam rapide en mode normal et je m'occupe de toolbar SD.

      Malwarebytes' Anti-Malware 1.30
      Version de la base de données: 1306
      Windows 5.1.2600 Service Pack 3

      28/11/2008 19:34:13
      mbam-log-2008-11-28 (19-34-13).txt

      Type de recherche: Examen rapide
      Eléments examinés: 45599
      Temps écoulé: 13 minute(s), 20 second(s)

      Processus mémoire infecté(s): 0
      Module(s) mémoire infecté(s): 0
      Clé(s) du Registre infectée(s): 7
      Valeur(s) du Registre infectée(s): 1
      Elément(s) de données du Registre infecté(s): 0
      Dossier(s) infecté(s): 0
      Fichier(s) infecté(s): 1

      Processus mémoire infecté(s):
      (Aucun élément nuisible détecté)

      Module(s) mémoire infecté(s):
      (Aucun élément nuisible détecté)

      Clé(s) du Registre infectée(s):
      HKEY_CLASSES_ROOT\oberontb.band (Adware.Gamesbar) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\TypeLib\{ad76633e-e50d-4844-9e7f-4dfbc7c18467} (Adware.Gamesbar) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\Interface\{ec1a2105-5621-440f-987d-27ef428131d9} (Adware.Gamesbar) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\CLSID\{6f282b65-56bf-4bd1-a8b2-a4449a05863d} (Adware.Gamesbar) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{6f282b65-56bf-4bd1-a8b2-a4449a05863d} (Adware.Gamesbar) -> Quarantined and deleted successfully.
      HKEY_CLASSES_ROOT\oberontb.band.1 (Adware.Gamesbar) -> Quarantined and deleted successfully.
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{1a93c934-025b-4c3a-b38e-9654a7003239} (Adware.Gamesbar) -> Quarantined and deleted successfully.

      Valeur(s) du Registre infectée(s):
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{6f282b65-56bf-4bd1-a8b2-a4449a05863d} (Adware.Gamesbar) -> Quarantined and deleted successfully.

      Elément(s) de données du Registre infecté(s):
      (Aucun élément nuisible détecté)

      Dossier(s) infecté(s):
      (Aucun élément nuisible détecté)

      Fichier(s) infecté(s):
      C:\Program Files\GamesBar\oberontb.dll (Adware.Gamesbar) -> Quarantined and deleted successfully.
      0
      1. salamort Auteur
        voici le rapport toolbar sd :

        -----------\\ ToolBar S&D 1.2.5 XP/Vista

        Microsoft Windows XP Home Edition ( v5.1.2600 ) Service Pack 3
        X86-based PC ( Uniprocessor Free : Mobile AMD Sempron(tm) Processor 3100+ )
        BIOS : Phoenix NoteBIOS 4.0 Release 6.0
        USER : USER2 ( Administrator )
        BOOT : Normal boot
        C:\ (Local Disk) - NTFS - Total:26 Go (Free:5 Go)
        D:\ (Local Disk) - FAT32 - Total:26 Go (Free:18 Go)
        E:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
        F:\ (USB) - FAT - Total:249 Mo (Free:0 Go)

        "C:\ToolBar SD" ( MAJ : 20-11-2008|20:25 )
        Option : [1] ( 28/11/2008|19:43 )

        -----------\\ Recherche de Fichiers / Dossiers ...

        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-11-11-18-28-47
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-11-11-18-28-47.xm_
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-11-11-18-28-52
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-11-11-18-28-52.xm_
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\7_wonders_treasures_of_seven16x16.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\about.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\action.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\arcade.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\around_the_world_in_80_days16x16.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\big_city_adventure_sydney16x16.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\buy.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\cards.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\cooking_dash16x16.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\deals.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\download.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\escape_from_the_museum16x16.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\farm_frenzy_216x16.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\feedback.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\help.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\highlight.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\home_sweet_home_216x16.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\jewel_quest_316x16.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\jigsaw.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\kids.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\magic_encyclopedia16x16.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\mahjong.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\mygames.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\mystery_stories_island_of_hope16x16.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\natalie_brooks16x16.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\newGames.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\oberonconfig.xm_
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\obSearchHistory.dat
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\partner.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\popup_off.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\popup_on.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\puzzle.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\restoring_rhonda16x16.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\search.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\sendafriend.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\sports.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\the_hidden_object_show16x16.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\the_pini_society16x16.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\trial.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\uninstall.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\update.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\womens_murder_club_fr16x16.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-11-11-18-28-47\7_wonders_treasures_of_seven16x16.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-11-11-18-28-47\about.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-11-11-18-28-47\download.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-11-11-18-28-47\escape_from_the_museum16x16.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-11-11-18-28-47\feedback.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-11-11-18-28-47\help.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-11-11-18-28-47\highlight.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-11-11-18-28-47\home_sweet_home_216x16.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-11-11-18-28-47\mystery_stories_island_of_hope16x16.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-11-11-18-28-47\newGames.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-11-11-18-28-47\partner.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-11-11-18-28-47\popup_off.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-11-11-18-28-47\popup_on.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-11-11-18-28-47\restoring_rhonda16x16.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-11-11-18-28-47\search.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-11-11-18-28-47\sendafriend.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-11-11-18-28-47\the_hidden_object_show16x16.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-11-11-18-28-47\the_pini_society16x16.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-11-11-18-28-47\uninstall.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-11-11-18-28-47\update.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-11-11-18-28-52\about.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-11-11-18-28-52\feedback.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-11-11-18-28-52\help.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-11-11-18-28-52\partner.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-11-11-18-28-52\search.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-11-11-18-28-52\sendafriend.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-11-11-18-28-52\uninstall.gif
        C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-11-11-18-28-52\update.gif
        C:\Program Files\GamesBar
        C:\Program Files\GamesBar\Localization-French.ini
        C:\Program Files\GamesBar\OBGet.exe
        C:\Program Files\GamesBar\uninst.exe
        C:\WINDOWS\iun6002.exe

        -----------\\ [..\Internet Explorer\Main]

        [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
        "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
        "Start Page"="https://www.google.fr/?gws_rd=ssl"
        "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

        [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
        "Default_Page_URL"="https://www.acer.com/worldwide/selection.html"
        "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
        "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
        "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home"

        --------------------\\ Recherche d'autres infections

        Aucune autre infection trouvée !

        1 - "C:\ToolBar SD\TB_1.txt" - 28/11/2008|19:43 - Option : [1]

        -----------\\ Fin du rapport a 19:43:38,23
        0
        1. toptitbal Contributeur sécurité
          Relance Toolbar-S&D en double-cliquant sur le raccourci. Tape sur "2" puis valide en appuyant sur "Entrée".

          ! Ne ferme pas la fenêtre lors de la suppression !

          Un rapport sera généré, poste son contenu ici.

          NOTE : Si ton Bureau ne réapparait pas, appuie simultanément sur Ctrl+Alt+Suppr pour ouvrir le Gestionnaire des tâches.
          Rends-toi sur l'onglet "Processus". Clique en haut à gauche sur Fichier et choisis "Exécuter..."
          Tape explorer puis valide.
          0
      4. salamort Auteur
        bonsoir Mmsl35, merci de ton aide mais le virus me bloque la connexion internet wifi. donc je ne peux ni faire de mises à jour, ni faire de scan en ligne...

        je passe donc à l'option 2

        toptibal, pour l'option 2 je dois le faire en mode sans échec ou pas ?
        0
        2. salamort Auteur
          voici le nouveau rapport de toolbar SD :

          -----------\\ ToolBar S&D 1.2.5 XP/Vista

          Microsoft Windows XP Home Edition ( v5.1.2600 ) Service Pack 3
          X86-based PC ( Uniprocessor Free : Mobile AMD Sempron(tm) Processor 3100+ )
          BIOS : Phoenix NoteBIOS 4.0 Release 6.0
          USER : USER2 ( Administrator )
          BOOT : Normal boot
          C:\ (Local Disk) - NTFS - Total:26 Go (Free:5 Go)
          D:\ (Local Disk) - FAT32 - Total:26 Go (Free:18 Go)
          E:\ (CD or DVD) - CDFS - Total:0 Go (Free:0 Go)
          F:\ (USB) - FAT - Total:249 Mo (Free:0 Go)

          "C:\ToolBar SD" ( MAJ : 20-11-2008|20:25 )
          Option : [2] ( 28/11/2008|22:23 )
          C:\WINDOWS\iun6002.exe

          -----------\\ SUPPRESSION

          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-11-11-18-28-47
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-11-11-18-28-47.xm_
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-11-11-18-28-52
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\08-11-11-18-28-52.xm_
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\7_wonders_treasures_of_seven16x16.gif
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\about.gif
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\action.gif
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\arcade.gif
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\around_the_world_in_80_days16x16.gif
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\big_city_adventure_sydney16x16.gif
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\buy.gif
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\cards.gif
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\cooking_dash16x16.gif
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\deals.gif
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\download.gif
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\escape_from_the_museum16x16.gif
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\farm_frenzy_216x16.gif
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\feedback.gif
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\help.gif
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\highlight.gif
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\home_sweet_home_216x16.gif
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\jewel_quest_316x16.gif
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\jigsaw.gif
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\kids.gif
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\magic_encyclopedia16x16.gif
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\mahjong.gif
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\mygames.gif
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\mystery_stories_island_of_hope16x16.gif
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\natalie_brooks16x16.gif
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\newGames.gif
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\oberonconfig.xm_
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\obSearchHistory.dat
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\partner.gif
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\popup_off.gif
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\popup_on.gif
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\puzzle.gif
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\restoring_rhonda16x16.gif
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\search.gif
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\sendafriend.gif
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\sports.gif
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\the_hidden_object_show16x16.gif
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\the_pini_society16x16.gif
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\trial.gif
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\uninstall.gif
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\update.gif
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar\womens_murder_club_fr16x16.gif
          Supprime! - C:\Program Files\GamesBar\Localization-French.ini
          Supprime! - C:\Program Files\GamesBar\OBGet.exe
          Supprime! - C:\Program Files\GamesBar\uninst.exe
          Supprime! - C:\WINDOWS\iun6002.exe
          Supprime! - C:\DOCUME~1\ALLUSE~1\APPLIC~1\GamesBar
          Supprime! - C:\Program Files\GamesBar

          -----------\\ Recherche de Fichiers / Dossiers ...

          -----------\\ [..\Internet Explorer\Main]

          [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
          "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
          "Start Page"="https://www.google.fr/?gws_rd=ssl"
          "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"

          [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
          "Default_Page_URL"="https://www.acer.com/worldwide/selection.html"
          "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
          "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
          "Start Page"="https://www.msn.com/fr-fr/"

          --------------------\\ Recherche d'autres infections

          Aucune autre infection trouvée !

          1 - "C:\ToolBar SD\TB_1.txt" - 28/11/2008|22:25 - Option : [2]

          -----------\\ Fin du rapport a 22:25:06,06
          0
          1. salamort Auteur
            je fais quoi ensuite ???
            0
            2. toptitbal Contributeur sécurité
              Fais un nouvel Hijackthis stp.
              0
              1. salamort Auteur
                d'accord je te fais ça tout de suite...merci toptibal ;)
                0
                1. salamort Auteur
                  le rapport hijackthis

                  Logfile of Trend Micro HijackThis v2.0.2
                  Scan saved at 12:18:04, on 29/11/2008
                  Platform: Windows XP SP3 (WinNT 5.01.2600)
                  MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
                  Boot mode: Normal

                  Running processes:
                  C:\WINDOWS\System32\smss.exe
                  C:\WINDOWS\system32\winlogon.exe
                  C:\WINDOWS\system32\services.exe
                  C:\WINDOWS\system32\lsass.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\WINDOWS\System32\svchost.exe
                  C:\Program Files\Common Files\Logitech\Bluetooth\LBTSERV.EXE
                  C:\WINDOWS\system32\spoolsv.exe
                  c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
                  C:\Acer\eManager\anbmServ.exe
                  C:\WINDOWS\system32\cisvc.exe
                  C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
                  C:\Program Files\Network Associates\VirusScan\Mcshield.exe
                  C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\Program Files\Blue Coat K9 Web Protection\k9filter.exe
                  C:\WINDOWS\Explorer.EXE
                  C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
                  C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
                  C:\WINDOWS\SOUNDMAN.EXE
                  C:\WINDOWS\AGRSMMSG.exe
                  C:\WINDOWS\system32\Rundll32.exe
                  C:\WINDOWS\system32\keyhook.exe
                  C:\Program Files\Arcade\PCMService.exe
                  C:\Acer\Empowering Technology\eRecovery\Monitor.exe
                  C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
                  C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
                  C:\Program Files\QuickTime\qttask.exe
                  C:\Program Files\Common Files\Logitech\LComMgr\Communications_Helper.exe
                  C:\Program Files\Logitech\QuickCam10\QuickCam10.exe
                  C:\Program Files\Common Files\Logitech\LComMgr\LVComSX.exe
                  C:\WINDOWS\system32\rundll32.exe
                  C:\Program Files\Logitech\SetPoint\LBTWiz.exe
                  C:\WINDOWS\system32\ctfmon.exe
                  C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
                  C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
                  C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe
                  C:\Program Files\Logitech\SetPoint\SetPoint.exe
                  C:\WINDOWS\system32\sistray.exe
                  C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
                  C:\Program Files\Common Files\Logitech\KHAL\KHALMNPR.EXE
                  C:\WINDOWS\system32\wuauclt.exe
                  C:\Program Files\Logitech\QuickCam10\COCIManager.exe
                  C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil VoIP Plugin.exe

                  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.acer.com/worldwide/selection.html
                  O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
                  O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
                  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
                  O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                  O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                  O4 - HKLM\..\Run: [LaunchApp] Alaunch
                  O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
                  O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
                  O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
                  O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
                  O4 - HKLM\..\Run: [SiSPower] Rundll32.exe SiSPower.dll,ModeAgent
                  O4 - HKLM\..\Run: [SiS Windows KeyHook] C:\WINDOWS\system32\keyhook.exe
                  O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
                  O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
                  O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
                  O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
                  O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Arcade\PCMService.exe"
                  O4 - HKLM\..\Run: [LManager] C:\Program Files\Launch Manager\QtZgAcer.EXE
                  O4 - HKLM\..\Run: [eRecoveryService] C:\Acer\Empowering Technology\eRecovery\Monitor.exe
                  O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
                  O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
                  O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                  O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Common Files\Logitech\LComMgr\Communications_Helper.exe"
                  O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "C:\Program Files\Logitech\QuickCam10\QuickCam10.exe" /hide
                  O4 - HKLM\..\Run: [LVCOMSX] "C:\Program Files\Common Files\Logitech\LComMgr\LVComSX.exe"
                  O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
                  O4 - HKLM\..\Run: [Logitech BT Wizard] LBTWiz.exe -silent
                  O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                  O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
                  O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
                  O4 - HKUS\S-1-5-18\..\Run: [ctfmon.exe] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
                  O4 - HKUS\.DEFAULT\..\Run: [ctfmon.exe] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
                  O4 - Global Startup: BlueSoleil.lnk = C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe
                  O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
                  O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
                  O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
                  O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe
                  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
                  O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
                  O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
                  O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                  O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                  O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                  O16 - DPF: {C36112BF-2FA3-4694-8603-3B510EA3B465} (Lycos File Upload Component) - http://f002.mail.caramail.lycos.fr/app/uploader/FileUploader.cab
                  O18 - Protocol: bw+0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw+0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw-0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw-0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw00 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw00s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw10 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw10s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw20 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw20s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw30 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw30s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw40 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw40s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw50 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw50s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw60 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw60s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw70 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw70s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw80 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw80s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw90 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw90s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwa0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwa0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwb0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwb0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwc0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwc0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwd0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwd0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwe0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwe0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwf0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwf0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
                  O18 - Protocol: bwg0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwg0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwh0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwh0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwi0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwi0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwj0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwj0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwk0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwk0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwl0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwl0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwm0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwm0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwn0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwn0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwo0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwo0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwp0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwp0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwq0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwq0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwr0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwr0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bws0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bws0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwt0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwt0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwu0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwu0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwv0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwv0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bww0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bww0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwx0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwx0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwy0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwy0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwz0 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwz0s - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: offline-8876480 - {9BD94B6F-C51D-4853-A88E-51E38EA86259} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
                  O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - C:\Acer\eManager\anbmServ.exe
                  O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech Inc. - C:\Program Files\Common Files\Logitech\Bluetooth\LBTSERV.EXE
                  O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
                  O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Common Files\Logitech\SrvLnch\SrvLnch.exe
                  O23 - Service: McAfee Framework Service (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
                  O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
                  O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
                  O23 - Service: Blue Coat K9 Web Protection (WebFilter) - Unknown owner - C:\Program Files\Blue Coat K9 Web Protection\k9filter.exe
                  0
                  1. toptitbal Contributeur sécurité
                    Le problèmes des barres d'outils semble réglé.
                    Comment se comporte le PC ?
                    0
                    1. salamort Auteur
                      en fait, il n'y a jamais eu vraiment de gros problèmes, à part des ralentissements...

                      le problème majeur c'est que je n'ai pas de connexion internet. je suis sur un acer 3000 et j'ai une connexion wifi mais la elle ne semble pas marchée...

                      je ne sais pas quoi faire...
                      0
                      1. salamort Auteur
                        finalement la connexion remarche enfin :)

                        merci beaucoup de ton aide toptibal !

                        à bientôt
                        0
                        1. toptitbal Contributeur sécurité
                          OK, si tout va bien :

                          Pour supprimer toutes les traces des logiciels qui ont servi à traiter les infections spécifiques :

                          Télécharge toolscleaner sur ton Bureau :
                          http://www.commentcamarche.net/telecharger/telecharger 34055291 toolscleaner
                          * Double-clique sur ToolsCleaner2.exe et laisse le travailler
                          * Clique sur Recherche et laisse le scan se terminer.
                          * Clique sur Suppression pour finaliser.
                          * Tu peux, si tu le souhaites, te servir des Options facultatives.
                          * Clique sur Quitter, pour que le rapport puisse se créer.
                          * Le rapport (TCleaner.txt) se trouve à la racine de votre disque dur (C:\)...colle le dans ta réponse
                          0
                          1. salamort Auteur
                            dsl toptibal j'ai pas trop le temps maintenant mais je le fais le plus tôt possible

                            je te remets un rapport hijackthis ?
                            0
                          2. toptitbal Contributeur sécurité
                            @salamortNon, pas la peine.
                            0

                        Discussions similaires

                        Aide pour infections multiples
                        Akilae94

                        11 réponses
                        rapport MBAM 6 infections
                        Tamarin

                        21 réponses
                        Infections virus fichier .EXE à 0 octet
                        levieux5

                        58 réponses