11 virus trouvés

Maddy-972 -  
Bonjour,

J'ai fais une analyse anti-virus avec F-Scure, qui a trouvé 11 virus, je souhaiterai que vous m'aidiez pour les supprimer, car il n'arrive pas a les supprimer.
.
Il trouve des :
Trojan.win32.agent2.Mg
TRojan.Win32.chifrax.d
Hoax.Win32.BadJoke.Formatter
Worm.Win32.AutoRun.dxo
Trojan.Win32.Vaklik.amc

Merci d'avance
Configuration: Windows XP
Firefox 3.5.2

27 réponses

Résumé de la discussion

Une analyse antivirus signale 11 éléments malveillants sur Windows XP, incluant des Trojans et un Worm, et la suppression automatique échoue, nécessitant une intervention manuelle ou des outils spécialisés. La meilleure réponse fournie comprend le rapport système et un log HijackThis détaillant les processus, services et composants de démarrage suspects, sans proposer de procédure claire pour éliminer les infections. Des éléments repérables dans le rapport concernent des barres d’outils, des BHO, des programmes au démarrage et des services liés à AskBarDis, BitComet, Java et F‑Secure, indiquant une contamination étendue. En cas de poursuite, des mesures complémentaires incluent l’antimalware hors ligne à jour, la suppression des éléments de démarrage suspects et la vérification des extensions non signées.

Bobot (l’IA à votre service)
  1. jfkpresident Contributeur sécurité
    Une fois fait Ccleaner ,pourrais tu faire ceci :

    • Télécharge et install UsbFix par Chiquitine29

    (!) Branche tes sources de données externes à ton PC, (clé USB, disque dur externe, etc...) susceptible d'avoir été infectées sans les ouvrir

    • Double clic sur le raccourci UsbFix présent sur ton bureau .

    • Au menu principal choisis l'option " F " pour français et tape sur [entrée] .

    • Au second menu Choisis l'option " 1 " (recherche) et tape sur [entrée]

    • Laisse travailler l'outil.

    • Ensuite post le rapport UsbFix.txt qui apparaitra.

    • Note : Le rapport UsbFix.txt est sauvegardé a la racine du disque. ( C:\UsbFix.txt )

    ( CTRL+A Pour tout selectionner , CTRL+C pour copier et CTRL+V pour coller )

    • Note : "Process.exe", une composante de l'outil, est détecté par certains antivirus (AntiVir, Dr.Web, Kaspersky Anti-Virus) comme étant un RiskTool.
    Il ne s'agit pas d'un virus, mais d'un utilitaire destiné à mettre fin à des processus.
    Mis entre de mauvaises mains, cet utilitaire pourrait arrêter des logiciels de sécurité (Antivirus, Firewall...) d'où l'alerte émise par ces antivirus.

    • Tuto : http://pagesperso-orange.fr/NosTools/usbfix.html
    =========================
    Ensuite :

    -> Relance HijackThis cliques sur « scanner seulement » ou (« do a scan only »),
    coche les cases devant ces lignes : 

    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)  

Ainsi que toutes les lignes 018


    et ensuite ferme toutes les fenêtres actives autres que HijackThis!, navigateur inclus,
    puis clique "Fix checked"( ou « fixer objet »). Ferme HijackThis!

    tutoriel en images:http://pageperso.aol.fr/balltrap34/Hijenr.gif
    1. Utilisateur anonyme
      Néttoyage avec CCleaner
      ******************************

      Introduction :

      ► Tout d'abord ccleaner sert à faire un peut de ménage sur ton ordinateur :

      ● Il permet de nettoyer votre systeme :

      => Suppression de fichier temporaires
      => Cookie, historique, etc

      ● Il permet de reparer des erreurs dans le registre :

      => DLL partagées inexistantes
      => Programme obsolètes, etc

      -------------------------------------------------------------------------------------

      Installe CCleaner

      /!\ Décocher les options suivantes pendant l'installation :

      1/ Contrôler automatiquement les mises à jour de CCleaner
      2/ Ajouter la barre d'outils Yahoo! CCleaner

      * Clique pour installer CCleaner

      Avant manipulation configure le :

      Option --> Propriétés --> Coche la case " éffacement Sécurisé du fichier (lent) "
      Juste en bas choisit le mode Gutmann ( 35 passages )

      ☞ Onglet Windows détermine les éléments de Windows qui seront supprimés par le nettoyeur en les cochants
      ☞ Clique sur Analyse
      ☞ Une fois l'analyse aboutie clique sur lancer le nettoyage

      ☞ Onglet Applications ( les éléments appartenant à des applications Firefox, Flash etc..).
      ☞ Clique sur Analyse
      ☞ Une fois l'analyse aboutie clique sur lancer le nettoyage

      Recherche des erreurs
      *****************

      ☞ Clique sur l'onglet Registre
      ☞ Ensuite sur chercher des erreurs
      ☞ Réparrer les erreurs séléctionées
      ☞ CCleaner te proposera d'enregistrer un fichier .reg qui est une sauvegarde ( Pas la peine )

      ◆ Tuto : Tutoriel sur CCleaner par Malekal
      1. Maddy-972 Auteur
        Et voila le rapport Hijacthis:
        Logfile of random's system information tool 1.06 (written by random/random)
        Run by Kévin at 2009-09-09 22:16:01
        Microsoft Windows XP Édition familiale Service Pack 3
        System drive C: has 38 GB (24%) free of 157 GB
        Total RAM: 3582 MB (76% free)

        Logfile of Trend Micro HijackThis v2.0.2
        Scan saved at 22:22:44, on 09/09/2009
        Platform: Windows XP SP3 (WinNT 5.01.2600)
        MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
        Boot mode: Normal

        Running processes:
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\csrss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\system32\Ati2evxx.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\system32\spoolsv.exe
        c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
        C:\WINDOWS\system32\Ati2evxx.exe
        C:\WINDOWS\Explorer.EXE
        C:\WINDOWS\system32\svchost.exe
        C:\Program Files\Bonjour\mDNSResponder.exe
        C:\Program Files\SFR\Pack Sécurité\Anti-Virus\fsgk32st.exe
        C:\Program Files\SFR\Pack Sécurité\Common\FSMA32.EXE
        C:\Program Files\SFR\Pack Sécurité\Anti-Virus\FSGK32.EXE
        C:\Program Files\SFR\Pack Sécurité\Common\FSMB32.EXE
        C:\Program Files\Java\jre6\bin\jqs.exe
        C:\WINDOWS\system32\svchost.exe
        C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
        C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
        C:\Program Files\Analog Devices\Core\smax4pnp.exe
        C:\Program Files\SFR\Pack Sécurité\Common\FSM32.EXE
        C:\Program Files\Java\jre6\bin\jusched.exe
        C:\WINDOWS\system32\ctfmon.exe
        C:\Program Files\SuperCopier2\SuperCopier2.exe
        C:\Program Files\Windows Live\Messenger\msnmsgr.exe
        C:\Program Files\DAEMON Tools Lite\daemon.exe
        C:\Program Files\BitComet\BitComet.exe
        C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
        C:\Program Files\SFR\Pack Sécurité\Common\FCH32.EXE
        C:\Program Files\SFR\Pack Sécurité\Anti-Virus\fsqh.exe
        C:\Program Files\SFR\Pack Sécurité\Common\FAMEH32.EXE
        C:\Program Files\SFR\Pack Sécurité\FSPC\fspc.exe
        C:\Program Files\SFR\Pack Sécurité\Anti-Virus\fssm32.exe
        C:\Program Files\SFR\Pack Sécurité\ORSP Client\fsorsp.exe
        C:\Program Files\SFR\Pack Sécurité\FSAUA\program\fsaua.exe
        C:\WINDOWS\system32\lxcrcoms.exe
        C:\Program Files\SFR\Pack Sécurité\FSGUI\fsguidll.exe
        C:\Program Files\SFR\Pack Sécurité\FWES\Program\fsdfwd.exe
        C:\WINDOWS\System32\alg.exe
        C:\Program Files\SFR\Pack Sécurité\FSAUA\program\fsus.exe
        C:\WINDOWS\system32\wbem\wmiapsrv.exe
        C:\Program Files\Windows Live\Contacts\wlcomm.exe
        C:\Program Files\SFR\Pack Sécurité\Anti-Virus\fsav32.exe
        C:\Program Files\Windows Live\Messenger\msnmsgr.exe
        C:\Program Files\KONAMI\Pro Evolution Soccer 2009\pes2009.exe
        C:\Program Files\Mozilla Firefox\firefox.exe
        C:\WINDOWS\system32\wuauclt.exe
        C:\Documents and Settings\Kévin\Mes documents\Téléchargements\RSIT.exe
        C:\WINDOWS\system32\wbem\wmiprvse.exe
        C:\Documents and Settings\Kévin\Mes documents\Téléchargements\Kévin.exe

        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.bing.com/spresults.aspx
        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?fdr=lc&toHttps=1&redig=FA6AD360E0BE4C719380F8C470A3D3A8
        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
        R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.bing.com/spresults.aspx
        R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
        R3 - Default URLSearchHook is missing
        O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
        O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.3.1.15.dll
        O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
        O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
        O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
        O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
        O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
        O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
        O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
        O4 - HKLM\..\Run: [LXCRCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCRtime.dll,_RunDLLEntry@16
        O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Fichiers communs\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
        O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\SFR\Pack Sécurité\Common\FSM32.EXE" /splash
        O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\SFR\Pack Sécurité\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
        O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
        O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
        O4 - HKCU\..\Run: [SuperCopier2.exe] C:\Program Files\SuperCopier2\SuperCopier2.exe
        O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
        O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
        O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
        O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
        O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
        O4 - HKUS\S-1-5-18\..\RunOnce: [WUAppSetup] C:\Program Files\Fichiers communs\logishrd\WUApp32.exe -v 0x046d -p 0x092e -f video -m logitech -d 11.70.1193.0 (User 'SYSTEM')
        O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
        O4 - HKUS\.DEFAULT\..\RunOnce: [WUAppSetup] C:\Program Files\Fichiers communs\logishrd\WUApp32.exe -v 0x046d -p 0x092e -f video -m logitech -d 11.70.1193.0 (User 'Default user')
        O4 - Global Startup: Barre d'état système d'ATI CATALYST.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
        O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
        O8 - Extra context menu item: Tout télécharger avec BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
        O8 - Extra context menu item: Télécharger avec BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
        O8 - Extra context menu item: Télécharger toutes les vidéos avec BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
        O9 - Extra button: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\SFR\Pack Sécurité\FSPC\fspcmsie.dll
        O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\SFR\Pack Sécurité\FSPC\fspcmsie.dll
        O9 - Extra 'Tools' menuitem: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\SFR\Pack Sécurité\FSPC\fspcmsie.dll
        O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
        O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.3.1.15.dll/206 (file missing)
        O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
        O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O17 - HKLM\System\CCS\Services\Tcpip\..\{5F071909-5058-4951-AE0D-B3A5C89CE503}: NameServer = 89.2.0.1,89.2.0.2
        O18 - Protocol: bw+0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw+0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw-0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw-0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw00 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw00s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw10 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw10s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw20 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw20s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw30 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw30s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw40 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw40s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw50 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw50s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw60 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw60s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw70 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw70s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw80 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw80s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw90 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw90s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwa0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwa0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwb0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwb0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwc0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwc0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwd0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwd0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwe0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwe0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwf0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwf0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
        O18 - Protocol: bwg0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwg0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwh0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwh0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwi0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwi0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwj0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwj0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwk0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwk0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwl0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwl0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwm0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwm0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwn0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwn0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwo0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwo0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwp0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwp0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwq0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwq0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwr0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwr0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bws0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bws0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwt0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwt0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwu0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwu0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwv0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwv0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bww0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bww0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwx0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwx0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwy0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwy0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwz0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwz0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: offline-8876480 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
        O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
        O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
        O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\SFR\Pack Sécurité\Anti-Virus\fsgk32st.exe
        O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
        O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\SFR\Pack Sécurité\FSAUA\program\fsaua.exe
        O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\SFR\Pack Sécurité\FWES\Program\fsdfwd.exe
        O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\SFR\Pack Sécurité\Common\FSMA32.EXE
        O23 - Service: F-Secure ORSP Client (FSORSPClient) - F-Secure Corporation - C:\Program Files\SFR\Pack Sécurité\ORSP Client\fsorsp.exe
        O23 - Service: Google Update Service (gupdate1c9c06812eac5bc) (gupdate1c9c06812eac5bc) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
        O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
        O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
        O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\Logitech\SrvLnch\SrvLnch.exe
        O23 - Service: lxcr_device - - C:\WINDOWS\system32\lxcrcoms.exe
        1. Maddy-972 Auteur
          Voila le rapport après surppression :
          [ Rapport ToolsCleaner version 2.3.10 (par A.Rothstein & dj QUIOU) ]

          --> Recherche:

          C:\TB.txt: trouvé !
          C:\Toolbar SD: trouvé !
          C:\Rsit: trouvé !
          C:\Documents and Settings\Kévin\Mes documents\Téléchargements\HijackThis.exe: trouvé !
          C:\Documents and Settings\Kévin\Mes documents\Téléchargements\ToolBarSD.exe: trouvé !
          C:\Documents and Settings\Kévin\Mes documents\Téléchargements\hijackthis.log: trouvé !
          C:\Documents and Settings\Kévin\Mes documents\Téléchargements\Rsit.exe: trouvé !
          C:\Program Files\trend micro\HijackThis.exe: trouvé !
          C:\Program Files\trend micro\hijackthis.log: trouvé !

          ---------------------------------
          --> Suppression:

          C:\Documents and Settings\Kévin\Mes documents\Téléchargements\HijackThis.exe: supprimé !
          C:\Documents and Settings\Kévin\Mes documents\Téléchargements\ToolBarSD.exe: supprimé !
          C:\Program Files\trend micro\HijackThis.exe: supprimé !
          C:\TB.txt: supprimé !
          C:\Documents and Settings\Kévin\Mes documents\Téléchargements\hijackthis.log: supprimé !
          C:\Documents and Settings\Kévin\Mes documents\Téléchargements\Rsit.exe: ERREUR DE SUPPRESSION !!
          C:\Program Files\trend micro\hijackthis.log: supprimé !
          C:\Toolbar SD: supprimé !
          C:\Rsit: ERREUR DE SUPPRESSION !!
          2. Maddy-972 Auteur
            Hi hi , non j'avais pas fait supprimer.
            Je recommence et je fais aussi un rapport RSIT.
            En fait kan F-Secure a trouvé 11 virus, j'ai essayé de supprimer des trucs moi même. J'ai peut etre eliminé quelques virus ^^
            2. jfkpresident Contributeur sécurité
              Si je peux me permettre j'aurais bien voulu un nouveau rapport RSIT (je pense qu'il reste des infections).

              En plus F-secure avait trouvés des rootkits ,il doivent etre encore présents ?!
              1. Utilisateur anonyme
                * Lorsque la recherche est terminée ToolsCleaner affiche une liste des différents outils trouvés, clique sur "Suppression" afin de les supprimer.

                T'as pas fait sa ^^

                Faut cliquer sur suppression pour qu'il les supprime ...
                1. Maddy-972 Auteur
                  voila le rapport je crois:
                  [ Rapport ToolsCleaner version 2.3.10 (par A.Rothstein & dj QUIOU) ]

                  --> Recherche:

                  C:\TB.txt: trouvé !
                  C:\Toolbar SD: trouvé !
                  C:\Rsit: trouvé !
                  C:\Documents and Settings\Kévin\Mes documents\Téléchargements\HijackThis.exe: trouvé !
                  C:\Documents and Settings\Kévin\Mes documents\Téléchargements\ToolBarSD.exe: trouvé !
                  C:\Documents and Settings\Kévin\Mes documents\Téléchargements\hijackthis.log: trouvé !
                  C:\Documents and Settings\Kévin\Mes documents\Téléchargements\Rsit.exe: trouvé !
                  C:\Program Files\trend micro\HijackThis.exe: trouvé !
                  C:\Program Files\trend micro\hijackthis.log: trouvé !
                  1. Utilisateur anonyme
                    C'est impécable ! jfkpresident, ta bien désinfecter =)

                    Ont va se débarrasser des outils de désinfection,

                    ~~~~~~~~ToolsCleaner~~~~~~~~~~

                    ◆ Installe sur ton bureaux Toolscleaner depuis le lien du haut
                    ◆ Double-clique dessus, puis clique sur Recherche --> Le programme va chercher les utilitaires installés

                    ((!)) Il se peut que la fenêtre devienne blanche pendant le scan, c'est normal ! ((!))

                    Copie-colle le contenu du rapport qui apparait dans la fenêtre blanche.

                    * Lorsque la recherche est terminée ToolsCleaner affiche une liste des différents outils trouvés, clique sur "Suppression" afin de les supprimer.

                    ==> Vide ta corbeille
                    ==> Quitte le programme

                    Et enfin postes le rapport qui se trouve ici >>> C:\TCleaner.txt
                    1. Maddy-972 Auteur
                      voici le rapport :
                      Logfile of Trend Micro HijackThis v2.0.2
                      Scan saved at 18:25:20, on 09/09/2009
                      Platform: Windows XP SP3 (WinNT 5.01.2600)
                      MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
                      Boot mode: Normal

                      Running processes:
                      C:\WINDOWS\System32\smss.exe
                      C:\WINDOWS\system32\csrss.exe
                      C:\WINDOWS\system32\winlogon.exe
                      C:\WINDOWS\system32\services.exe
                      C:\WINDOWS\system32\lsass.exe
                      C:\WINDOWS\system32\Ati2evxx.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\WINDOWS\System32\svchost.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\WINDOWS\system32\spoolsv.exe
                      c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
                      C:\WINDOWS\system32\Ati2evxx.exe
                      C:\WINDOWS\Explorer.EXE
                      C:\WINDOWS\system32\svchost.exe
                      C:\Program Files\Bonjour\mDNSResponder.exe
                      C:\Program Files\SFR\Pack Sécurité\Anti-Virus\fsgk32st.exe
                      C:\Program Files\SFR\Pack Sécurité\Common\FSMA32.EXE
                      C:\Program Files\SFR\Pack Sécurité\Anti-Virus\FSGK32.EXE
                      C:\Program Files\SFR\Pack Sécurité\Common\FSMB32.EXE
                      C:\Program Files\Java\jre6\bin\jqs.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
                      C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
                      C:\Program Files\Analog Devices\Core\smax4pnp.exe
                      C:\Program Files\SFR\Pack Sécurité\Common\FSM32.EXE
                      C:\Program Files\Java\jre6\bin\jusched.exe
                      C:\WINDOWS\system32\ctfmon.exe
                      C:\Program Files\SuperCopier2\SuperCopier2.exe
                      C:\Program Files\Windows Live\Messenger\msnmsgr.exe
                      C:\Program Files\DAEMON Tools Lite\daemon.exe
                      C:\Program Files\BitComet\BitComet.exe
                      C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
                      C:\Program Files\SFR\Pack Sécurité\Common\FCH32.EXE
                      C:\Program Files\SFR\Pack Sécurité\Anti-Virus\fsqh.exe
                      C:\Program Files\SFR\Pack Sécurité\Common\FAMEH32.EXE
                      C:\Program Files\SFR\Pack Sécurité\FSPC\fspc.exe
                      C:\Program Files\SFR\Pack Sécurité\Anti-Virus\fssm32.exe
                      C:\Program Files\SFR\Pack Sécurité\ORSP Client\fsorsp.exe
                      C:\Program Files\SFR\Pack Sécurité\FSAUA\program\fsaua.exe
                      C:\WINDOWS\system32\lxcrcoms.exe
                      C:\Program Files\SFR\Pack Sécurité\FSGUI\fsguidll.exe
                      C:\Program Files\SFR\Pack Sécurité\FWES\Program\fsdfwd.exe
                      C:\WINDOWS\System32\alg.exe
                      C:\Program Files\SFR\Pack Sécurité\FSAUA\program\fsus.exe
                      C:\WINDOWS\system32\wbem\wmiapsrv.exe
                      C:\Program Files\Windows Live\Contacts\wlcomm.exe
                      C:\Program Files\SFR\Pack Sécurité\Anti-Virus\fsav32.exe
                      C:\Program Files\Mozilla Firefox\firefox.exe
                      C:\Documents and Settings\Kévin\Mes documents\Téléchargements\HiJackThis.exe
                      C:\WINDOWS\system32\wbem\wmiprvse.exe

                      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.bing.com/spresults.aspx
                      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?fdr=lc&toHttps=1&redig=FA6AD360E0BE4C719380F8C470A3D3A8
                      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
                      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.bing.com/spresults.aspx
                      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
                      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                      R3 - Default URLSearchHook is missing
                      O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
                      O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.3.1.15.dll
                      O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
                      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
                      O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
                      O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
                      O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
                      O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
                      O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
                      O4 - HKLM\..\Run: [LXCRCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCRtime.dll,_RunDLLEntry@16
                      O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Fichiers communs\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
                      O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\SFR\Pack Sécurité\Common\FSM32.EXE" /splash
                      O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\SFR\Pack Sécurité\FSGUI\TNBUtil.exe" /CHECKALL /WAITFORSW
                      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
                      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
                      O4 - HKCU\..\Run: [SuperCopier2.exe] C:\Program Files\SuperCopier2\SuperCopier2.exe
                      O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
                      O4 - HKCU\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\daemon.exe" -autorun
                      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
                      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
                      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
                      O4 - HKUS\S-1-5-18\..\RunOnce: [WUAppSetup] C:\Program Files\Fichiers communs\logishrd\WUApp32.exe -v 0x046d -p 0x092e -f video -m logitech -d 11.70.1193.0 (User 'SYSTEM')
                      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
                      O4 - HKUS\.DEFAULT\..\RunOnce: [WUAppSetup] C:\Program Files\Fichiers communs\logishrd\WUApp32.exe -v 0x046d -p 0x092e -f video -m logitech -d 11.70.1193.0 (User 'Default user')
                      O4 - Global Startup: Barre d'état système d'ATI CATALYST.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
                      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
                      O8 - Extra context menu item: Tout télécharger avec BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
                      O8 - Extra context menu item: Télécharger avec BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
                      O8 - Extra context menu item: Télécharger toutes les vidéos avec BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
                      O9 - Extra button: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\SFR\Pack Sécurité\FSPC\fspcmsie.dll
                      O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\SFR\Pack Sécurité\FSPC\fspcmsie.dll
                      O9 - Extra 'Tools' menuitem: Parental... - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\SFR\Pack Sécurité\FSPC\fspcmsie.dll
                      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
                      O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.3.1.15.dll/206 (file missing)
                      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
                      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                      O17 - HKLM\System\CCS\Services\Tcpip\..\{5F071909-5058-4951-AE0D-B3A5C89CE503}: NameServer = 89.2.0.1,89.2.0.2
                      O18 - Protocol: bw+0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw+0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw-0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw-0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw00 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw00s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw10 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw10s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw20 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw20s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw30 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw30s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw40 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw40s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw50 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw50s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw60 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw60s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw70 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw70s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw80 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw80s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw90 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw90s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwa0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwa0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwb0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwb0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwc0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwc0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwd0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwd0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwe0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwe0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwf0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwf0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
                      O18 - Protocol: bwg0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwg0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwh0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwh0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwi0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwi0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwj0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwj0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwk0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwk0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwl0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwl0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwm0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwm0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwn0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwn0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwo0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwo0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwp0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwp0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwq0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwq0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwr0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwr0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bws0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bws0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwt0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwt0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwu0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwu0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwv0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwv0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bww0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bww0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwx0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwx0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwy0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwy0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwz0 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwz0s - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: offline-8876480 - {77C032BD-44BA-4C98-972A-AF5569834460} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
                      O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
                      O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
                      O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corporation - C:\Program Files\SFR\Pack Sécurité\Anti-Virus\fsgk32st.exe
                      O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
                      O23 - Service: F-Secure Automatic Update Agent (FSAUA) - F-Secure Corporation - C:\Program Files\SFR\Pack Sécurité\FSAUA\program\fsaua.exe
                      O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\SFR\Pack Sécurité\FWES\Program\fsdfwd.exe
                      O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\SFR\Pack Sécurité\Common\FSMA32.EXE
                      O23 - Service: F-Secure ORSP Client (FSORSPClient) - F-Secure Corporation - C:\Program Files\SFR\Pack Sécurité\ORSP Client\fsorsp.exe
                      O23 - Service: Google Update Service (gupdate1c9c06812eac5bc) (gupdate1c9c06812eac5bc) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
                      O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
                      O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
                      O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\Logitech\SrvLnch\SrvLnch.exe
                      O23 - Service: lxcr_device - - C:\WINDOWS\system32\lxcrcoms.exe
                      4. Maddy-972 Auteur
                        voila le rapport :
                        -----------\\ ToolBar S&D 1.2.9 XP/Vista

                        Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
                        X86-based PC ( Uniprocessor Free : AMD Athlon(tm) 64 Processor 3500+ )
                        BIOS : Phoenix - AwardBIOS v6.00PG
                        USER : Kévin ( Administrator )
                        BOOT : Normal boot
                        Antivirus : Pack sécurité 8.02 8.02 (Activated)
                        Firewall : Pack sécurité 8.02 8.02 (Activated)
                        C:\ (Local Disk) - NTFS - Total:153 Go (Free:37 Go)
                        D:\ (CD or DVD)
                        E:\ (Local Disk) - FAT32 - Total:465 Go (Free:133 Go)
                        F:\ (CD or DVD)

                        "C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 )
                        Option : [2] ( 09/09/2009|17:58 )

                        -----------\\ SUPPRESSION

                        Supprime! - [Service] ASKService
                        Supprime! - [Service] ASKUpgrade
                        Supprime! - C:\DOCUME~1\KVIN~1\Bureau\Kenzy feat Shaolin -Tout sa ou vle (Princess Mind Riddim By Mr ToD) (www.kalottlyrikal.net).mp3
                        Supprime! - C:\Program Files\AskBarDis\bar
                        Supprime! - C:\Program Files\AskBarDis\unins000.dat
                        Supprime! - C:\Program Files\AskBarDis\unins000.exe
                        Supprime! - C:\Program Files\DAEMON Tools Toolbar\_DTLite.xml
                        Supprime! - C:\Program Files\AskBarDis
                        Supprime! - C:\Program Files\DAEMON Tools Toolbar

                        -----------\\ Recherche de Fichiers / Dossiers ...

                        -----------\\ Extensions

                        (K‚vin) - {20a82645-c095-46ed-80e3-08825760534b} => chrome_user

                        -----------\\ [..\Internet Explorer\Main]

                        [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
                        "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
                        "Start Page"="https://www.google.fr/?gws_rd=ssl"
                        "Search Page"="https://www.bing.com/?fdr=lc&toHttps=1&redig=FA6AD360E0BE4C719380F8C470A3D3A8"
                        "Search Bar"="http://www.bing.com/spresults.aspx"

                        [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
                        "Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
                        "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
                        "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
                        "Start Page"="https://www.msn.com/fr-fr/"
                        "Search Bar"="https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm"

                        --------------------\\ Recherche d'autres infections

                        Aucune autre infection trouvée !

                        1 - "C:\ToolBar SD\TB_1.txt" - 09/09/2009|17:51 - Option : [1]
                        2 - "C:\ToolBar SD\TB_2.txt" - 09/09/2009|18:01 - Option : [2]

                        -----------\\ Fin du rapport a 18:01:11,67
                        1. Utilisateur anonyme
                          ~~~~~~~~~~~~Nettoyage~~~~~~~~~~~~~

                          ► Pour lancer le nettoyage via ToolBar S&D, relance le programme.
                          ► Dans le menu principal, tape 2 et valide

                          Le menu démarrer et les icônes vont à nouveau disparaître.. c'est normal.
                          Le nettoyage va prendre quelques minutes...

                          (!) Ne ferme pas la fenètre pendant la suppression (!)

                          Une fois le nettoyage terminée, le rapport de nettoyage s'ouvre, sélectionne tout copie son intégralité et colle le dans ta prochaine réponse...
                          1. Maddy-972 Auteur
                            Et voici le rapport que j'ai obtenu :

                            -----------\\ ToolBar S&D 1.2.9 XP/Vista

                            Microsoft Windows XP Édition familiale ( v5.1.2600 ) Service Pack 3
                            X86-based PC ( Uniprocessor Free : AMD Athlon(tm) 64 Processor 3500+ )
                            BIOS : Phoenix - AwardBIOS v6.00PG
                            USER : Kévin ( Administrator )
                            BOOT : Normal boot
                            Antivirus : Pack sécurité 8.02 8.02 (Activated)
                            Firewall : Pack sécurité 8.02 8.02 (Activated)
                            C:\ (Local Disk) - NTFS - Total:153 Go (Free:37 Go)
                            D:\ (CD or DVD)
                            E:\ (Local Disk) - FAT32 - Total:465 Go (Free:133 Go)
                            F:\ (CD or DVD)

                            "C:\ToolBar SD" ( MAJ : 22-08-2009|18:42 )
                            Option : [1] ( 09/09/2009|17:47 )

                            -----------\\ Recherche de Fichiers / Dossiers ...

                            [Service] ASKService
                            [Service] ASKUpgrade
                            C:\DOCUME~1\KVIN~1\Bureau\Kenzy feat Shaolin -Tout sa ou vle (Princess Mind Riddim By Mr ToD) (www.kalottlyrikal.net).mp3
                            C:\Program Files\AskBarDis
                            C:\Program Files\AskBarDis\bar
                            C:\Program Files\AskBarDis\unins000.dat
                            C:\Program Files\AskBarDis\unins000.exe
                            C:\Program Files\AskBarDis\bar\bin
                            C:\Program Files\AskBarDis\bar\Cache
                            C:\Program Files\AskBarDis\bar\History
                            C:\Program Files\AskBarDis\bar\Settings
                            C:\Program Files\AskBarDis\bar\bin\askBar.dll
                            C:\Program Files\AskBarDis\bar\bin\askPopStp.dll
                            C:\Program Files\AskBarDis\bar\bin\AskService.exe
                            C:\Program Files\AskBarDis\bar\bin\AskSplash.exe
                            C:\Program Files\AskBarDis\bar\bin\AskTBApp.exe
                            C:\Program Files\AskBarDis\bar\bin\ASKUpgrade.exe
                            C:\Program Files\AskBarDis\bar\bin\psvince.dll
                            C:\Program Files\AskBarDis\bar\Cache\000579AC
                            C:\Program Files\AskBarDis\bar\Cache\018A7840.bin
                            C:\Program Files\AskBarDis\bar\Cache\018A7A34.bin
                            C:\Program Files\AskBarDis\bar\Cache\018A7AFF.bin
                            C:\Program Files\AskBarDis\bar\Cache\018A7BBB.bin
                            C:\Program Files\AskBarDis\bar\Cache\018A7C86.bin
                            C:\Program Files\AskBarDis\bar\Cache\018A7D51.bin
                            C:\Program Files\AskBarDis\bar\Cache\018A7E3C.bin
                            C:\Program Files\AskBarDis\bar\Cache\files.ini
                            C:\Program Files\AskBarDis\bar\History\search
                            C:\Program Files\AskBarDis\bar\Settings\AskLogo.ico
                            C:\Program Files\AskBarDis\bar\Settings\config.dat
                            C:\Program Files\AskBarDis\bar\Settings\config.dat.bak
                            C:\Program Files\AskBarDis\bar\Settings\prevcfg.htm
                            C:\Program Files\AskBarDis\bar\Settings\prevCfg2.htm
                            C:\Program Files\DAEMON Tools Toolbar
                            C:\Program Files\DAEMON Tools Toolbar\_DTLite.xml

                            -----------\\ Extensions

                            (K‚vin) - {20a82645-c095-46ed-80e3-08825760534b} => chrome_user

                            -----------\\ [..\Internet Explorer\Main]

                            [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
                            "Local Page"="C:\\WINDOWS\\system32\\blank.htm"
                            "Start Page"="https://www.google.fr/?gws_rd=ssl"
                            "Search Page"="https://www.bing.com/?fdr=lc&toHttps=1&redig=FA6AD360E0BE4C719380F8C470A3D3A8"
                            "Search Bar"="http://www.bing.com/spresults.aspx"

                            [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
                            "Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
                            "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
                            "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
                            "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home"
                            "Search Bar"="https://www.bing.com/?toHttps=1&redig=8F3F334EA60E4B1CB4D040DCFE393A89{SUB_RFC1766}/srchasst/srchasst.htm"

                            --------------------\\ Recherche d'autres infections

                            Aucune autre infection trouvée !

                            1 - "C:\ToolBar SD\TB_1.txt" - 09/09/2009|17:51 - Option : [1]

                            -----------\\ Fin du rapport a 17:51:20,12
                            1. Maddy-972 Auteur
                              Me revoila!! Désolée j'ai eu quelques petits soucis d'internet!
                              Alors j'avais déja branché tous mes disques durs externes. Je vais faire les manipulations recommandées.
                              Merci pour vos réponses
                              2. jfkpresident Contributeur sécurité 
                                C'est pas moi qui est infecté xD


                                Je sais bien mais c'était juste parceque je passais par la sans vouloir marcher sur tes "plats de bandes" .

                                Bonne continuation a vous deux -;)
                                • 1
                                • 2