[virus] ou [malware]

Résolu
PASCAL80 -  
Bonjour

J'ai un problème similaire à celui de Yannick (message "Satané Virus" du 05/09/2005) et comme lui je n'arrive pas à m'en débarasser.

J'ai depuis un bon moment des pop-up "only the best" qui s'affichent de façon incessante ? et des favoris indésirables qui polluent ma liste (banques, liens divers, sites pornos , jeux, etc ...)

J'ai essayé de faire un peu de ménage en suivant les conseils de BALTRAP34. C'est légèrement mieux mais pas suffisant car cela ne tiens pas --> après 2 minutes de navigation tous ces favoris et pop-up réapparaissent ??

Je vous poste mon log Hijack, si quelqu'un peux m'aider à résoudre ce problème.

Merci d'avance

Logfile of HijackThis v1.99.1
Scan saved at 15:30:01, on 10/09/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\addwd32.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\imapi.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
C:\WINDOWS\system32\javaxz.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\WINDOWS\explorer.exe
C:\Documents and Settings\PATRON\Bureau\AntiSpy\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\zkutm.dll/sp.html#37049
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\psmzw.dll/sp.html#37049
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\dzhzo.dll/sp.html#37049
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\dzhzo.dll/sp.html#37049
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\dzhzo.dll/sp.html#37049
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\dzhzo.dll/sp.html#37049
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,(Default) = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\dzhzo.dll/sp.html#37049
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,(Default) = about:blank
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=SECURITOO:8080
R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {40679120-E85E-36A3-1F67-C69B6C67564C} - C:\WINDOWS\msqn32.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [javaxz.exe] C:\WINDOWS\system32\javaxz.exe
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: bw+0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O23 - Service: Network Security Service (NSS) ( 11Fßä#·ºÄÖ`I) - Unknown owner - C:\WINDOWS\system32\addwd32.exe" /s (file missing)
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
Configuration: xp patch2
internet explorer 6

25 réponses

Résumé de la discussion

Problème d'infection persistante sur Windows XP SP2 se manifeste par des pop-up incessants et des favoris indésirables polluant le navigateur, avec un log HijackThis détaillant de nombreuses modifications système. Des tentatives de nettoyage, notamment autour des pop-ups et des favoris indésirables, améliorent légèrement les symptômes mais ne tiennent pas, car ces éléments réapparaissent après quelques minutes de navigation. Le log HijackThis énumère des entrées suspectes, notamment des chaînes proxy redirigeant le trafic via un serveur intermédiaire sur le port 8080 et divers composants malveillants liés à Internet Explorer. En cas d'échec des premières tentatives, d'autres interventions préconisent la désactivation ou suppression de services suspects et la restauration des paramètres Proxy pour rétablir une navigation sans redirection.

Bobot (l’IA à votre service)
  2. PASCAL80 Auteur
    Problème résolu par Régis59 par application de sa procédure de nettoyage (voir détail ci-dessus)
    1. Utilisateur anonyme
      salut pascal,
      oui si tu pouvais ouvrir un autre poste....
      des que je peux je rechercherais...

      a+
      1. PASCAL80 Auteur
        Ok Régis

        Merci encore mille fois pour ton intervention efficace !!
    2. PASCAL80 Auteur
      Bonjour Régis

      Mon soucis initial est résolu !! Merci beaucoup de ton aide car je ne m'en serai jamais sorti seul.

      Il me reste un petit problème que j'ai dû créé lors des manip précédentes. Lorsque je veux éteindre ou redémarrer par le menu habituel cela ne fonctionne plus. Je suis obliger de faire : démarrer / fermer la session / changer utilisateur / arrêter l'ordinateur / arrêter / et forcer l'extinction en acceptant de fermer la session utilisateur ouverte ?

      Je ne sais pas si je dois réouvrir un message ou continuer avec celui-ci. Merci d'avance.
      3. PASCAL80 Auteur
        Bonjour Régis

        J'ai effectué les manip. J'ai dû en effet le faire sous ma session pour pouvoir voir les lignes à fixer.

        Voici le dernier Hijackthis

        Merci de ton contrôle.

        Bon Dimanche.

        Logfile of HijackThis v1.99.1
        Scan saved at 13:19:57, on 25/09/2005
        Platform: Windows XP SP2 (WinNT 5.01.2600)
        MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

        Running processes:
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
        C:\WINDOWS\system32\spoolsv.exe
        C:\Program Files\Norton AntiVirus\navapsvc.exe
        C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\system32\wscntfy.exe
        C:\WINDOWS\Explorer.EXE
        C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
        C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
        C:\Program Files\QuickTime\qttask.exe
        C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
        C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
        C:\Program Files\Antipub\antipub.exe
        C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
        C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
        C:\Program Files\Messenger\msmsgs.exe
        C:\WINDOWS\REGEDIT.EXE
        C:\WINDOWS\system32\wuauclt.exe
        C:\Documents and Settings\PATRON\Bureau\AntiSpy\HijackThis.exe

        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wanadoo.fr
        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
        R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=SECURITOO:8080
        R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
        O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
        O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
        O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
        O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
        O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
        O4 - HKLM\..\Run: [ccApp] C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
        O4 - HKLM\..\Run: [ccRegVfy] C:\Program Files\Fichiers communs\Symantec Shared\ccRegVfy.exe
        O4 - HKLM\..\Run: [Advanced Tools Check] C:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE
        O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
        O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
        O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
        O4 - Startup: Anti-Pub.lnk = C:\Program Files\Antipub\antipub.exe
        O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
        O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
        O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSAG~1\Messager Wanadoo.exe
        O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSAG~1\Messager Wanadoo.exe
        O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://www-secure.symantec.com/techsupp/asa/LSSupCtl.cab
        O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan8/oscan8.cab
        O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/asa/SymAData.cab
        O18 - Protocol: bw+0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw+0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw-0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw-0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw00 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw00s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw10 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw10s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw20 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw20s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw30 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw30s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw40 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw40s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw50 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw50s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw60 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw60s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw70 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw70s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw80 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw80s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw90 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw90s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwa0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwa0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwb0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwb0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwc0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwc0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwd0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwd0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwe0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwe0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwf0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwf0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
        O18 - Protocol: bwg0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwg0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwh0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwh0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwi0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwi0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwj0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwj0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwk0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwk0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwl0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwl0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwm0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwm0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwn0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwn0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwo0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwo0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwp0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwp0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwq0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwq0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwr0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwr0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bws0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bws0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwt0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwt0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwu0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwu0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwv0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwv0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bww0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bww0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwx0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwx0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwy0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwy0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwz0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwz0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: offline-8876480 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
        O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
        O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
        O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
        O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exe
        1. Utilisateur anonyme
          re,
          ben deja il en reste un peu

          En mode sans echec (ou sinon en normal si apres avoir ete en sans echec tu ne trouve pas ces lignes dans hijack this)

          ----------------------------------------------------------------------------
          ¤Relance HijackThis, coche les cases devant ces lignes et ensuite clique sur fix checked :

          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\twbwl.dll/sp.html#37049

          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

          R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\twbwl.dll/sp.html#37049

          R3 - Default URLSearchHook is missing

          ----------------------------------------------------------------------------
          ¤Recherche et supprime ceci:
          attention seulement les fichiers (si présents)

          C:\WINDOWS\twbwl.dll

          ------>passe about buster 5 fois !

          redemarre en normal et remet un hijack this

          PS:
          Workstation NetLogon Service = CoolWebSearch HiJacker Service R1=res:xxxx.dll/sp.html = infection = donc non pour ce que tu me demandais...
          1. PASCAL80 Auteur
            Salut Régis

            Je crois que c'est bon cette fois !!

            Je me suis connecté et reconnecté plusieurs fois à wanadoo sans voir réapparaitre ces fichus favoris !!!!

            Super merci !!!!

            Il me reste un petit soucis que j'ai dû créé lors des manip précédentes. Lorsque je veux éteindre ou redémarrer par le menu habituel cela ne fonctionne plus. Je suis obliger de faire : démarrer / fermer la session / changer utilisateur / arrêter l'ordinateur / arrêter / et forcer l'extinction en acceptant de fermer la session utilisateur ouverte ?

            Peut-être s'agit-il du premier service Network Security Service (NSS) que j'ai arrêté car j'ai le pbe depuis ce temps ?

            Je te joins un nouveau hijack pour vérification.

            Logfile of HijackThis v1.99.1
            Scan saved at 18:39:10, on 24/09/2005
            Platform: Windows XP SP2 (WinNT 5.01.2600)
            MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

            Running processes:
            C:\WINDOWS\System32\smss.exe
            C:\WINDOWS\system32\winlogon.exe
            C:\WINDOWS\system32\services.exe
            C:\WINDOWS\system32\lsass.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\System32\svchost.exe
            C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
            C:\WINDOWS\system32\spoolsv.exe
            C:\Program Files\Norton AntiVirus\navapsvc.exe
            C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
            C:\WINDOWS\System32\svchost.exe
            C:\WINDOWS\system32\wscntfy.exe
            C:\WINDOWS\Explorer.EXE
            C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
            C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
            C:\Program Files\QuickTime\qttask.exe
            C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
            C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
            C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
            C:\Program Files\Antipub\antipub.exe
            C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
            C:\WINDOWS\REGEDIT.EXE
            C:\Program Files\Wanadoo\EspaceWanadoo.exe
            C:\Program Files\Wanadoo\ComComp.exe
            C:\Program Files\Wanadoo\Watch.exe
            C:\Program Files\Internet Explorer\iexplore.exe
            C:\Program Files\Messenger\msmsgs.exe
            C:\Documents and Settings\PATRON\Bureau\AntiSpy\HijackThis.exe

            R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.wanadoo.fr/go/page_recherche/
            R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\twbwl.dll/sp.html#37049
            R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wanadoo.fr
            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
            R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\twbwl.dll/sp.html#37049
            R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
            R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=SECURITOO:8080
            R3 - Default URLSearchHook is missing
            O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
            O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
            O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
            O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
            O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
            O4 - HKLM\..\Run: [ccApp] C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
            O4 - HKLM\..\Run: [ccRegVfy] C:\Program Files\Fichiers communs\Symantec Shared\ccRegVfy.exe
            O4 - HKLM\..\Run: [Advanced Tools Check] C:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE
            O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
            O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
            O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
            O4 - Startup: Anti-Pub.lnk = C:\Program Files\Antipub\antipub.exe
            O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
            O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
            O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSAG~1\Messager Wanadoo.exe
            O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSAG~1\Messager Wanadoo.exe
            O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://www-secure.symantec.com/techsupp/asa/LSSupCtl.cab
            O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan8/oscan8.cab
            O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/asa/SymAData.cab
            O17 - HKLM\System\CCS\Services\Tcpip\..\{DF6EED23-C640-4B05-8856-33C4BA428D92}: NameServer = 80.10.246.1 80.10.246.132
            O18 - Protocol: bw+0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw+0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw-0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw-0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw00 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw00s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw10 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw10s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw20 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw20s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw30 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw30s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw40 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw40s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw50 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw50s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw60 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw60s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw70 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw70s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw80 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw80s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw90 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw90s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwa0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwa0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwb0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwb0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwc0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwc0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwd0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwd0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwe0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwe0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwf0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwf0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
            O18 - Protocol: bwg0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwg0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwh0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwh0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwi0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwi0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwj0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwj0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwk0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwk0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwl0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwl0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwm0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwm0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwn0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwn0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwo0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwo0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwp0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwp0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwq0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwq0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwr0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwr0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bws0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bws0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwt0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwt0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwu0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwu0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwv0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwv0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bww0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bww0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwx0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwx0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwy0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwy0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwz0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwz0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: offline-8876480 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
            O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
            O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
            O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
            O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exe
            1. Utilisateur anonyme
              salut pascal
              telecharge le et ne fais pas les mises a jour, on va essayer sans !
              actuellement je ne vois pas de logiciel le remplacant, n autre lien que je pourrais te donner mais essayons comme ca dabord

              a+
              1. PASCAL80 Auteur
                Régis

                J'ai un soucis avec About Buster.

                Lorsque je le lance directement, il tourne parfaitement et détecte des choses.

                Lorsque je clique sur "check for update", j'ai le message d'erreur suivant : Erreur d'exécution 5, argument ou appel de procédure incorrect ?? Après, il est impossible de le relancer.

                Je l'ai supprimé et réinstallé plusieurs fois sans succès. A chaque fois l'update, le fait planter.

                Y aurait-il une manip particulière à faire ou un autre produit équivalent que je pourrais utiliser ?

                Merci d'avance
                1. Utilisateur anonyme
                  Bonjour,

                  Méthode à suivre dans l'ordre...
                  ----------------------------------------------------------------------------
                  ¤Télécharge ces logiciels mais que tu n‘utilises pas tout de suite:

                  1/Spybot S&D 1.4 <<nouvelle version
                  http://www.safer-networking.org/fr/index.html

                  Démo d’utilisation (merci à Balltrap34 pour cette réalisation)
                  http://pageperso.aol.fr/Balltrap34/demo%20spybot.htm

                  2/Ad-Aware SE 1.06 <<nouvelle version
                  http://www.lavasoftusa.com/software/adaware/
                  -Une aide:
                  http://www.tutopat.com/viewtopic.php?t=1191
                  - installe le patch français, tu pourras le trouver ici:
                  http://download.lavasoft.de.edgesuite.net/public/pllangs.exe
                  et une petite vidéo d'utilisation ici:(merci à Moe31 pour cette réalisation)
                  http://pageperso.aol.fr/balltrap34/adawrevid.asf

                  3/Clean Up 40:
                  http://pageperso.aol.fr/balltrap34/CleanUp40.exe
                  -aide en image:(merci à Balltrap34)
                  http://pageperso.aol.fr/balltrap34/democleanup.htm

                  8/about buster:
                  http://www.majorgeeks.com/download4289.html

                  Clique "Check for updates".
                  Télécharge les mises à jour
                  referme le
                  on l‘utilisera plus tard.

                  ----------------------------------------------------------------------------
                  ¤Démarre en mode sans échec :
                  Pour cela, tu tapotes la touche F8 dès le début de l’allumage du pc sans t’arrêter
                  Une fenêtre va s’ouvrir tu te déplaces avec les flèches du clavier sur démarrer en mode sans échec puis tape entrée.
                  Une fois sur le bureau s’il n’y a pas toutes les couleurs et autres c’est normal !
                  (Si F8 ne marche pas utilise la touche F5)
                  ----------------------------------------------------------------------------
                  ¤Désactive ta restauration système (uniquement si tu es sous XP):
                  Clic droit sur poste de travail puis,
                  propriété, tu cliques sur onglet restauration système
                  tu coches la case « désactiver la restauration » et applique
                  ----------------------------------------------------------------------------
                  ¤Affiche tous les fichiers et dossiers :
                  Clique sur démarrer/panneau de configuration/outil/option des dossiers/affichage

                  Coche « afficher les fichiers et dossiers cachés »

                  Décoche la case "Masquer les fichiers protégés du système d'exploitation (recommandé)"

                  Décoche « masquer les extensions dont le type est connu »
                  Puis fais «Ok» pour valider les changements.

                  Et appliquer !
                  ----------------------------------------------------------------------------
                  ¤Vide tes fichiers temps et tempory internet file:
                  utilise ceci pour le faire (tu as téléchargé avant)
                  http://pageperso.aol.fr/balltrap34/CleanUp40.exe
                  ----------------------------------------------------------------------------
                  ¤Relance HijackThis, coche les cases devant ces lignes et ensuite clique sur fix checked :

                  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\ejhmk.dll/sp.html#37049

                  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\ejhmk.dll/sp.html#37049

                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank

                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\ejhmk.dll/sp.html#37049

                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\ejhmk.dll/sp.html#37049

                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\ejhmk.dll/sp.html#37049

                  R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\ejhmk.dll/sp.html#37049

                  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\ejhmk.dll/sp.html#37049

                  R3 - Default URLSearchHook is missing

                  O2 - BHO: (no name) - {7E72EF25-4095-D844-4224-B322BFBF6B06} - C:\WINDOWS\system32\javanq.dll

                  O4 - HKLM\..\Run: [msat32.exe] C:\WINDOWS\msat32.exe

                  O23 - Service: Workstation NetLogon Service ( 11Fßä#·ºÄÖ`I) - Unknown owner - C:\WINDOWS\craa32.exe
                  ----------------------------------------------------------------------------
                  ¤Recherche et supprime ceci:
                  attention seulement les fichiers (si présents)

                  C:\WINDOWS\msat32.exe
                  C:\WINDOWS\craa32.exe

                  ----------------------------------------------------------------------------
                  ¤Arrête ces services :

                  Clique sur Démarrer->exécuter->tape: services.msc

                  Double-clique: Service: Workstation NetLogon Service ( 11Fßä#·ºÄÖ`I)

                  Règle-le sur "Arrêté" et "Désactivé".
                  ----------------------------------------------------------------------------
                  ¤ Passe about buster 5 fois, et si il continue a trouver qqchose, continue jusqu a qu il trouve plus rien
                  ----------------------------------------------------------------------------
                  ¤ Passe Ad-Aware et vire tout ce qu’il trouve
                  ----------------------------------------------------------------------------
                  ¤ Passe Spybot et vire tout ce qu’il trouve
                  ----------------------------------------------------------------------------
                  > Tu vides ta poubelle et tu redémarres en mode normal et refait un HijackThis

                  Précise tes soucis s’il en reste....

                  Tiens-moi au courant

                  a+
                  1. PASCAL80 Auteur
                    Bonjour Régis

                    Pas de soucis. Je te joins le dernier Hijack

                    Merci de ton aide

                    Logfile of HijackThis v1.99.1
                    Scan saved at 09:43:59, on 24/09/2005
                    Platform: Windows XP SP2 (WinNT 5.01.2600)
                    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

                    Running processes:
                    C:\WINDOWS\System32\smss.exe
                    C:\WINDOWS\system32\winlogon.exe
                    C:\WINDOWS\system32\services.exe
                    C:\WINDOWS\system32\lsass.exe
                    C:\WINDOWS\system32\svchost.exe
                    C:\WINDOWS\System32\svchost.exe
                    C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
                    C:\WINDOWS\system32\spoolsv.exe
                    C:\WINDOWS\craa32.exe
                    C:\Program Files\Norton AntiVirus\navapsvc.exe
                    C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
                    C:\WINDOWS\System32\svchost.exe
                    C:\WINDOWS\Explorer.EXE
                    C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
                    C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
                    C:\Program Files\QuickTime\qttask.exe
                    C:\WINDOWS\msat32.exe
                    C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
                    C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
                    C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
                    C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
                    C:\WINDOWS\REGEDIT.EXE
                    C:\Program Files\Wanadoo\EspaceWanadoo.exe
                    C:\Program Files\Wanadoo\ComComp.exe
                    C:\Program Files\Wanadoo\Watch.exe
                    C:\Program Files\Antipub\antipub.exe
                    C:\Program Files\Messenger\msmsgs.exe
                    C:\Documents and Settings\PATRON\Bureau\AntiSpy\HijackThis.exe

                    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\ejhmk.dll/sp.html#37049
                    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\ejhmk.dll/sp.html#37049
                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\ejhmk.dll/sp.html#37049
                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\ejhmk.dll/sp.html#37049
                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\ejhmk.dll/sp.html#37049
                    R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\ejhmk.dll/sp.html#37049
                    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\ejhmk.dll/sp.html#37049
                    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
                    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=SECURITOO:8080
                    R3 - Default URLSearchHook is missing
                    O2 - BHO: (no name) - {7E72EF25-4095-D844-4224-B322BFBF6B06} - C:\WINDOWS\system32\javanq.dll
                    O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
                    O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
                    O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
                    O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
                    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                    O4 - HKLM\..\Run: [msat32.exe] C:\WINDOWS\msat32.exe
                    O4 - HKLM\..\Run: [ccApp] C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
                    O4 - HKLM\..\Run: [ccRegVfy] C:\Program Files\Fichiers communs\Symantec Shared\ccRegVfy.exe
                    O4 - HKLM\..\Run: [Advanced Tools Check] C:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE
                    O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe
                    O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\TaskbarIcon.exe
                    O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
                    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
                    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
                    O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSAG~1\Messager Wanadoo.exe
                    O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSAG~1\Messager Wanadoo.exe
                    O16 - DPF: {1F2F4C9E-6F09-47BC-970D-3C54734667FE} (LSSupCtl Class) - https://www-secure.symantec.com/techsupp/asa/LSSupCtl.cab
                    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan8/oscan8.cab
                    O16 - DPF: {CE28D5D2-60CF-4C7D-9FE8-0F47A3308078} (ActiveDataInfo Class) - https://www-secure.symantec.com/techsupp/asa/SymAData.cab
                    O17 - HKLM\System\CCS\Services\Tcpip\..\{DF6EED23-C640-4B05-8856-33C4BA428D92}: NameServer = 80.10.246.1 80.10.246.132
                    O18 - Protocol: bw+0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw+0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw-0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw-0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw00 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw00s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw10 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw10s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw20 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw20s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw30 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw30s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw40 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw40s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw50 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw50s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw60 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw60s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw70 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw70s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw80 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw80s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw90 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bw90s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwa0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwa0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwb0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwb0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwc0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwc0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwd0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwd0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwe0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwe0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwf0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwf0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
                    O18 - Protocol: bwg0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwg0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwh0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwh0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwi0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwi0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwj0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwj0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwk0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwk0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwl0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwl0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwm0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwm0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwn0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwn0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwo0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwo0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwp0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwp0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwq0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwq0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwr0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwr0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bws0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bws0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwt0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwt0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwu0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwu0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwv0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwv0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bww0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bww0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwx0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwx0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwy0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwy0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwz0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: bwz0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O18 - Protocol: offline-8876480 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                    O23 - Service: Workstation NetLogon Service ( 11Fßä#·ºÄÖ`I) - Unknown owner - C:\WINDOWS\craa32.exe
                    O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
                    O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
                    O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
                    O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
                    O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exe
                    1. Utilisateur anonyme
                      Peux tu me pardonner de m etre absenter?

                      Peux tu remettre un hijack this stp

                      a+
                      1. PASCAL80 Auteur
                        Bonjour

                        Je n'ai pas réussi à me débarasser ce problème. Il semble que les dll qui apparaissent soient en fait générées de façon aléatoire à chaque redémarrage ou à chaque connexion internet !!

                        Cela m'a l'air d'être bien costaud comme virus !!

                        Si qq peux m'aider à m'en sortir, cela serait super
                        1. PASCAL80 Auteur
                          Bonjour

                          Si quelqu'un peux se pencher sur mon problème toujours existant cela serait super.

                          Merci d'avance
                          1. PASCAL80 Auteur
                            Régis

                            Microsoft Antispyware détecte Trojan.Startup.NameShifter.FR
                            dont voici le détail :

                            A+

                            Bon Dimanche

                            Infected files detected
                            c:\windows\d3xe32.exe
                            c:\windows\system32\netuo32.exe
                            c:\windows\ieak.exe
                            c:\windows\ipjw32.exe
                            c:\windows\system32\mfcao32.exe

                            Infected registry keys/values detected
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce d3xe32.exe
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce netuo32.exe
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce d3xe32.exe
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce netuo32.exe
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce d3xe32.exe
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce netuo32.exe
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce d3xe32.exe
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce netuo32.exe
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce netuo32.exe
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce d3xe32.exe
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce netuo32.exe
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce d3xe32.exe
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce netuo32.exe
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce d3xe32.exe
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce netuo32.exe
                            HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce d3xe32.exe
                            1. PASCAL80 Auteur
                              Bonjour Régis

                              Voici le rapport smitfrau

                              Merci de ton aide

                              SmitFraudFix v1.84

                              Rapport fait à 12:06:31,81 le 11/09/2005
                              Executé à partir de C:\Documents and Settings\PATRON\Bureau\AntiSpy\SmitfraudFix
                              OS: Microsoft Windows XP [version 5.1.2600]

                              »»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\

                              »»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS

                              »»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS\system

                              »»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS\Web

                              »»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS\system32

                              »»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS\system32\LogFiles

                              »»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\Documents and Settings\PATRON\Application Data

                              »»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\Documents and Settings\PATRON\Bureau

                              »»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\Program Files

                              »»»»»»»»»»»»»»»»»»»»»»»» Recherche présence de la clé HKLM\SOFTWARE\SHUDDERLTD

                              HKLM\SOFTWARE\SHUDDERLTD non trouvé.

                              »»»»»»»»»»»»»»»»»»»»»»»» Fin du rapport
                              1. Utilisateur anonyme
                                re
                                on va verifier qq chose
                                telecharge
                                http://siri.urz.free.fr/Fix/SmitfraudFix.zip
                                tu le decompresse tu double clik dessus et tu choisi l option 1
                                cela vas generer un rapport donne nous le

                                a+
                                1. PASCAL80 Auteur
                                  Bonjour Régis

                                  Voici le rapport smitfrau

                                  Merci de ton aide

                                  SmitFraudFix v1.84

                                  Rapport fait à 12:06:31,81 le 11/09/2005
                                  Executé à partir de C:\Documents and Settings\PATRON\Bureau\AntiSpy\SmitfraudFix
                                  OS: Microsoft Windows XP [version 5.1.2600]

                                  »»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\

                                  »»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS

                                  »»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS\system

                                  »»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS\Web

                                  »»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS\system32

                                  »»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\WINDOWS\system32\LogFiles

                                  »»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\Documents and Settings\PATRON\Application Data

                                  »»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\Documents and Settings\PATRON\Bureau

                                  »»»»»»»»»»»»»»»»»»»»»»»» Recherche C:\Program Files

                                  »»»»»»»»»»»»»»»»»»»»»»»» Recherche présence de la clé HKLM\SOFTWARE\SHUDDERLTD

                                  HKLM\SOFTWARE\SHUDDERLTD non trouvé.

                                  Autre remarque :

                                  Microsoft Antispyware détecte Trojan.Startup.NameShifter.FR
                                  dont voici le détail :

                                  A+ Merci de ton aide

                                  Infected files detected
                                  c:\windows\d3xe32.exe
                                  c:\windows\system32\netuo32.exe
                                  c:\windows\ieak.exe
                                  c:\windows\ipjw32.exe
                                  c:\windows\system32\mfcao32.exe

                                  Infected registry keys/values detected
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce d3xe32.exe
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce netuo32.exe
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce d3xe32.exe
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce netuo32.exe
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce d3xe32.exe
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce netuo32.exe
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce d3xe32.exe
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce netuo32.exe
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce netuo32.exe
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce d3xe32.exe
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce netuo32.exe
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce d3xe32.exe
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce netuo32.exe
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce d3xe32.exe
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce netuo32.exe
                                  HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce d3xe32.exe
                              2. PASCAL80 Auteur
                                Régis

                                Ci-joint un nouveau HIJACKTHIS

                                Logfile of HijackThis v1.99.1
                                Scan saved at 18:46:21, on 10/09/2005
                                Platform: Windows XP SP2 (WinNT 5.01.2600)
                                MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

                                Running processes:
                                C:\WINDOWS\System32\smss.exe
                                C:\WINDOWS\system32\winlogon.exe
                                C:\WINDOWS\system32\services.exe
                                C:\WINDOWS\system32\lsass.exe
                                C:\WINDOWS\system32\svchost.exe
                                C:\WINDOWS\System32\svchost.exe
                                C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
                                C:\WINDOWS\system32\spoolsv.exe
                                C:\WINDOWS\d3xe32.exe
                                C:\Program Files\Norton AntiVirus\navapsvc.exe
                                C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
                                C:\WINDOWS\System32\svchost.exe
                                C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
                                C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
                                C:\Program Files\QuickTime\qttask.exe
                                C:\WINDOWS\msat32.exe
                                C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
                                C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
                                C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
                                C:\WINDOWS\REGEDIT.EXE
                                C:\Program Files\Fichiers communs\Symantec Shared\NMain.exe
                                C:\PROGRA~1\NORTON~1\navw32.exe
                                C:\Program Files\Wanadoo\EspaceWanadoo.exe
                                C:\Program Files\Wanadoo\ComComp.exe
                                C:\Program Files\Wanadoo\Watch.exe
                                C:\Program Files\Internet Explorer\iexplore.exe
                                C:\WINDOWS\explorer.exe
                                C:\Program Files\Messenger\msmsgs.exe
                                C:\Documents and Settings\PATRON\Bureau\AntiSpy\HijackThis.exe

                                R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\mpzds.dll/sp.html#37049
                                R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\mpzds.dll/sp.html#37049
                                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
                                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system32\mpzds.dll/sp.html#37049
                                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\mpzds.dll/sp.html#37049
                                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\mpzds.dll/sp.html#37049
                                R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\mpzds.dll/sp.html#37049
                                R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\mpzds.dll/sp.html#37049
                                R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=SECURITOO:8080
                                R3 - Default URLSearchHook is missing
                                O2 - BHO: (no name) - {AD2C079F-424D-D779-A505-4258757A985F} - C:\WINDOWS\system32\msla32.dll
                                O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
                                O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
                                O4 - HKLM\..\Run: [MMTray] C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
                                O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
                                O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                                O4 - HKLM\..\Run: [msat32.exe] C:\WINDOWS\msat32.exe
                                O4 - HKLM\..\Run: [ccApp] C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
                                O4 - HKLM\..\Run: [ccRegVfy] C:\Program Files\Fichiers communs\Symantec Shared\ccRegVfy.exe
                                O4 - HKLM\..\Run: [Advanced Tools Check] C:\PROGRA~1\NORTON~1\AdvTools\ADVCHK.EXE
                                O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
                                O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                                O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                                O17 - HKLM\System\CCS\Services\Tcpip\..\{DF6EED23-C640-4B05-8856-33C4BA428D92}: NameServer = 80.10.246.130 80.10.246.3
                                O18 - Protocol: bw+0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw+0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw-0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw-0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw00 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw00s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw10 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw10s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw20 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw20s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw30 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw30s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw40 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw40s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw50 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw50s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw60 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw60s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw70 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw70s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw80 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw80s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw90 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw90s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwa0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwa0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwb0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwb0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwc0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwc0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwd0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwd0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwe0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwe0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwf0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwf0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
                                O18 - Protocol: bwg0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwg0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwh0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwh0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwi0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwi0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwj0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwj0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwk0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwk0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwl0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwl0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwm0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwm0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwn0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwn0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwo0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwo0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwp0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwp0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwq0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwq0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwr0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwr0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bws0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bws0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwt0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwt0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwu0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwu0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwv0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwv0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bww0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bww0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwx0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwx0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwy0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwy0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwz0 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwz0s - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: offline-8876480 - {3F0A1ABD-A9B5-4091-B161-E946D9D77F17} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O23 - Service: Remote Procedure Call (RPC) Helper ( 11Fßä#·ºÄÖ`I) - Unknown owner - C:\WINDOWS\d3xe32.exe" /s (file missing)
                                O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
                                O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
                                O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
                                O23 - Service: Norton Unerase Protection (NProtectService) - Symantec Corporation - C:\Program Files\Norton AntiVirus\AdvTools\NPROTECT.EXE
                                O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exe
                                • 1
                                • 2

                                Discussions similaires

                                Win64 malware gen
                                jules555

                                1 réponse
                                supprimer tor.jack android
                                sabinelouisonbruno

                                4 réponses
                                Win64:Malware-gen
                                ptb35

                                3 réponses
                                Softonic,est-ce un virus ?
                                techmel1

                                6 réponses
                                Chrome://newtab
                                Nova

                                14 réponses