[Virus] Interpretation de hijackthis

Bonjour a tous . Voila j ai attrape spy sheriff j ai donc fais un scan avec hijackthis mais je ne sais pas quoi fix, si vous pouviez m aider . Merci d avance Voici le scan :Logfile of HijackThis v1.99.1
Scan saved at 05:53:45, on 01/01/2002
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
D:\Programmes\Panda antivirus\TPSrv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
D:\Programmes\Panda antivirus\FIREWALL\PNMSRV.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\explorer.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
D:\Programmes\hp\HP Software Update\HPWuSchd.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
D:\Programmes\daemon tool\daemon.exe
D:\Programmes\Panda antivirus\APVXDWIN.EXE
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
D:\Programmes\MouseWare\system\em_exec.exe
D:\Programmes\hp\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\MicroStar\WLANUtility\WlanUtility.exe
C:\WINDOWS\system32\niSvcLoc.exe
D:\Programmes\Panda antivirus\PavFnSvr.exe
C:\Program Files\Fichiers communs\Panda Software\PavShld\pavprsrv.exe
D:\Programmes\Panda antivirus\pavsrv51.exe
D:\Programmes\Panda antivirus\AVENGINE.EXE
D:\Programmes\Panda antivirus\PsImSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
D:\Programmes\Panda antivirus\WebProxy.exe
C:\Program Files\MicroStar\WLANUtility\WLAN_Service.exe
C:\WINDOWS\System32\alg.exe
D:\Programmes\Mozilla\firefox.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
D:\Programmes\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.fr/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.fr/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.fr/keyword/%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {9B0E64CF-D5FF-3C2B-8D6D-52DDC852B832} - Preliminary.dll (file missing)
F2 - REG:system.ini: Shell=explorer.exe "C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\ibm00001.exe"
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\Programmes\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [HP Software Update] "D:\Programmes\hp\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [DXDllRegExe] dxdllreg.exe
O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [DAEMON Tools-1033] "D:\Programmes\daemon tool\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [APVXDWIN] "D:\Programmes\Panda antivirus\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [mmtask] "C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
O4 - HKLM\..\Run: [Preliminary] NsCplTray.exe
O4 - HKLM\..\Run: [scanSYS] XTermInit.exe
O4 - HKCU\..\Run: [LDM] D:\Programmes\\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [Shell] "C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\ibm00001.exe"
O4 - HKCU\..\Run: [PayTime] C:\WINDOWS\system32\paytime.exe
O4 - HKCU\..\Run: [desktop] C:\WINDOWS\system32\idemlog.exe
O4 - HKCU\..\Run: [ozim] C:\PROGRA~1\FICHIE~1\ozim\ozimm.exe
O4 - HKCU\..\Run: [keybdll] MSTCPDLL.exe
O4 - HKCU\..\Run: [runload32] barint.exe
O4 - HKCU\..\Run: [MON76234] install2.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = D:\Programmes\hp\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = ?
O4 - Global Startup: WlanUtility.lnk = C:\Program Files\MicroStar\WLANUtility\WlanUtility.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://D:\PROGRA~1\OFFICE~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\OFFICE~1\OFFICE11\REFIEBAR.DLL
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1009942306390
O17 - HKLM\System\CCS\Services\Tcpip\..\{10324CD0-3FDF-4C5D-BEAD-1B146E5CD826}: NameServer = 85.255.115.234,85.255.112.212
O17 - HKLM\System\CCS\Services\Tcpip\..\{579DB7E4-7660-4BF2-88B3-C62787D41D65}: NameServer = 85.255.115.234,85.255.112.212
O17 - HKLM\System\CCS\Services\Tcpip\..\{585252E7-12D8-40D5-95C2-54E05A2BB879}: NameServer = 85.255.115.234,85.255.112.212
O17 - HKLM\System\CCS\Services\Tcpip\..\{B8ABABEF-0CE2-40C6-A616-CF727E1014BA}: NameServer = 85.255.115.234,85.255.112.212
O17 - HKLM\System\CCS\Services\Tcpip\..\{B8DC7FD1-7326-4A31-9A69-CA8B70784549}: NameServer = 85.255.115.234,85.255.112.212
O17 - HKLM\System\CS1\Services\Tcpip\..\{10324CD0-3FDF-4C5D-BEAD-1B146E5CD826}: NameServer = 85.255.115.234,85.255.112.212
O18 - Protocol: bw+0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - D:\Programmes\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: offline-8876480 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: avldr - C:\WINDOWS\SYSTEM32\avldr.dll
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: MSI_WLAN_Service - Unknown owner - C:\Program Files\MicroStar\WLANUtility\WLAN_Service.exe
O23 - Service: NILM License manager - Macrovision Corporation - D:\Programmes\Labview\Shared\License Manager\Bin\lmgrd.exe
O23 - Service: NI Service Locator (niSvcLoc) - National Instruments - C:\WINDOWS\system32\niSvcLoc.exe
O23 - Service: Panda Function Service (PAVFNSVR) - Panda Software - D:\Programmes\Panda antivirus\PavFnSvr.exe
O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Software - C:\Program Files\Fichiers communs\Panda Software\PavShld\pavprsrv.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software - D:\Programmes\Panda antivirus\pavsrv51.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Panda Network Manager (PNMSRV) - Panda Software - D:\Programmes\Panda antivirus\FIREWALL\PNMSRV.EXE
O23 - Service: Panda IManager Service (PSIMSVC) - Panda Software Internacional - D:\Programmes\Panda antivirus\PsImSvc.exe
O23 - Service: Panda TPSrv (TPSrv) - Panda Software - D:\Programmes\Panda antivirus\TPSrv.exe

25 réponses

Résumé de la discussion

Une personne signale une infection par Spy Sheriff et demande quelles entrées de HijackThis il faut corriger après un scan, afin de nettoyer son système Windows XP. Le journal affiche de multiples processus et services, dont Panda Antivirus et Daemon Tools, mais aussi des entrées au démarrage suspectes, des barres MSN et plusieurs BHO. On relève notamment une référence dans system.ini pointant vers ibm00001.exe, des paramètres IE modifiés vers google.fr, des DNS inhabituels et une abondance de protocoles ou DLL suspects (BWPlug, GAPlug, etc.). D'autres entrées montrent des éléments inclassables (Fichiers communs, modules Real, pavshld, etc.) qui renforcent le risque de malware et suggèrent un nettoyage en profondeur ou une réinstallation complète recommandée selon le contexte.

Bobot (l’IA à votre service)
  1. De rien

    Bonne continuation

    A+
    0
    1. mais soucis sont réglés merci beaucoup pour ton aide , bonne continuation
      0
      1. re,

        ou en sont tes soucis?

        a+
        0
        1. Re,

          redemarre ton pc et remet un hijack this

          a+
          --
          Chouchou-Chouchou, alias Mister Chouchou² (copyright © Bansheestyle)
          0
          1. Re , j ai redemmarer le PC voila le scan hijackthis que tu m a demander :
            Logfile of HijackThis v1.99.1
            Scan saved at 11:39:55, on 05/01/2002
            Platform: Windows XP SP2 (WinNT 5.01.2600)
            MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

            Running processes:
            C:\WINDOWS\System32\smss.exe
            C:\WINDOWS\system32\csrss.exe
            C:\WINDOWS\system32\winlogon.exe
            C:\WINDOWS\system32\services.exe
            C:\WINDOWS\system32\lsass.exe
            C:\WINDOWS\system32\Ati2evxx.exe
            C:\WINDOWS\system32\svchost.exe
            D:\Programmes\Panda antivirus\TPSrv.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\System32\svchost.exe
            D:\Programmes\Panda antivirus\FIREWALL\PNMSRV.EXE
            C:\WINDOWS\system32\Ati2evxx.exe
            C:\WINDOWS\Explorer.EXE
            C:\WINDOWS\system32\spoolsv.exe
            C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
            D:\Programmes\hp\HP Software Update\HPWuSchd.exe
            C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
            D:\Programmes\daemon tool\daemon.exe
            D:\Programmes\Panda antivirus\APVXDWIN.EXE
            C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
            C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
            D:\Programmes\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
            D:\Programmes\MouseWare\system\em_exec.exe
            D:\Programmes\hp\Digital Imaging\bin\hpqtra08.exe
            C:\Program Files\MicroStar\WLANUtility\WlanUtility.exe
            C:\WINDOWS\system32\niSvcLoc.exe
            D:\Programmes\Panda antivirus\PavFnSvr.exe
            C:\Program Files\Fichiers communs\Panda Software\PavShld\pavprsrv.exe
            D:\Programmes\Panda antivirus\pavsrv51.exe
            D:\Programmes\Panda antivirus\AVENGINE.EXE
            D:\Programmes\Panda antivirus\PsImSvc.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\system32\wdfmgr.exe
            D:\Programmes\Panda antivirus\WebProxy.exe
            C:\Program Files\MicroStar\WLANUtility\WLAN_Service.exe
            C:\WINDOWS\System32\alg.exe
            D:\Programmes\Panda antivirus\psimreal.exe
            D:\Programmes\Panda antivirus\avciman.exe
            D:\Programmes\hijackthis\HijackThis.exe

            R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
            R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.fr/ie
            R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.fr
            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
            R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.fr/ie
            R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.fr/keyword/%s
            R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
            R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
            R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
            R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
            O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1.4\SPYBOT~1\SDHelper.dll
            O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
            O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll
            O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll
            O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
            O4 - HKLM\..\Run: [HP Software Update] "D:\Programmes\hp\HP Software Update\HPWuSchd.exe"
            O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
            O4 - HKLM\..\Run: [DXDllRegExe] dxdllreg.exe
            O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
            O4 - HKLM\..\Run: [DAEMON Tools-1033] "D:\Programmes\daemon tool\daemon.exe" -lang 1033
            O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
            O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
            O4 - HKLM\..\Run: [APVXDWIN] "D:\Programmes\Panda antivirus\APVXDWIN.EXE" /s
            O4 - HKLM\..\Run: [mmtask] "C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe"
            O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
            O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
            O4 - HKCU\..\Run: [LDM] D:\Programmes\\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
            O4 - HKCU\..\Run: [ozim] C:\PROGRA~1\FICHIE~1\ozim\ozimm.exe
            O4 - Global Startup: HP Digital Imaging Monitor.lnk = D:\Programmes\hp\Digital Imaging\bin\hpqtra08.exe
            O4 - Global Startup: Logitech Desktop Messenger.lnk = ?
            O4 - Global Startup: WlanUtility.lnk = C:\Program Files\MicroStar\WLANUtility\WlanUtility.exe
            O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://D:\PROGRA~1\OFFICE~1\OFFICE11\EXCEL.EXE/3000
            O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\OFFICE~1\OFFICE11\REFIEBAR.DLL
            O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1009942306390
            O18 - Protocol: bw+0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw+0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw-0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw-0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw00 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw00s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw10 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw10s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw20 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw20s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw30 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw30s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw40 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw40s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw50 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw50s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw60 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw60s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw70 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw70s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw80 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw80s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw90 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bw90s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwa0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwa0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwb0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwb0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwc0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwc0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwd0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwd0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwe0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwe0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwf0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwf0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - D:\Programmes\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
            O18 - Protocol: bwg0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwg0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwh0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwh0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwi0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwi0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwj0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwj0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwk0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwk0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwl0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwl0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwm0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwm0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwn0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwn0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwo0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwo0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwp0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwp0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwq0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwq0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwr0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwr0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bws0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bws0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwt0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwt0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwu0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwu0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwv0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwv0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bww0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bww0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwx0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwx0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwy0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwy0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwz0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: bwz0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
            O18 - Protocol: offline-8876480 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
            O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
            O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
            O23 - Service: MSI_WLAN_Service - Unknown owner - C:\Program Files\MicroStar\WLANUtility\WLAN_Service.exe
            O23 - Service: NILM License manager - Macrovision Corporation - D:\Programmes\Labview\Shared\License Manager\Bin\lmgrd.exe
            O23 - Service: NI Service Locator (niSvcLoc) - National Instruments - C:\WINDOWS\system32\niSvcLoc.exe
            O23 - Service: Panda Function Service (PAVFNSVR) - Panda Software - D:\Programmes\Panda antivirus\PavFnSvr.exe
            O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Software - C:\Program Files\Fichiers communs\Panda Software\PavShld\pavprsrv.exe
            O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software - D:\Programmes\Panda antivirus\pavsrv51.exe
            O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
            O23 - Service: Panda Network Manager (PNMSRV) - Panda Software - D:\Programmes\Panda antivirus\FIREWALL\PNMSRV.EXE
            O23 - Service: Panda IManager Service (PSIMSVC) - Panda Software Internacional - D:\Programmes\Panda antivirus\PsImSvc.exe
            O23 - Service: Panda TPSrv (TPSrv) - Panda Software - D:\Programmes\Panda antivirus\TPSrv.exe

            a+
            0
        2. Salut.
          j ai fixé O4 - HKLM\..\Run: [dmslo.exe] C:\WINDOWS\system32\dmslo.exe
          mais je n ai pas trouvé C:\WINDOWS\system32\dmslo.exe meme en recherchant manuellement .
          a+
          0
          1. Re
            fixe ceci
            O4 - HKLM\..\Run: [dmslo.exe] C:\WINDOWS\system32\dmslo.exe

            et supprime
            C:\WINDOWS\system32\dmslo.exe

            a+
            0
            1. Salut

              T en fais pas pour les 018 et pour winlogon, n y touche pas, il est necessaire a ton systeme et n est pas lié a spysheriff

              Rend toi sur ce site :
              http://www.virustotal.com/xhtml/virustotal_en.html
              Clik sur parcourir
              Recherche ceci :
              C:\WINDOWS\system32\dmslo.exe
              Clik send et colle le rapport stp

              A+
              0
              1. Salut.
                Merci pour ces informations , je suis alle sur le lien que tu m a donné et lorsque je recherche et send C:\WINDOWS\system32\dmslo.exe un message apparait :
                File size can't be more than 10 Megabytes.
                You can't try compressing it.

                Thanks you.
                a+
                0
            2. bonjour ,
              j ai toujours un processus lié a spy sheriff je pense , c est winlogon , il me met l UC a 50% tt le temps et lorsque j essai de terminer ce processus , un message d erreur me disant que "ceci est un processus systeme critique" apparait et m empeche de le supprimer . Comment pourais je le supprimer ?
              Merci d avance
              0
              1. Bonsoir.
                J ai suprime ibm00001.exe par la metode de ben13010. j ai refais un scan avec hijackthis au cas ou il y ait encore des probleme et je voulais savoir si il etait normal que j ai autant de ligne O18-protocol (je n en voyais jamais sur les autres scan hijackthis sur le forum) . Voici le scan hijackthis:

                Logfile of HijackThis v1.99.1
                Scan saved at 12:50:30, on 02/01/2002
                Platform: Windows XP SP2 (WinNT 5.01.2600)
                MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

                Running processes:
                C:\WINDOWS\System32\smss.exe
                C:\WINDOWS\system32\csrss.exe
                C:\WINDOWS\system32\winlogon.exe
                C:\WINDOWS\system32\services.exe
                C:\WINDOWS\system32\lsass.exe
                C:\WINDOWS\system32\Ati2evxx.exe
                C:\WINDOWS\system32\svchost.exe
                D:\Programmes\Panda antivirus\TPSrv.exe
                C:\WINDOWS\system32\svchost.exe
                C:\WINDOWS\System32\svchost.exe
                D:\Programmes\Panda antivirus\FIREWALL\PNMSRV.EXE
                C:\WINDOWS\system32\spoolsv.exe
                C:\WINDOWS\system32\niSvcLoc.exe
                D:\Programmes\Panda antivirus\PavFnSvr.exe
                C:\Program Files\Fichiers communs\Panda Software\PavShld\pavprsrv.exe
                D:\Programmes\Panda antivirus\pavsrv51.exe
                D:\Programmes\Panda antivirus\AVENGINE.EXE
                D:\Programmes\Panda antivirus\PsImSvc.exe
                C:\WINDOWS\system32\svchost.exe
                C:\WINDOWS\system32\wdfmgr.exe
                C:\WINDOWS\System32\alg.exe
                C:\WINDOWS\system32\wuauclt.exe
                D:\Programmes\Panda antivirus\apvxdwin.exe
                C:\WINDOWS\system32\Ati2evxx.exe
                C:\WINDOWS\Explorer.EXE
                D:\Programmes\Panda antivirus\WebProxy.exe
                C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                D:\Programmes\hp\HP Software Update\HPWuSchd.exe
                C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
                D:\Programmes\daemon tool\daemon.exe
                C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
                C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
                D:\Programmes\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
                D:\Programmes\MouseWare\system\em_exec.exe
                D:\Programmes\Panda antivirus\avciman.exe
                D:\Programmes\Panda antivirus\psimreal.exe
                D:\Programmes\hp\Digital Imaging\bin\hpqtra08.exe
                C:\Program Files\MicroStar\WLANUtility\WlanUtility.exe
                C:\Program Files\MicroStar\WLANUtility\WLAN_Service.exe
                D:\Programmes\hijackthis\HijackThis.exe

                R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
                R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.fr/ie
                R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.fr
                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
                R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.fr/ie
                R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.fr/keyword/%s
                R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
                R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
                R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
                R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\Programmes\Spybot V1.4\Spybot - Search & Destroy\SDHelper.dll
                O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
                O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll
                O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll
                O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                O4 - HKLM\..\Run: [HP Software Update] "D:\Programmes\hp\HP Software Update\HPWuSchd.exe"
                O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
                O4 - HKLM\..\Run: [DXDllRegExe] dxdllreg.exe
                O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
                O4 - HKLM\..\Run: [DAEMON Tools-1033] "D:\Programmes\daemon tool\daemon.exe" -lang 1033
                O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
                O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
                O4 - HKLM\..\Run: [APVXDWIN] "D:\Programmes\Panda antivirus\APVXDWIN.EXE" /s
                O4 - HKLM\..\Run: [mmtask] "C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe"
                O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
                O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
                O4 - HKLM\..\Run: [dmslo.exe] C:\WINDOWS\system32\dmslo.exe
                O4 - HKCU\..\Run: [LDM] D:\Programmes\\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
                O4 - HKCU\..\Run: [ozim] C:\PROGRA~1\FICHIE~1\ozim\ozimm.exe
                O4 - Global Startup: HP Digital Imaging Monitor.lnk = D:\Programmes\hp\Digital Imaging\bin\hpqtra08.exe
                O4 - Global Startup: Logitech Desktop Messenger.lnk = ?
                O4 - Global Startup: WlanUtility.lnk = C:\Program Files\MicroStar\WLANUtility\WlanUtility.exe
                O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://D:\PROGRA~1\OFFICE~1\OFFICE11\EXCEL.EXE/3000
                O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\OFFICE~1\OFFICE11\REFIEBAR.DLL
                O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1009942306390
                O18 - Protocol: bw+0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw+0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw-0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw-0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw00 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw00s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw10 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw10s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw20 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw20s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw30 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw30s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw40 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw40s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw50 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw50s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw60 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw60s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw70 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw70s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw80 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw80s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw90 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw90s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwa0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwa0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwb0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwb0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwc0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwc0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwd0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwd0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwe0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwe0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwf0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwf0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - D:\Programmes\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
                O18 - Protocol: bwg0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwg0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwh0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwh0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwi0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwi0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwj0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwj0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwk0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwk0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwl0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwl0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwm0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwm0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwn0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwn0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwo0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwo0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwp0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwp0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwq0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwq0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwr0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwr0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bws0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bws0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwt0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwt0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwu0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwu0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwv0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwv0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bww0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bww0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwx0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwx0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwy0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwy0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwz0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwz0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
                O18 - Protocol: offline-8876480 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O20 - Winlogon Notify: avldr - C:\WINDOWS\SYSTEM32\avldr.dll
                O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
                O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
                O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
                O23 - Service: MSI_WLAN_Service - Unknown owner - C:\Program Files\MicroStar\WLANUtility\WLAN_Service.exe
                O23 - Service: NILM License manager - Macrovision Corporation - D:\Programmes\Labview\Shared\License Manager\Bin\lmgrd.exe
                O23 - Service: NI Service Locator (niSvcLoc) - National Instruments - C:\WINDOWS\system32\niSvcLoc.exe
                O23 - Service: Panda Function Service (PAVFNSVR) - Panda Software - D:\Programmes\Panda antivirus\PavFnSvr.exe
                O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Software - C:\Program Files\Fichiers communs\Panda Software\PavShld\pavprsrv.exe
                O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software - D:\Programmes\Panda antivirus\pavsrv51.exe
                O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
                O23 - Service: Panda Network Manager (PNMSRV) - Panda Software - D:\Programmes\Panda antivirus\FIREWALL\PNMSRV.EXE
                O23 - Service: Panda IManager Service (PSIMSVC) - Panda Software Internacional - D:\Programmes\Panda antivirus\PsImSvc.exe
                O23 - Service: Panda TPSrv (TPSrv) - Panda Software - D:\Programmes\Panda antivirus\TPSrv.exe
                Encore merci pour votre aide .
                0
                1. Tu vas me demander a chaque fois la meme question

                  LAULHEU !!!
                  0
                  1. Tu vas me demander a chaque fois la meme question?

                    Ben si elle fait pas l effort de chercher comme dirait RF, t en pire pour elle !
                    0
                    1. Soit tu fais la solution donné, soit tu remet un hijack this

                      a+
                      0
                      1. ok merci beaucoup je vais essayer de suprimer ce qui se trouve apre la valeur shell en mode sans echec (il y a un message d erreur en mode normal) et je crois que mon ordi ram encore parceque panda antivirus 2006 est constament entraint de faire une "analyse du courrier"
                        0
                        1. Re,
                          ouvre le bloc note et copie et colle ceci à l'interieur: (met regedit4 sur la 1ere ligne du bloc note)
                          REGEDIT4
                          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins]
                          "olsmd"=-

                          Puis enregistrer sous et dans:
                          Nom du fichier, met fix.reg
                          Type de fichier: selectionne "tous les fichiers"
                          clic sur enregistrer

                          ensuite double clic sur fix.reg et accepte de fusionner

                          **
                          Double clic sur killbox.exe (Pocket Killbox)

                          - coche: delete on reboot
                          - Dans "Full Path of File to Delete"
                          copie et colle:

                          C:\WINDOWS\System32\dmslo.exe

                          - clique sur la croix rouge
                          - une fenêtre va apparaître pour confirmation clique sur YES
                          - une seconde fenêtre te demande si tu veux redémarrer clique sur YES

                          Si ce message s’affiche ignore le :
                          http://tinypic.com/jsj7kl.jpg
                          Laisse le pc redémarrer.
                          et dis moi si tes soucis sont resolus

                          A+

                          0
                          1. salut
                            J ai fais ce que tu m as dit , j ai l impression que ces nettement mieux mais je ram un peu par rapport a la normal et lorsque je redemarre , j ai toujours un message d erreur me disant que C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\ibm00001.exe
                            est introuvable (je ne sais pas si ca a un rapport) ;
                            Merci beaucoup pour ton aide et pour ton efficacite
                            a+
                            0
                          2. Contributeur
                            salut

                            Bonjour. Pour supprimer le message d'erreur au démarrage de Windows, concernant l'absence du fichier ibm00001.exe, il faut se rendre dans le Registre (Démarrer>Exécuter puis entrer le mot "regedit"). Dans la clé HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, faire un double-click sur la valeur "Shell" et supprimer tout ce qui se trouve après "explorer.exe", c'est-à-dire tous les espaces ainsi que le mot "ibm00001.exe".

                            bye
                            0
                        2. re,

                          ouvre le bloc note et copie et colle ceci à l'interieur:

                          **
                          REGEDIT4

                          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins]
                          "ppcmd"=-

                          **
                          Puis enregistrer sous et dans:
                          Nom du fichier, met fix.reg
                          Type de fichier: selectionne "tous les fichiers"
                          clic sur enregistrer

                          ensuite double clic sur fix.reg et accepte de fusionner

                          recherche et supprime ceci

                          C:\WINDOWS\system32\filesafer23.exe
                          C:\WINDOWS\System32\cshda.exe
                          C:\WINDOWS\System32\dmcpp.exe

                          redemarre et remet le prog

                          a+
                          0
                          1. Salut ,
                            J ai copié ce qu il fallait dans le bloc note et je l ai ensuite enregistré.
                            J ai cherche ces fichiers
                            C:\WINDOWS\system32\filesafer23.exe
                            C:\WINDOWS\System32\cshda.exe
                            C:\WINDOWS\System32\dmcpp.exe
                            mais je n ai que trouvé et supprimé celui ci :
                            C:\WINDOWS\system32\filesafer23.exe
                            voici le rapport :
                            Rapport fait à 3:23:34,71 le 02/01/2002
                            Executé à partir de C:\Documents and Settings\Admin\Bureau\Hcsrch
                            OS: Microsoft Windows XP [version 5.1.2600]

                            *********************************************

                            Vérification HKLM\...\...\...\...\ruins

                            Windows Registry Editor Version 5.00

                            [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins]
                            "olsmd"=hex:12,22,00,00,e3,e2,20,d3,34,fd,b2,47,a2,11,00,00,00

                            *********************************************

                            Fichiers détectés :

                            *********************************************

                            Recherche des processus aleatoires
                            d'après les modèles : cs***.exe, dm***.exe, ya***.exe

                            C:\WINDOWS\System32
                            dmslo.exe

                            *********************************************

                            Recherche presence C:\WINDOWS\System32\idemlog.exe...

                            non trouvé...
                            a+
                            0
                        3. j ai reussi a installer spybot 1.4 en mode sans echec (je crois avoir mal mis le mode sans echec pour ce qu il fallait faire precedement) j ai fais une analyse et aucun mouchard n a ete trouve .
                          Voici le rapport :
                          Rapport fait à 11:12:43,29 le 01/01/2002
                          Executé à partir de C:\Documents and Settings\Admin\Bureau\Hcsrch
                          OS: Microsoft Windows XP [version 5.1.2600]

                          *********************************************

                          Vérification HKLM\...\...\...\...\ruins

                          Windows Registry Editor Version 5.00

                          [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins]
                          "ppcmd"=hex:8f,4e,00,00,66,61,57,52,4a,00,31,ca,21,11,00,00,00

                          *********************************************

                          Fichiers détectés :

                          C:\WINDOWS\system32\filesafer23.exe Présent !

                          *********************************************

                          Recherche des processus aleatoires
                          d'après les modèles : cs***.exe, dm***.exe, ya***.exe

                          C:\WINDOWS\System32
                          cshda.exe
                          dmcpp.exe

                          *********************************************

                          Recherche presence C:\WINDOWS\System32\idemlog.exe...

                          non trouvé...
                          a+
                          0
                          1. Re,

                            essai de le desinstaller en mode sans echec

                            **
                            celui qui commence par ceci

                            voici le rapport de Hcsrch :
                            Rapport fait à 8:34:33,70 le 01/01/2002
                            Executé à partir de C:\Documents and Settings\Admin\Bureau\Hcsrch
                            OS: Microsoft Windows XP [version 5.1.2600]

                            a+
                            0
                            1. lorsque j essai de desinstaller spybot1.3 un message d erreur apparait : impossible de créer un fichier temporaire. abandon de l installation. erreur 5 : accès refusés
                              Et losrsque tu me demande de te remettre le programme de quel programme parles tu stp ?
                              0
                              1. Call of duty et PES5, tres bon jeu ;-)

                                Desinstalle Spybot - Search & Destroy 1.3

                                et installe la nouvelle version:

                                Spybot S&D 1.4 <<nouvelle version.
                                http://www.safer-networking.org/fr/index.htm

                                Démo d’utilisation (merci à Balltrap34 pour cette réalisation).
                                http://pageperso.aol.fr/Balltrap34/demo%20spybot.htm

                                Puis;

                                ouvre le bloc note et copie et colle ceci à l'interieur:

                                REGEDIT4

                                [-HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\HCLEAN32.EXE]

                                [-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Software\Microsoft\Windows\CurrentVersion\ruins]

                                [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion]
                                "Disabled"=-

                                [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins]

                                [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WareOut]

                                [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls]

                                [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
                                "System"=-
                                "System"=""

                                [-HKEY_LOCAL_MACHINE\SOFTWARE\WareOut]

                                Puis enregistrer sous et dans:
                                Nom du fichier, met fix.reg
                                Type de fichier: selectionne "tous les fichiers"
                                clic sur enregistrer

                                ensuite double clic sur fix.reg et accepte de fusionner

                                -_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_

                                et remet moi le programme stp

                                a+
                                0
                                • 1
                                • 2