W32.mysor.fr@yf

Résolu
julien-54 -  
bonjour je voulais savoir si vous aviez reussi à vous debarasser de votre virus car j'ai le même et je ne m'en sort pas.
en attendant votre reponse merci.

22 réponses

Résumé de la discussion

L'infection par un virus informatique est au cœur des échanges, alors que les utilisateurs cherchent à s'en débarrasser et à comprendre les composants contaminés et les symptômes observés. Parmi les solutions évoquées figurent l'utilisation de HijackThis pour scanner et nettoyer, la suppression de SpyBro et du fichier hp5573.tmp, puis la réalisation d'un scan antivirus en ligne et l'analyse du rapport. Des utilisateurs rapportent des succès partiels, notamment la détection et la suppression d'un cheval de Troie et l'amélioration des messages d'erreur après l'exécution des outils recommandés. En complément, des outils supplémentaires comme SmitfraudFix et BitDefender Online Scanner ont été proposés pour renforcer le nettoyage et vérifier l'absence de résidus dans le système.

Bobot (l’IA à votre service)
  1. julien-54 Auteur
    bonjour
    Tu devrai reprendre ce que j'ai fait
    moi j'ai suivie tous ce que l'on m'a dit de faire et ca remarche impec
    1. julien-54 Auteur
      Merci beaucoup pour m'avoir sorti de mon virus .
      bonne soirée A++
      1. Guisi
        bonjour, J,ai été infecté par un virus w32.mysor.fr@yf
        je ovudrais savoir comment s'en débaraser
        merci
    2. julien-54 Auteur
      c'est fais et je n'ai plus de message d'erreur
      1. Utilisateur anonyme
        Oki, c'est cool alors ;-)

        Bonne soirée à toi

        A+++
    3. julien-54 Auteur
      et apres je fais quoi d'autre ?
      1. Utilisateur anonyme
        Fait ce nettoyage et dit moi ou en est ton probléme:

        ¤Telecharges et installes ceci, dans la colonne de gauche cliques sur "erreurs" coches toutes les cases, puis cliques en bas sur "chercher des erreurs" une fois finit, cliques sur "reparer les erreurs" et tu aura un message pour sauvegarder ta base de registre tu dis "oui" puis tu recommences jusqu'a ce qu'il te trouve plus d'erreurs

        CCleaner:
        Ccleaner

        ¤Relance Ccleaner ,vas dans l'onglet "nettoyeur" present sur la gauche, decoches la derniere case (Avancé si elle est cochée) puis cliques sur "lancer le nettoyage"
    5. julien-54 Auteur
      salut
      je fais quoi aprés ?
      je suprime les doc. avec la tête de mort ?
      1. julien-54 Auteur
        KASPERSKY ON-LINE SCANNER REPORT
        Monday, May 08, 2006 12:05:17 PM
        Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
        Kaspersky On-line Scanner version: 5.0.78.0
        Kaspersky Anti-Virus database last update: 8/05/2006
        Kaspersky Anti-Virus database records: 180757

        Scan Settings
        Scan using the following antivirus database standard
        Scan Archives true
        Scan Mail Bases true

        Scan Target My Computer
        C:\
        D:\
        E:\
        F:\
        G:\
        H:\
        I:\

        Scan Statistics
        Total number of scanned objects 62534
        Number of viruses found 7
        Number of infected objects 15
        Number of suspicious objects 0
        Duration of the scan process 00:46:23

        Infected Object Name Virus Name Last Action
        C:\Documents and Settings\julien\julien\Local Settings\Application Data\Identities\{78547D03-7A1C-4E8C-A2BB-0D9A307FBDA0}\Microsoft\Outlook Express\Boîte de réception.dbx/[From Washington@wanadoo.fr, Mutual@wanadoo.fr,][Date Thu, 10 Feb 2005 20:23:39 +0100]/html Infected: Trojan-Spy.HTML.Wamufraud.bo skipped

        C:\Documents and Settings\julien\julien\Local Settings\Application Data\Identities\{78547D03-7A1C-4E8C-A2BB-0D9A307FBDA0}\Microsoft\Outlook Express\Boîte de réception.dbx Mail MS Outlook 5: infected - 1 skipped

        C:\Documents and Settings\julien\julien\Local Settings\Application Data\Identities\{78547D03-7A1C-4E8C-A2BB-0D9A307FBDA0}\Microsoft\Outlook Express\Éléments supprimés.dbx/[From Regions Bank ][Date Tue, 01 Feb 2005 10:46:51 -0200]/UNNAMED/html Infected: Trojan-Spy.HTML.Bankfraud.dq skipped

        C:\Documents and Settings\julien\julien\Local Settings\Application Data\Identities\{78547D03-7A1C-4E8C-A2BB-0D9A307FBDA0}\Microsoft\Outlook Express\Éléments supprimés.dbx/[From Regions Bank ][Date Tue, 01 Feb 2005 10:46:51 -0200]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.dq skipped

        C:\Documents and Settings\julien\julien\Local Settings\Application Data\Identities\{78547D03-7A1C-4E8C-A2BB-0D9A307FBDA0}\Microsoft\Outlook Express\Éléments supprimés.dbx Mail MS Outlook 5: infected - 2 skipped

        C:\System Volume Information\_restore{D2DEEC84-7E99-480A-8E5C-CC61EA5AC508}\RP346\A0061716.tlb Infected: Trojan-Downloader.Win32.Zlob.mt skipped

        C:\System Volume Information\_restore{D2DEEC84-7E99-480A-8E5C-CC61EA5AC508}\RP346\A0061735.tlb Infected: Trojan-Downloader.Win32.Zlob.ne skipped

        C:\System Volume Information\_restore{D2DEEC84-7E99-480A-8E5C-CC61EA5AC508}\RP346\A0061781.tlb Infected: Trojan-Downloader.Win32.Zlob.ne skipped

        C:\System Volume Information\_restore{D2DEEC84-7E99-480A-8E5C-CC61EA5AC508}\RP347\A0061802.tlb Infected: Trojan-Downloader.Win32.Zlob.ne skipped

        C:\System Volume Information\_restore{D2DEEC84-7E99-480A-8E5C-CC61EA5AC508}\RP347\A0061834.tlb Infected: Trojan-Downloader.Win32.Zlob.ne skipped

        C:\System Volume Information\_restore{D2DEEC84-7E99-480A-8E5C-CC61EA5AC508}\RP348\A0061860.tlb Infected: Trojan-Downloader.Win32.Zlob.nc skipped

        C:\System Volume Information\_restore{D2DEEC84-7E99-480A-8E5C-CC61EA5AC508}\RP349\A0061909.exe Infected: Trojan-Downloader.Win32.Zlob.nd skipped

        C:\System Volume Information\_restore{D2DEEC84-7E99-480A-8E5C-CC61EA5AC508}\RP349\A0061926.tlb Infected: Trojan-Downloader.Win32.Zlob.nj skipped

        C:\System Volume Information\_restore{D2DEEC84-7E99-480A-8E5C-CC61EA5AC508}\RP350\A0061951.tlb Infected: Trojan-Downloader.Win32.Zlob.nj skipped

        C:\System Volume Information\_restore{D2DEEC84-7E99-480A-8E5C-CC61EA5AC508}\RP350\A0061961.exe Infected: Trojan-Downloader.Win32.Zlob.nj skipped

        Scan process completed.
        1. Utilisateur anonyme
          Salut,

          Alors ceci C:\System Volume Information\_restore(voir rapport Kaspersky au dessus) indique que ta restauration du systeme est infecté.Nous allons Tout supprimer et créer un point propre.

          Cliques sur demarrer, cliques droit sur poste de travail, propriétés, onglet "restauration du systeme"
          -coches la case, puis cliques sur "appliquer"
          -decoches la case et cliques sur "appliquer" puis "ok".

          Maintenant, que l'ont à effacés les point infectés, nous allons créer un point propre:

          Cliques sur demarrer, tout les programmes, accessoires, outils systemes, restauration du systeme, choisis "creer un point de restauration" nommes le " ccm" par exemple, cliques sur "creer" puis "ok".

          Fait ça:

          Affiche tous les fichiers et dossiers :
          Clique sur démarrer, panneau de configuration, outils ,option des dossiers, affichage

          Coche: afficher les fichiers et dossiers cachés

          Appliquer, puis ok

          Suit ce chemin:

          C:\Documents and Settings\julien\julien\Local Settings\Application Data\Identities\{78547D03-7A1C-4E8C-A2BB-0D9A307FBDA0}\Microsoft\Outlook Express\ puis supprime tout ce qu'il y a dans ce dossier: Boîte de réception.dbx
      2. julien-54 Auteur
        BitDefender Online Scanner - Real Time Virus Report

        Generated at: Mon, May 08, 2006 - 10:52:53

        --------------------------------------------------------------------------------

        Scan Info

        Scanned Files
        338601

        Infected Files
        1

        Virus Detected

        Trojan.Spy.HTML.Bankfraud.DQ
        1

        --------------------------------------------------------------------------------

        This summary of the scan process will be used by the BitDefender Antivirus Lab to create agregate statistics about virus activity around the world.
        1. julien-54 Auteur
          je ferai un autre scan demain et je te renverai le rapport
          en tout cas merci beaucoup pour le depannage .
          a bientot
          1. Utilisateur anonyme
            oki, fait ça alors :-)

            Ce nettoyage:

            ¤Telecharges et installes ceci, dans la colonne de gauche cliques sur "erreurs" coches toutes les cases, puis cliques en bas sur "chercher des erreurs" une fois finit, cliques sur "reparer les erreurs" et tu aura un message pour sauvegarder ta base de registre tu dis "oui" puis tu recommences jusqu'a ce qu'il te trouve plus d'erreurs

            CCleaner:
            Ccleaner

            ¤Relance Ccleaner ,vas dans l'onglet "nettoyeur" present sur la gauche, decoches la derniere case (Avancé si elle est cochée) puis cliques sur "lancer le nettoyage"

            Puis ce scan anti-virus en ligne:

            Clique sur;
            _Online Virus Scanner
            _Kaspersky Scanner Online
            _My computer

            Enregistre bien le rapport et colle le ici stp

            https://www.kaspersky.fr/downloads

            A++
        2. julien-54 Auteur
          je pense que j'ai cliqué trop vite et que le rapport est parti
          3. julien-54 Auteur
            d'apres le message il reste 30 min
            1. Utilisateur anonyme
              ok ;-)

              De toute maniere le temps ne remontera pas dy style 2h00 donc bientot fini :-)
          4. julien-54 Auteur
            je dois faire le scan en entier parce que la il me donne environ 4h30 avant la fin
            1. Utilisateur anonyme
              oui, t'inquiete pas il devrait accelerer moi il me donne 1h30 et il met 20min ;-)
          5. julien-54 Auteur
            je crois qu'il est parti
            je n'ai plus le message d'erreur et j'ouvre ma page de demarrage comme avant
          6. julien-54 Auteur
            Logfile of HijackThis v1.99.1
            Scan saved at 00:20:06, on 08/05/2006
            Platform: Windows XP SP2 (WinNT 5.01.2600)
            MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

            Running processes:
            C:\WINDOWS\System32\smss.exe
            C:\WINDOWS\system32\winlogon.exe
            C:\WINDOWS\system32\services.exe
            C:\WINDOWS\system32\lsass.exe
            C:\WINDOWS\system32\Ati2evxx.exe
            C:\WINDOWS\system32\svchost.exe
            C:\WINDOWS\System32\svchost.exe
            C:\WINDOWS\system32\Ati2evxx.exe
            C:\WINDOWS\Explorer.EXE
            C:\WINDOWS\system32\spoolsv.exe
            C:\WINDOWS\SOUNDMAN.EXE
            C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
            C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
            C:\PROGRA~1\MESSAG~1\StartMessager.exe
            C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
            C:\Program Files\Microsoft IntelliPoint\point32.exe
            C:\WINDOWS\system32\qttask.exe
            C:\Program Files\Microsoft IntelliType Pro\type32.exe
            C:\WINDOWS\system32\LVCOMSX.EXE
            C:\Program Files\Logitech\Video\LogiTray.exe
            C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe
            C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
            C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
            C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
            C:\Program Files\ScreenMates\Felix II\Fr\Felix2.exe
            C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
            C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
            C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
            C:\Program Files\Logitech\Video\FxSvr2.exe
            C:\Program Files\WinZip\WZQKPICK.EXE
            C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
            C:\Program Files\ewido anti-malware\ewidoctrl.exe
            C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
            C:\Program Files\Network Associates\VirusScan\Mcshield.exe
            C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
            C:\WINDOWS\System32\svchost.exe
            C:\WINDOWS\system32\HPZipm12.exe
            C:\WINDOWS\System32\svchost.exe
            C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
            C:\Program Files\Outlook Express\MSIMN.EXE
            C:\WINDOWS\system32\wuauclt.exe
            C:\Program Files\Internet Explorer\iexplore.exe
            C:\Documents and Settings\julien\Bureau\Nouveau dossier\HijackThis.exe

            R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
            R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
            O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
            O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
            O4 - HKLM\..\Run: [] C:\WINDOWS\Options\OEMReset.exe /Audit
            O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
            O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
            O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
            O4 - HKLM\..\Run: [MessagerStarter Wanadoo] C:\PROGRA~1\MESSAG~1\StartMessager.exe Messager Wanadoo
            O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
            O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
            O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\system32\qttask.exe" -atboottime
            O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
            O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
            O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
            O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
            O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
            O4 - HKLM\..\Run: [Vade Retro Outlook Express] "C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe"
            O4 - HKLM\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
            O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
            O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
            O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
            O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
            O4 - HKCU\..\Run: [Felix II] C:\Program Files\ScreenMates\Felix II\Fr\Felix2.exe
            O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
            O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
            O4 - Global Startup: hp psc 1000 series.lnk = ?
            O4 - Global Startup: hpoddt01.exe.lnk = ?
            O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
            O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
            O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
            O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
            O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
            O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
            O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
            O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
            O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
            O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
            O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
            O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
            O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
            O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
            O18 - Protocol: offline-8876480 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
            O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
            O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
            O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
            O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
            O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
            O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
            O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
            O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
            1. julien-54 Auteur
              SmitFraudFix v2.40

              Rapport fait à 0:13:29,40, 08/05/2006
              Executé à partir de C:\Documents and Settings\julien\Bureau\Nouveau dossier\SmitfraudFix
              OS: Microsoft Windows XP [version 5.1.2600]

              »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus

              »»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés

              C:\WINDOWS\system32\atmclk.exe supprimé
              C:\WINDOWS\system32\dcomcfg.exe supprimé
              C:\WINDOWS\system32\hp????.tmp supprimé
              C:\WINDOWS\system32\ld????.tmp supprimé
              C:\WINDOWS\system32\ot.ico supprimé
              C:\WINDOWS\system32\simpole.tlb supprimé
              C:\WINDOWS\system32\stdole3.tlb supprimé
              C:\WINDOWS\system32\1024\ supprimé

              »»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires

              »»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

              Nettoyage terminé.

              »»»»»»»»»»»»»»»»»»»»»»»» Fin
              1. julien-54 Auteur
                SmitFraudFix v2.40

                Rapport fait à 23:55:24,09, 07/05/2006
                Executé à partir de C:\Documents and Settings\julien\Bureau\Nouveau dossier\SmitfraudFix
                OS: Microsoft Windows XP [version 5.1.2600]

                »»»»»»»»»»»»»»»»»»»»»»»» C:\

                »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

                »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

                »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

                »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

                C:\WINDOWS\system32\atmclk.exe PRESENT !
                C:\WINDOWS\system32\dcomcfg.exe PRESENT !
                C:\WINDOWS\system32\hp????.tmp PRESENT !
                C:\WINDOWS\system32\ld????.tmp PRESENT !
                C:\WINDOWS\system32\ot.ico PRESENT !
                C:\WINDOWS\system32\stdole3.tlb PRESENT !
                C:\WINDOWS\system32\1024\ PRESENT !

                »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\julien\Application Data

                »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

                »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\julien\Favoris

                C:\DOCUME~1\julien\Favoris\Antivirus Test Online.url PRESENT !

                »»»»»»»»»»»»»»»»»»»»»»»» Bureau

                »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

                »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

                »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

                [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
                "Source"="About:Home"
                "SubscribedURL"="About:Home"
                "FriendlyName"="Ma page d'accueil"

                »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
                !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

                SrchSTS.exe by S!Ri
                Search SharedTaskScheduler's .dll

                »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

                »»»»»»»»»»»»»»»»»»»»»»»» Fin
                1. Utilisateur anonyme
                  Redemarres ton pc, dès l'allumage de celui ci tapotes la touche f8, à l'ecran qui va apparaitre choisis "mode sans echec" attends un peu..

                  Relance alors SmitfraudFix, choisis l'option 2, repond oui à tout, enregistre le rapport et redemarre normalement.

                  Une fois qu'i la redemarré colle le rapport ici, puis fait ça:

                  télécharges hijackthis:
                  Téléchargement de HijackThis

                  Installe le dans son propre dossier:
                  -cliques droit sur le bureau, nouveau dossier, installes-le dedans.
                  Lance le, cliques sur "do a system scan and save logfile"
                  Puis copies et colles le rapport ici.
              3. julien-54 Auteur
                je ne trouve nulle part spybro et quand je veux suprimer hp5573.tmp ca me donne un message qui me dit que je ne peux pas le suprimer
                1. Utilisateur anonyme
                  Oki, fait ceci:

                  Télécharge SmitfraudFix, enregistre le sur le bureau question de simplicité :-)
                  http://siri.urz.free.fr/Fix/SmitfraudFix.zip
                  décomprime SmitfraudFix
                  Lance le fichier SmitfraudFix, et choisir l’option 1 copie le rapport ici
              4. julien-54 Auteur
                Logfile of HijackThis v1.99.1
                Scan saved at 22:46:27, on 07/05/2006
                Platform: Windows XP SP2 (WinNT 5.01.2600)
                MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

                Running processes:
                C:\WINDOWS\System32\smss.exe
                C:\WINDOWS\system32\winlogon.exe
                C:\WINDOWS\system32\services.exe
                C:\WINDOWS\system32\lsass.exe
                C:\WINDOWS\system32\Ati2evxx.exe
                C:\WINDOWS\system32\svchost.exe
                C:\WINDOWS\System32\svchost.exe
                C:\WINDOWS\system32\Ati2evxx.exe
                C:\WINDOWS\system32\spoolsv.exe
                C:\WINDOWS\Explorer.EXE
                C:\WINDOWS\system32\atmclk.exe
                C:\WINDOWS\system32\dcomcfg.exe
                C:\WINDOWS\SOUNDMAN.EXE
                C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
                C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
                C:\PROGRA~1\MESSAG~1\StartMessager.exe
                C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                C:\Program Files\Microsoft IntelliPoint\point32.exe
                C:\WINDOWS\system32\qttask.exe
                C:\Program Files\Microsoft IntelliType Pro\type32.exe
                C:\WINDOWS\system32\LVCOMSX.EXE
                C:\Program Files\Logitech\Video\LogiTray.exe
                C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe
                C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
                C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
                C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
                C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
                C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
                C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
                C:\Program Files\Logitech\Video\FxSvr2.exe
                C:\Program Files\WinZip\WZQKPICK.EXE
                C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
                C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
                C:\Program Files\Network Associates\VirusScan\Mcshield.exe
                C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
                C:\WINDOWS\System32\svchost.exe
                C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
                C:\WINDOWS\System32\svchost.exe
                C:\Program Files\Internet Explorer\iexplore.exe
                C:\Program Files\ewido anti-malware\ewidoctrl.exe
                C:\Program Files\Outlook Express\MSIMN.EXE
                C:\Documents and Settings\julien\Bureau\Nouveau dossier\HijackThis.exe

                R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
                R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                O2 - BHO: Nothing - {b0398eca-0bcd-4645-8261-5e9dc70248d0} - C:\WINDOWS\system32\hp5573.tmp
                O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll (file missing)
                O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
                O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
                O4 - HKLM\..\Run: [] C:\WINDOWS\Options\OEMReset.exe /Audit
                O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
                O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
                O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
                O4 - HKLM\..\Run: [MessagerStarter Wanadoo] C:\PROGRA~1\MESSAG~1\StartMessager.exe Messager Wanadoo
                O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
                O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\system32\qttask.exe" -atboottime
                O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
                O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
                O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
                O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
                O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
                O4 - HKLM\..\Run: [Vade Retro Outlook Express] "C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe"
                O4 - HKLM\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
                O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
                O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
                O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
                O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
                O4 - HKCU\..\Run: [Felix II] C:\Program Files\ScreenMates\Felix II\Fr\Felix2.exe
                O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
                O4 - HKCU\..\Run: [SpyBrowser] "C:\Program Files\SpyBro\SpyBro.exe" /autostart
                O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
                O4 - Global Startup: hp psc 1000 series.lnk = ?
                O4 - Global Startup: hpoddt01.exe.lnk = ?
                O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
                O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
                O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
                O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
                O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
                O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
                O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
                O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
                O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
                O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
                O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
                O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
                O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                O16 - DPF: teleir_cert - https://static.ir.dgi.minefi.gouv.fr/secure/connexion/archives/ie4n4/teleir_cert.cab
                O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
                O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
                O18 - Protocol: bw+0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw+0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw-0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw-0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw00 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw00s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw10 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw10s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw20 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw20s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw30 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw30s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw40 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw40s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw50 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw50s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw60 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw60s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw70 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw70s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw80 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw80s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw90 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw90s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwa0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwa0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwb0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwb0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwc0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwc0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwd0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwd0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwe0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwe0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwf0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwf0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
                O18 - Protocol: bwg0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwg0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwh0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwh0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwi0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwi0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwj0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwj0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwk0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwk0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwl0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwl0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwm0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwm0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwn0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwn0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwo0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwo0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwp0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwp0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwq0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwq0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwr0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwr0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bws0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bws0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwt0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwt0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwu0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwu0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwv0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwv0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bww0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bww0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwx0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwx0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwy0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwy0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwz0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwz0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
                O18 - Protocol: offline-8876480 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
                O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
                O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
                O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
                O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
                O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
                O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
                O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
                1. Utilisateur anonyme
                  Relance HijackThis, choisis " do a scan only" coche la case devant les lignes ci-dessous et clique en bas sur "fix checked"

                  O2 - BHO: Nothing - {b0398eca-0bcd-4645-8261-5e9dc70248d0} - C:\WINDOWS\system32\hp5573.tmp
                  O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll (file missing)
                  O4 - HKCU\..\Run: [SpyBrowser] "C:\Program Files\SpyBro\SpyBro.exe" /autostart
                  16 - DPF: teleir_cert - https://static.ir.dgi.minefi.gouv.fr/secure/connexion/archives/ie4n4/teleir_cert.cab
                  O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
                  O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
                  O18 - Protocol: bw+0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw+0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw-0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw-0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw00 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw00s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw10 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw10s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw20 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw20s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw30 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw30s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw40 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw40s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw50 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw50s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw60 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw60s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw70 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw70s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw80 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw80s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw90 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw90s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwa0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwa0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwb0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwb0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwc0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwc0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwd0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwd0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwe0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwe0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwf0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwf0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
                  O18 - Protocol: bwg0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwg0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwh0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwh0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwi0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwi0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwj0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwj0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwk0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwk0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwl0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwl0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwm0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwm0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwn0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwn0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwo0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwo0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwp0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwp0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwq0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwq0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwr0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwr0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bws0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bws0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwt0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwt0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwu0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwu0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwv0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwv0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bww0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bww0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwx0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwx0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwy0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwy0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwz0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwz0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)

                  clique sur demarrer, poste de travail, C:, program files,cherche et supprime ce programme:

                  SpyBro

                  Clique sur demarrer, rechercher ,cherche et supprime ce fichier:

                  hp5573.tmp

                  Puis fait ce scan anti-virus en ligne et colle le rapport ici une fois qu'il a fini

                  https://www.bitdefender.com/toolbox/
              • 1
              • 2

              Discussions similaires

              W32 L32: correspondance entre taille US et taille française
              efg

              6 réponses
              Win32:Malware-gen
              botte36

              15 réponses
              W32.jeefo
              Vador

              3 réponses
              infecté par W32/blaster.worm help !
              neton

              31 réponses
              win32:malware-gen bloqué par avast
              ikkual

              69 réponses