Virus

Résolu
christaline92 -  
SLT

j'ai probleme de virus qui envoy des mail de mon pc
impossile de le trouver avec avast ou antivir

help SVP

Logfile of HijackThis v1.99.1
Scan saved at 23:46:59, on 10/04/2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Philips\Philips Device Manager\Bin\DeviceManager.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\System32\cmd.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Philips\Philips Lime Service\bin\LimeAlive.exe
C:\Program Files\Microsoft ActiveSync\wcescomm.exe
c:\fix\fixblast2.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Philips\Philips Lime Service\bin\Lime.exe
C:\PROGRA~1\MICROS~3\rapimgr.exe
C:\Program Files\Club-Internet\Le Compagnon Club\bin\mpbtn.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\pctspk.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqnrs08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\System32\HPZinw12.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\hijackthis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://actus.sfr.fr
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer avec Club-Internet
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [Vade Retro Outlook Express] "C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [PhilipsDM] "C:\Program Files\Philips\Philips Device Manager\Bin\DeviceManager.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [Windows Autoupdate] c:\fix\fix.bat
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKCU\..\Run: [PhilipsLime] "C:\Program Files\Philips\Philips Lime Service\bin\LimeAlive.exe"
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
O4 - Startup: Weezo.lnk = ?
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: LE COMPAGNON CLUB.lnk = C:\Program Files\Club-Internet\Le Compagnon Club\bin\matcli.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\windows\system32\ntwldcberyysf.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ntwldcberyysf.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ntwldcberyysf.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ntwldcberyysf.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ntwldcberyysf.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ntwldcberyysf.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ntwldcberyysf.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ntwldcberyysf.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ntwldcberyysf.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ntwldcberyysf.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ntwldcberyysf.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ntwldcberyysf.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ntwldcberyysf.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ntwldcberyysf.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ntwldcberyysf.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ntwldcberyysf.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ntwldcberyysf.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ntwldcberyysf.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ntwldcberyysf.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\ntwldcberyysf.dll
O16 - DPF: {127698E4-E730-4E5C-A2B1-21490A70C8A1} (CEnroll Class) - https://static.impots.gouv.fr/abos/securite/xenroll.cab
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/yinst/yinst_current.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{6DA58309-86A0-45A8-A485-72AF641FB4BE}: NameServer = 192.168.1.1
O18 - Protocol: bw+0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
Configuration: Windows XP
Firefox 2.0.0.3

28 réponses

Résumé de la discussion

Une infection virale qui envoie des mails depuis l’ordinateur échappe aux détections d’Avast et d’AntiVir, comme le montre le log HijackThis détaillé, compliquant l’identification de la source et la désinfection. Plusieurs réponses suggèrent de désactiver l’un des deux antivirus résidents pour éviter les conflits, puis d’effectuer un scan en ligne et d’examiner les éléments de démarrage et les services suspects. Des éléments du fichier journal et des rapports citent des entrées O18 dans HijackThis et d’autres composants au démarrage, suggérant des modules et pilotes potentiellement malveillants à analyser et éliminer. En cas de persistance, il est recommandé de privilégier un seul antivirus en résident et d’utiliser des outils complémentaires, afin de stabiliser la sécurité et d’éviter les conflits logiciels.

Bobot (l’IA à votre service)
  1. philae83 Contributeur sécurité
    re

    peux tu regarder en faisant
    démarrer-----------exécuter----------tu tapes services.msc et tu regardes si il est bien mis en automatique.

    1. christaline92 Auteur
      Bonjour
      A première vue je n'ai plus de problème mes imprimante OK
      et plus de virus.
      Merci beaucoup pour ton aide.
  3. philae83 Contributeur sécurité
    je ne sais pas, je vais me renseigner, et je te tiens au courant

    as tu d'autre problèmes maintenant ?
    1. philae83 Contributeur sécurité
      bonjour, 

      Je le visualise bien lorsque je vais dans MSCONFIG/SERVICE
Je ne sais pas comment l'activé.


      quand tu le vois où ?
      1. christaline92 Auteur
        dans DEMARRER/EXECUTER/TAPER msconfig/SERVICE

        J'ai réussi a trouver une commande pour le réactiver cela fonctionne
        mais au redémarrage du PC il ne se réactive pas.
    3. christaline92 Auteur
      Bonjour,

      J'ai déja essayé
      Mon problème viens du spouleur d'impression qui est a l'arrêt
      Je le visualise bien lorsque je vais dans MSCONFIG/SERVICE
      Je ne sais pas comment l'activé.
      1. philae83 Contributeur sécurité
        bonsoir,

        essaye de la désinstaller, d'aller chercher le dernier pilote et de l'installer avec.
        1. philae83 Contributeur sécurité
          re

          supprime avast ou antivir au démarrage, tu en as 1 de trop

          * lance hijackthis "do a system scan only" puis coche

          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
          O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
          O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
          O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
          O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
          O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/yinst/yinst_current.cab
          O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
          O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
          O18 - Protocol: bw+0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw+0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw-0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw-0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw00 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw00s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw10 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw10s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw20 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw20s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw30 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw30s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw40 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw40s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw50 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw50s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw60 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw60s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw70 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw70s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw80 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw80s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw90 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw90s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwa0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwa0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwb0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwb0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwc0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwc0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwd0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwd0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwe0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwe0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwf0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwf0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
          O18 - Protocol: bwg0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwg0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwh0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwh0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwi0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwi0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwj0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwj0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwk0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwk0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwl0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwl0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwm0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwm0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwn0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwn0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwo0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwo0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwp0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwp0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwq0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwq0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwr0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwr0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bws0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bws0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwt0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwt0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwu0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwu0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwv0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwv0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bww0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bww0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwx0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwx0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwy0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwy0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwz0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwz0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: offline-8876480 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll

          * ferme toutes les applications ouvertes y compris IE et clique sur "fix checked"

          * as tu refait un scan antivirus en ligne ?

          pour ton imprimante, je ne sais pas trop. L'as tu bien désinstallée pour la ré installer ?
          1. christaline92 Auteur
            Bonjour

            Pas pu répondre avant

            J’ai fait comme tu ma dis a première vu plus de problème.
            Pour mon imprimante le problème vient de spoolsv.exe
            Lorsque je relance le CD d'installation il le répare et dés que je relance mon pc plus d'imprimante.

            Est ce que l on peut répare définitivement spoolsv.exe
        2. christaline92 Auteur
          Logfile of HijackThis v1.99.1
          Scan saved at 22:44:23, on 19/04/2007
          Platform: Windows XP SP1 (WinNT 5.01.2600)
          MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

          Running processes:
          C:\WINDOWS\System32\smss.exe
          C:\WINDOWS\system32\winlogon.exe
          C:\WINDOWS\system32\services.exe
          C:\WINDOWS\system32\lsass.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\Explorer.EXE
          C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
          C:\Program Files\Alwil Software\Avast4\ashServ.exe
          C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
          C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe
          C:\Program Files\QuickTime\qttask.exe
          C:\Program Files\Philips\Philips Device Manager\Bin\DeviceManager.exe
          C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
          C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
          C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
          C:\Program Files\Philips\Philips Lime Service\bin\LimeAlive.exe
          C:\Program Files\Microsoft ActiveSync\wcescomm.exe
          C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
          C:\Program Files\Philips\Philips Lime Service\bin\Lime.exe
          C:\PROGRA~1\MICROS~3\rapimgr.exe
          C:\Program Files\Club-Internet\Le Compagnon Club\bin\mpbtn.exe
          C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
          C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
          C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
          C:\WINDOWS\System32\drivers\CDAC11BA.EXE
          C:\WINDOWS\system32\pctspk.exe
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\system32\ZoneLabs\vsmon.exe
          C:\Program Files\Mozilla Firefox\firefox.exe
          C:\hijackthis\HijackThis.exe

          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://actus.sfr.fr
          R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer avec Club-Internet
          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
          O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
          O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
          O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
          O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
          O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
          O4 - HKLM\..\Run: [Vade Retro Outlook Express] "C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe"
          O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
          O4 - HKLM\..\Run: [PhilipsDM] "C:\Program Files\Philips\Philips Device Manager\Bin\DeviceManager.exe"
          O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
          O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
          O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
          O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
          O4 - HKCU\..\Run: [PhilipsLime] "C:\Program Files\Philips\Philips Lime Service\bin\LimeAlive.exe"
          O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
          O4 - Global Startup: hpoddt01.exe.lnk = ?
          O4 - Global Startup: LE COMPAGNON CLUB.lnk = C:\Program Files\Club-Internet\Le Compagnon Club\bin\matcli.exe
          O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
          O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
          O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
          O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
          O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
          O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
          O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
          O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
          O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
          O16 - DPF: {127698E4-E730-4E5C-A2B1-21490A70C8A1} (CEnroll Class) - https://static.impots.gouv.fr/abos/securite/xenroll.cab
          O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/yinst/yinst_current.cab
          O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
          O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
          O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
          O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
          O17 - HKLM\System\CCS\Services\Tcpip\..\{6DA58309-86A0-45A8-A485-72AF641FB4BE}: NameServer = 192.168.1.1
          O18 - Protocol: bw+0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw+0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw-0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw-0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw00 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw00s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw10 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw10s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw20 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw20s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw30 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw30s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw40 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw40s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw50 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw50s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw60 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw60s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw70 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw70s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw80 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw80s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw90 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw90s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwa0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwa0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwb0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwb0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwc0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwc0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwd0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwd0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwe0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwe0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwf0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwf0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
          O18 - Protocol: bwg0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwg0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwh0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwh0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwi0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwi0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwj0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwj0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwk0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwk0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwl0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwl0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwm0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwm0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwn0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwn0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwo0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwo0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwp0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwp0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwq0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwq0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwr0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwr0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bws0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bws0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwt0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwt0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwu0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwu0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwv0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwv0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bww0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bww0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwx0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwx0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwy0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwy0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwz0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwz0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: offline-8876480 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
          O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
          O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
          O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
          O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
          O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
          O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
          O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
          O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
          O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe
          O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
          O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
          1. philae83 Contributeur sécurité
            bonsoir,

            reposte un rapport hijackthis déjà stp
            1. philae83 Contributeur sécurité
              alors j'ai trouvé ceci

              Le fichier ndis.sys situé sur c:\windows\system32\drivers est contaminé. Il réinstalle systématiquement un fichier cp1041.nls sur C:\

              Le remède simple qui semble fonctionner sans problème

              - récupérer un fichier ndis.sys sain (taille 180 ko environ, le corrompu fait 257 ko). On peut aussi dupliquer celui qui est contenu dans c:\windows\system32\dllcache, si il est sain.
              - redémarrer en mode sans échec
              - effacer cp1041.nls sur c:\
              - effacer le ndis.sys corrompu sur c:\windows\system32\drivers
              - placer le nouveau ndis.sys
              - redémarrer en mode normal

              tiens moi au courant
              1. christaline92 Auteur
                bonjour

                Alors pour le virus on dirait que ça marche
                par contre je n'arrive plus a installer mon imprimante.
            2. christaline92 Auteur
              bonjours

              le probleme est que antivir le trouve et l'envoie en quarantaine a chaque redemarage.
              apres ca je ne le retrouve plus
              par contre juste avant qu'il ne le met en quarantaine il est bien la C:/windows/system32/totour.exe
              1. philae83 Contributeur sécurité
                bonsoir,

                * Assure toi d'avoir accès à tous les fichiers

                -démarrer

                -poste de travail ou autre dossier

                -menu outils

                -options de dossier

                -onglet affichage

                puis

                - activer la case : Afficher les fichiers et dossiers cachés

                - désactiver la case : Masquer les extensions des fichiers dont le type est connu

                - désactiver la case : Masquer les fichier protégés du système d'exploitation

                Puis - Appliquer
                te dit moi si tu trouves

                C:/windows/system32/totour.exe


                1. christaline92 Auteur
                  AntiVir PersonalEdition Classic
                  Report file date: samedi 14 avril 2007 11:45

                  Scanning for 569934 virus strains and unwanted programs.

                  Licensed to: Avira AntiVir PersonalEdition Classic
                  Serial number: 0000149996-ADJIE-0001
                  Platform: Windows XP
                  Windows version: (Service Pack 1) [5.1.2600]
                  Username: Propriétaire
                  Computer name: BUREAU

                  Version information:
                  BUILD.DAT : 217 12749 Bytes 05/12/2006 17:00:00
                  AVSCAN.EXE : 7.0.3.2 208936 Bytes 05/12/2006 14:30:07
                  AVSCAN.DLL : 7.0.3.1 35880 Bytes 05/12/2006 15:00:22
                  LUKE.DLL : 7.0.3.2 143400 Bytes 31/10/2006 15:07:46
                  LUKERES.DLL : 7.0.2.0 9256 Bytes 05/12/2006 15:00:22
                  ANTIVIR0.VDF : 6.35.0.1 7371264 Bytes 31/05/2006 14:30:06
                  ANTIVIR1.VDF : 6.36.1.24 2212864 Bytes 14/11/2006 08:12:08
                  ANTIVIR2.VDF : 6.36.1.113 221696 Bytes 01/12/2006 08:12:12
                  ANTIVIR3.VDF : 6.37.0.3 6144 Bytes 01/12/2006 08:12:14
                  AVEWIN32.DLL : 7.3.0.15 1982976 Bytes 04/12/2006 16:18:38
                  AVPREF.DLL : 7.0.2.0 23592 Bytes 03/11/2006 09:53:44
                  AVREP.DLL : 6.37.0.3 983080 Bytes 01/12/2006 08:05:52
                  AVRPBASE.DLL : 7.0.0.0 2162728 Bytes 30/03/2006 07:43:31
                  AVPACK32.DLL : 7.2.0.5 368680 Bytes 23/10/2006 14:21:31
                  AVREG.DLL : 7.0.1.1 30760 Bytes 23/10/2006 09:52:27
                  NETNT.DLL : No Information!
                  RCIMAGE.DLL : 7.0.1.3 2097192 Bytes 08/11/2006 11:26:26
                  RCTEXT.DLL : 7.0.12.1 77864 Bytes 05/12/2006 15:00:21

                  Configuration settings for the scan:
                  Jobname..........................: Local Drives
                  Configuration file...............: C:\Program Files\AntiVir PersonalEdition Classic\alldrives.avp
                  Logging..........................: low
                  Primary action...................: interactive
                  Secondary action.................: ignore
                  Scan master boot sector..........: off
                  Scan boot sector.................: on
                  Boot sectors.....................: G:,
                  Scan memory......................: on
                  Process scan.....................: on
                  Scan registry....................: on
                  Scan all files...................: Intelligent file selection
                  Scan archives....................: on
                  Recursion depth..................: 20
                  Smart extensions.................: on
                  Macro heuristic..................: on
                  File heuristic...................: medium
                  Expanded search settings.........: 0x00007000

                  Start of the scan: samedi 14 avril 2007 11:45

                  The scan of running processes will be started
                  Scan process 'avscan.exe' - '1' Modules have been scanned
                  Scan process 'avcenter.exe' - '1' Modules have been scanned
                  Scan process 'ashMaiSv.exe' - '0' Modules have been scanned
                  Scan process 'ashWebSv.exe' - '0' Modules have been scanned
                  Scan process 'vsmon.exe' - '0' Modules have been scanned
                  Scan process 'wdfmgr.exe' - '0' Modules have been scanned
                  Scan process 'svchost.exe' - '0' Modules have been scanned
                  Scan process 'pctspk.exe' - '0' Modules have been scanned
                  Scan process 'CDAC11BA.EXE' - '0' Modules have been scanned
                  Scan process 'guard.exe' - '0' Modules have been scanned
                  Scan process 'ashServ.exe' - '0' Modules have been scanned
                  Scan process 'aswUpdSv.exe' - '0' Modules have been scanned
                  Scan process 'avguard.exe' - '0' Modules have been scanned
                  Scan process 'sched.exe' - '0' Modules have been scanned
                  Scan process 'alg.exe' - '0' Modules have been scanned
                  Scan process 'mpbtn.exe' - '1' Modules have been scanned
                  Scan process 'rapimgr.exe' - '1' Modules have been scanned
                  Scan process 'Lime.exe' - '1' Modules have been scanned
                  Scan process 'wcescomm.exe' - '1' Modules have been scanned
                  Scan process 'LimeAlive.exe' - '1' Modules have been scanned
                  Scan process 'avgnt.exe' - '1' Modules have been scanned
                  Scan process 'zlclient.exe' - '0' Modules have been scanned
                  Scan process 'ashDisp.exe' - '1' Modules have been scanned
                  Scan process 'DeviceManager.exe' - '1' Modules have been scanned
                  Scan process 'qttask.exe' - '1' Modules have been scanned
                  Scan process 'Vaderetro_oe.exe' - '1' Modules have been scanned
                  Scan process 'jusched.exe' - '1' Modules have been scanned
                  Scan process 'explorer.exe' - '1' Modules have been scanned
                  Scan process 'svchost.exe' - '0' Modules have been scanned
                  Scan process 'svchost.exe' - '0' Modules have been scanned
                  Scan process 'svchost.exe' - '0' Modules have been scanned
                  Scan process 'svchost.exe' - '0' Modules have been scanned
                  Scan process 'lsass.exe' - '0' Modules have been scanned
                  Scan process 'services.exe' - '0' Modules have been scanned
                  Scan process 'winlogon.exe' - '0' Modules have been scanned
                  Scan process 'csrss.exe' - '0' Modules have been scanned
                  Scan process 'smss.exe' - '0' Modules have been scanned
                  14 processes with 14 modules were scanned

                  Start scanning boot sectors:
                  Boot sector 'C:\'
                  [NOTE] No virus was found!
                  Boot sector 'D:\'
                  [NOTE] No virus was found!
                  Boot sector 'A:\'
                  [NOTE] In the drive 'A:\' no data medium is inserted!

                  Starting to scan the registry.
                  The registry was scanned ( 17 files ).

                  Starting the file scan:

                  Begin scan in 'C:\'
                  C:\pagefile.sys
                  [WARNING] The file could not be opened!
                  C:\WINDOWS\system32\drivers\ndis.sys
                  [WARNING] The file could not be opened!
                  Begin scan in 'D:\' <DRV2_VOL1>
                  Begin scan in 'A:\' <D:\>
                  The path A:\ could not be found!
                  Le périphérique n'est pas prêt.

                  Begin scan in 'E:\' <A:\>
                  The path E:\ could not be found!
                  Le périphérique n'est pas prêt.

                  Begin scan in 'G:\' <E:\>
                  The path G:\ could not be found!
                  Le périphérique n'est pas prêt.

                  End of the scan: samedi 14 avril 2007 12:37
                  Used time: 52:09 min

                  The scan has been done completely.

                  4638 Scanning directories
                  223878 Files were scanned
                  0 viruses and/or unwanted programs were found
                  0 files were deleted
                  0 files were repaired
                  0 files were moved to quarantine
                  0 files were renamed
                  2 Files cannot be scanned
                  223878 Files not concerned
                  1726 Archives were scanned
                  2 Warnings
                  8 Notes
                  1. christaline92 Auteur
                    bonjour
                    antivir me détecte a chaque redemarage totour.exe
                    je le transfert en quarantaine mais il revient
                    1. christaline92 Auteur
                      AVG Anti-Spyware - Rapport d'analyse
                      ---------------------------------------------------------

                      + Créé à: 10:35:53 14/04/2007

                      + Résultat de l'analyse:

                      Rien à signaler.

                      Fin du rapport
                      1. philae83 Contributeur sécurité
                        re

                        désactive l'un des 2 antivirus antivir ou avast.

                        * fait un scan antivirus avec AVG AS et poste le rapport ici ensuite

                        1. christaline92 Auteur
                          voila
                          mais mon problème set toujours la.

                          Logfile of HijackThis v1.99.1
                          Scan saved at 18:43:10, on 13/04/2007
                          Platform: Windows XP SP1 (WinNT 5.01.2600)
                          MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

                          Running processes:
                          C:\WINDOWS\System32\smss.exe
                          C:\WINDOWS\system32\winlogon.exe
                          C:\WINDOWS\system32\services.exe
                          C:\WINDOWS\system32\lsass.exe
                          C:\WINDOWS\system32\svchost.exe
                          C:\WINDOWS\System32\svchost.exe
                          C:\WINDOWS\Explorer.EXE
                          C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
                          C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe
                          C:\Program Files\QuickTime\qttask.exe
                          C:\Program Files\Philips\Philips Device Manager\Bin\DeviceManager.exe
                          C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                          C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
                          C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
                          C:\Program Files\Philips\Philips Lime Service\bin\LimeAlive.exe
                          C:\Program Files\Microsoft ActiveSync\wcescomm.exe
                          C:\Program Files\Philips\Philips Lime Service\bin\Lime.exe
                          C:\PROGRA~1\MICROS~3\rapimgr.exe
                          C:\Program Files\Club-Internet\Le Compagnon Club\bin\mpbtn.exe
                          C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
                          C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
                          C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                          C:\Program Files\Alwil Software\Avast4\ashServ.exe
                          C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                          C:\WINDOWS\System32\drivers\CDAC11BA.EXE
                          C:\WINDOWS\system32\pctspk.exe
                          C:\WINDOWS\System32\svchost.exe
                          C:\WINDOWS\system32\ZoneLabs\vsmon.exe
                          C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
                          C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
                          C:\Program Files\AntiVir PersonalEdition Classic\avcenter.exe
                          C:\Program Files\AntiVir PersonalEdition Classic\avscan.exe
                          C:\Program Files\Mozilla Firefox\firefox.exe
                          C:\hijackthis\HijackThis.exe

                          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
                          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank
                          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://actus.sfr.fr
                          R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank
                          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
                          R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer avec Club-Internet
                          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                          O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
                          O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
                          O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
                          O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
                          O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
                          O4 - HKLM\..\Run: [Vade Retro Outlook Express] "C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe"
                          O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                          O4 - HKLM\..\Run: [PhilipsDM] "C:\Program Files\Philips\Philips Device Manager\Bin\DeviceManager.exe"
                          O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
                          O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
                          O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
                          O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
                          O4 - HKCU\..\Run: [PhilipsLime] "C:\Program Files\Philips\Philips Lime Service\bin\LimeAlive.exe"
                          O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"
                          O4 - Global Startup: LE COMPAGNON CLUB.lnk = C:\Program Files\Club-Internet\Le Compagnon Club\bin\matcli.exe
                          O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
                          O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
                          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
                          O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
                          O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
                          O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
                          O9 - Extra 'Tools' menuitem: Créer un favori mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
                          O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
                          O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
                          O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
                          O16 - DPF: {127698E4-E730-4E5C-A2B1-21490A70C8A1} (CEnroll Class) - https://static.impots.gouv.fr/abos/securite/xenroll.cab
                          O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/yinst/yinst_current.cab
                          O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
                          O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
                          O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
                          O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
                          O17 - HKLM\System\CCS\Services\Tcpip\..\{6DA58309-86A0-45A8-A485-72AF641FB4BE}: NameServer = 192.168.1.1
                          O18 - Protocol: bw+0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bw+0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bw-0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bw-0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bw00 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bw00s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bw10 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bw10s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bw20 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bw20s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bw30 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bw30s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bw40 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bw40s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bw50 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bw50s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bw60 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bw60s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bw70 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bw70s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bw80 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bw80s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bw90 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bw90s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwa0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwa0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwb0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwb0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwc0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwc0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwd0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwd0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwe0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwe0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwf0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwf0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
                          O18 - Protocol: bwg0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwg0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwh0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwh0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwi0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwi0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwj0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwj0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwk0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwk0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwl0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwl0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwm0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwm0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwn0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwn0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwo0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwo0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwp0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwp0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwq0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwq0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwr0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwr0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bws0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bws0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwt0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwt0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwu0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwu0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwv0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwv0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bww0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bww0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwx0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwx0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwy0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwy0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwz0 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: bwz0s - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O18 - Protocol: offline-8876480 - {083C729A-3B10-426B-BA5F-09ED37AB58CD} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                          O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
                          O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
                          O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
                          O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
                          O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
                          O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
                          O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                          O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
                          O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
                          O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - C:\WINDOWS\system32\pctspk.exe
                          O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
                          O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
                          1. philae83 Contributeur sécurité
                            re

                            reposte maintenant un nouveau rapport hijackthis stp
                            1. christaline92 Auteur
                              voila

                              BitDefender Online Scanner

                              Rapport d'analyse généré à: Thu, Apr 12, 2007 - 23:34:24

                              Voie d'analyse: A:\;C:\;D:\;E:\;G:\;

                              Statistiques

                              Temps

                              01:49:40

                              Fichiers

                              510835

                              Directoires

                              5215

                              Secteurs de boot

                              4

                              Archives

                              9845

                              Paquets programmes

                              65972

                              Résultats

                              Virus identifiés

                              1

                              Fichiers infectés

                              1

                              Fichiers suspects

                              0

                              Avertissements

                              0

                              Désinfectés

                              0

                              Fichiers effacés

                              1

                              Info sur les moteurs

                              Définition virus

                              485660

                              Version des moteurs

                              AVCORE v1.0 (build 2397) (i386) (Feb 8 2007 14:24:08)

                              Analyse des plugins

                              14

                              Archive des plugins

                              38

                              Unpack des plugins

                              6

                              E-mail plugins

                              6

                              Système plugins

                              1

                              Paramètres d'analyse

                              Première action

                              Désinfecté

                              Seconde Action

                              Supprimé

                              Heuristique

                              Oui

                              Acceptez les avertissements

                              Oui

                              Extensions analysées

                              *;

                              Excludez les extensions

                              Analyse d'emails

                              Oui

                              Analyse des Archives

                              Oui

                              Analyser paquets programmes

                              Oui

                              Analyse des fichiers

                              Oui

                              Analyse de boot

                              Oui

                              Fichier analysé

                              Statut

                              C:\System Volume Information\_restore{31DBB293-7699-4F23-856A-E3AE0FF67570}\RP1232\A0130135.exe

                              Infecté par: Trojan.Peed.LY

                              C:\System Volume Information\_restore{31DBB293-7699-4F23-856A-E3AE0FF67570}\RP1232\A0130135.exe

                              Echec de la désinfection

                              C:\System Volume Information\_restore{31DBB293-7699-4F23-856A-E3AE0FF67570}\RP1232\A0130135.exe

                              Supprimé
                              1. philae83 Contributeur sécurité
                                bonsoir,

                                oui il serait bien que tu refasses un scan, mais peut être qu'il ne trouvera plus rien si il a tout nettoyé. Refait le quand même stp poste le rapport complet. Il faut le chemin des fichiers infectés et l'action réalisée

                                • 1
                                • 2

                                Discussions similaires

                                Softonic,est-ce un virus ?
                                techmel1

                                6 réponses
                                Chrome://newtab
                                Nova

                                14 réponses
                                Désinstaller Softonic
                                Diguimette

                                5 réponses
                                Supprimer New Tab
                                tysaozon

                                8 réponses
                                Bouton pause/break
                                frans003

                                3 réponses