Http://suppcons.info/cgi-bin/ko35em8w.cgi?nam

Résolu
Serge -  
Allo tout le monde. À l'ouverture de mon ordinateur, j'ai toujours une page internet explorer qui rouvre.
http://suppcons.info/cgi-bin/ko35em8w.cgi?name=brb
Ça me gosse vraiment et j'aimerais savoir s'il y a quelqu'un qui sait comment ôter ça.
Merci.
Configuration: Windows XP
Internet Explorer 7.0

21 réponses

  1. papyber Contributeur sécurité
    télécharge et installe le logiciel HijackThis v1.99.1
    http://pchelpbordeaux.free.fr/logiciels.html
    Tutorial
    http://pchelpbordeaux.free.fr/tuto.html
    poste son rapport

    télécharge GenProc de Jean-Chretien1 et Narco4 sur ton bureau
    http://www.alt-shift-return.org/Info/Fichiers/GenProc.zip

    dézippe le dossier, double-clique sur GenProc.bat et poste le contenu du rapport qui s'ouvre

    Aide en images : http://www.alt-shift-return.org/Info/GenProc-HowTo.html
    poste les rapports car parfois il faut ajouter des consignes à la manip pour que cela fonctionne parfaitement
    1. papyber Contributeur sécurité
      clic double sur OTMoveIt.exe pour le lancer
      Clic sur le bouton CleanUp! destiné a supprimer toutes traces des programmes qui ont servi à la désinfection
      OTMoveIt s'auto-supprime aussi.
      la manoeuvre nécessitera un reboot initié par le programme.

      supprime absolument tout ce qui a servi à la désinfection
      conserve néanmoins ccleaner et effectue le nettoyage tous les jours avant de couper le PC

      installe ce logiciel très utile et scanne ton PC avec une fois par semaine au moins...
      AVG Antispyware
      https://www.avg.com/en-ww/free-antivirus-download

      mode d'utilisation :
      Lance AVG Anti-Spyware, mets le à jour,
      Clique sur le bouton « Analyse »
      Puis « Comment réagir », clique sur Actions recommandées. Sélectionne Quarantaine.
      Retour à l'onglet Analyse.
      Clique sur Analyse complète du système.
      A la fin du scan, choisis " Appliquer toutes les actions "
      Clique sur "Enregistrer le rapport". Le fichier texte se trouve dans le dossier Reports du dossier d'AVG Anti-Spyware.

      tu peux le coupler avec celui-ci
      spybot search and destroy
      https://www.safer-networking.org/?page=download

      défragmente

      pense à bien te protéger, j'ai découvert ce lien qui est plutôt pas mal à ce sujet

      https://forum.pcastuces.com/default.asp

      désactive ta restauration
      clique droit sur poste de travail/propriétés/coche la case désactiver la restauration, appliquer
      redémarre ton PC
      clique droit sur poste de travail/propriétés/décoche la case désactiver la restauration, appliquer
      démarrer/tous les programmes/ outils système/ restauration du système/ créer un point de restauration

      la sécurité c'est très important mais ne remplace pas l'internaute, un surf prudent en évitant le crack, les sites "chauds", permet déjà d'éviter bien des soucis, le P2P lui aussi est source d'infections...

      et bon surf
      1. Serge
        Merci à toi papyber.
    2. Serge
      Ça c'est BitDefender qui m'a généré ça:
      <HTML>
      <HEAD>
      <TITLE>BitDefender Online Scanner - Rapport d'analyse</TITLE>
      <META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
      </HEAD>
      <BODY BGCOLOR=#FFFFFF leftmargin="10" marginwidth="0" topmargin="20" marginheight="0" >

      <table align="center" border="0" cellpadding="0" cellspacing="0" width="90%">
      <tr>
      <td width="458">
      <p><font face="Arial" color=red><span style="font-size:14pt;"><b>BitDefender Online Scanner</b></span></font></p>
      </td>
      <td width="40%">
      <p> </p>
      </td>
      <td width="10%">
      <p> </p>
      </td>
      </tr>
      <tr>
      <td colspan="3" width="912">
      <p><font face="Arial"><span style="font-size:11pt;"><B>Rapport d'analyse généré à: Thu, Jul 05, 2007 - 23:58:50</b></span></font></p>
      </td>
      </tr>

      <tr>
      <td width="458">
      <p><font face="Arial"><span style="font-size:11pt;"><B> </b></span></font></p>
      </td>
      <td width="40%">
      <p> </p>
      </td>
      <td width="10%">
      <p> </p>
      </td>
      </tr>

      <tr>
      <td width="458">
      <p><font face="Arial"><span style="font-size:11pt;"><B>Voie d'analyse: </b></span><span style="font-size:10pt;">A:\;C:\;D:\;E:\;F:\;G:\;</span></font></p>
      </td>
      <td width="40%">
      <p> </p>
      </td>
      <td width="10%">
      <p> </p>
      </td>
      </tr>

      <tr>
      <td width="458">
      <p><font face="Arial"><span style="font-size:11pt;"><B> </b></span></font></p>
      </td>
      <td width="40%">
      <p> </p>
      </td>
      <td width="10%">
      <p> </p>
      </td>
      </tr>

      <tr>
      <td width="458">
      <table border="1" cellspacing="0" bordercolordark="white" bordercolorlight="black" width="100%">
      <tr>
      <td width="451" colspan="2" bgcolor="#CCCCCC">
      <p><font face="Arial" size="2"><B>Statistiques</b></font></p>
      </td>
      </tr>
      <tr>
      <td width="57%">
      <p><font face="Arial" size="2">Temps</font></p>
      </td>
      <td width="43%" align="right">
      <p><font face="Arial" size="2">01:29:20</font></p>
      </td>
      </tr>
      <tr>
      <td width="57%">
      <p><font face="Arial" size="2">Fichiers</font></p>
      </td>
      <td width="43%" align="right">
      <p><font face="Arial" size="2">288688</font></p>
      </td>
      </tr>
      <tr>
      <td width="57%">
      <p><font face="Arial" size="2">Directoires</font></p>
      </td>
      <td width="43%" align="right">
      <p><font face="Arial" size="2">9939</font></p>
      </td>
      </tr>
      <tr>
      <td width="57%">
      <p><font face="Arial" size="2">Secteurs de boot</font></p>
      </td>
      <td width="43%" align="right">
      <p><font face="Arial" size="2">5</font></p>
      </td>
      </tr>
      <tr>
      <td width="57%">
      <p><font face="Arial" size="2">Archives</font></p>
      </td>
      <td width="43%" align="right">
      <p><font face="Arial" size="2">1631</font></p>
      </td>
      </tr>
      <tr>
      <td width="57%">
      <p><font face="Arial" size="2">Paquets programmes</font></p>
      </td>
      <td width="43%" align="right">
      <p><font face="Arial" size="2">15654</font></p>
      </td>
      </tr>
      </table>
      </td>
      <td width="40%">
      <p> </p>
      </td>
      <td width="10%">
      <p> </p>
      </td>
      </tr>

      <tr>
      <td width="458">
      <table border="1" cellspacing="0" bordercolordark="white" bordercolorlight="black" width="100%">
      <tr>
      <td width="451" colspan="2" bgcolor="#CCCCCC">
      <p><font face="Arial" size="2"><B>Résultats</b></font></p>
      </td>
      </tr>
      <tr>
      <td width="57%">
      <p><font face="Arial" size="2">Virus identifiés</font></p>
      </td>
      <td width="43%" align="right">
      <p><font face="Arial" size="2">8</font></p>
      </td>
      </tr>
      <tr>
      <td width="57%">
      <p><font face="Arial" size="2">Fichiers infectés</font></p>
      </td>
      <td width="43%" align="right">
      <p><font face="Arial" size="2">15</font></p>
      </td>
      </tr>
      <tr>
      <td width="57%">
      <p><font face="Arial" size="2">Fichiers suspects</font></p>
      </td>
      <td width="43%" align="right">
      <p><font face="Arial" size="2">0</font></p>
      </td>
      </tr>
      <tr>
      <td width="57%">
      <p><font face="Arial" size="2">Avertissements</font></p>
      </td>
      <td width="43%" align="right">
      <p><font face="Arial" size="2">0</font></p>
      </td>
      </tr>
      <tr>
      <td width="57%">
      <p><font face="Arial" size="2">Désinfectés</font></p>
      </td>
      <td width="43%" align="right">
      <p><font face="Arial" size="2">0</font></p>
      </td>
      </tr>
      <tr>
      <td width="57%">
      <p><font face="Arial" size="2">Fichiers effacés</font></p>
      </td>
      <td width="43%" align="right">
      <p><font face="Arial" size="2">15</font></p>
      </td>
      </tr>
      </table>
      </td>
      <td width="40%">
      <p> </p>
      </td>
      <td width="10%">
      <p> </p>
      </td>
      </tr>

      <tr>
      <td width="458">
      <table border="1" cellspacing="0" bordercolordark="white" bordercolorlight="black" width="100%">
      <tr>
      <td width="451" colspan="2" bgcolor="#CCCCCC">
      <p><font face="Arial" size="2"><B>Info sur les moteurs</b></font></p>
      </td>
      </tr>
      <tr>
      <td width="57%">
      <p><font face="Arial" size="2">Définition virus</font></p>
      </td>
      <td width="43%" align="right">
      <p><font face="Arial" size="2">637229</font></p>
      </td>
      </tr>
      <tr>
      <td width="57%">
      <p><font face="Arial" size="2">Version des moteurs</font></p>
      </td>
      <td width="43%" align="right">
      <p><font face="Arial" size="2">AVCORE v1.0 (build 2410) (i386) (Jun 12 2007 21:08:27)</font></p>
      </td>
      </tr>
      <tr>
      <td width="57%">
      <p><font face="Arial" size="2">Analyse des plugins</font></p>
      </td>
      <td width="43%" align="right">
      <p><font face="Arial" size="2">14</font></p>
      </td>
      </tr>
      <tr>
      <td width="57%">
      <p><font face="Arial" size="2">Archive des plugins</font></p>
      </td>
      <td width="43%" align="right">
      <p><font face="Arial" size="2">38</font></p>
      </td>
      </tr>
      <tr>
      <td width="57%">
      <p><font face="Arial" size="2">Unpack des plugins</font></p>
      </td>
      <td width="43%" align="right">
      <p><font face="Arial" size="2">6</font></p>
      </td>
      </tr>
      <tr>
      <td width="57%">
      <p><font face="Arial" size="2">E-mail plugins</font></p>
      </td>
      <td width="43%" align="right">
      <p><font face="Arial" size="2">6</font></p>
      </td>
      </tr>
      <tr>
      <td width="57%">
      <p><font face="Arial" size="2">Système plugins</font></p>
      </td>
      <td width="43%" align="right">
      <p><font face="Arial" size="2">1</font></p>
      </td>
      </tr>
      </table>
      </td>
      <td width="40%">
      <p> </p>
      </td>
      <td width="10%">
      <p> </p>
      </td>
      </tr>

      <tr>
      <td width="458">
      <table border="1" cellspacing="0" bordercolordark="white" bordercolorlight="black" width="100%">
      <tr>
      <td width="451" colspan="2" bgcolor="#CCCCCC">
      <p><font face="Arial" size="2"><B>Paramètres d'analyse</b></font></p>
      </td>
      </tr>
      <tr>
      <td width="57%">
      <p><font face="Arial" size="2">Première action</font></p>
      </td>
      <td width="43%" align="right">
      <p><font face="Arial" size="2">Désinfecté</font></p>
      </td>
      </tr>
      <tr>
      <td width="57%">
      <p><font face="Arial" size="2">Seconde Action</font></p>
      </td>
      <td width="43%" align="right">
      <p><font face="Arial" size="2">Supprimé</font></p>
      </td>
      </tr>
      <tr>
      <td width="57%">
      <p><font face="Arial" size="2">Heuristique</font></p>
      </td>
      <td width="43%" align="right">
      <p><font face="Arial" size="2">Oui</font></p>
      </td>
      </tr>
      <tr>
      <td width="57%">
      <p><font face="Arial" size="2">Acceptez les avertissements</font></p>
      </td>
      <td width="43%" align="right">
      <p><font face="Arial" size="2">Oui</font></p>
      </td>
      </tr>
      <tr>
      <td width="57%">
      <p><font face="Arial" size="2">Extensions analysées</font></p>
      </td>
      <td width="43%" align="right">
      <p><font face="Arial" size="2">*;</font></p>
      </td>
      </tr>

      <tr>
      <td width="57%">
      <p><font face="Arial" size="2">Excludez les extensions</font></p>
      </td>
      <td width="43%" align="right">
      <p><font face="Arial" size="2"> </font></p>
      </td>
      </tr>
      <tr>
      <td width="57%">
      <p><font face="Arial" size="2">Analyse d'emails</font></p>
      </td>
      <td width="43%" align="right">
      <p><font face="Arial" size="2">Oui</font></p>
      </td>
      </tr>
      <tr>
      <td width="57%">
      <p><font face="Arial" size="2">Analyse des Archives</font></p>
      </td>
      <td width="43%" align="right">
      <p><font face="Arial" size="2">Oui</font></p>
      </td>
      </tr>
      <tr>
      <td width="57%">
      <p><font face="Arial" size="2">Analyser paquets programmes</font></p>
      </td>
      <td width="43%" align="right">
      <p><font face="Arial" size="2">Oui</font></p>
      </td>
      </tr>
      <tr>
      <td width="57%">
      <p><font face="Arial" size="2">Analyse des fichiers</font></p>
      </td>
      <td width="43%" align="right">
      <p><font face="Arial" size="2">Oui</font></p>
      </td>
      </tr>
      <tr>
      <td width="57%">
      <p><font face="Arial" size="2">Analyse de boot</font></p>
      </td>
      <td width="43%" align="right">
      <p><font face="Arial" size="2">Oui</font></p>
      </td>
      </tr>
      </table>
      </td>
      <td width="40%">
      <p> </p>
      </td>
      <td width="10%">
      <p> </p>
      </td>
      </tr>

      <tr>
      <td colspan=2>  
      <table border="1" cellspacing="0" bordercolordark="white" bordercolorlight="black" width="100%">
      <tr>
      <td width="252" bgcolor="#CCCCCC">
      <p><font face="Arial" size="2"><B>Fichier analysé</b></font></p>
      </td>
      <td width="195" bgcolor="#CCCCCC" align="right">
      <p align="left"><b><font size="2" face="Arial"> Statut</font></b></p>
      </td>
      </tr>
      <tr>
      <td width="57%">
      <p><font face="Arial" size="2">C:\Documents and Settings\Serge Bélanger\Bureau\SDFix\backups\backups.zip=>backups/b122.exe=>(NSIS o)=>lzma_solid_nsis0002</font></p>
      </td>
      <td width="43%" align="left">
      <p><font face="Arial" size="2">Infecté par: Trojan.Popwin.BK</font></p>
      </td>
      </tr><tr>
      <td width="57%">
      <p><font face="Arial" size="2">C:\Documents and Settings\Serge Bélanger\Bureau\SDFix\backups\backups.zip=>backups/b122.exe=>(NSIS o)=>lzma_solid_nsis0002</font></p>
      </td>
      <td width="43%" align="left">
      <p><font face="Arial" size="2">Echec de la désinfection</font></p>
      </td>
      </tr><tr>
      <td width="57%">
      <p><font face="Arial" size="2">C:\Documents and Settings\Serge Bélanger\Bureau\SDFix\backups\backups.zip=>backups/b122.exe=>(NSIS o)=>lzma_solid_nsis0002</font></p>
      </td>
      <td width="43%" align="left">
      <p><font face="Arial" size="2">Supprimé</font></p>
      </td>
      </tr><tr>
      <td width="57%">
      <p><font face="Arial" size="2">C:\Documents and Settings\Serge Bélanger\Bureau\SDFix\backups\backups.zip=>backups/b122.exe=>(NSIS o)</font></p>
      </td>
      <td width="43%" align="left">
      <p><font face="Arial" size="2">Echec de la mise à jour</font></p>
      </td>
      </tr><tr>
      <td width="57%">
      <p><font face="Arial" size="2">C:\Installations\Messenger Plus! - Setup.exe</font></p>
      </td>
      <td width="43%" align="left">
      <p><font face="Arial" size="2">Infecté par: Trojan.Downloader.Swizzor.AG</font></p>
      </td>
      </tr><tr>
      <td width="57%">
      <p><font face="Arial" size="2">C:\Installations\Messenger Plus! - Setup.exe</font></p>
      </td>
      <td width="43%" align="left">
      <p><font face="Arial" size="2">Echec de la désinfection</font></p>
      </td>
      </tr><tr>
      <td width="57%">
      <p><font face="Arial" size="2">C:\Installations\Messenger Plus! - Setup.exe</font></p>
      </td>
      <td width="43%" align="left">
      <p><font face="Arial" size="2">Supprimé</font></p>
      </td>
      </tr><tr>
      <td width="57%">
      <p><font face="Arial" size="2">C:\Program Files\Hijackthis Version Française\backups\backup-20070704-231245-432.dll</font></p>
      </td>
      <td width="43%" align="left">
      <p><font face="Arial" size="2">Infecté par: Trojan.BHO.AR</font></p>
      </td>
      </tr><tr>
      <td width="57%">
      <p><font face="Arial" size="2">C:\Program Files\Hijackthis Version Française\backups\backup-20070704-231245-432.dll</font></p>
      </td>
      <td width="43%" align="left">
      <p><font face="Arial" size="2">Echec de la désinfection</font></p>
      </td>
      </tr><tr>
      <td width="57%">
      <p><font face="Arial" size="2">C:\Program Files\Hijackthis Version Française\backups\backup-20070704-231245-432.dll</font></p>
      </td>
      <td width="43%" align="left">
      <p><font face="Arial" size="2">Supprimé</font></p>
      </td>
      </tr><tr>
      <td width="57%">
      <p><font face="Arial" size="2">C:\Program Files\Hijackthis Version Française\backups\backup-20070704-231245-780.dll</font></p>
      </td>
      <td width="43%" align="left">
      <p><font face="Arial" size="2">Infecté par: Trojan.BHO.AR</font></p>
      </td>
      </tr><tr>
      <td width="57%">
      <p><font face="Arial" size="2">C:\Program Files\Hijackthis Version Française\backups\backup-20070704-231245-780.dll</font></p>
      </td>
      <td width="43%" align="left">
      <p><font face="Arial" size="2">Echec de la désinfection</font></p>
      </td>
      </tr><tr>
      <td width="57%">
      <p><font face="Arial" size="2">C:\Program Files\Hijackthis Version Française\backups\backup-20070704-231245-780.dll</font></p>
      </td>
      <td width="43%" align="left">
      <p><font face="Arial" size="2">Supprimé</font></p>
      </td>
      </tr><tr>
      <td width="57%">
      <p><font face="Arial" size="2">C:\System Volume Information\_restore{C2D772DC-E35C-4A1D-B977-6EEC4E64561E}\RP1\A0005022.dll</font></p>
      </td>
      <td width="43%" align="left">
      <p><font face="Arial" size="2">Infecté par: Trojan.Vundo.DMA</font></p>
      </td>
      </tr><tr>
      <td width="57%">
      <p><font face="Arial" size="2">C:\System Volume Information\_restore{C2D772DC-E35C-4A1D-B977-6EEC4E64561E}\RP1\A0005022.dll</font></p>
      </td>
      <td width="43%" align="left">
      <p><font face="Arial" size="2">Echec de la désinfection</font></p>
      </td>
      </tr><tr>
      <td width="57%">
      <p><font face="Arial" size="2">C:\System Volume Information\_restore{C2D772DC-E35C-4A1D-B977-6EEC4E64561E}\RP1\A0005022.dll</font></p>
      </td>
      <td width="43%" align="left">
      <p><font face="Arial" size="2">Supprimé</font></p>
      </td>
      </tr><tr>
      <td width="57%">
      <p><font face="Arial" size="2">C:\System Volume Information\_restore{C2D772DC-E35C-4A1D-B977-6EEC4E64561E}\RP4\A0019210.exe</font></p>
      </td>
      <td width="43%" align="left">
      <p><font face="Arial" size="2">Infecté par: Trojan.Downloader.Swizzor.AG</font></p>
      </td>
      </tr><tr>
      <td width="57%">
      <p><font face="Arial" size="2">C:\System Volume Information\_restore{C2D772DC-E35C-4A1D-B977-6EEC4E64561E}\RP4\A0019210.exe</font></p>
      </td>
      <td width="43%" align="left">
      <p><font face="Arial" size="2">Echec de la désinfection</font></p>
      </td>
      </tr><tr>
      <td width="57%">
      <p><font face="Arial" size="2">C:\System Volume Information\_restore{C2D772DC-E35C-4A1D-B977-6EEC4E64561E}\RP4\A0019210.exe</font></p>
      </td>
      <td width="43%" align="left">
      <p><font face="Arial" size="2">Supprimé</font></p>
      </td>
      </tr><tr>
      <td width="57%">
      <p><font face="Arial" size="2">C:\System Volume Information\_restore{C2D772DC-E35C-4A1D-B977-6EEC4E64561E}\RP4\A0019211.dll</font></p>
      </td>
      <td width="43%" align="left">
      <p><font face="Arial" size="2">Infecté par: Trojan.BHO.AR</font></p>
      </td>
      </tr><tr>
      <td width="57%">
      <p><font face="Arial" size="2">C:\System Volume Information\_restore{C2D772DC-E35C-4A1D-B977-6EEC4E64561E}\RP4\A0019211.dll</font></p>
      </td>
      <td width="43%" align="left">
      <p><font face="Arial" size="2">Echec de la désinfection</font></p>
      </td>
      </tr><tr>
      <td width="57%">
      <p><font face="Arial" size="2">C:\System Volume Information\_restore{C2D772DC-E35C-4A1D-B977-6EEC4E64561E}\RP4\A0019211.dll</font></p>
      </td>
      <td width="43%" align="left">
      <p><font face="Arial" size="2">Supprimé</font></p>
      </td>
      </tr><tr>
      <td width="57%">
      <p><font face="Arial" size="2">C:\System Volume Information\_restore{C2D772DC-E35C-4A1D-B977-6EEC4E64561E}\RP4\A0019212.dll</font></p>
      </td>
      <td width="43%" align="left">
      <p><font face="Arial" size="2">Infecté par: Trojan.BHO.AR</font></p>
      </td>
      </tr><tr>
      <td width="57%">
      <p><font face="Arial" size="2">C:\System Volume Information\_restore{C2D772DC-E35C-4A1D-B977-6EEC4E64561E}\RP4\A0019212.dll</font></p>
      </td>
      <td width="43%" align="left">
      <p><font face="Arial" size="2">Echec de la désinfection</font></p>
      </td>
      </tr><tr>
      <td width="57%">
      <p><font face="Arial" size="2">C:\System Volume Information\_restore{C2D772DC-E35C-4A1D-B977-6EEC4E64561E}\RP4\A0019212.dll</font></p>
      </td>
      <td width="43%" align="left">
      <p><font face="Arial" size="2">Supprimé</font></p>
      </td>
      </tr><tr>
      <td width="57%">
      <p><font face="Arial" size="2">C:\VundoFix Backups\ddayv.dll.bad</font></p>
      </td>
      <td width="43%" align="left">
      <p><font face="Arial" size="2">Infecté par: Trojan.Vundo.DLY</font></p>
      </td>
      </tr><tr>
      <td width="57%">
      <p><font face="Arial" size="2">C:\VundoFix Backups\ddayv.dll.bad</font></p>
      </td>
      <td width="43%" align="left">
      <p><font face="Arial" size="2">Echec de la désinfection</font></p>
      </td>
      </tr><tr>
      <td width="57%">
      <p><font face="Arial" size="2">C:\VundoFix Backups\ddayv.dll.bad</font></p>
      </td>
      <td width="43%" align="left">
      <p><font face="Arial" size="2">Supprimé</font></p>
      </td>
      </tr><tr>
      <td width="57%">
      <p><font face="Arial" size="2">C:\VundoFix Backups\geqlhlas.exe.bad</font></p>
      </td>
      <td width="43%" align="left">
      <p><font face="Arial" size="2">Infecté par: Trojan.LowZones.SA</font></p>
      </td>
      </tr><tr>
      <td width="57%">
      <p><font face="Arial" size="2">C:\VundoFix Backups\geqlhlas.exe.bad</font></p>
      </td>
      <td width="43%" align="left">
      <p><font face="Arial" size="2">Echec de la désinfection</font></p>
      </td>
      </tr><tr>
      <td width="57%">
      <p><font face="Arial" size="2">C:\VundoFix Backups\geqlhlas.exe.bad</font></p>
      </td>
      <td width="43%" align="left">
      <p><font face="Arial" size="2">Supprimé</font></p>
      </td>
      </tr><tr>
      <td width="57%">
      <p><font face="Arial" size="2">C:\VundoFix Backups\idajiafa.dll.bad</font></p>
      </td>
      <td width="43%" align="left">
      <p><font face="Arial" size="2">Infecté par: Trojan.Spy.VBStat.B</font></p>
      </td>
      </tr><tr>
      <td width="57%">
      <p><font face="Arial" size="2">C:\VundoFix Backups\idajiafa.dll.bad</font></p>
      </td>
      <td width="43%" align="left">
      <p><font face="Arial" size="2">Supprimé</font></p>
      </td>
      </tr><tr>
      <td width="57%">
      <p><font face="Arial" size="2">C:\VundoFix Backups\nnnlkjg.dll.bad</font></p>
      </td>
      <td width="43%" align="left">
      <p><font face="Arial" size="2">Infecté par: Trojan.Vundo.DMA</font></p>
      </td>
      </tr><tr>
      <td width="57%">
      <p><font face="Arial" size="2">C:\VundoFix Backups\nnnlkjg.dll.bad</font></p>
      </td>
      <td width="43%" align="left">
      <p><font face="Arial" size="2">Echec de la désinfection</font></p>
      </td>
      </tr><tr>
      <td width="57%">
      <p><font face="Arial" size="2">C:\VundoFix Backups\nnnlkjg.dll.bad</font></p>
      </td>
      <td width="43%" align="left">
      <p><font face="Arial" size="2">Supprimé</font></p>
      </td>
      </tr><tr>
      <td width="57%">
      <p><font face="Arial" size="2">C:\VundoFix Backups\vtstq.dll.bad</font></p>
      </td>
      <td width="43%" align="left">
      <p><font face="Arial" size="2">Infecté par: Trojan.Vundo.DLY</font></p>
      </td>
      </tr><tr>
      <td width="57%">
      <p><font face="Arial" size="2">C:\VundoFix Backups\vtstq.dll.bad</font></p>
      </td>
      <td width="43%" align="left">
      <p><font face="Arial" size="2">Echec de la désinfection</font></p>
      </td>
      </tr><tr>
      <td width="57%">
      <p><font face="Arial" size="2">C:\VundoFix Backups\vtstq.dll.bad</font></p>
      </td>
      <td width="43%" align="left">
      <p><font face="Arial" size="2">Supprimé</font></p>
      </td>
      </tr><tr>
      <td width="57%">
      <p><font face="Arial" size="2">C:\VundoFix Backups\vxpkntcf.dll.bad</font></p>
      </td>
      <td width="43%" align="left">
      <p><font face="Arial" size="2">Infecté par: Trojan.JuanSearch.A</font></p>
      </td>
      </tr><tr>
      <td width="57%">
      <p><font face="Arial" size="2">C:\VundoFix Backups\vxpkntcf.dll.bad</font></p>
      </td>
      <td width="43%" align="left">
      <p><font face="Arial" size="2">Echec de la désinfection</font></p>
      </td>
      </tr><tr>
      <td width="57%">
      <p><font face="Arial" size="2">C:\VundoFix Backups\vxpkntcf.dll.bad</font></p>
      </td>
      <td width="43%" align="left">
      <p><font face="Arial" size="2">Supprimé</font></p>
      </td>
      </tr><tr>
      <td width="57%">
      <p><font face="Arial" size="2">C:\_OTMoveIt\MovedFiles\WINDOWS\system32\tthppunq.dll</font></p>
      </td>
      <td width="43%" align="left">
      <p><font face="Arial" size="2">Infecté par: Trojan.BHO.AR</font></p>
      </td>
      </tr><tr>
      <td width="57%">
      <p><font face="Arial" size="2">C:\_OTMoveIt\MovedFiles\WINDOWS\system32\tthppunq.dll</font></p>
      </td>
      <td width="43%" align="left">
      <p><font face="Arial" size="2">Echec de la désinfection</font></p>
      </td>
      </tr><tr>
      <td width="57%">
      <p><font face="Arial" size="2">C:\_OTMoveIt\MovedFiles\WINDOWS\system32\tthppunq.dll</font></p>
      </td>
      <td width="43%" align="left">
      <p><font face="Arial" size="2">Supprimé</font></p>
      </td>
      </tr>
      </table>
      </td>

      <td width="10%">
      <p> </p>
      </td>
      </tr>

      <tr>
      <td width="458">
      <p><font face="Arial"><span style="font-size:11pt;"><B> </b></span></font></p>
      </td>
      <td width="40%">
      <p> </p>
      </td>
      <td width="10%">
      <p> </p>
      </td>
      </tr>

      <tr>
      <td width="458">
      <p><font face="Arial"><span style="font-size:11pt;"><B> </b></span></font></p>
      </td>
      <td width="40%">
      <p> </p>
      </td>
      <td width="10%">
      <p> </p>
      </td>
      </tr>

      </table>
      <p> </p>

      </body>
      </html>

      Ça c'est le HijackThis

      Logfile of HijackThis v1.99.1
      Scan saved at 00:09:43, on 2007-07-06
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.5730.0011)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\LEXBCES.EXE
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\system32\LEXPPS.EXE
      c:\program files\mcafee.com\agent\mcdetect.exe
      c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
      C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
      C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
      C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
      C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
      C:\WINDOWS\system32\LVCOMSX.EXE
      C:\Program Files\McAfee.com\VSO\mcvsshld.exe
      c:\program files\mcafee.com\agent\mcagent.exe
      c:\progra~1\mcafee.com\vso\mcvsescn.exe
      C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe
      C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
      C:\WINDOWS\system32\ctfmon.exe
      C:\Program Files\Messenger\msmsgs.exe
      C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
      C:\PROGRA~1\Webshots\webshots.scr
      c:\progra~1\mcafee.com\vso\mcvsftsn.exe
      C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
      C:\WINDOWS\system32\wuauclt.exe
      C:\Program Files\MSN Messenger\usnsvc.exe
      C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.azlyrics.com/s/smileempty.html
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
      O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
      O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
      O3 - Toolbar: Copernic Agent - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - C:\PROGRA~1\COPERN~1\COPERN~1.DLL
      O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
      O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
      O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
      O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
      O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
      O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
      O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" /checktask
      O4 - HKLM\..\Run: [VirusScan Online] C:\Program Files\McAfee.com\VSO\mcvsshld.exe
      O4 - HKLM\..\Run: [OASClnt] C:\Program Files\McAfee.com\VSO\oasclnt.exe
      O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
      O4 - HKLM\..\Run: [MCUpdateExe] c:\PROGRA~1\mcafee.com\agent\McUpdate.exe
      O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
      O4 - HKLM\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
      O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
      O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\Launcher.exe
      O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
      O8 - Extra context menu item: Chercher avec Copernic Agent - res://C:\Program Files\Copernic Agent\CopernicAgentExt.rdl/INTEGRATION_MENU_SEARCHEXT
      O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
      O9 - Extra button: (no name) - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
      O9 - Extra 'Tools' menuitem: Démarrer Copernic Agent - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
      O9 - Extra button: Copernic Agent - {688DC797-DC11-46A7-9F1B-445F4F58CE6E} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O11 - Options group: [INTERNATIONAL] International*
      O14 - IERESET.INF: START_PAGE_URL=www.ordiexpert.com
      O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - https://onedrive.live.com/
      O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
      O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://www.adobe.com/products/acrobat/nos/gp.cab
      O17 - HKLM\System\CCS\Services\Tcpip\..\{AF507053-D327-457B-A1D4-4AD998944AE6}: NameServer = 24.226.147.200 24.226.147.201
      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
      O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
      O23 - Service: Autodesk Licensing Service - Autodesk, Inc. - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
      O23 - Service: General Socket Service - Unknown owner - C:\WINDOWS\SVCHOST.EXE (file missing)
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
      O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
      O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
      O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
      O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
      O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe

      Est-ce que ça achève toutes ces procédures??
      1. papyber Contributeur sécurité
        lance hijack pour un scan et coche les lignes suivantes
        O2 - BHO: (no name) - {F901DDF6-7FB8-465E-9275-177211B788C5} - C:\WINDOWS\system32\tthppunq.dll (file missing)
        O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
        O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
        O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
        O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
        ferme toutes tes fenêtres y compris internet et cliques sur fixer l'objet
        j'attends ton scan en ligne
        à +
        2. Serge
          Ça c'est le rapport OTMoveIT
          C:\WINDOWS\system32\tthppunq.dll unregistered successfully.
          C:\WINDOWS\system32\tthppunq.dll moved successfully.

          Created on 07-04-2007 23:17:12

          Par la suite, j'ai eu quelques problèmes techniques.Je n'étais plus capable d'aller sur Internet. Je me connectais correctement mais aucunepage ne s'ouvrait, internet explorer faisait comme si je n'étais pas connecté. J'ai du faire apell à la correction de problème Windows. Après ça j'ai continué.

          VundoFix V6.5.1

          Checking Java version...

          Java version is 1.4.2.5
          Old versions of java are exploitable and should be removed.

          Java version is 1.5.0.6
          Old versions of java are exploitable and should be removed.

          Scan started at 22:41:10 2007-06-18

          Listing files found while scanning....

          C:\windows\system32\ddayv.dll
          C:\windows\system32\geqlhlas.exe
          C:\WINDOWS\system32\gxwqnbqk.dll
          C:\windows\system32\idajiafa.dll
          C:\windows\system32\kqbnqwxg.ini
          C:\WINDOWS\system32\nnnlkjg.dll
          C:\WINDOWS\system32\qtstv.bak2
          C:\WINDOWS\system32\qtstv.ini
          C:\WINDOWS\system32\vtstq.dll
          C:\WINDOWS\system32\vxpkntcf.dll
          C:\windows\system32\vyadd.ini

          Beginning removal...

          Attempting to delete C:\windows\system32\ddayv.dll
          C:\windows\system32\ddayv.dll Has been deleted!

          Attempting to delete C:\windows\system32\geqlhlas.exe
          C:\windows\system32\geqlhlas.exe Has been deleted!

          Attempting to delete C:\WINDOWS\system32\gxwqnbqk.dll
          C:\WINDOWS\system32\gxwqnbqk.dll Has been deleted!

          Attempting to delete C:\windows\system32\idajiafa.dll
          C:\windows\system32\idajiafa.dll Has been deleted!

          Attempting to delete C:\windows\system32\kqbnqwxg.ini
          C:\windows\system32\kqbnqwxg.ini Has been deleted!

          Attempting to delete C:\WINDOWS\system32\nnnlkjg.dll
          C:\WINDOWS\system32\nnnlkjg.dll Could not be deleted.

          Attempting to delete C:\WINDOWS\system32\qtstv.bak2
          C:\WINDOWS\system32\qtstv.bak2 Has been deleted!

          Attempting to delete C:\WINDOWS\system32\qtstv.ini
          C:\WINDOWS\system32\qtstv.ini Has been deleted!

          Attempting to delete C:\WINDOWS\system32\vtstq.dll
          C:\WINDOWS\system32\vtstq.dll Has been deleted!

          Attempting to delete C:\WINDOWS\system32\vxpkntcf.dll
          C:\WINDOWS\system32\vxpkntcf.dll Has been deleted!

          Attempting to delete C:\windows\system32\vyadd.ini
          C:\windows\system32\vyadd.ini Has been deleted!

          Performing Repairs to the registry.
          Done!

          VundoFix V6.5.1

          Checking Java version...

          Java version is 1.4.2.5
          Old versions of java are exploitable and should be removed.

          Java version is 1.5.0.6
          Old versions of java are exploitable and should be removed.

          Scan started at 22:58:19 2007-06-26

          Listing files found while scanning....

          C:\windows\system32\nnnlkjg.dll

          Beginning removal...

          Attempting to delete C:\windows\system32\nnnlkjg.dll
          C:\windows\system32\nnnlkjg.dll Has been deleted!

          Performing Repairs to the registry.
          Done!

          VundoFix V6.5.1

          Checking Java version...

          Java version is 1.4.2.5
          Old versions of java are exploitable and should be removed.

          Java version is 1.5.0.6
          Old versions of java are exploitable and should be removed.

          Scan started at 07:16:17 2007-07-05

          Listing files found while scanning....

          No infected files were found.
          Ça c'est le rapport VundoFix:
          VundoFix V6.5.4

          Checking Java version...

          Java version is 1.4.2.5
          Old versions of java are exploitable and should be removed.

          Java version is 1.5.0.6
          Old versions of java are exploitable and should be removed.

          Scan started at 07:20:27 2007-07-05

          Listing files found while scanning....

          No infected files were found.

          Ça c'est le rapport HijackThis

          Logfile of HijackThis v1.99.1
          Scan saved at 07:22:02, on 2007-07-05
          Platform: Windows XP SP2 (WinNT 5.01.2600)
          MSIE: Internet Explorer v7.00 (7.00.5730.0011)

          Running processes:
          C:\WINDOWS\System32\smss.exe
          C:\WINDOWS\system32\winlogon.exe
          C:\WINDOWS\system32\services.exe
          C:\WINDOWS\system32\lsass.exe
          C:\WINDOWS\system32\Ati2evxx.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\system32\LEXBCES.EXE
          C:\WINDOWS\system32\spoolsv.exe
          C:\WINDOWS\system32\LEXPPS.EXE
          c:\program files\mcafee.com\agent\mcdetect.exe
          c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
          C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
          C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
          C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\system32\Ati2evxx.exe
          C:\WINDOWS\Explorer.EXE
          C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
          C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
          C:\WINDOWS\system32\LVCOMSX.EXE
          C:\Program Files\McAfee.com\VSO\mcvsshld.exe
          C:\PROGRA~1\mcafee.com\agent\mcagent.exe
          c:\progra~1\mcafee.com\vso\mcvsescn.exe
          C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe
          C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
          C:\WINDOWS\system32\ctfmon.exe
          C:\Program Files\Messenger\msmsgs.exe
          C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
          C:\PROGRA~1\Webshots\webshots.scr
          c:\progra~1\mcafee.com\vso\mcvsftsn.exe
          C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
          C:\Program Files\MSN Messenger\msnmsgr.exe
          C:\Program Files\MSN Messenger\usnsvc.exe
          C:\Program Files\Internet Explorer\iexplore.exe
          C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.azlyrics.com/s/smileempty.html
          R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
          R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
          O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
          O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
          O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
          O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
          O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
          O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
          O2 - BHO: (no name) - {F901DDF6-7FB8-465E-9275-177211B788C5} - C:\WINDOWS\system32\tthppunq.dll (file missing)
          O3 - Toolbar: Copernic Agent - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - C:\PROGRA~1\COPERN~1\COPERN~1.DLL
          O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
          O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
          O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
          O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
          O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
          O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
          O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
          O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" /checktask
          O4 - HKLM\..\Run: [VirusScan Online] C:\Program Files\McAfee.com\VSO\mcvsshld.exe
          O4 - HKLM\..\Run: [OASClnt] C:\Program Files\McAfee.com\VSO\oasclnt.exe
          O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
          O4 - HKLM\..\Run: [MCUpdateExe] c:\PROGRA~1\mcafee.com\agent\mcupdate.exe
          O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
          O4 - HKLM\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
          O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
          O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
          O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
          O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\Launcher.exe
          O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
          O8 - Extra context menu item: Chercher avec Copernic Agent - res://C:\Program Files\Copernic Agent\CopernicAgentExt.rdl/INTEGRATION_MENU_SEARCHEXT
          O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
          O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
          O9 - Extra button: (no name) - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
          O9 - Extra 'Tools' menuitem: Démarrer Copernic Agent - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
          O9 - Extra button: Copernic Agent - {688DC797-DC11-46A7-9F1B-445F4F58CE6E} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
          O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
          O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
          O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
          O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
          O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O11 - Options group: [INTERNATIONAL] International*
          O14 - IERESET.INF: START_PAGE_URL=www.ordiexpert.com
          O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - https://onedrive.live.com/
          O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
          O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://www.adobe.com/products/acrobat/nos/gp.cab
          O17 - HKLM\System\CCS\Services\Tcpip\..\{AF507053-D327-457B-A1D4-4AD998944AE6}: NameServer = 24.226.147.200 24.226.147.201
          O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
          O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
          O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
          O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
          O23 - Service: Autodesk Licensing Service - Autodesk, Inc. - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
          O23 - Service: General Socket Service - Unknown owner - C:\WINDOWS\SVCHOST.EXE (file missing)
          O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
          O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
          O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
          O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
          O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
          O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
          O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
          O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe

          Il me reste à faire le scan avec BitDefender, je n'ai pas eu encore le temps
          1. papyber Contributeur sécurité
            As tu effectué la manip en entier? car je vois des lignes dans hijack qui auraient du disparaître!
            recommence tout sauf la désactivation du service puis fait ceci

            Télécharge VundoFix.exe (par Atribune) sur ton Bureau
            http://www.atribune.org/ccount/click.php?id=4
            clic double sur VundoFix.exe afin de le lancer
            clic sur le bouton Scan for Vundo
            Lorsque le scan est complété, clic sur le bouton Remove Vundo
            Une invite te demandera si tu veux supprimer les fichiers, clic YES
            Après avoir cliqué "Yes", le Bureau disparaîtra un moment lors de la suppression des fichiers
            Tu verras une invite qui t'annonce que ton PC va redémarrer;
            clic OK
            Note: Il est possible que VundoFix soit confronté à un fichier qu'il ne peut supprimer. Si tel est le cas, l'outil se lancera au prochain redémarrage; il faut simplement suivre les instructions ci-haut, à partir de "clic sur le bouton Scan for Vundo".
            Copie/colle le contenu du rapport situé dans C:\vundofix.txt ainsi qu'un nouveau rapport HijackThis dans ta prochaine réponse

            faire un scan antivirus en ligne avec internet explorer et accepter l'activex
            poster le rapport ici ensuite
            https://www.bitdefender.fr/

            En bas, à gauche de la fenêtre, clique sur BitDefender SCAN ONLINE
            Dans la nouvelle fenêtre, clique sur I agree
            La fenêtre change encore, clique sur Click here to scan
            Les signatures se chargent, etc.

            tuto en image
            http://pageperso.aol.fr/rginformatique/mapage/defender.htm
            1. Serge
              Allo. J'ai eu un petit problème. Quand tu me dis:
              Désactive le service AFSEGTGF Windows Service :
              Démarrer --> Exécuter --> tape services.msc puis Entrée
              Dans la liste, cherche la ligne "AFSEGTGF Windows Service" puis double-clique dessus.
              Règle le "type de démarrage" sur "Désactiver"
              Pour le statut du service, clique sur le bouton Arrêter
              puis clique sur Appliquer.

              Le bouton Arrêter n'est pas disponible. Il est écrit Statut du Service: Arrêté. Est-ce que c'est correct quand même??

              J'ai continué et je n'ai pas ta dernière ligne:
              O23 - Service: AFSEGTGF Windows Service - Unknown owner - C:\WINDOWS\system32\dsbhz.exe (file missing)

              Ça c'est le rapport hijackthis si tu en as besoin:

              Logfile of HijackThis v1.99.1
              Scan saved at 19:07:38, on 2007-07-03
              Platform: Windows XP SP2 (WinNT 5.01.2600)
              MSIE: Internet Explorer v7.00 (7.00.5730.0011)

              Running processes:
              C:\WINDOWS\System32\smss.exe
              C:\WINDOWS\system32\winlogon.exe
              C:\WINDOWS\system32\services.exe
              C:\WINDOWS\system32\lsass.exe
              C:\WINDOWS\system32\Ati2evxx.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\System32\svchost.exe
              C:\WINDOWS\system32\LEXBCES.EXE
              C:\WINDOWS\system32\spoolsv.exe
              C:\WINDOWS\system32\LEXPPS.EXE
              c:\program files\mcafee.com\agent\mcdetect.exe
              c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
              C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
              C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
              C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
              C:\WINDOWS\system32\svchost.exe
              C:\WINDOWS\system32\Ati2evxx.exe
              C:\WINDOWS\Explorer.EXE
              C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
              C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
              C:\WINDOWS\system32\LVCOMSX.EXE
              C:\Program Files\McAfee.com\VSO\mcvsshld.exe
              c:\program files\mcafee.com\agent\mcagent.exe
              c:\progra~1\mcafee.com\vso\mcvsescn.exe
              C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe
              C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
              C:\WINDOWS\system32\ctfmon.exe
              C:\Program Files\Messenger\msmsgs.exe
              C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
              C:\PROGRA~1\Webshots\webshots.scr
              c:\progra~1\mcafee.com\vso\mcvsftsn.exe
              C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
              C:\Program Files\MSN Messenger\msnmsgr.exe
              c:\windows\system32\rlvknlg.exe
              C:\Program Files\Internet Explorer\iexplore.exe
              C:\Program Files\MSN Messenger\usnsvc.exe
              C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

              R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.azlyrics.com/s/smileempty.html
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
              R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
              R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
              R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
              R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
              R3 - URLSearchHook: (no name) - _{BE89472C-B803-4D1D-9A9A-0A63660E0FE3} - (no file)
              R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
              O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
              O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
              O2 - BHO: (no name) - {42F59FBA-700C-4ED5-868D-30CA6A25BB97} - C:\WINDOWS\system32\vtstq.dll (file missing)
              O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
              O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
              O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
              O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
              O2 - BHO: (no name) - {EDADCE64-6AB9-4783-83B7-54D2DE7D60B9} - C:\WINDOWS\system32\tthppunq.dll
              O2 - BHO: (no name) - {F901DDF6-7FB8-465E-9275-177211B788C5} - C:\WINDOWS\system32\tthppunq.dll
              O3 - Toolbar: Copernic Agent - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - C:\PROGRA~1\COPERN~1\COPERN~1.DLL
              O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
              O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
              O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
              O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
              O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
              O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
              O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
              O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" /checktask
              O4 - HKLM\..\Run: [VirusScan Online] C:\Program Files\McAfee.com\VSO\mcvsshld.exe
              O4 - HKLM\..\Run: [OASClnt] C:\Program Files\McAfee.com\VSO\oasclnt.exe
              O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
              O4 - HKLM\..\Run: [MCUpdateExe] c:\PROGRA~1\mcafee.com\agent\mcupdate.exe
              O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
              O4 - HKLM\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
              O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
              O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
              O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
              O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\Launcher.exe
              O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
              O8 - Extra context menu item: Chercher avec Copernic Agent - res://C:\Program Files\Copernic Agent\CopernicAgentExt.rdl/INTEGRATION_MENU_SEARCHEXT
              O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
              O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
              O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
              O9 - Extra button: (no name) - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
              O9 - Extra 'Tools' menuitem: Démarrer Copernic Agent - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
              O9 - Extra button: Copernic Agent - {688DC797-DC11-46A7-9F1B-445F4F58CE6E} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
              O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
              O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
              O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
              O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
              O10 - Unknown file in Winsock LSP: c:\windows\system32\rlls.dll
              O10 - Unknown file in Winsock LSP: c:\windows\system32\rlls.dll
              O10 - Unknown file in Winsock LSP: c:\windows\system32\rlls.dll
              O10 - Unknown file in Winsock LSP: c:\windows\system32\rlls.dll
              O10 - Unknown file in Winsock LSP: c:\windows\system32\rlls.dll
              O10 - Unknown file in Winsock LSP: c:\windows\system32\rlls.dll
              O11 - Options group: [INTERNATIONAL] International*
              O14 - IERESET.INF: START_PAGE_URL=www.ordiexpert.com
              O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - https://onedrive.live.com/
              O16 - DPF: {7C559105-9ECF-42B8-B3F7-832E75EDD959} - http://www.tbcode.com/ist/softwares/v4.0/0006_cracks.cab
              O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://www.adobe.com/products/acrobat/nos/gp.cab
              O17 - HKLM\System\CCS\Services\Tcpip\..\{AF507053-D327-457B-A1D4-4AD998944AE6}: NameServer = 24.226.147.200 24.226.147.201
              O18 - Protocol: bw+0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw+0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw-0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw-0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw00 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw00s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw10 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw10s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw20 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw20s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw30 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw30s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw40 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw40s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw50 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw50s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw60 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw60s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw70 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw70s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw80 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw80s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw90 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bw90s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwa0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwa0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwb0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwb0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwc0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwc0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwd0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwd0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwe0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwe0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwf0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwf0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
              O18 - Protocol: bwg0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwg0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwh0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwh0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwi0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwi0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwj0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwj0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwk0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwk0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwl0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwl0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwm0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwm0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwn0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwn0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwo0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwo0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwp0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwp0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwq0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwq0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwr0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwr0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bws0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bws0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwt0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwt0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwu0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwu0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwv0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwv0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bww0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bww0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwx0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwx0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwy0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwy0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwz0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: bwz0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
              O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
              O18 - Protocol: offline-8876480 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
              O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
              O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
              O23 - Service: Autodesk Licensing Service - Autodesk, Inc. - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
              O23 - Service: General Socket Service - Unknown owner - C:\WINDOWS\SVCHOST.EXE (file missing)
              O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
              O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
              O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
              O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
              O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
              O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
              O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
              O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe

              Merci, j'attend de tes nouvelles.
              1. papyber Contributeur sécurité
                désolé, pas de PC hier!!
                Désactive le service AFSEGTGF Windows Service :
                Démarrer --> Exécuter --> tape services.msc puis Entrée
                Dans la liste, cherche la ligne "AFSEGTGF Windows Service" puis double-clique dessus.
                Règle le "type de démarrage" sur "Désactiver"
                Pour le statut du service, clique sur le bouton Arrêter
                puis clique sur Appliquer.

                lance hijack pour un scan et coche les lignes suivantes
                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
                R3 - URLSearchHook: (no name) - _{BE89472C-B803-4D1D-9A9A-0A63660E0FE3} - (no file)
                O2 - BHO: (no name) - {42F59FBA-700C-4ED5-868D-30CA6A25BB97} - C:\WINDOWS\system32\vtstq.dll (file missing)
                O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                O2 - BHO: (no name) - {EDADCE64-6AB9-4783-83B7-54D2DE7D60B9} - C:\WINDOWS\system32\tthppunq.dll
                O2 - BHO: (no name) - {F901DDF6-7FB8-465E-9275-177211B788C5} - C:\WINDOWS\system32\tthppunq.dll
                O18 - Protocol: bw+0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw+0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw-0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw-0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw00 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw00s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw10 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw10s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw20 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw20s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw30 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw30s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw40 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw40s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw50 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw50s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw60 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw60s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw70 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw70s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw80 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw80s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw90 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bw90s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwa0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwa0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwb0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwb0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwc0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwc0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwd0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwd0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwe0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwe0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwf0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwf0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
                O18 - Protocol: bwg0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwg0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwh0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwh0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwi0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwi0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwj0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwj0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwk0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwk0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwl0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwl0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwm0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwm0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwn0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwn0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwo0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwo0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwp0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwp0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwq0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwq0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwr0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwr0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bws0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bws0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwt0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwt0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwu0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwu0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwv0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwv0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bww0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bww0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwx0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwx0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwy0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwy0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwz0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: bwz0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O18 - Protocol: offline-8876480 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                O23 - Service: AFSEGTGF Windows Service - Unknown owner - C:\WINDOWS\system32\dsbhz.exe (file missing)
                ferme toutes tes fenêtres et fixe les lignes

                Télécharge OTMoveIt (de Old_Timer) sur ton Bureau.
                http://download.bleepingcomputer.com/oldtimer/OTMoveIt.exe

                clic double sur OTMoveIt.exe pour le lancer.
                copie la liste qui se trouve en citation ci-dessous,
                et colle-la dans le cadre de gauche de OTMoveIt :
                Paste List of Files/Folders to be moved.

                C:\WINDOWS\system32\tthppunq.dll

                clique sur MoveIt! pour lancer la suppression.
                le résultat apparaitra dans le cadre Results.
                clique sur Exit pour fermer.
                poste le rapport situé dans C:\\\_OTMoveIt\MovedFiles.

                il te sera peut-être demander de redémarrer le pc pour achever la suppression.
                si c'est le cas accepte par Yes.

                télécharge spybot search and destroy
                https://www.safer-networking.org/?page=download
                un tuto pour le paramétrer
                http://www.tutopat.com/viewtopic.php?t=606
                met le à jour
                redémarre en mode sans échec et scanne ton PC avec après avoir nettoyé avec ccleaner
                tu supprimes tout ce qu'il trouve

                redémarre en mode normal et
                faire un scan antivirus en ligne avec internet explorer et accepter l'activex
                poster le rapport ici ensuite
                https://www.bitdefender.fr/

                En bas, à gauche de la fenêtre, clique sur BitDefender SCAN ONLINE
                Dans la nouvelle fenêtre, clique sur I agree
                La fenêtre change encore, clique sur Click here to scan
                Les signatures se chargent, etc.

                tuto en image
                http://pageperso.aol.fr/rginformatique/mapage/defender.htm
                1. Serge
                  Salut. Voilà le rapport que GenProc m'a produit :

                  Aucune infection caractéristique trouvée !

                  Voila un rapport HijackThis si tu en as besoin:

                  Logfile of HijackThis v1.99.1
                  Scan saved at 15:38:33, on 2007-07-01
                  Platform: Windows XP SP2 (WinNT 5.01.2600)
                  MSIE: Internet Explorer v7.00 (7.00.5730.0011)

                  Running processes:
                  C:\WINDOWS\System32\smss.exe
                  C:\WINDOWS\system32\winlogon.exe
                  C:\WINDOWS\system32\services.exe
                  C:\WINDOWS\system32\lsass.exe
                  C:\WINDOWS\system32\Ati2evxx.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\WINDOWS\System32\svchost.exe
                  C:\WINDOWS\system32\LEXBCES.EXE
                  C:\WINDOWS\system32\LEXPPS.EXE
                  C:\WINDOWS\system32\spoolsv.exe
                  c:\program files\mcafee.com\agent\mcdetect.exe
                  c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
                  C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
                  C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
                  C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
                  C:\WINDOWS\system32\svchost.exe
                  C:\WINDOWS\system32\Ati2evxx.exe
                  C:\WINDOWS\Explorer.EXE
                  C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
                  C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
                  C:\WINDOWS\system32\LVCOMSX.EXE
                  C:\Program Files\McAfee.com\VSO\mcvsshld.exe
                  c:\progra~1\mcafee.com\vso\mcvsescn.exe
                  C:\PROGRA~1\mcafee.com\agent\mcagent.exe
                  C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe
                  C:\WINDOWS\system32\ctfmon.exe
                  C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
                  C:\Program Files\Messenger\msmsgs.exe
                  C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
                  C:\PROGRA~1\Webshots\webshots.scr
                  c:\progra~1\mcafee.com\vso\mcvsftsn.exe
                  C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
                  C:\Program Files\Winamp\winamp.exe
                  C:\Program Files\Internet Explorer\iexplore.exe
                  c:\windows\system32\rlvknlg.exe
                  C:\Program Files\MSN Messenger\msnmsgr.exe
                  C:\Program Files\MSN Messenger\usnsvc.exe
                  C:\WINDOWS\system32\wuauclt.exe
                  C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

                  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.azlyrics.com/s/smileempty.html
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
                  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
                  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                  R3 - URLSearchHook: (no name) - _{BE89472C-B803-4D1D-9A9A-0A63660E0FE3} - (no file)
                  R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                  O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                  O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                  O2 - BHO: (no name) - {42F59FBA-700C-4ED5-868D-30CA6A25BB97} - C:\WINDOWS\system32\vtstq.dll (file missing)
                  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
                  O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                  O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
                  O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                  O2 - BHO: (no name) - {EDADCE64-6AB9-4783-83B7-54D2DE7D60B9} - C:\WINDOWS\system32\tthppunq.dll
                  O2 - BHO: (no name) - {F901DDF6-7FB8-465E-9275-177211B788C5} - C:\WINDOWS\system32\tthppunq.dll
                  O3 - Toolbar: Copernic Agent - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - C:\PROGRA~1\COPERN~1\COPERN~1.DLL
                  O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
                  O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                  O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
                  O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                  O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
                  O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
                  O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
                  O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" /checktask
                  O4 - HKLM\..\Run: [VirusScan Online] C:\Program Files\McAfee.com\VSO\mcvsshld.exe
                  O4 - HKLM\..\Run: [OASClnt] C:\Program Files\McAfee.com\VSO\oasclnt.exe
                  O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
                  O4 - HKLM\..\Run: [MCUpdateExe] c:\PROGRA~1\mcafee.com\agent\mcupdate.exe
                  O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
                  O4 - HKLM\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
                  O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                  O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
                  O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
                  O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\Launcher.exe
                  O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
                  O8 - Extra context menu item: Chercher avec Copernic Agent - res://C:\Program Files\Copernic Agent\CopernicAgentExt.rdl/INTEGRATION_MENU_SEARCHEXT
                  O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
                  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
                  O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
                  O9 - Extra button: (no name) - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
                  O9 - Extra 'Tools' menuitem: Démarrer Copernic Agent - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
                  O9 - Extra button: Copernic Agent - {688DC797-DC11-46A7-9F1B-445F4F58CE6E} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
                  O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
                  O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
                  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                  O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                  O10 - Unknown file in Winsock LSP: c:\windows\system32\rlls.dll
                  O10 - Unknown file in Winsock LSP: c:\windows\system32\rlls.dll
                  O10 - Unknown file in Winsock LSP: c:\windows\system32\rlls.dll
                  O10 - Unknown file in Winsock LSP: c:\windows\system32\rlls.dll
                  O10 - Unknown file in Winsock LSP: c:\windows\system32\rlls.dll
                  O10 - Unknown file in Winsock LSP: c:\windows\system32\rlls.dll
                  O11 - Options group: [INTERNATIONAL] International*
                  O14 - IERESET.INF: START_PAGE_URL=www.ordiexpert.com
                  O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - https://onedrive.live.com/
                  O16 - DPF: {7C559105-9ECF-42B8-B3F7-832E75EDD959} - http://www.tbcode.com/ist/softwares/v4.0/0006_cracks.cab
                  O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://www.adobe.com/products/acrobat/nos/gp.cab
                  O17 - HKLM\System\CCS\Services\Tcpip\..\{AF507053-D327-457B-A1D4-4AD998944AE6}: NameServer = 24.226.147.200 24.226.147.201
                  O18 - Protocol: bw+0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw+0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw-0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw-0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw00 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw00s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw10 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw10s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw20 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw20s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw30 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw30s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw40 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw40s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw50 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw50s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw60 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw60s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw70 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw70s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw80 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw80s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw90 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bw90s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwa0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwa0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwb0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwb0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwc0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwc0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwd0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwd0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwe0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwe0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwf0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwf0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
                  O18 - Protocol: bwg0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwg0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwh0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwh0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwi0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwi0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwj0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwj0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwk0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwk0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwl0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwl0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwm0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwm0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwn0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwn0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwo0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwo0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwp0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwp0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwq0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwq0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwr0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwr0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bws0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bws0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwt0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwt0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwu0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwu0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwv0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwv0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bww0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bww0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwx0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwx0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwy0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwy0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwz0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: bwz0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                  O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                  O18 - Protocol: offline-8876480 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                  O23 - Service: AFSEGTGF Windows Service - Unknown owner - C:\WINDOWS\system32\dsbhz.exe (file missing)
                  O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
                  O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
                  O23 - Service: Autodesk Licensing Service - Autodesk, Inc. - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
                  O23 - Service: General Socket Service - Unknown owner - C:\WINDOWS\SVCHOST.EXE (file missing)
                  O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                  O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
                  O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
                  O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
                  O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
                  O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
                  O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
                  O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe

                  Merci encore de me répondre
                  1. papyber Contributeur sécurité
                    télécharge GenProc de Jean-Chretien1 et Narco4 sur ton bureau
                    http://www.alt-shift-return.org/Info/Fichiers/GenProc.zip

                    dézippe le dossier, double-clique sur GenProc.bat et poste le contenu du rapport qui s'ouvre

                    Aide en images : http://www.alt-shift-return.org/Info/GenProc-HowTo.html
                    poste les rapports car parfois il faut ajouter des consignes à la manip pour que cela fonctionne parfaitement
                    1. Serge
                      Voici le rapport hijackthis

                      Logfile of HijackThis v1.99.1
                      Scan saved at 12:31:50, on 2007-06-30
                      Platform: Windows XP SP2 (WinNT 5.01.2600)
                      MSIE: Internet Explorer v7.00 (7.00.5730.0011)

                      Running processes:
                      C:\WINDOWS\System32\smss.exe
                      C:\WINDOWS\system32\winlogon.exe
                      C:\WINDOWS\system32\services.exe
                      C:\WINDOWS\system32\lsass.exe
                      C:\WINDOWS\system32\Ati2evxx.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\WINDOWS\System32\svchost.exe
                      C:\WINDOWS\system32\LEXBCES.EXE
                      C:\WINDOWS\system32\LEXPPS.EXE
                      C:\WINDOWS\system32\spoolsv.exe
                      c:\program files\mcafee.com\agent\mcdetect.exe
                      c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
                      C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
                      C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
                      C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\WINDOWS\system32\Ati2evxx.exe
                      C:\WINDOWS\Explorer.EXE
                      C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
                      C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
                      C:\WINDOWS\system32\LVCOMSX.EXE
                      C:\Program Files\McAfee.com\VSO\mcvsshld.exe
                      c:\program files\mcafee.com\agent\mcagent.exe
                      c:\progra~1\mcafee.com\vso\mcvsescn.exe
                      C:\Program Files\McAfee.com\VSO\oasclnt.exe
                      C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe
                      C:\WINDOWS\system32\ctfmon.exe
                      C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
                      C:\Program Files\Messenger\msmsgs.exe
                      C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
                      C:\PROGRA~1\Webshots\webshots.scr
                      c:\progra~1\mcafee.com\vso\mcvsftsn.exe
                      C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
                      C:\WINDOWS\system32\wuauclt.exe
                      C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

                      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.azlyrics.com/s/smileempty.html
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
                      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
                      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                      R3 - URLSearchHook: (no name) - _{BE89472C-B803-4D1D-9A9A-0A63660E0FE3} - (no file)
                      R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                      O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                      O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                      O2 - BHO: (no name) - {42F59FBA-700C-4ED5-868D-30CA6A25BB97} - C:\WINDOWS\system32\vtstq.dll (file missing)
                      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
                      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
                      O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                      O2 - BHO: (no name) - {EDADCE64-6AB9-4783-83B7-54D2DE7D60B9} - C:\WINDOWS\system32\tthppunq.dll
                      O2 - BHO: (no name) - {F901DDF6-7FB8-465E-9275-177211B788C5} - C:\WINDOWS\system32\tthppunq.dll
                      O3 - Toolbar: Copernic Agent - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - C:\PROGRA~1\COPERN~1\COPERN~1.DLL
                      O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
                      O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
                      O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                      O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
                      O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
                      O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
                      O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" /checktask
                      O4 - HKLM\..\Run: [VirusScan Online] C:\Program Files\McAfee.com\VSO\mcvsshld.exe
                      O4 - HKLM\..\Run: [OASClnt] C:\Program Files\McAfee.com\VSO\oasclnt.exe
                      O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
                      O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
                      O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
                      O4 - HKLM\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
                      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                      O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
                      O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
                      O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\Launcher.exe
                      O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
                      O8 - Extra context menu item: Chercher avec Copernic Agent - res://C:\Program Files\Copernic Agent\CopernicAgentExt.rdl/INTEGRATION_MENU_SEARCHEXT
                      O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
                      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
                      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
                      O9 - Extra button: (no name) - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
                      O9 - Extra 'Tools' menuitem: Démarrer Copernic Agent - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
                      O9 - Extra button: Copernic Agent - {688DC797-DC11-46A7-9F1B-445F4F58CE6E} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
                      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
                      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
                      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                      O10 - Unknown file in Winsock LSP: c:\windows\system32\rlls.dll
                      O10 - Unknown file in Winsock LSP: c:\windows\system32\rlls.dll
                      O10 - Unknown file in Winsock LSP: c:\windows\system32\rlls.dll
                      O10 - Unknown file in Winsock LSP: c:\windows\system32\rlls.dll
                      O10 - Unknown file in Winsock LSP: c:\windows\system32\rlls.dll
                      O10 - Unknown file in Winsock LSP: c:\windows\system32\rlls.dll
                      O11 - Options group: [INTERNATIONAL] International*
                      O14 - IERESET.INF: START_PAGE_URL=www.ordiexpert.com
                      O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - https://onedrive.live.com/
                      O16 - DPF: {7C559105-9ECF-42B8-B3F7-832E75EDD959} - http://www.tbcode.com/ist/softwares/v4.0/0006_cracks.cab
                      O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://www.adobe.com/products/acrobat/nos/gp.cab
                      O17 - HKLM\System\CCS\Services\Tcpip\..\{AF507053-D327-457B-A1D4-4AD998944AE6}: NameServer = 24.226.147.200 24.226.147.201
                      O18 - Protocol: bw+0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw+0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw-0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw-0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw00 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw00s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw10 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw10s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw20 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw20s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw30 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw30s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw40 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw40s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw50 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw50s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw60 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw60s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw70 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw70s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw80 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw80s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw90 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw90s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwa0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwa0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwb0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwb0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwc0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwc0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwd0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwd0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwe0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwe0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwf0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwf0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
                      O18 - Protocol: bwg0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwg0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwh0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwh0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwi0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwi0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwj0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwj0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwk0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwk0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwl0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwl0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwm0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwm0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwn0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwn0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwo0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwo0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwp0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwp0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwq0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwq0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwr0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwr0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bws0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bws0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwt0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwt0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwu0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwu0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwv0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwv0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bww0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bww0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwx0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwx0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwy0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwy0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwz0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwz0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                      O18 - Protocol: offline-8876480 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O23 - Service: AFSEGTGF Windows Service - Unknown owner - C:\WINDOWS\system32\dsbhz.exe (file missing)
                      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
                      O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
                      O23 - Service: Autodesk Licensing Service - Autodesk, Inc. - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
                      O23 - Service: General Socket Service - Unknown owner - C:\WINDOWS\SVCHOST.EXE (file missing)
                      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
                      O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
                      O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
                      O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
                      O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
                      O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
                      O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
                      2. Serge
                        Voici les 3 rapports dans l'ordre:

                        Complete scanning result of "mswsock.dll", received in VirusTotal at 06.29.2007, 04:36:36 (CET).

                        Antivirus Version Update Result
                        AhnLab-V3 2007.6.29.0 06.28.2007 no virus found
                        AntiVir 7.4.0.34 06.28.2007 no virus found
                        Authentium 4.93.8 06.28.2007 no virus found
                        Avast 4.7.997.0 06.28.2007 no virus found
                        AVG 7.5.0.476 06.28.2007 no virus found
                        BitDefender 7.2 06.29.2007 no virus found
                        CAT-QuickHeal 9.00 06.28.2007 no virus found
                        ClamAV devel-20070416 06.29.2007 no virus found
                        DrWeb 4.33 06.29.2007 no virus found
                        eSafe 7.0.15.0 06.28.2007 no virus found
                        eTrust-Vet 30.8.3750 06.28.2007 no virus found
                        Ewido 4.0 06.28.2007 no virus found
                        FileAdvisor 1 06.29.2007 no virus found
                        Fortinet 2.91.0.0 06.29.2007 no virus found
                        F-Prot 4.3.2.48 06.28.2007 no virus found
                        F-Secure 6.70.13030.0 06.29.2007 no virus found
                        Ikarus T3.1.1.8 06.28.2007 no virus found
                        Kaspersky 4.0.2.24 06.29.2007 no virus found
                        McAfee 5063 06.28.2007 no virus found
                        Microsoft 1.2701 06.29.2007 no virus found
                        NOD32v2 2362 06.28.2007 no virus found
                        Norman 5.80.02 06.28.2007 no virus found
                        Panda 9.0.0.4 06.29.2007 no virus found
                        Sophos 4.19.0 06.28.2007 no virus found
                        Sunbelt 2.2.907.0 06.28.2007 no virus found
                        Symantec 10 06.29.2007 no virus found
                        TheHacker 6.1.6.140 06.28.2007 no virus found
                        VBA32 3.12.0.2 06.28.2007 no virus found
                        VirusBuster 4.3.23:9 06.28.2007 no virus found
                        Webwasher-Gateway 6.0.1 06.28.2007 no virus found

                        Aditional Information
                        File size: 247808 bytes
                        MD5: 6fa2ddf70dc9b762ebf8920f89b6bea3
                        SHA1: 68f13a414373477c70140e920c63a00eeb6dae9e

                        Complete scanning result of "winrnr.dll", received in VirusTotal at 06.29.2007, 04:37:11 (CET).

                        Antivirus Version Update Result
                        AhnLab-V3 2007.6.29.0 06.28.2007 no virus found
                        AntiVir 7.4.0.34 06.28.2007 no virus found
                        Authentium 4.93.8 06.28.2007 no virus found
                        Avast 4.7.997.0 06.28.2007 no virus found
                        AVG 7.5.0.476 06.28.2007 no virus found
                        BitDefender 7.2 06.29.2007 no virus found
                        CAT-QuickHeal 9.00 06.28.2007 no virus found
                        ClamAV devel-20070416 06.29.2007 no virus found
                        DrWeb 4.33 06.29.2007 no virus found
                        eSafe 7.0.15.0 06.28.2007 no virus found
                        eTrust-Vet 30.8.3750 06.28.2007 no virus found
                        Ewido 4.0 06.28.2007 no virus found
                        FileAdvisor 1 06.29.2007 no virus found
                        Fortinet 2.91.0.0 06.29.2007 no virus found
                        F-Prot 4.3.2.48 06.28.2007 no virus found
                        F-Secure 6.70.13030.0 06.29.2007 no virus found
                        Ikarus T3.1.1.8 06.28.2007 no virus found
                        Kaspersky 4.0.2.24 06.29.2007 no virus found
                        McAfee 5063 06.28.2007 no virus found
                        Microsoft 1.2701 06.29.2007 no virus found
                        NOD32v2 2362 06.28.2007 no virus found
                        Norman 5.80.02 06.28.2007 no virus found
                        Panda 9.0.0.4 06.29.2007 no virus found
                        Sophos 4.19.0 06.28.2007 no virus found
                        Sunbelt 2.2.907.0 06.28.2007 no virus found
                        Symantec 10 06.29.2007 no virus found
                        TheHacker 6.1.6.140 06.28.2007 no virus found
                        VBA32 3.12.0.2 06.28.2007 no virus found
                        VirusBuster 4.3.23:9 06.28.2007 no virus found
                        Webwasher-Gateway 6.0.1 06.28.2007 no virus found

                        Aditional Information
                        File size: 16896 bytes
                        MD5: 361e71d790096c2d4a2a9f56d0f0327f
                        SHA1: 6df38044b46a27032a2da2c553fa3559dac500bb

                        Complete scanning result of "rsvpsp.dll", received in VirusTotal at 06.29.2007, 04:37:39 (CET).

                        Antivirus Version Update Result
                        AhnLab-V3 2007.6.29.0 06.28.2007 no virus found
                        AntiVir 7.4.0.34 06.28.2007 no virus found
                        Authentium 4.93.8 06.28.2007 no virus found
                        Avast 4.7.997.0 06.28.2007 no virus found
                        AVG 7.5.0.476 06.28.2007 no virus found
                        BitDefender 7.2 06.29.2007 no virus found
                        CAT-QuickHeal 9.00 06.28.2007 no virus found
                        ClamAV devel-20070416 06.29.2007 no virus found
                        DrWeb 4.33 06.29.2007 no virus found
                        eSafe 7.0.15.0 06.28.2007 no virus found
                        eTrust-Vet 30.8.3750 06.28.2007 no virus found
                        Ewido 4.0 06.28.2007 no virus found
                        FileAdvisor 1 06.29.2007 no virus found
                        Fortinet 2.91.0.0 06.29.2007 no virus found
                        F-Prot 4.3.2.48 06.28.2007 no virus found
                        F-Secure 6.70.13030.0 06.29.2007 no virus found
                        Ikarus T3.1.1.8 06.28.2007 no virus found
                        Kaspersky 4.0.2.24 06.29.2007 no virus found
                        McAfee 5063 06.28.2007 no virus found
                        Microsoft 1.2701 06.29.2007 no virus found
                        NOD32v2 2362 06.28.2007 no virus found
                        Norman 5.80.02 06.28.2007 no virus found
                        Panda 9.0.0.4 06.29.2007 no virus found
                        Sophos 4.19.0 06.28.2007 no virus found
                        Sunbelt 2.2.907.0 06.28.2007 no virus found
                        Symantec 10 06.29.2007 no virus found
                        TheHacker 6.1.6.140 06.28.2007 no virus found
                        VBA32 3.12.0.2 06.28.2007 no virus found
                        VirusBuster 4.3.23:9 06.28.2007 no virus found
                        Webwasher-Gateway 6.0.1 06.28.2007 no virus found

                        Aditional Information
                        File size: 90112 bytes
                        MD5: bc3752885b2ec7bf57fc6f9b23f2c8d5
                        SHA1: bff0c78fcbbeba80ddbef49c5825988b7cd6ecbb

                        Redonne-moi des nouvelles. Merci encore à toi.
                        1. papyber Contributeur sécurité
                          fais analyser les fichiers que tu as trouvé
                          mswsock.dll TCP/IP
                          winrnr.dll NTDS
                          rsvpsp.dll (Protocol handler)

                          Va sur VIRUS TOTAL
                          http://www.virustotal.com/en/indexf.html

                          * Clique sur "parcourir" :

                          * Recherche le fichier à analyser, puis clique ensuite sur "send". Il faut patienter car tu es sur une file d'attente.
                          Le rapport ne sera complet que lorsque tu verras la mention "FINISHED"sur la droite.

                          Dépose le dans ta réponse
                          je serai de retour ce soir
                          1. Serge
                            Allo. Je voudrais savoir si je dois effacer ces fichiers dans LSPfix en plus de rlls.dll
                            Il y a:
                            mswsock.dll TCP/IP
                            winrnr.dll NTDS
                            rsvpsp.dll (Protocol handler)

                            Je ne les ai pas effacé. J'ai seulement effacer rlls.dll

                            Voici le rapport vundofix.txt :
                            VundoFix V6.5.1

                            Checking Java version...

                            Java version is 1.4.2.5
                            Old versions of java are exploitable and should be removed.

                            Java version is 1.5.0.6
                            Old versions of java are exploitable and should be removed.

                            Scan started at 22:41:10 2007-06-18

                            Listing files found while scanning....

                            C:\windows\system32\ddayv.dll
                            C:\windows\system32\geqlhlas.exe
                            C:\WINDOWS\system32\gxwqnbqk.dll
                            C:\windows\system32\idajiafa.dll
                            C:\windows\system32\kqbnqwxg.ini
                            C:\WINDOWS\system32\nnnlkjg.dll
                            C:\WINDOWS\system32\qtstv.bak2
                            C:\WINDOWS\system32\qtstv.ini
                            C:\WINDOWS\system32\vtstq.dll
                            C:\WINDOWS\system32\vxpkntcf.dll
                            C:\windows\system32\vyadd.ini

                            Beginning removal...

                            Attempting to delete C:\windows\system32\ddayv.dll
                            C:\windows\system32\ddayv.dll Has been deleted!

                            Attempting to delete C:\windows\system32\geqlhlas.exe
                            C:\windows\system32\geqlhlas.exe Has been deleted!

                            Attempting to delete C:\WINDOWS\system32\gxwqnbqk.dll
                            C:\WINDOWS\system32\gxwqnbqk.dll Has been deleted!

                            Attempting to delete C:\windows\system32\idajiafa.dll
                            C:\windows\system32\idajiafa.dll Has been deleted!

                            Attempting to delete C:\windows\system32\kqbnqwxg.ini
                            C:\windows\system32\kqbnqwxg.ini Has been deleted!

                            Attempting to delete C:\WINDOWS\system32\nnnlkjg.dll
                            C:\WINDOWS\system32\nnnlkjg.dll Could not be deleted.

                            Attempting to delete C:\WINDOWS\system32\qtstv.bak2
                            C:\WINDOWS\system32\qtstv.bak2 Has been deleted!

                            Attempting to delete C:\WINDOWS\system32\qtstv.ini
                            C:\WINDOWS\system32\qtstv.ini Has been deleted!

                            Attempting to delete C:\WINDOWS\system32\vtstq.dll
                            C:\WINDOWS\system32\vtstq.dll Has been deleted!

                            Attempting to delete C:\WINDOWS\system32\vxpkntcf.dll
                            C:\WINDOWS\system32\vxpkntcf.dll Has been deleted!

                            Attempting to delete C:\windows\system32\vyadd.ini
                            C:\windows\system32\vyadd.ini Has been deleted!

                            Performing Repairs to the registry.
                            Done!

                            VundoFix V6.5.1

                            Checking Java version...

                            Java version is 1.4.2.5
                            Old versions of java are exploitable and should be removed.

                            Java version is 1.5.0.6
                            Old versions of java are exploitable and should be removed.

                            Scan started at 22:58:19 2007-06-26

                            Listing files found while scanning....

                            C:\windows\system32\nnnlkjg.dll

                            Beginning removal...

                            Attempting to delete C:\windows\system32\nnnlkjg.dll
                            C:\windows\system32\nnnlkjg.dll Has been deleted!

                            Performing Repairs to the registry.
                            Done!

                            Ça c'est le rapport HijackThis :
                            Logfile of HijackThis v1.99.1
                            Scan saved at 23:03:00, on 2007-06-26
                            Platform: Windows XP SP2 (WinNT 5.01.2600)
                            MSIE: Internet Explorer v7.00 (7.00.5730.0011)

                            Running processes:
                            C:\WINDOWS\System32\smss.exe
                            C:\WINDOWS\system32\winlogon.exe
                            C:\WINDOWS\system32\services.exe
                            C:\WINDOWS\system32\lsass.exe
                            C:\WINDOWS\system32\Ati2evxx.exe
                            C:\WINDOWS\system32\svchost.exe
                            C:\WINDOWS\System32\svchost.exe
                            C:\WINDOWS\system32\LEXBCES.EXE
                            C:\WINDOWS\system32\spoolsv.exe
                            C:\WINDOWS\system32\LEXPPS.EXE
                            c:\program files\mcafee.com\agent\mcdetect.exe
                            c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
                            C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
                            C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
                            C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
                            C:\WINDOWS\system32\svchost.exe
                            C:\WINDOWS\system32\Ati2evxx.exe
                            C:\WINDOWS\Explorer.EXE
                            C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
                            C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
                            C:\WINDOWS\system32\LVCOMSX.EXE
                            C:\Program Files\McAfee.com\VSO\mcvsshld.exe
                            C:\Program Files\McAfee.com\VSO\oasclnt.exe
                            c:\program files\mcafee.com\agent\mcagent.exe
                            c:\progra~1\mcafee.com\vso\mcvsescn.exe
                            C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe
                            C:\WINDOWS\system32\ctfmon.exe
                            C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
                            C:\Program Files\Messenger\msmsgs.exe
                            C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
                            C:\PROGRA~1\Webshots\webshots.scr
                            c:\progra~1\mcafee.com\vso\mcvsftsn.exe
                            C:\Program Files\Microsoft Office\Office10\WINWORD.EXE
                            C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
                            C:\WINDOWS\system32\wuauclt.exe
                            c:\windows\system32\rlvknlg.exe
                            C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

                            R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.azlyrics.com/s/smileempty.html
                            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                            R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
                            R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
                            R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                            R3 - URLSearchHook: (no name) - _{BE89472C-B803-4D1D-9A9A-0A63660E0FE3} - (no file)
                            R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                            O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                            O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                            O2 - BHO: (no name) - {42F59FBA-700C-4ED5-868D-30CA6A25BB97} - C:\WINDOWS\system32\vtstq.dll (file missing)
                            O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
                            O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                            O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
                            O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                            O2 - BHO: (no name) - {EDADCE64-6AB9-4783-83B7-54D2DE7D60B9} - C:\WINDOWS\system32\tthppunq.dll
                            O2 - BHO: (no name) - {F901DDF6-7FB8-465E-9275-177211B788C5} - C:\WINDOWS\system32\tthppunq.dll
                            O3 - Toolbar: Copernic Agent - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - C:\PROGRA~1\COPERN~1\COPERN~1.DLL
                            O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
                            O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                            O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
                            O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                            O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
                            O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
                            O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
                            O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" /checktask
                            O4 - HKLM\..\Run: [VirusScan Online] C:\Program Files\McAfee.com\VSO\mcvsshld.exe
                            O4 - HKLM\..\Run: [OASClnt] C:\Program Files\McAfee.com\VSO\oasclnt.exe
                            O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
                            O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
                            O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
                            O4 - HKLM\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
                            O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                            O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
                            O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
                            O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\Launcher.exe
                            O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
                            O8 - Extra context menu item: Chercher avec Copernic Agent - res://C:\Program Files\Copernic Agent\CopernicAgentExt.rdl/INTEGRATION_MENU_SEARCHEXT
                            O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
                            O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
                            O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
                            O9 - Extra button: (no name) - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
                            O9 - Extra 'Tools' menuitem: Démarrer Copernic Agent - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
                            O9 - Extra button: Copernic Agent - {688DC797-DC11-46A7-9F1B-445F4F58CE6E} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
                            O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
                            O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
                            O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                            O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                            O10 - Unknown file in Winsock LSP: c:\windows\system32\rlls.dll
                            O10 - Unknown file in Winsock LSP: c:\windows\system32\rlls.dll
                            O10 - Unknown file in Winsock LSP: c:\windows\system32\rlls.dll
                            O10 - Unknown file in Winsock LSP: c:\windows\system32\rlls.dll
                            O10 - Unknown file in Winsock LSP: c:\windows\system32\rlls.dll
                            O10 - Unknown file in Winsock LSP: c:\windows\system32\rlls.dll
                            O11 - Options group: [INTERNATIONAL] International*
                            O14 - IERESET.INF: START_PAGE_URL=www.ordiexpert.com
                            O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - https://onedrive.live.com/
                            O16 - DPF: {7C559105-9ECF-42B8-B3F7-832E75EDD959} - http://www.tbcode.com/ist/softwares/v4.0/0006_cracks.cab
                            O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://www.adobe.com/products/acrobat/nos/gp.cab
                            O18 - Protocol: bw+0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw+0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw-0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw-0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw00 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw00s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw10 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw10s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw20 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw20s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw30 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw30s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw40 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw40s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw50 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw50s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw60 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw60s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw70 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw70s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw80 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw80s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw90 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw90s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwa0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwa0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwb0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwb0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwc0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwc0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwd0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwd0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwe0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwe0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwf0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwf0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
                            O18 - Protocol: bwg0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwg0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwh0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwh0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwi0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwi0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwj0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwj0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwk0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwk0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwl0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwl0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwm0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwm0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwn0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwn0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwo0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwo0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwp0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwp0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwq0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwq0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwr0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwr0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bws0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bws0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwt0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwt0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwu0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwu0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwv0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwv0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bww0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bww0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwx0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwx0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwy0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwy0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwz0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwz0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                            O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                            O18 - Protocol: offline-8876480 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O23 - Service: AFSEGTGF Windows Service - Unknown owner - C:\WINDOWS\system32\dsbhz.exe (file missing)
                            O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
                            O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
                            O23 - Service: Autodesk Licensing Service - Autodesk, Inc. - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
                            O23 - Service: General Socket Service - Unknown owner - C:\WINDOWS\SVCHOST.EXE (file missing)
                            O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                            O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
                            O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
                            O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
                            O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
                            O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
                            O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
                            O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe

                            Merci beaucoup, j'attend de tes nouvelles.
                            1. papyber Contributeur sécurité
                              bonjour
                              ce n'est pas terminé mais le "méchant" a été démasqué!!
                              Lance LSPfix
                              Déconnecte-toi d'Internet et ferme toutes les fenêtres d'Internet Explorer.
                              Coche la case "I know what I'm doing"
                              Sélectionne toutes les instances des dll suivantes (s'il y en a, sinon ferme LSPfix) :

                              rlls.dll

                              fais les glisser du panneau de gauche "keep" au panneau de droite "Remove".
                              Clique sur le bouton "Finish".
                              (Si elles sont déjà dans le panneau "Remove" alors clique directement sur le bouton "Finish".)

                              Télécharge VundoFix.exe (par Atribune) sur ton Bureau
                              http://www.atribune.org/ccount/click.php?id=4
                              clic double sur VundoFix.exe afin de le lancer
                              clic sur le bouton Scan for Vundo
                              Lorsque le scan est complété, clic sur le bouton Remove Vundo
                              Une invite te demandera si tu veux supprimer les fichiers, clic YES
                              Après avoir cliqué "Yes", le Bureau disparaîtra un moment lors de la suppression des fichiers
                              Tu verras une invite qui t'annonce que ton PC va redémarrer;
                              clic OK

                              Note: Il est possible que VundoFix soit confronté à un fichier qu'il ne peut supprimer. Si tel est le cas, l'outil se lancera au prochain redémarrage; il faut simplement suivre les instructions ci-haut, à partir de "clic sur le bouton Scan for Vundo".

                              Copie/colle le contenu du rapport situé dans C:\vundofix.txt ainsi qu'un nouveau rapport HijackThis dans ta prochaine réponse
                              1. serge
                                Bonjour. Désolé du délai. Je suis au Québec et c'était notre fête nationale en fin de semaine, donc j'ai fêté. Donc, voici mes résultats après avoir suivi la procédure.

                                Ça c'est le rapport report:
                                SDFix: Version 1.88

                                Run by Serge B‚langer on 2007-06-25 at 12:46

                                Microsoft Windows XP [version 5.1.2600]

                                Running From: C:\DOCUME~1\SERGEB~1\Bureau\SDFix

                                Safe Mode:
                                Checking Services:

                                Restoring Windows Registry Values
                                Restoring Windows Default Hosts File
                                Restoring Missing Security Center Service
                                Restoring Missing SharedAccess Service

                                Rebooting...

                                Normal Mode:
                                Checking Files:

                                Below files will be copied to Backups folder then removed:

                                C:\WINDOWS\b122.exe - Deleted
                                C:\WINDOWS\svchost.exe - Deleted
                                C:\WINDOWS\system32\drivers\uzcx.exe - Deleted

                                Folder C:\Program Files\InetGet2 - Removed

                                Removing Temp Files...

                                ADS Check:

                                Checking C:\WINDOWS
                                C:\WINDOWS
                                No streams found.

                                Checking C:\WINDOWS\system32
                                C:\WINDOWS\system32
                                No streams found.

                                Checking C:\WINDOWS\system32\svchost.exe
                                C:\WINDOWS\system32\svchost.exe
                                No streams found.

                                Checking C:\WINDOWS\system32\ntoskrnl.exe
                                C:\WINDOWS\system32\ntoskrnl.exe
                                No streams found.

                                Final Check:

                                Remaining Services:
                                ------------------

                                Authorized Application Key Export:

                                [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
                                "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
                                "C:\\Program Files\\Messenger\\msmsgs.exe"="C:\\Program Files\\Messenger\\msmsgs.exe:*:Enabled:Windows Messenger"
                                "C:\\Program Files\\iMesh\\iMesh5\\iMesh.exe"="C:\\Program Files\\iMesh\\iMesh5\\iMesh.exe:*:Enabled:iMesh 5"
                                "C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"="C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe:*:Disabled:Logitech Desktop Messenger"
                                "c:\\windows\\system32\\rk.exe"="c:\\windows\\system32\\rk.exe:*:Enabled:rk.exe"
                                "C:\\Documents and Settings\\Serge B‚langer\\Local Settings\\Temp\\~os1B5.tmp\\ossproxy.exe"="C:\\Documents and Settings\\Serge B‚langer\\Local Settings\\Temp\\~os1B5.tmp\\ossproxy.exe:*:Enabled:ossproxy.exe"
                                "c:\\Documents and Settings\\Serge B‚langer\\Local Settings\\Temp\\~os7.tmp\\ossproxy.exe"="c:\\Documents and Settings\\Serge B‚langer\\Local Settings\\Temp\\~os7.tmp\\ossproxy.exe:*:Enabled:ossproxy.exe"
                                "C:\\Documents and Settings\\Serge B‚langer\\Local Settings\\Temp\\~os4A.tmp\\ossproxy.exe"="C:\\Documents and Settings\\Serge B‚langer\\Local Settings\\Temp\\~os4A.tmp\\ossproxy.exe:*:Enabled:ossproxy.exe"
                                "C:\\Documents and Settings\\Serge B‚langer\\Local Settings\\Temp\\~os5.tmp\\ossproxy.exe"="C:\\Documents and Settings\\Serge B‚langer\\Local Settings\\Temp\\~os5.tmp\\ossproxy.exe:*:Enabled:ossproxy.exe"
                                "C:\\Documents and Settings\\Serge B‚langer\\Local Settings\\Temp\\~os28.tmp\\ossproxy.exe"="C:\\Documents and Settings\\Serge B‚langer\\Local Settings\\Temp\\~os28.tmp\\ossproxy.exe:*:Enabled:ossproxy.exe"
                                "C:\\Documents and Settings\\Serge B‚langer\\Local Settings\\Temp\\~os2F.tmp\\ossproxy.exe"="C:\\Documents and Settings\\Serge B‚langer\\Local Settings\\Temp\\~os2F.tmp\\ossproxy.exe:*:Enabled:ossproxy.exe"
                                "C:\\Documents and Settings\\Serge B‚langer\\Local Settings\\Temp\\~os37.tmp\\ossproxy.exe"="C:\\Documents and Settings\\Serge B‚langer\\Local Settings\\Temp\\~os37.tmp\\ossproxy.exe:*:Enabled:ossproxy.exe"
                                "C:\\WINDOWS\\Temp\\~os4.tmp\\ossproxy.exe"="C:\\WINDOWS\\Temp\\~os4.tmp\\ossproxy.exe:*:Enabled:ossproxy.exe"
                                "C:\\WINDOWS\\Temp\\~os4B.tmp\\ossproxy.exe"="C:\\WINDOWS\\Temp\\~os4B.tmp\\ossproxy.exe:*:Enabled:ossproxy.exe"
                                "C:\\WINDOWS\\Temp\\~os52.tmp\\ossproxy.exe"="C:\\WINDOWS\\Temp\\~os52.tmp\\ossproxy.exe:*:Enabled:ossproxy.exe"
                                "%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
                                "C:\\WINDOWS\\Temp\\~os66.tmp\\ossproxy.exe"="C:\\WINDOWS\\Temp\\~os66.tmp\\ossproxy.exe:*:Enabled:ossproxy.exe"
                                "C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
                                "C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"
                                "C:\\Documents and Settings\\Serge B‚langer\\Local Settings\\Temp\\~os9.tmp\\ossproxy.exe"="C:\\Documents and Settings\\Serge B‚langer\\Local Settings\\Temp\\~os9.tmp\\ossproxy.exe:*:Enabled:ossproxy.exe"
                                "C:\\Documents and Settings\\Serge B‚langer\\Local Settings\\Temp\\~os9E.tmp\\ossproxy.exe"="C:\\Documents and Settings\\Serge B‚langer\\Local Settings\\Temp\\~os9E.tmp\\ossproxy.exe:*:Enabled:ossproxy.exe"
                                "C:\\Documents and Settings\\Serge B‚langer\\Local Settings\\Temp\\~osA9.tmp\\ossproxy.exe"="C:\\Documents and Settings\\Serge B‚langer\\Local Settings\\Temp\\~osA9.tmp\\ossproxy.exe:*:Enabled:ossproxy.exe"
                                "C:\\Documents and Settings\\Serge B‚langer\\Local Settings\\Temp\\~os6.tmp\\ossproxy.exe"="C:\\Documents and Settings\\Serge B‚langer\\Local Settings\\Temp\\~os6.tmp\\ossproxy.exe:*:Enabled:ossproxy.exe"
                                "C:\\Program Files\\LimeWire\\LimeWire.exe"="C:\\Program Files\\LimeWire\\LimeWire.exe:*:Enabled:LimeWire"
                                "C:\\Program Files\\Morpheus\\Morpheus.exe"="C:\\Program Files\\Morpheus\\Morpheus.exe:*:Enabled:Morpheus"
                                "C:\\WINDOWS\\SVCHOST.EXE"="C:\\WINDOWS\\SVCHOST.EXE:*:Enabled:SVCHOST"
                                "F:\\Jeux\\Age Of Empire 3\\age3x.exe"="F:\\Jeux\\Age Of Empire 3\\age3x.exe:*:Enabled:Age of Empires III - The WarChiefs"
                                "c:\\windows\\system32\\rlvknlg.exe"="c:\\windows\\system32\\rlvknlg.exe:*:Enabled:rlvknlg.exe"

                                [HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
                                "%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
                                "C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe"="C:\\Program Files\\Logitech\\Desktop Messenger\\8876480\\Program\\LogitechDesktopMessenger.exe:*:Enabled:Logitech Desktop Messenger"
                                "%windir%\\Network Diagnostic\\xpnetdiag.exe"="%windir%\\Network Diagnostic\\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
                                "C:\\Program Files\\MSN Messenger\\msnmsgr.exe"="C:\\Program Files\\MSN Messenger\\msnmsgr.exe:*:Enabled:Windows Live Messenger 8.1"
                                "C:\\Program Files\\MSN Messenger\\livecall.exe"="C:\\Program Files\\MSN Messenger\\livecall.exe:*:Enabled:Windows Live Messenger 8.1 (Phone)"

                                Remaining Files:
                                ---------------

                                Backups Folder: - C:\DOCUME~1\SERGEB~1\Bureau\SDFix\backups\backups.zip

                                Listing Files with Hidden Attributes:

                                C:\Program Files\Autodesk\Autodesk DWF Viewer\_Setupx.dll
                                C:\Program Files\Autodesk\Autodesk DWF Viewer\Setup.exe
                                C:\Program Files\Outlook Express\msimn.exe

                                Listing User Accounts:

                                Administrateur ASPNET HelpAssistant
                                Invit‚ Serge B‚langer SUPPORT_388945a0
                                La commande s'est termin‚e correctement.

                                Finished

                                Ça c'est le rapport msnfix:
                                MSN_Fix 1.326

                                C:\Documents and Settings\Serge B‚langer\Bureau\MSNFix
                                Fix exécuté le 2007-06-25 - 14:03:59,46 By Serge B‚langer
                                mode normal

                                ************************ Recherche les fichiers présents

                                Aucun Fichier trouvé

                                ************************ Recherche les dossiers présents

                                Aucun dossier trouvé

                                ************************ Fichiers suspects

                                /!\ ces fichiers nécessitent un avis expérimenté avant toute intervention

                                ------------------------------------------------------------------------
                                Auteur : !aur3n7 Contact: https://www.aceboard.fr/
                                ------------------------------------------------------------------------

                                --------------------------------------------- END ---------------------------------------------

                                Ça c'est le rapport hijackthis après toutes les étapes:
                                Logfile of HijackThis v1.99.1
                                Scan saved at 14:10:06, on 2007-06-25
                                Platform: Windows XP SP2 (WinNT 5.01.2600)
                                MSIE: Internet Explorer v7.00 (7.00.5730.0011)

                                Running processes:
                                C:\WINDOWS\System32\smss.exe
                                C:\WINDOWS\system32\winlogon.exe
                                C:\WINDOWS\system32\services.exe
                                C:\WINDOWS\system32\lsass.exe
                                C:\WINDOWS\system32\Ati2evxx.exe
                                C:\WINDOWS\system32\svchost.exe
                                C:\WINDOWS\System32\svchost.exe
                                C:\WINDOWS\system32\LEXBCES.EXE
                                C:\WINDOWS\system32\spoolsv.exe
                                C:\WINDOWS\system32\LEXPPS.EXE
                                c:\program files\mcafee.com\agent\mcdetect.exe
                                c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
                                C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
                                C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
                                C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
                                C:\WINDOWS\system32\svchost.exe
                                C:\WINDOWS\system32\Ati2evxx.exe
                                C:\WINDOWS\Explorer.EXE
                                C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
                                C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
                                C:\WINDOWS\system32\LVCOMSX.EXE
                                C:\Program Files\McAfee.com\VSO\mcvsshld.exe
                                C:\Program Files\McAfee.com\VSO\oasclnt.exe
                                c:\progra~1\mcafee.com\vso\mcvsescn.exe
                                c:\program files\mcafee.com\agent\mcagent.exe
                                C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe
                                C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
                                C:\WINDOWS\system32\ctfmon.exe
                                C:\Program Files\Messenger\msmsgs.exe
                                C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
                                C:\PROGRA~1\Webshots\webshots.scr
                                c:\progra~1\mcafee.com\vso\mcvsftsn.exe
                                C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
                                C:\WINDOWS\system32\wuauclt.exe
                                C:\Program Files\Hijackthis Version Française\hijackthis vf.exe

                                R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.azlyrics.com/s/smileempty.html
                                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                                R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                                R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
                                R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
                                R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                                R3 - URLSearchHook: (no name) - _{BE89472C-B803-4D1D-9A9A-0A63660E0FE3} - (no file)
                                R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                                O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                                O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
                                O2 - BHO: (no name) - {42F59FBA-700C-4ED5-868D-30CA6A25BB97} - C:\WINDOWS\system32\vtstq.dll (file missing)
                                O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
                                O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                                O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
                                O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                                O2 - BHO: (no name) - {EDADCE64-6AB9-4783-83B7-54D2DE7D60B9} - C:\WINDOWS\system32\tthppunq.dll
                                O2 - BHO: (no name) - {F901DDF6-7FB8-465E-9275-177211B788C5} - C:\WINDOWS\system32\tthppunq.dll
                                O3 - Toolbar: Copernic Agent - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - C:\PROGRA~1\COPERN~1\COPERN~1.DLL
                                O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll
                                O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
                                O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
                                O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
                                O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe
                                O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
                                O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
                                O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" /checktask
                                O4 - HKLM\..\Run: [VirusScan Online] C:\Program Files\McAfee.com\VSO\mcvsshld.exe
                                O4 - HKLM\..\Run: [OASClnt] C:\Program Files\McAfee.com\VSO\oasclnt.exe
                                O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe
                                O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe
                                O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Edition Découverte\3.2\Apps\apdproxy.exe"
                                O4 - HKLM\..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe
                                O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                                O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
                                O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
                                O4 - Startup: Webshots.lnk = C:\Program Files\Webshots\Launcher.exe
                                O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
                                O8 - Extra context menu item: Chercher avec Copernic Agent - res://C:\Program Files\Copernic Agent\CopernicAgentExt.rdl/INTEGRATION_MENU_SEARCHEXT
                                O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
                                O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
                                O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
                                O9 - Extra button: (no name) - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
                                O9 - Extra 'Tools' menuitem: Démarrer Copernic Agent - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
                                O9 - Extra button: Copernic Agent - {688DC797-DC11-46A7-9F1B-445F4F58CE6E} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE
                                O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
                                O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
                                O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                                O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                                O10 - Unknown file in Winsock LSP: c:\windows\system32\rlls.dll
                                O10 - Unknown file in Winsock LSP: c:\windows\system32\rlls.dll
                                O10 - Unknown file in Winsock LSP: c:\windows\system32\rlls.dll
                                O10 - Unknown file in Winsock LSP: c:\windows\system32\rlls.dll
                                O10 - Unknown file in Winsock LSP: c:\windows\system32\rlls.dll
                                O10 - Unknown file in Winsock LSP: c:\windows\system32\rlls.dll
                                O11 - Options group: [INTERNATIONAL] International*
                                O14 - IERESET.INF: START_PAGE_URL=www.ordiexpert.com
                                O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - https://onedrive.live.com/
                                O16 - DPF: {7C559105-9ECF-42B8-B3F7-832E75EDD959} - http://www.tbcode.com/ist/softwares/v4.0/0006_cracks.cab
                                O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://www.adobe.com/products/acrobat/nos/gp.cab
                                O18 - Protocol: bw+0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw+0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw-0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw-0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw00 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw00s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw10 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw10s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw20 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw20s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw30 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw30s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw40 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw40s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw50 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw50s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw60 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw60s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw70 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw70s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw80 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw80s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw90 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw90s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwa0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwa0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwb0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwb0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwc0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwc0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwd0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwd0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwe0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwe0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwf0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwf0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
                                O18 - Protocol: bwg0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwg0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwh0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwh0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwi0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwi0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwj0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwj0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwk0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwk0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwl0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwl0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwm0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwm0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwn0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwn0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwo0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwo0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwp0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwp0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwq0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwq0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwr0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwr0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bws0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bws0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwt0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwt0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwu0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwu0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwv0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwv0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bww0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bww0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwx0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwx0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwy0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwy0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwz0 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwz0s - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                                O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                                O18 - Protocol: offline-8876480 - {F6519686-BA33-4A7B-A904-F7141D5D50BC} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O23 - Service: AFSEGTGF Windows Service - Unknown owner - C:\WINDOWS\system32\dsbhz.exe (file missing)
                                O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
                                O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
                                O23 - Service: Autodesk Licensing Service - Autodesk, Inc. - C:\Program Files\Fichiers communs\Autodesk Shared\Service\AdskScSrv.exe
                                O23 - Service: General Socket Service - Unknown owner - C:\WINDOWS\SVCHOST.EXE (file missing)
                                O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                                O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
                                O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
                                O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe
                                O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe
                                O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe
                                O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
                                O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe

                                La page web n'a plus l'air à apparaitre au démarrage de Windows. Est-ce que je dois faire autre chose?? Sinon, un gros merci à toi papyber, sans toi je ne m'en serais jamais sorti!
                                1. papyber Contributeur sécurité
                                  Serge Bélanger, c'est ta session courante, en mode sans échec, il y a plusieurs sessions, autant que tu en as sur ton PC + 1 appelée "administrateur" et qu'il ne faut pas utiliser

                                  je te remets un lien plus explicatif pour le mode sans échec
                                  Comment aller en Mode sans échec lettre C
                                  https://forum.pcastuces.com/sujet.asp?f=25&s=3902

                                  pour BFU: regarde aussi sur ce lien, lettre N, c'est très bien expliqué
                                  1. serge
                                    Mon dernier message n'était peut-être pas très clair, mais je voulais savoir où enregistrer le lien et si c'était normal qu'il y ait seulement un fichier .bfu? est-ce que je dois lui donner un nom spécifique?

                                    Pour cette étape:
                                    ***** Copie ce qui suit dans un fichier texte et redémarre en mode sans échec comme indiqué ici https://docs.microsoft.com/en-us/?mfr=true (choisis ta session courante "Serge Bélanger") *****

                                    Comment je fais pour savoir exactement le nom de ma session courante? Est-ce que c'est comme ça qu'il faut que je le rentre dans le fichier texte?: https://docs.microsoft.com/en-us/?mfr=true/sergebelanger
                                    1. papyber Contributeur sécurité
                                      c'est très exactement cela que je voulais
                                      donc maintenant tu suis les consignes de GenProc et tu postes les rapports obtenus
                                      cela ne sera pas terminé donc reviens même si tu trouves une grosse amélioration!!!!
                                      1. serge
                                        Allo. Je ne suis pas capable de faire cette partie de l'étape #1.

                                        * Fais un clic droit sur ce lien : http://www.alt-shift-return.org/Info/Fichiers/Winsoftware.bfu
                                        et choisis "Enregistrer sous" (dans IE c'est "Enregistrer le lien sous..")
                                        afin de télécharger Winsoftware.bfu, Type "Tous les fichiers".

                                        Merci
                                    • 1
                                    • 2

                                    Discussions similaires

                                    comment se connecte au site http://192.168.1
                                    benidu62

                                    47 réponses
                                    Configuration répéteur Wifi
                                    Squall

                                    4 réponses
                                    Impossible de se connecter a 192.168.1.1
                                    papemane

                                    5 réponses
                                    Connexion de mon anycast dongle à internet
                                    Hantaie

                                    1 réponse
                                    tv buddy connection 192.168.49.1 impossible
                                    myarka

                                    3 réponses