Alerte : Message détecté en tant que Vundo

IndiaDance -  
Bonjour à tous,

Je ne m'y connais pas du tout en informatique ou très peu, et j'ai depuis aujourd'hui, beaucoup de messages détectés en tant que Vundo par mon VirusScan !
J'ai essayé de me renseigner un peu sur le net, et j'ai télécharger les logiciels : hijackthis.zip et FixVundo.exe, des fois que ça puisse me servir tout au long de cette démarche.

Merci de votre aide,
@ très vite ...
Configuration: Windows XP
Internet Explorer 7.0

27 réponses

Résumé de la discussion

Des messages détectés comme Vundo par VirusScan sur Windows XP avec Internet Explorer 7 déclenchent une recherche de solutions et l’utilisation d’outils tels que HijackThis, FixVundo et OAD. Plusieurs réponses orientent vers des actions concrètes: enregistrer un script de registre via un fichier .reg, installer et exécuter VundoFix, puis compléter avec un nouveau log HijackThis. Des rapports détaillent des éléments malveillants comme ddabccc.dll et SpOrder.dll, avec des scans OAD pour localiser les fichiers et évaluer les entrées de registre, et des remontées sur WinAntiVirus et WinFixer. En complément, des vérifications additionnelles évoquent Java (versions 1.5.x, puis 1.6.0_02) et des chemins d’installation suspects, suggérant de nettoyer les composants résiduels et de repérer les programmes pouvant réactiver les alertes.

Bobot (l’IA à votre service)
  1. Lyonnais92 Contributeur sécurité
    Bonsoir,

    les analyses et traitements avec ccleaner, AVG, Spybot et ad aware sont à faire "de temps en temps" (mais pas en mode sans échec).

    As tu pu supprimer "win antivirus" ou "winantivirus 2006" et le supprimer ?

    C'est le seul point imortant.
    @+
    1. IndiaDance Auteur
      Bonjour,

      Après toutes ces manip', c'est du boulot dis donc ! Je n'ai pas eu la possibilité d'avoir un rapport AVG !!! Mais en tout cas, aucun messages d'alerte en vu depuis tout ça ! Dois je faire une autre analyse pour que tu puisses vérifier si tout est réellement ok ?!?

      Merci beaucoup pour ton aide en tout cas !
      1. Lyonnais92 Contributeur sécurité
        Bonjour,
        bon, on en termine.

        1) Ouvre le Bloc Notes.
        Copie le texte ci-dessous (entre les * mais sans les *) avec le texte qui se trouve dans l'espace ci-dessous (copie/colle) :

        *****************************
        REGEDIT4

        [-HKEY_LOCAL_MACHINE\SOFTWARE\WinAntiVirus Pro 2007]
        *****************************
        Clique sur "Fichier", "Enregistrer sous".
        Clique sur Bureau (dans la colonne de gauche)
        Dans Nom du fichier tu écris fix.reg
        Pour Type tu choisis "tous les fichiers" avec le menu déroulant.
        Tu cliques sur Enregistrer.
        Tu fermes le Bloc-notes

        Sur ton bureau, tu double-clique sur l'icône de Fix.reg
        Tu acceptes l'avertissement concernant la fusion
        Le fix va travailler sans se manifester.
        A la fin, tu vas voir un message disant que la fusion est terminée. Tu valides.

        2) Lis bien et exécute cette manip dans l’ordre.

        #Télécharge et installe ces logiciels (si tu ne les as pas) pour les 3 premiers
        mets les à jour, comme indiqué dans les démos ou tutos.

        Ne les utilise pas tout de suite.

        Antispywares et autres :

        *Ad-Aware (gratuit)
        Téléchargement :
        http://telecharger.01net.com/windows/Internet/internet_utlitaire/fiches/11643.html
        Le patch en Français pour Ad-Aware (gratuit) :
        http://telecharger.01net.com/windows/Internet/internet_utlitaire/fiches/25543.html
        Tuto :
        http://perso.orange.fr/rginformatique/section%20virus/adawrevid.asf

        *Spybot (gratuit) :
        Téléchargement :
        http://telecharger.01net.com/windows/Internet/internet_utlitaire/fiches/26157.html
        voir demo d utilisation (merci Balltrap)
        http://perso.orange.fr/rginformatique/section%20virus/demo%20spybot.htm

        * AVG AS

        AVG anti spyware
        https://www.01net.com/telecharger/
        Mets le a jour avant de lancer le scan.
        Tuto :
        http://www.kachouri.com/tuto/tuto-161-avg-anti-spyware-75-pour-votre-securite.html

        Nettoyeurs (de fichiers inutiles) et autres :

        *Ccleaner (gratuit)
        Téléchargement :
        https://www.01net.com/telecharger/windows/Utilitaire/nettoyeurs_et_installeurs/fiches/32599.html
        Tuto :
        https://www.vulgarisation-informatique.com/nettoyer-windows-ccleaner.php

        Lors de l’installation, [décoche] l’option qui t’installerait la barre Yahoo !

        ========================================
        ->Affiche tous les fichiers et dossiers :
        clique sur démarrer/panneau de configuration (en affichage classique)/option des dossiers/affichage

        [Coche] « afficher les dossiers et fichiers cachés »

        [Décoche] la case « Masquer les fichiers protégés du système d'exploitation (recommandé) »

        [Décoche] « masquer les extensions dont le type est connu »

        Puis fais [appliquer] pour valider les changements.

        Et [Ok]
        ========================================
        -> Relance HijackThis cliques sur « scanner seulement » ou (« do a scan only »),
        coche les cases devant ces lignes :

        O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
        O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)

        et ensuite ferme toutes les fenêtres actives autres que HijackThis!, navigateur inclus,
        puis clique "Fix checked"( ou « fixer objet »). Ferme HijackThis!
        ========================================
        ->Démarre en mode sans échec :
        Pour cela, tu tapotes la touche F8 dès le début de l’allumage du pc sans t’arrêter
        Une fenêtre va s’ouvrir tu te déplaces avec les flèches du clavier sur démarrer en mode sans échec
        puis tape « entrée ».
        Une fois sur le bureau s’il n’y a pas toutes les couleurs et autres c’est normal !
        (Si F8 ne marche pas utilise la touche F5).
        ========================================
        ->Recherche et supprime ces dossiers en gras (si présents) :

        C:\Program Files\WinAntiVirus
        C:\Program Files\WinAntiVirus pro 2007

        ========================================
        ->Lance CCleaner.

        Suppression des fichiers temporaires

        Va dans la section "Options" situé dans la marge gauche.
        Décoche "Avancé"
        Retourne ensuite dans la section "Nettoyeur"
        Fais bien attention de cocher toutes ces cases dans la marge gauche (Internet Explorer/Windows Explorer/Système)
        • Clique sur [Analyse]
        • Patiente le temps du scan, qui peut prendre un peu de temps si c'est la première fois.
        • Une fois le scan terminé, clique sur [Lancer le Nettoyage]

        ========================================
        ->Lance AVG pour un scan complet "Analyse" ->"Paramètres"

        Sous la question "Comment réagir ?" :

        -> clique sur "Actions recommandées" et choisis "Quarantaines"
        -> Re-clique sur l'onglet "Analyse" puis réalise une "Analyse complète du système"

        Si un fichier est infecté en fin d'analyse

        ->Clique sur "Appliquer toutes les actions "

        ->Clique sur "Enregistrer le rapport" puis sur "Enregistrer le rapport sous".

        ->Enregistre ce fichier texte sur ton bureau et [copie/colle le rapport en forum]
        ========================================
        ->Passe Ad-Aware et supprime tout ce qu’il trouve + supprime les quarantaines…
        ========================================
        ->Passe Spybot et corrige tout ce qu’il trouve + vaccine + supprime les quarantaines…
        ========================================
        ->Relance CCleaner.
        Suppression des incohérences du registre

        • Clique sur l'icône [Erreurs] situés dans la marge à gauche
        • Puis clique sur [Analyser les erreurs]
        • Patiente pendant que CCleaner scan ton registre.
        • Une fois le scan terminé, coche toutes les entrèes qu'il t'aura trouvée.
        • Tu peux cliquer ensuite sur [Corriger les erreurs].

        Si tu n'est pas sur de ce que tu fais, tu peux choisir de sauvegarder les entrées cochées pour les restaurer ultérieurement.
        ========================================
        ->Vide ta Corbeille.
        ========================================
        ->Redémarre en mode normal,

        [Recoche] la case « Masquer les fichiers protégés du système d'exploitation (recommandé) »

        Poste le rapport AVG.
        @+

        1. IndiaDance Auteur
          Re,

          Voici le log Hijackthis, et le rapport sur le fichier WinAntiVirus avec OAD :

          Logfile of HijackThis v1.99.1
          Scan saved at 22:39:28, on 22/07/2007
          Platform: Windows XP SP2 (WinNT 5.01.2600)
          MSIE: Internet Explorer v7.00 (7.00.6000.16473)

          Running processes:
          C:\WINDOWS\System32\smss.exe
          C:\WINDOWS\system32\winlogon.exe
          C:\WINDOWS\system32\services.exe
          C:\WINDOWS\system32\lsass.exe
          C:\WINDOWS\system32\Ati2evxx.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\system32\Ati2evxx.exe
          C:\WINDOWS\system32\spoolsv.exe
          C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
          C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
          C:\Program Files\Network Associates\VirusScan\Mcshield.exe
          C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
          C:\WINDOWS\Explorer.EXE
          C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
          C:\WINDOWS\System32\svchost.exe
          C:\WINDOWS\htpatch.exe
          C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
          C:\WINDOWS\Dit.exe
          C:\Program Files\Medion Home CinemaXL\PowerCinema\PCMService.exe
          C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
          C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
          C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe
          C:\Program Files\Logitech\Video\LogiTray.exe
          C:\Program Files\Adobe\Adobe Acrobat 7.0\Distillr\Acrotray.exe
          C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
          C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
          C:\Program Files\QuickTime\qttask.exe
          C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe
          C:\WINDOWS\SOUNDMAN.EXE
          C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
          C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
          C:\WINDOWS\system32\ctfmon.exe
          C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
          C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
          C:\WINDOWS\DitExp.exe
          C:\WINDOWS\system32\LVComS.exe
          C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
          C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
          C:\Program Files\Fichiers communs\Nokia\MPAPI\MPAPI3s.exe
          C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
          C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
          C:\Program Files\MSN Messenger\msnmsgr.exe
          C:\Program Files\MSN Messenger\usnsvc.exe
          C:\Program Files\Internet Explorer\iexplore.exe
          C:\Documents and Settings\Aurélie\Bureau\Scan.exe

          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
          R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
          R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
          R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.aldi.com/
          R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
          O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Adobe Acrobat 7.0\ActiveX\AcroIEHelper.dll
          O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - C:\Program Files\Microsoft Money\System\mnyside.dll
          O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll
          O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
          O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
          O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
          O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
          O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
          O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
          O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
          O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
          O4 - HKLM\..\Run: [HTpatch] C:\WINDOWS\htpatch.exe
          O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
          O4 - HKLM\..\Run: [Dit] Dit.exe
          O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe
          O4 - HKLM\..\Run: [VOBRegCheck] C:\WINDOWS\System32\VOBREGCheck.exe -CheckReg
          O4 - HKLM\..\Run: [PCMService] C:\Program Files\Medion Home CinemaXL\PowerCinema\PCMService.exe
          O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
          O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
          O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe"
          O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
          O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
          O4 - HKLM\..\Run: [Adobe Version Cue CS2] "C:\Program Files\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe"
          O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Adobe Acrobat 7.0\Distillr\Acrotray.exe"
          O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
          O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
          O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
          O4 - HKLM\..\Run: [mmtask] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe"
          O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
          O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
          O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
          O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
          O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
          O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
          O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
          O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.8472\GoogleToolbarNotifier.exe
          O8 - Extra context menu item: Convertir en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
          O8 - Extra context menu item: Convertir en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
          O8 - Extra context menu item: Convertir la cible du lien en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
          O8 - Extra context menu item: Convertir la cible du lien en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
          O8 - Extra context menu item: Convertir la sélection en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
          O8 - Extra context menu item: Convertir la sélection en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
          O8 - Extra context menu item: Convertir les liens sélectionnés en fichier Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
          O8 - Extra context menu item: Convertir les liens sélectionnés en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
          O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
          O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
          O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dll
          O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
          O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
          O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O11 - Options group: [INTERNATIONAL] International*
          O14 - IERESET.INF: START_PAGE_URL=https://www.aldi.com/
          O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game10.zylom.com/activex/zylomgamesplayer.cab
          O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://jeuxenligne.orange.fr/Gameshell/GameHost/1.0/OberonGameHost.cab
          O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
          O17 - HKLM\System\CCS\Services\Tcpip\..\{62B2097C-249E-4928-8087-81663965ABDC}: NameServer = 193.252.19.3,193.252.19.4
          O18 - Protocol: bw+0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw+0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw-0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw-0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw00 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw00s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw10 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw10s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw20 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw20s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw30 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw30s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw40 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw40s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw50 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw50s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw60 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw60s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw70 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw70s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw80 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw80s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw90 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw90s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwa0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwa0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwb0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwb0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwc0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwc0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwd0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwd0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwe0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwe0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwf0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwf0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
          O18 - Protocol: bwg0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwg0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwh0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwh0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwi0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwi0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwj0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwj0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwk0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwk0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwl0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwl0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwm0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwm0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwn0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwn0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwo0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwo0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwp0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwp0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwq0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwq0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwr0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwr0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bws0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bws0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwt0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwt0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwu0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwu0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwv0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwv0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bww0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bww0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwx0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwx0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwy0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwy0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwz0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwz0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
          O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
          O18 - Protocol: offline-8876480 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
          O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
          O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
          O23 - Service: Adobe Version Cue CS2 - Unknown owner - C:\Program Files\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe" -win32service (file missing)
          O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
          O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
          O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
          O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
          O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
          O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
          O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
          O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
          O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
          O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe

          22/07/2007 ---- 22:45:55,60

          ----------------------------------
          §§§§§§ [WinAntiVirus] §§§§§§
          ----------------------------------
          [X] Registre

          -------------- [ ] rapide
          -- Fichier --- [ ] disque systeme
          ------------- [X] complete

          ********************
          [Registre]
          ********************

          [HKEY_LOCAL_MACHINE\SOFTWARE\WinAntiVirus Pro 2007]

          *******************
          [Fichier]
          *******************

          *********************
          [Même date]
          *********************

          Aucun fichier créé à la même date détecté

          Outil Aide Diagnostic By !aur3n7 Version 1.02
          ----------------------------------
          §§§§§ Fin Rapport §§§§§
          ----------------------------------

          Merci, @+
          2. Lyonnais92 Contributeur sécurité
            Bonsoir,

            1) Ouvre le Bloc Notes.
            Copie le texte ci-dessous (entre les * mais sans les *) avec le texte qui se trouve dans l'espace ci-dessous (copie/colle) :

            *****************************
            REGEDIT4

            [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
            "AppInit_DLLs"=""

            [HKEY_USERS\S-1-5-21-2601252467-3177116611-3549611948-1007\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU\*]
            "f"=-

            [HKEY_USERS\S-1-5-21-2601252467-3177116611-3549611948-1007\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU\dll]
            "a"=-
            *****************************
            Clique sur "Fichier", "Enregistrer sous".
            Clique sur Bureau (dans la colonne de gauche)
            Dans Nom du fichier tu écris fix.reg
            Pour Type tu choisis "tous les fichiers" avec le menu déroulant.
            Tu cliques sur Enregistrer.
            Tu fermes le Bloc-notes

            Sur ton bureau, tu double-clique sur l'icône de Fix.reg
            Tu acceptes l'avertissement concernant la fusion
            Le fix va travailler sans se manifester.
            A la fin, tu vas voir un message disant que la fusion est terminée. Tu valides.

            Tu remets un log Hijackthis.

            2) tu refais tourner OAD sur WinAntiVirus et tu postes le rapport.
            @+
            1. IndiaDance Auteur
              Bonjour,

              J'ai fait la recherche que tu m'as demandé, ci-après, tu trouveras les résultats, mais en regardant les résultats que j'ai pu effectué hier avec OAD, j'ai pu remarqué que j'ai eu ces problèmes de messages d'alerte lorsqu'un logiciel WinAntiVirus ci dessous a voulu s'installer contre mon gré sur mon ordi et biensur il ne se trouve pas dans la liste ajout ou suppression de programme (peut être que ces indications vont pouvoir nous aider) :

              C:\VundoFix
              C:\WINDOWS\system32\SpOrder.dll
              C:\WINDOWS\system32\wpa.dbl
              C:\WINDOWS\system32\ddabccc.dll.vir
              "C:\Program Files\WinAntiVirus"

              Résultat pour la recherche C:\WINDOWS\system32\wpa.dbl :

              Antivirus Version Last Update Result
              AhnLab-V3 2007.7.21.0 2007.07.20 no virus found
              AntiVir 7.4.0.44 2007.07.21 no virus found
              Authentium 4.93.8 2007.07.20 no virus found
              Avast 4.7.997.0 2007.07.22 no virus found
              AVG 7.5.0.476 2007.07.21 no virus found
              BitDefender 7.2 2007.07.22 no virus found
              CAT-QuickHeal 9.00 2007.07.20 no virus found
              ClamAV devel-20070416 2007.07.22 no virus found
              DrWeb 4.33 2007.07.22 no virus found
              eSafe 7.0.15.0 2007.07.19 no virus found
              eTrust-Vet 30.8.3797 2007.07.20 no virus found
              Ewido 4.0 2007.07.22 no virus found
              FileAdvisor 1 2007.07.22 no virus found
              Fortinet 2.91.0.0 2007.07.22 no virus found
              F-Prot 4.3.2.48 2007.07.20 no virus found
              F-Secure 6.70.13030.0 2007.07.21 no virus found
              Ikarus T3.1.1.8 2007.07.22 no virus found
              Kaspersky 4.0.2.24 2007.07.22 no virus found
              McAfee 5079 2007.07.20 no virus found
              Microsoft 1.2704 2007.07.22 no virus found
              NOD32v2 2411 2007.07.21 no virus found
              Norman 5.80.02 2007.07.20 no virus found
              Panda 9.0.0.4 2007.07.22 no virus found
              Sophos 4.19.0 2007.07.17 no virus found
              Sunbelt 2.2.907.0 2007.07.21 no virus found
              Symantec 10 2007.07.22 no virus found
              TheHacker 6.1.7.151 2007.07.22 no virus found
              VBA32 3.12.2.1 2007.07.21 no virus found
              VirusBuster 4.3.26:9 2007.07.21 no virus found
              Webwasher-Gateway 6.0.1 2007.07.22 no virus found
              Additional information
              File size: 2148 bytes
              MD5: 09c79f02b89a7ece4734a34f9391ae7c
              SHA1: 5f7830602135277fd113ffa8dddaebbb68d041fe

              Résultat pour la recherche C:\WINDOWS\system32\SpOrder.dll :

              Antivirus Version Last Update Result
              AhnLab-V3 2007.7.21.0 2007.07.20 no virus found
              AntiVir 7.4.0.44 2007.07.21 no virus found
              Authentium 4.93.8 2007.07.20 no virus found
              Avast 4.7.997.0 2007.07.22 no virus found
              AVG 7.5.0.476 2007.07.21 no virus found
              BitDefender 7.2 2007.07.22 no virus found
              CAT-QuickHeal 9.00 2007.07.20 no virus found
              ClamAV devel-20070416 2007.07.22 no virus found
              DrWeb 4.33 2007.07.22 no virus found
              eSafe 7.0.15.0 2007.07.19 no virus found
              eTrust-Vet 30.8.3797 2007.07.20 no virus found
              Ewido 4.0 2007.07.22 no virus found
              FileAdvisor 1 2007.07.22 no virus found
              Fortinet 2.91.0.0 2007.07.22 no virus found
              F-Prot 4.3.2.48 2007.07.20 no virus found
              F-Secure 6.70.13030.0 2007.07.21 no virus found
              Ikarus T3.1.1.8 2007.07.22 no virus found
              Kaspersky 4.0.2.24 2007.07.22 no virus found
              McAfee 5079 2007.07.20 no virus found
              Microsoft 1.2704 2007.07.22 no virus found
              NOD32v2 2411 2007.07.21 no virus found
              Norman 5.80.02 2007.07.20 no virus found
              Panda 9.0.0.4 2007.07.22 no virus found
              Sophos 4.19.0 2007.07.17 no virus found
              Sunbelt 2.2.907.0 2007.07.21 no virus found
              Symantec 10 2007.07.22 no virus found
              TheHacker 6.1.7.151 2007.07.22 no virus found
              VBA32 3.12.2.1 2007.07.21 no virus found
              VirusBuster 4.3.26:9 2007.07.21 no virus found
              Webwasher-Gateway 6.0.1 2007.07.22 no virus found
              Additional information
              File size: 8704 bytes
              MD5: b4efc7e8edc0d1e2e81d81fa092ac8c4
              SHA1: e794de4e8c32c5f230e6978403da46c8ab8ce438
              1. Lyonnais92 Contributeur sécurité
                Bonjour,

                Rends toi sur ce site :

                https://www.virustotal.com/gui/

                Clique sur parcourir et cherche ce fichier : C:\WINDOWS\system32\wpa.dbl
                Clique sur Send File.

                Un rapport va s'élaborer ligne à ligne.

                Attends la fin. Il doit comprendre la taille du fichier envoyé.

                Sauvegarde le rapport avec le bloc-note.

                Copie le dans ta réponse.

                Fais la même chose avec C:\WINDOWS\system32\SpOrder.dll
                @+
                1. IndiaDance Auteur
                  Re,

                  Voici le rapport de la recherche OAD :

                  21/07/2007 ---- 16:17:18,09

                  ----------------------------------
                  §§§§§§ [ddabccc] §§§§§§
                  ----------------------------------
                  [X] Registre

                  -------------- [ ] rapide
                  -- Fichier --- [ ] disque systeme
                  ------------- [X] complete

                  ********************
                  [Registre]
                  ********************

                  [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
                  "AppInit_DLLs"="c:\\windows\\system32\\ddabccc.dll"

                  [HKEY_USERS\S-1-5-21-2601252467-3177116611-3549611948-1007\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU\*]
                  "f"="C:\\WINDOWS\\system32\\ddabccc.dll"

                  [HKEY_USERS\S-1-5-21-2601252467-3177116611-3549611948-1007\Software\Microsoft\Windows\CurrentVersion\Explorer\ComDlg32\OpenSaveMRU\dll]
                  "a"="C:\\WINDOWS\\system32\\ddabccc.dll"

                  *******************
                  [Fichier]
                  *******************

                  c:\VundoFix Backups\ddabccc.dll.bad
                  c:\WINDOWS\system32\ddabccc.dll.vir

                  *********************
                  [Même date]
                  *********************

                  C:\VundoFix
                  C:\WINDOWS\system32\SpOrder.dll
                  C:\WINDOWS\system32\wpa.dbl
                  C:\WINDOWS\system32\ddabccc.dll.vir
                  C:\Program Files\WinAntiVirus

                  Outil Aide Diagnostic By !aur3n7 Version 1.02
                  ----------------------------------
                  §§§§§ Fin Rapport §§§§§
                  ----------------------------------
                  1. Lyonnais92 Contributeur sécurité
                    Re,

                    ==> Télécharge OAD http://sosvirus.changelog.fr/OAD.exe
                    - Enregistre le sur ton bureau

                    Double clique sur le OAD pour le lancer

                    - nom de fichier à rechercher tape ou fais un copier coller de : ddabccc
                    - Type de recherche : sélectionne l'option 6 puis valide [entree]

                    OAD va maintenant rechercher le fichier. Laisse le travailler jusqu'à ce qu'il en ai terminé.
                    Le rapport de recherche s'affichera automatiquement à dès qu'il en aura terminé.

                    - Fais un copier / coller de ce rapport dans ton prochain post.

                    Note importante : Suivant la taille des disques dur cette recherche peut prendre plusieurs minutes. Sois patient
                    @+
                    1. IndiaDance Auteur
                      Re,

                      Je viens de redémarrer comme tu m'as dit, il a marché sans problème, et mon VirusScan est bien là. J'ai fais la mise à jour, j'ai quand même fait un log Hijackthis pour être sûr. Je voudrais savoir si tu me conseilles de garder AVG Antispyware ? VundoFix et Hijackthis ?

                      Merci beaucoup pour ton aide.

                      Voici le log Hijackthis :

                      Logfile of HijackThis v1.99.1
                      Scan saved at 14:38:10, on 21/07/2007
                      Platform: Windows XP SP2 (WinNT 5.01.2600)
                      MSIE: Internet Explorer v7.00 (7.00.6000.16473)

                      Running processes:
                      C:\WINDOWS\System32\smss.exe
                      C:\WINDOWS\system32\winlogon.exe
                      C:\WINDOWS\system32\services.exe
                      C:\WINDOWS\system32\lsass.exe
                      C:\WINDOWS\system32\Ati2evxx.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\WINDOWS\System32\svchost.exe
                      C:\WINDOWS\system32\svchost.exe
                      C:\WINDOWS\system32\Ati2evxx.exe
                      C:\WINDOWS\system32\spoolsv.exe
                      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                      C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
                      C:\Program Files\Network Associates\VirusScan\Mcshield.exe
                      C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
                      C:\WINDOWS\Explorer.EXE
                      C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
                      C:\WINDOWS\System32\svchost.exe
                      C:\WINDOWS\htpatch.exe
                      C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                      C:\WINDOWS\Dit.exe
                      C:\Program Files\Medion Home CinemaXL\PowerCinema\PCMService.exe
                      C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
                      C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
                      C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe
                      C:\Program Files\Logitech\Video\LogiTray.exe
                      C:\Program Files\Adobe\Adobe Acrobat 7.0\Distillr\Acrotray.exe
                      C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
                      C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
                      C:\Program Files\QuickTime\qttask.exe
                      C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe
                      C:\WINDOWS\SOUNDMAN.EXE
                      C:\WINDOWS\DitExp.exe
                      C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
                      C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
                      C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
                      C:\WINDOWS\system32\ctfmon.exe
                      C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
                      C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
                      C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
                      C:\WINDOWS\system32\LVComS.exe
                      C:\Program Files\Fichiers communs\Nokia\MPAPI\MPAPI3s.exe
                      C:\WINDOWS\system32\wuauclt.exe
                      C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
                      C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
                      C:\Program Files\Internet Explorer\iexplore.exe
                      C:\Documents and Settings\Aurélie\Bureau\Scan.exe

                      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
                      R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.aldi.com/
                      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
                      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                      O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Adobe Acrobat 7.0\ActiveX\AcroIEHelper.dll
                      O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - C:\Program Files\Microsoft Money\System\mnyside.dll
                      O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll
                      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
                      O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
                      O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
                      O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
                      O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
                      O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
                      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
                      O4 - HKLM\..\Run: [HTpatch] C:\WINDOWS\htpatch.exe
                      O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                      O4 - HKLM\..\Run: [Dit] Dit.exe
                      O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe
                      O4 - HKLM\..\Run: [VOBRegCheck] C:\WINDOWS\System32\VOBREGCheck.exe -CheckReg
                      O4 - HKLM\..\Run: [PCMService] C:\Program Files\Medion Home CinemaXL\PowerCinema\PCMService.exe
                      O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
                      O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
                      O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe"
                      O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
                      O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
                      O4 - HKLM\..\Run: [Adobe Version Cue CS2] "C:\Program Files\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe"
                      O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Adobe Acrobat 7.0\Distillr\Acrotray.exe"
                      O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
                      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
                      O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                      O4 - HKLM\..\Run: [mmtask] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe"
                      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
                      O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
                      O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
                      O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
                      O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
                      O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
                      O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
                      O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.8472\GoogleToolbarNotifier.exe
                      O8 - Extra context menu item: Convertir en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
                      O8 - Extra context menu item: Convertir en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
                      O8 - Extra context menu item: Convertir la cible du lien en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
                      O8 - Extra context menu item: Convertir la cible du lien en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
                      O8 - Extra context menu item: Convertir la sélection en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
                      O8 - Extra context menu item: Convertir la sélection en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
                      O8 - Extra context menu item: Convertir les liens sélectionnés en fichier Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
                      O8 - Extra context menu item: Convertir les liens sélectionnés en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
                      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
                      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
                      O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
                      O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dll
                      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
                      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
                      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                      O11 - Options group: [INTERNATIONAL] International*
                      O14 - IERESET.INF: START_PAGE_URL=https://www.aldi.com/
                      O16 - DPF: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} (Zylom Games Player) - http://game10.zylom.com/activex/zylomgamesplayer.cab
                      O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://jeuxenligne.orange.fr/Gameshell/GameHost/1.0/OberonGameHost.cab
                      O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
                      O17 - HKLM\System\CCS\Services\Tcpip\..\{62B2097C-249E-4928-8087-81663965ABDC}: NameServer = 193.252.19.3,193.252.19.4
                      O18 - Protocol: bw+0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw+0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw-0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw-0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw00 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw00s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw10 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw10s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw20 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw20s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw30 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw30s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw40 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw40s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw50 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw50s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw60 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw60s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw70 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw70s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw80 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw80s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw90 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bw90s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwa0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwa0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwb0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwb0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwc0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwc0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwd0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwd0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwe0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwe0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwf0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwf0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
                      O18 - Protocol: bwg0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwg0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwh0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwh0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwi0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwi0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwj0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwj0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwk0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwk0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwl0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwl0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwm0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwm0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwn0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwn0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwo0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwo0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwp0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwp0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwq0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwq0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwr0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwr0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bws0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bws0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwt0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwt0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwu0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwu0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwv0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwv0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bww0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bww0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwx0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwx0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwy0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwy0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwz0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: bwz0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                      O18 - Protocol: offline-8876480 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                      O20 - AppInit_DLLs: c:\windows\system32\ddabccc.dll
                      O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
                      O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
                      O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
                      O23 - Service: Adobe Version Cue CS2 - Unknown owner - C:\Program Files\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe" -win32service (file missing)
                      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
                      O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
                      O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                      O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
                      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                      O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
                      O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
                      O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
                      O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
                      O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
                      1. Lyonnais92 Contributeur sécurité
                        Bonjour,

                        redémarre l'ordi et mets à jour ton avis virus "à la main".

                        vérifie qu'il est actif.

                        Si tu as un doute, remets un log Hijackthis.
                        @+
                        1. IndiaDance Auteur
                          Bonjour,

                          Ce matin, à l'ouverture de mon ordinateur, j'ai remarqué qu'il ramait pas mal, mais aussi, je ne vois plus VirusScan dans mes barre des tâches, est-ce normal ?!?

                          Après mes manip' de cette nuit, il y a t-il d'autres choses à faire ? J'ai eu quelques messages d'alerte détectés mais à l'ouverture de mon ordinateur, j'ai pas l'impression d'en avoir depuis !

                          Merci beaucoup !
                          1. IndiaDance Auteur
                            Bonsoir,

                            Je viens de faire les quelques manip' que tu m'as indiqués, à présent mon pc rame pas mal, mais le message de VirusScan a changé, j'ai eu Downloader.DBF ou un tuc se rapprochant concernant le fichier ddabccc.dll, et quelques autres Vundo encore !

                            Voici le nouveau log HijackThis :

                            Logfile of HijackThis v1.99.1
                            Scan saved at 00:54:15, on 21/07/2007
                            Platform: Windows XP SP2 (WinNT 5.01.2600)
                            MSIE: Internet Explorer v7.00 (7.00.6000.16473)

                            Running processes:
                            C:\WINDOWS\System32\smss.exe
                            C:\WINDOWS\system32\winlogon.exe
                            C:\WINDOWS\system32\services.exe
                            C:\WINDOWS\system32\lsass.exe
                            C:\WINDOWS\system32\Ati2evxx.exe
                            C:\WINDOWS\system32\svchost.exe
                            C:\WINDOWS\System32\svchost.exe
                            C:\WINDOWS\system32\svchost.exe
                            C:\WINDOWS\system32\Ati2evxx.exe
                            C:\WINDOWS\system32\spoolsv.exe
                            C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                            C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
                            C:\Program Files\Network Associates\VirusScan\Mcshield.exe
                            C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
                            C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
                            C:\WINDOWS\System32\svchost.exe
                            C:\WINDOWS\Explorer.EXE
                            C:\WINDOWS\htpatch.exe
                            C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                            C:\WINDOWS\Dit.exe
                            C:\Program Files\Medion Home CinemaXL\PowerCinema\PCMService.exe
                            C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
                            C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
                            C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe
                            C:\Program Files\Logitech\Video\LogiTray.exe
                            C:\Program Files\Adobe\Adobe Acrobat 7.0\Distillr\Acrotray.exe
                            C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
                            C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
                            C:\Program Files\QuickTime\qttask.exe
                            C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe
                            C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
                            C:\WINDOWS\SOUNDMAN.EXE
                            C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
                            C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
                            C:\WINDOWS\system32\ctfmon.exe
                            C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
                            C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
                            C:\WINDOWS\DitExp.exe
                            C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
                            C:\Program Files\Fichiers communs\Nokia\MPAPI\MPAPI3s.exe
                            C:\WINDOWS\system32\LVComS.exe
                            C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
                            C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
                            C:\Documents and Settings\Aurélie\Bureau\Scan.exe
                            C:\Documents and Settings\Aurélie\Bureau\Scan.exe
                            C:\Documents and Settings\Aurélie\Bureau\Scan.exe

                            R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
                            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                            R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
                            R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.aldi.com/
                            R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
                            R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                            O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Adobe Acrobat 7.0\ActiveX\AcroIEHelper.dll
                            O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - C:\Program Files\Microsoft Money\System\mnyside.dll
                            O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll
                            O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
                            O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                            O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
                            O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
                            O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
                            O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
                            O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
                            O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
                            O4 - HKLM\..\Run: [HTpatch] C:\WINDOWS\htpatch.exe
                            O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                            O4 - HKLM\..\Run: [Dit] Dit.exe
                            O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe
                            O4 - HKLM\..\Run: [VOBRegCheck] C:\WINDOWS\System32\VOBREGCheck.exe -CheckReg
                            O4 - HKLM\..\Run: [PCMService] C:\Program Files\Medion Home CinemaXL\PowerCinema\PCMService.exe
                            O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
                            O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
                            O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe"
                            O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
                            O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
                            O4 - HKLM\..\Run: [Adobe Version Cue CS2] "C:\Program Files\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe"
                            O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Adobe Acrobat 7.0\Distillr\Acrotray.exe"
                            O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
                            O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
                            O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                            O4 - HKLM\..\Run: [mmtask] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe"
                            O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
                            O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
                            O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
                            O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
                            O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
                            O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
                            O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
                            O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.8472\GoogleToolbarNotifier.exe
                            O8 - Extra context menu item: Convertir en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
                            O8 - Extra context menu item: Convertir en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
                            O8 - Extra context menu item: Convertir la cible du lien en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
                            O8 - Extra context menu item: Convertir la cible du lien en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
                            O8 - Extra context menu item: Convertir la sélection en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
                            O8 - Extra context menu item: Convertir la sélection en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
                            O8 - Extra context menu item: Convertir les liens sélectionnés en fichier Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
                            O8 - Extra context menu item: Convertir les liens sélectionnés en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
                            O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
                            O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
                            O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
                            O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dll
                            O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
                            O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
                            O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                            O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                            O11 - Options group: [INTERNATIONAL] International*
                            O14 - IERESET.INF: START_PAGE_URL=https://www.aldi.com/
                            O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://jeuxenligne.orange.fr/Gameshell/GameHost/1.0/OberonGameHost.cab
                            O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
                            O17 - HKLM\System\CCS\Services\Tcpip\..\{62B2097C-249E-4928-8087-81663965ABDC}: NameServer = 193.252.19.3,193.252.19.4
                            O18 - Protocol: bw+0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw+0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw-0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw-0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw00 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw00s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw10 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw10s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw20 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw20s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw30 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw30s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw40 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw40s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw50 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw50s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw60 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw60s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw70 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw70s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw80 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw80s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw90 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bw90s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwa0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwa0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwb0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwb0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwc0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwc0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwd0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwd0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwe0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwe0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwf0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwf0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
                            O18 - Protocol: bwg0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwg0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwh0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwh0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwi0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwi0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwj0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwj0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwk0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwk0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwl0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwl0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwm0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwm0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwn0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwn0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwo0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwo0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwp0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwp0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwq0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwq0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwr0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwr0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bws0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bws0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwt0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwt0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwu0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwu0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwv0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwv0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bww0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bww0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwx0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwx0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwy0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwy0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwz0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: bwz0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                            O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                            O18 - Protocol: offline-8876480 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                            O20 - AppInit_DLLs: c:\windows\system32\ddabccc.dll
                            O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
                            O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
                            O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
                            O23 - Service: Adobe Version Cue CS2 - Unknown owner - C:\Program Files\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe" -win32service (file missing)
                            O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
                            O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
                            O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                            O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
                            O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                            O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
                            O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
                            O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
                            O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
                            O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
                            1. Lyonnais92 Contributeur sécurité
                              RE,

                              Normal que ça n'ait pas fontionné. On fait comme ça :

                              Ouvre le Bloc Notes.
                              Copie le texte ci-dessous (entre les * mais sans les *) avec le texte qui se trouve dans l'espace ci-dessous (copie/colle) :

                              *****************************
                              REGEDIT4

                              [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
                              "AppInit_DLLs"=-
                              *****************************
                              Clique sur "Fichier", "Enregistrer sous".
                              Clique sur Bureau (dans la colonne de gauche)
                              Dans Nom du fichier tu écris fix.reg
                              Pour Type tu choisis "tous les fichiers" avec le menu déroulant.
                              Tu cliques sur Enregistrer.
                              Tu fermes le Bloc-notes

                              Sur ton bureau, tu double-clique sur l'icône de Fix.reg
                              Tu acceptes l'avertissement concernant la fusion
                              Le fix va travailler sans se manifester.
                              A la fin, tu vas voir un message disant que la fusion est terminée. Tu valides.

                              remets un log Hijackthis.

                              @+
                              1. IndiaDance Auteur
                                Re,

                                D'accord, on vois ça plus tard, mais en tout cas, merci pour ton aide !

                                @+
                                1. Lyonnais92 Contributeur sécurité
                                  Re,

                                  ça n'as pas fonctionné.

                                  On verra ça au jour.
                                  @+
                                  1. IndiaDance Auteur
                                    Re,

                                    J'ai fait les manip' que tu m'as indiqué et voilà ce qu'il en ressort :

                                    Résultat VundoFix :

                                    VundoFix V6.5.6

                                    Checking Java version...

                                    Java version is 1.5.0.8
                                    Old versions of java are exploitable and should be removed.

                                    Java version is 1.5.0.10

                                    Java version is 1.5.0.11

                                    Scan started at 23:23:47 19/07/2007

                                    Listing files found while scanning....

                                    Beginning removal...

                                    Performing Repairs to the registry.
                                    Done!

                                    Résultat HijackThis :

                                    Logfile of HijackThis v1.99.1
                                    Scan saved at 23:28:18, on 19/07/2007
                                    Platform: Windows XP SP2 (WinNT 5.01.2600)
                                    MSIE: Internet Explorer v7.00 (7.00.6000.16473)

                                    Running processes:
                                    C:\WINDOWS\System32\smss.exe
                                    C:\WINDOWS\system32\winlogon.exe
                                    C:\WINDOWS\system32\services.exe
                                    C:\WINDOWS\system32\lsass.exe
                                    C:\WINDOWS\system32\Ati2evxx.exe
                                    C:\WINDOWS\system32\svchost.exe
                                    C:\WINDOWS\System32\svchost.exe
                                    C:\WINDOWS\system32\svchost.exe
                                    C:\WINDOWS\system32\Ati2evxx.exe
                                    C:\WINDOWS\system32\spoolsv.exe
                                    C:\WINDOWS\Explorer.EXE
                                    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                                    C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
                                    C:\WINDOWS\htpatch.exe
                                    C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                                    C:\WINDOWS\Dit.exe
                                    C:\Program Files\Medion Home CinemaXL\PowerCinema\PCMService.exe
                                    C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
                                    C:\Program Files\Network Associates\VirusScan\Mcshield.exe
                                    C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
                                    C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe
                                    C:\Program Files\Logitech\Video\LogiTray.exe
                                    C:\Program Files\Adobe\Adobe Acrobat 7.0\Distillr\Acrotray.exe
                                    C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
                                    C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
                                    C:\Program Files\QuickTime\qttask.exe
                                    C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe
                                    C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
                                    C:\WINDOWS\SOUNDMAN.EXE
                                    C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
                                    C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
                                    C:\WINDOWS\DitExp.exe
                                    C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
                                    C:\WINDOWS\system32\ctfmon.exe
                                    C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
                                    C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
                                    C:\WINDOWS\System32\svchost.exe
                                    C:\WINDOWS\system32\LVComS.exe
                                    C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
                                    C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
                                    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
                                    C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
                                    C:\Program Files\Fichiers communs\Nokia\MPAPI\MPAPI3s.exe
                                    C:\WINDOWS\system32\wuauclt.exe
                                    C:\Documents and Settings\Aurélie\Bureau\Scan.exe

                                    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
                                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                                    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                                    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
                                    R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.aldi.com/
                                    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
                                    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                                    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Adobe Acrobat 7.0\ActiveX\AcroIEHelper.dll
                                    O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - C:\Program Files\Microsoft Money\System\mnyside.dll
                                    O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll
                                    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
                                    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                                    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
                                    O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
                                    O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
                                    O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
                                    O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
                                    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
                                    O4 - HKLM\..\Run: [HTpatch] C:\WINDOWS\htpatch.exe
                                    O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                                    O4 - HKLM\..\Run: [Dit] Dit.exe
                                    O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe
                                    O4 - HKLM\..\Run: [VOBRegCheck] C:\WINDOWS\System32\VOBREGCheck.exe -CheckReg
                                    O4 - HKLM\..\Run: [PCMService] C:\Program Files\Medion Home CinemaXL\PowerCinema\PCMService.exe
                                    O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
                                    O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
                                    O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe"
                                    O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
                                    O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
                                    O4 - HKLM\..\Run: [Adobe Version Cue CS2] "C:\Program Files\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe"
                                    O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Adobe Acrobat 7.0\Distillr\Acrotray.exe"
                                    O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
                                    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
                                    O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                                    O4 - HKLM\..\Run: [mmtask] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe"
                                    O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
                                    O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
                                    O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
                                    O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
                                    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
                                    O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
                                    O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
                                    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.8472\GoogleToolbarNotifier.exe
                                    O8 - Extra context menu item: Convertir en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
                                    O8 - Extra context menu item: Convertir en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
                                    O8 - Extra context menu item: Convertir la cible du lien en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
                                    O8 - Extra context menu item: Convertir la cible du lien en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
                                    O8 - Extra context menu item: Convertir la sélection en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
                                    O8 - Extra context menu item: Convertir la sélection en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
                                    O8 - Extra context menu item: Convertir les liens sélectionnés en fichier Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
                                    O8 - Extra context menu item: Convertir les liens sélectionnés en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
                                    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
                                    O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
                                    O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
                                    O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dll
                                    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
                                    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
                                    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                                    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                                    O11 - Options group: [INTERNATIONAL] International*
                                    O14 - IERESET.INF: START_PAGE_URL=https://www.aldi.com/
                                    O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://jeuxenligne.orange.fr/Gameshell/GameHost/1.0/OberonGameHost.cab
                                    O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
                                    O17 - HKLM\System\CCS\Services\Tcpip\..\{62B2097C-249E-4928-8087-81663965ABDC}: NameServer = 193.252.19.3,193.252.19.4
                                    O18 - Protocol: bw+0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bw+0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bw-0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bw-0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bw00 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bw00s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bw10 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bw10s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bw20 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bw20s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bw30 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bw30s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bw40 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bw40s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bw50 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bw50s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bw60 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bw60s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bw70 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bw70s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bw80 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bw80s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bw90 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bw90s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwa0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwa0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwb0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwb0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwc0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwc0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwd0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwd0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwe0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwe0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwf0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwf0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
                                    O18 - Protocol: bwg0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwg0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwh0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwh0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwi0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwi0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwj0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwj0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwk0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwk0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwl0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwl0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwm0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwm0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwn0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwn0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwo0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwo0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwp0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwp0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwq0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwq0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwr0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwr0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bws0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bws0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwt0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwt0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwu0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwu0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwv0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwv0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bww0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bww0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwx0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwx0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwy0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwy0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwz0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: bwz0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                                    O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                                    O18 - Protocol: offline-8876480 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                    O20 - AppInit_DLLs: c:\windows\system32\ddabccc.dll
                                    O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
                                    O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
                                    O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
                                    O23 - Service: Adobe Version Cue CS2 - Unknown owner - C:\Program Files\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe" -win32service (file missing)
                                    O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
                                    O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
                                    O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                                    O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
                                    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                                    O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
                                    O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
                                    O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
                                    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
                                    O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
                                    1. Lyonnais92 Contributeur sécurité
                                      Re,

                                      il résiste !

                                      Ouvre le Bloc Notes.
                                      Copie le texte ci-dessous (entre les * mais sans les *) avec le texte qui se trouve dans l'espace ci-dessous (copie/colle) :

                                      *****************************
                                      REGEDIT4

                                      [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Windows\AppInit_DLLs]
                                      "c:\windows\system32\ddabccc.dll "=-
                                      *****************************
                                      Clique sur "Fichier", "Enregistrer sous".
                                      Clique sur Bureau (dans la colonne de gauche)
                                      Dans Nom du fichier tu écris fix.reg
                                      Pour Type tu choisis "tous les fichiers" avec le menu déroulant.
                                      Tu cliques sur Enregistrer.
                                      Tu fermes le Bloc-notes

                                      Sur ton bureau, tu double-clique sur l'icône de Fix.reg
                                      Tu acceptes l'avertissement concernant la fusion
                                      Le fix va travailler sans se manifester.
                                      A la fin, tu vas voir un message disant que la fusion est terminée. Tu valides.

                                      2) recommence le point 1 du post 8 et poste le rapport.

                                      remets un log Hijackthis.
                                      @+
                                      1. IndiaDance Auteur
                                        Bonsoir,

                                        J'ai bien fait l'analyse avec toutes les propriétés que tu m'a indiqué, j'ai eu une longue liste de fichiers faible, deux en moyen, et un élevé suceptibles d'être dangereux ! Par contre, je n'ai pas eu la possibilité d'avoir un rapport ! Est-ce normal, mais vu qu'on a indiqué qu'on veut un rapport après chaque analyse mais uniquement en cas de menaces, c'est peut être normal ! En attendant, j'ai toujours des menaces d'alerte avec mon VirusScan. Je te donne les résulats de mes nouveaux Scan avec VundoFix et Hijackthis :

                                        Résultat du scan avec hijackthis :

                                        Logfile of HijackThis v1.99.1
                                        Scan saved at 22:03:35, on 19/07/2007
                                        Platform: Windows XP SP2 (WinNT 5.01.2600)
                                        MSIE: Internet Explorer v7.00 (7.00.6000.16473)

                                        Running processes:
                                        C:\WINDOWS\System32\smss.exe
                                        C:\WINDOWS\system32\winlogon.exe
                                        C:\WINDOWS\system32\services.exe
                                        C:\WINDOWS\system32\lsass.exe
                                        C:\WINDOWS\system32\Ati2evxx.exe
                                        C:\WINDOWS\system32\svchost.exe
                                        C:\WINDOWS\System32\svchost.exe
                                        C:\WINDOWS\system32\svchost.exe
                                        C:\WINDOWS\system32\Ati2evxx.exe
                                        C:\WINDOWS\system32\spoolsv.exe
                                        C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                                        C:\WINDOWS\Explorer.EXE
                                        C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
                                        C:\WINDOWS\htpatch.exe
                                        C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                                        C:\WINDOWS\Dit.exe
                                        C:\Program Files\Medion Home CinemaXL\PowerCinema\PCMService.exe
                                        C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
                                        C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
                                        C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe
                                        C:\Program Files\Logitech\Video\LogiTray.exe
                                        C:\Program Files\Network Associates\VirusScan\Mcshield.exe
                                        C:\Program Files\Adobe\Adobe Acrobat 7.0\Distillr\Acrotray.exe
                                        C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
                                        C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
                                        C:\Program Files\QuickTime\qttask.exe
                                        C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe
                                        C:\WINDOWS\SOUNDMAN.EXE
                                        C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
                                        C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
                                        C:\WINDOWS\system32\ctfmon.exe
                                        C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
                                        C:\Program Files\ATI Technologies\ATI.ACE\CLI.EXE
                                        C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
                                        C:\WINDOWS\DitExp.exe
                                        C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
                                        C:\WINDOWS\System32\svchost.exe
                                        C:\WINDOWS\system32\LVComS.exe
                                        C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe
                                        C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
                                        C:\Program Files\Fichiers communs\Nokia\MPAPI\MPAPI3s.exe
                                        C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
                                        C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
                                        C:\Program Files\Internet Explorer\iexplore.exe
                                        C:\Program Files\WinRAR\WinRAR.exe
                                        C:\DOCUME~1\AURLIE~1\LOCALS~1\Temp\Rar$EX00.203\HijackThis.exe

                                        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
                                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
                                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                                        R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                                        R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
                                        R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = https://www.aldi.com/
                                        R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
                                        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                                        O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Adobe Acrobat 7.0\ActiveX\AcroIEHelper.dll
                                        O2 - BHO: (no name) - {243B17DE-77C7-46BF-B94B-0B5F309A0E64} - C:\Program Files\Microsoft Money\System\mnyside.dll
                                        O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll
                                        O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
                                        O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
                                        O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
                                        O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
                                        O2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file)
                                        O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll
                                        O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
                                        O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
                                        O4 - HKLM\..\Run: [HTpatch] C:\WINDOWS\htpatch.exe
                                        O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
                                        O4 - HKLM\..\Run: [Dit] Dit.exe
                                        O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\System32\\NeroCheck.exe
                                        O4 - HKLM\..\Run: [VOBRegCheck] C:\WINDOWS\System32\VOBREGCheck.exe -CheckReg
                                        O4 - HKLM\..\Run: [PCMService] C:\Program Files\Medion Home CinemaXL\PowerCinema\PCMService.exe
                                        O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
                                        O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
                                        O4 - HKLM\..\Run: [Network Associates Error Reporting Service] "C:\Program Files\Fichiers communs\Network Associates\TalkBack\TBMon.exe"
                                        O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
                                        O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
                                        O4 - HKLM\..\Run: [Adobe Version Cue CS2] "C:\Program Files\Adobe\Adobe Version Cue CS2\ControlPanel\VersionCueCS2Tray.exe"
                                        O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Adobe Acrobat 7.0\Distillr\Acrotray.exe"
                                        O4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\WkUFind.exe
                                        O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
                                        O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
                                        O4 - HKLM\..\Run: [mmtask] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe"
                                        O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
                                        O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\CLIStart.exe"
                                        O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
                                        O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
                                        O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
                                        O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
                                        O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
                                        O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.908.8472\GoogleToolbarNotifier.exe
                                        O8 - Extra context menu item: Convertir en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
                                        O8 - Extra context menu item: Convertir en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
                                        O8 - Extra context menu item: Convertir la cible du lien en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
                                        O8 - Extra context menu item: Convertir la cible du lien en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
                                        O8 - Extra context menu item: Convertir la sélection en Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
                                        O8 - Extra context menu item: Convertir la sélection en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
                                        O8 - Extra context menu item: Convertir les liens sélectionnés en fichier Adobe PDF - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
                                        O8 - Extra context menu item: Convertir les liens sélectionnés en un fichier PDF existant - res://C:\Program Files\Adobe\Adobe Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
                                        O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\npjpi160_02.dll
                                        O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\npjpi160_02.dll
                                        O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\System32\Shdocvw.dll
                                        O9 - Extra button: MoneySide - {E023F504-0C5A-4750-A1E7-A9046DEA8A21} - C:\Program Files\Microsoft Money\System\mnyside.dll
                                        O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
                                        O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
                                        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                                        O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
                                        O11 - Options group: [INTERNATIONAL] International*
                                        O14 - IERESET.INF: START_PAGE_URL=https://www.aldi.com/
                                        O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://jeuxenligne.orange.fr/Gameshell/GameHost/1.0/OberonGameHost.cab
                                        O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
                                        O17 - HKLM\System\CCS\Services\Tcpip\..\{62B2097C-249E-4928-8087-81663965ABDC}: NameServer = 193.252.19.3,193.252.19.4
                                        O18 - Protocol: bw+0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bw+0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bw-0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bw-0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bw00 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bw00s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bw10 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bw10s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bw20 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bw20s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bw30 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bw30s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bw40 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bw40s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bw50 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bw50s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bw60 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bw60s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bw70 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bw70s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bw80 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bw80s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bw90 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bw90s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwa0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwa0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwb0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwb0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwc0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwc0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwd0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwd0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwe0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwe0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwf0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwf0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
                                        O18 - Protocol: bwg0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwg0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwh0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwh0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwi0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwi0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwj0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwj0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwk0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwk0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwl0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwl0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwm0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwm0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwn0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwn0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwo0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwo0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwp0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwp0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwq0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwq0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwr0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwr0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bws0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bws0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwt0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwt0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwu0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwu0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwv0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwv0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bww0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bww0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwx0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwx0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwy0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwy0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwz0 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: bwz0s - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                                        O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                                        O18 - Protocol: offline-8876480 - {0BBD1CF1-CA17-45E8-923C-A167769A5701} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                        O20 - AppInit_DLLs: c:\windows\system32\ddabccc.dll
                                        O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
                                        O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
                                        O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
                                        O23 - Service: Adobe Version Cue CS2 - Unknown owner - C:\Program Files\Adobe\Adobe Version Cue CS2\bin\VersionCueCS2.exe" -win32service (file missing)
                                        O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
                                        O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
                                        O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
                                        O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
                                        O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                                        O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
                                        O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
                                        O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
                                        O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
                                        O23 - Service: X10 Device Network Service (x10nets) - X10 - C:\PROGRA~1\COMMON~1\X10\Common\x10nets.exe

                                        Résulat du scan avec VundoFix :

                                        VundoFix V6.5.6

                                        Checking Java version...

                                        Java version is 1.5.0.8
                                        Old versions of java are exploitable and should be removed.

                                        Java version is 1.5.0.10

                                        Java version is 1.5.0.11

                                        Scan started at 23:47:43 18/07/2007

                                        Listing files found while scanning....

                                        C:\windows\system32\ddabccc.dll

                                        Beginning removal...

                                        Attempting to delete C:\windows\system32\ddabccc.dll
                                        C:\windows\system32\ddabccc.dll Could not be deleted.

                                        Performing Repairs to the registry.
                                        Done!

                                        Beginning removal...

                                        VundoFix V6.5.6

                                        Checking Java version...

                                        Java version is 1.5.0.8
                                        Old versions of java are exploitable and should be removed.

                                        Java version is 1.5.0.10

                                        Java version is 1.5.0.11

                                        Scan started at 23:54:53 18/07/2007

                                        Listing files found while scanning....

                                        C:\windows\system32\ddabccc.dll

                                        Beginning removal...

                                        Attempting to delete C:\windows\system32\ddabccc.dll
                                        C:\windows\system32\ddabccc.dll Could not be deleted.

                                        Performing Repairs to the registry.
                                        Done!

                                        Beginning removal...

                                        Attempting to delete C:\windows\system32\ddabccc.dll
                                        C:\windows\system32\ddabccc.dll Could not be deleted.

                                        Performing Repairs to the registry.
                                        Done!

                                        VundoFix V6.5.6

                                        Checking Java version...

                                        Java version is 1.5.0.8
                                        Old versions of java are exploitable and should be removed.

                                        Java version is 1.5.0.10

                                        Java version is 1.5.0.11

                                        Scan started at 22:04:26 19/07/2007

                                        Listing files found while scanning....

                                        C:\windows\system32\ddabccc.dll

                                        Beginning removal...

                                        Attempting to delete C:\windows\system32\ddabccc.dll
                                        C:\windows\system32\ddabccc.dll Could not be deleted.

                                        Performing Repairs to the registry.
                                        Done!
                                        1. Lyonnais92 Contributeur sécurité
                                          Re,

                                          1) Double-clique VundoFix.exe afin de le lancer.

                                          Fais un clic droit dans la fenêtre blanche et clique "Add more files?"

                                          Dans la nouvelle fenêtre qui apparait, Copie/colle le chemin du fichier suivant dans la première case (au haut):

                                          C:\WINDOWS\system32ddabccc.dll

                                          Clique sur le bouton "Add File(s)"

                                          Clique sur le bouton "Close Window".

                                          Clique à nouveau sur "Remove Vundo"

                                          Une invite te demandera si tu veux supprimer les fichiers, clique YES

                                          Après avoir cliqué "Yes", le Bureau disparaîtra un moment lors de la suppression des fichiers.

                                          Tu verras une invite qui t'annonce que ton PC va s'éteindre ("shutdown"); clique OK

                                          2) Tu télécharges AVG anti-spyware (gratuit même après la période d'essai) ici :

                                          http://www.grisoft.com/doc/downloads-results/lng/fr/tpl/tpl01?prd=triasw

                                          Tu enregistres le fichier dans un dossier.

                                          A la fin du téléchargement, tu ouvres le dossier et tu doubles click sur avgas-setup-7.5.0.47.exe Tu suis les instructions.

                                          Si on te demande de redémarrer ton ordinateur, tu le fais.

                                          Pour lancer AVG anti spyware tu doubles click sur l'icone qui s'est créé sur le bureau.

                                          La première fois que tu l'utilises, tu configures le logiciel.
                                          Sur la page "état", tu choisis inactif pour le bouclier résident.

                                          Sur la page "mise à jour", tu coches les cases sur les mises à jour automatiques et tu fais une mise à jour manuelle (commencer la mise à jour). Tu redémarres l'ordinateur si nécessaire.
                                          Sur la page "analyse", tu choisis d'abord l'onglet "paramètres". Tu coches "générer un rapport après chaque analyse" et "uniquement en cas de menaces". Tu choisis aussi l'option "quarantaine" pour "comment réagir", 'définir l'action par défaut ...'
                                          Tu choisis l'onglet analyser, nouvelle analyse, analyse complète du système.
                                          Aa fin de l'analyse, tu cliques sur "action", "appliquer toutes les actions" puis "enregistrer le rapport" puis "enregistrer le rapport sous". Tu suis les instructions dans la fenêtre qui s'ouvre.
                                          Ensuite, tu ouvres le rapport avec le bloc-notes pour le copier/coller avec ta réponse.

                                          3) remets un log Hijackthis ainsi que le rapport de Vundofix.

                                          @+
                                          • 1
                                          • 2

                                          Discussions similaires

                                          Comment créer une alerte leboncoin
                                          Marc L.

                                          19 réponses
                                          se debarasser de fausses alerte virus
                                          Evka

                                          1 réponse
                                          Créer une alerte sous Excel
                                          Sandy

                                          17 réponses
                                          COMMENT CREER UNE ALERTE SUR EXCEL?
                                          DELPHINE

                                          10 réponses
                                          Alertes de traceur inconnu
                                          mimi7373_1951

                                          4 réponses