Proposition d'anti-spyware?

Résolu
bonjour

est-ce que quelqu'un peut me doner un lien pour télécharger Ad-Aware mais la version plus ancienne que celle de 2007 parce qu'il parait qu'elle est moins bien.

ou sinon un bon logiciel (gratuit s'il vous plait) contre les spyware parce que mon PC est infecté mais AVG anti-spyware ne les détecte pas.

Merci d'avance
Configuration: Windows XP
Internet Explorer 7.0

43 réponses

Résumé de la discussion

La discussion porte sur l'obtention d'une version plus ancienne d'Ad-Aware ou sur le choix d'un logiciel anti-spyware gratuit pour un PC Windows XP infecté, AVG ne détectant pas les menaces. Des solutions proposées privilégient Ad-Aware 2007 comme option, avec Spybot Search and Destroy comme alternative, et l'usage de HijackThis pour analyser le système et générer des rapports détaillés. D'autres réponses évoquent des outils comme Clean (téléchargement et dézippage, puis option 1) et l'intérêt d'un pare-feu renforcé, tout en recommandant de partager le rapport HijackThis pour diagnostic. En cas d'infection avérée, plusieurs participants recommandent de combiner plusieurs outils (pare-feu, anti-spyware et utilitaires comme HijackThis) et d'analyser les rapports pour cibler précisément les éléments malveillants.

Bobot (l’IA à votre service)
  1. oui j'ai gardé Avast. bon je te remercie c quand même bcp mieux qu'au début ^^.
    mon PC rame un peu en naviguant sur internet mais bon je suis en Wi-fi ça doit être normal!

    merci encore MoK' s@!
    1. ok

      tu as gardé avast alors comme anti virus?

      les résidents que je t´ai proposés vont te protégé tout en fesant oublié, alors ?!

      moi j´ai :

      avast
      kerio
      spywareblaster
      spywaregard
      et le tea timer de spybot

      faut ce qu´il faut non?

      @+
      1. ça y est la désinstallation d'AVG est faite, j'ai PC tools comme Firewall et j'ai installé aussi spybot, spyware blaster, et spyware guard. tout ça en + de spyware terminator que j'avais avant.

        est-ce que j'ai vraiment besoin de tout ça??
        1. ok

          fais ca...

          tu peux quand meme installé les residents que je t´ai prposé plus haut...

          dis moi quoi

          @+
          1. ok bon jai vu que PC tools était compatible, je vais essayer ce soir et je désinstalle AVG
            1. c´est pas tres compliqué quand tu as compris le system...

              il y a deja des regles préetablies, tu aurras pas nécessairement besoin d´en etablir...

              là tu as toute une liste :

              http://www.clubic.com/logiciel-windows-237-0-0-firewall.html

              ps :zone alarm n´est pas compatible avec avast...

              @+
              1. ben écoute oui enfin il me semble, je suis peut etre allée trop vite mais ce qui m'a paru compliqué c'éait tout ce qui était connexions entrantes/sortantes, autoriser ou non etc...
                je peux réessayer à moins que tu n'en connaisse un autre peut être plus simple d'utilisation?
                1. le truc c'est que j'avais installé kerio ce week end mais il ma posé bcp de pb et la paramétrage et la configuration m'ont paru très compliqué!!
                  1. Ayeuh,

                    le truc avec avg c´est qu´il est payant apres les 30 jours d´utilisation, comme tu sais > donc les fonctions tel que l´anti virus et le par feu vont expirer, il ne te restera plus que le scanner, je ne crois pas que le simple fait de le réinstaller le fasse durer; et n´utilise surtout pas de crack pour ce genre de truc!!! ( j´en ai fais les frais avec bitdefender...)

                    pour l´antivirus de avg :

                    a ta place je garderais avast...

                    pour le par feu de avg :

                    prends celui la a la place :

                    kerio :

                    https://kerio.probb.fr/t1-tuto-pour-kerio-4-2

                    pour la protection en temps réel de avg :

                    je peux te proposer quelques logiciels qui font la meme chose : (gratuit)

                    spyware blaster :

                    http://www.brightfort.com/spywareblaster.html

                    c´est un resident, il suffit de le mettre a jour de temps en temps car la version gratuite ne le fait pas toute seul , une fois installé et mis a jour tu mets toutes les protections sur "enable"

                    telecharge aussi cet anti spyware il a aussi un resident le teatimer :

                    spybot

                    spybot

                    puis celui la aussi : spyware gard :

                    http://www.tout-savoir.net/logitheque/logiciels/telechargement/cat/programme/code/207/spywareguard/

                    tous les trois sont complementaires, alors si tu veux; tu peux tous les installer...

                    @+
                    1. ok je désinstalle avast ce soir.
                      sinon je voualis savoir aussi, une fois que la période d'essai d'AVG sera terminée, comment je fait pour le renouveller sans acheter? Est-ce que je peux désinstaller, puis réinstaller à partir de télécharger.com ou alors il me faut un crack?
                      1. oui ça m'a l'air mieux mais je te dirai ça plus tard parce que là il y a le scan de AVG + la mise à jour de windows en même temps donc la rapidité du PC n'est pas top mais je te tiens au courant quand tout ça est terminé.

                        A part ça, l'installation du pare feu a éliminé toute les fenêtres publicitaires intempestives que j'avait avant. Pour les spyware ça à l'air d'être mieux, je n'ai plus de fenêtre qui s'ouvraient comme avant me disant que le PC était infecté. Est-ce que je peux supprimer Avast anti virus maintenant? étant doné que AVG le fait aussi ou alors c mieux de laisser les deux?

                        voilà donc merci beaucoup pour ton aide, je te tiens donc au courant dans pas longtemps

                        ;-)
                        1. re,

                          bon nous voila debarrassé d´une belle m...e

                          coche ceci avec hijack this :

                          O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
                          O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\Logitech\LComMgr\Communications_Helper.exe"
                          O4 - HKLM\..\Run: [LVCOMSX] "C:\Program Files\Fichiers communs\Logitech\LComMgr\LVComSX.exe"

                          quitte tes application et navigateur et fix les lignes ci dessus

                          comment va ton pc?

                          @+
                          1. Puis le rapport Hijackthis:

                            Logfile of HijackThis v1.99.1
                            Scan saved at 01:05:51, on 05/08/2007
                            Platform: Windows XP SP2 (WinNT 5.01.2600)
                            MSIE: Internet Explorer v7.00 (7.00.6000.16473)

                            Running processes:
                            C:\WINDOWS\System32\smss.exe
                            C:\WINDOWS\system32\winlogon.exe
                            C:\WINDOWS\system32\services.exe
                            C:\WINDOWS\system32\lsass.exe
                            C:\WINDOWS\system32\Ati2evxx.exe
                            C:\WINDOWS\system32\svchost.exe
                            C:\WINDOWS\System32\svchost.exe
                            C:\WINDOWS\system32\svchost.exe
                            C:\Program Files\Avast4\aswUpdSv.exe
                            C:\WINDOWS\system32\Ati2evxx.exe
                            C:\Program Files\Avast4\ashServ.exe
                            C:\WINDOWS\Explorer.EXE
                            C:\windows\system\hpsysdrv.exe
                            C:\HP\KBD\KBD.EXE
                            C:\WINDOWS\system32\spoolsv.exe
                            c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
                            C:\Program Files\D-Link\AirPlus G\AirGCFG.exe
                            C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
                            C:\PROGRA~1\Avast4\ashDisp.exe
                            C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
                            C:\Program Files\Fichiers communs\Logitech\LComMgr\Communications_Helper.exe
                            C:\Program Files\Fichiers communs\Logitech\LComMgr\LVComSX.exe
                            C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
                            C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
                            C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
                            C:\WINDOWS\system32\ctfmon.exe
                            C:\Program Files\MSN Messenger\msnmsgr.exe
                            C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
                            C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
                            C:\WINDOWS\System32\drivers\CDAC11BA.EXE
                            C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
                            C:\Program Files\Spyware Terminator\sp_rsser.exe
                            C:\WINDOWS\System32\svchost.exe
                            C:\PROGRA~1\Grisoft\AVG7\avgfwsrv.exe
                            C:\Program Files\Avast4\ashMaiSv.exe
                            C:\Program Files\Avast4\ashWebSv.exe
                            C:\Program Files\MSN Messenger\usnsvc.exe
                            C:\Program Files\Logitech\QuickCam10\QuickCam10.exe
                            C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
                            C:\Program Files\Internet Explorer\iexplore.exe
                            G:\PROGRAMME\Hijackthis Version Française\hijackthis vf.exe

                            R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-qfr9.hpwis.com/
                            R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-qfr9.hpwis.com/
                            R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
                            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.01net.com/telecharger/
                            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-qfr9.hpwis.com/
                            R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                            R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.01net.com/telecharger/
                            R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                            O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
                            O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
                            O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
                            O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
                            O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
                            O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
                            O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
                            O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
                            O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
                            O4 - HKLM\..\Run: [D-Link AirPlus G] C:\Program Files\D-Link\AirPlus G\AirGCFG.exe
                            O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
                            O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\Avast4\ashDisp.exe
                            O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
                            O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
                            O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\Logitech\LComMgr\Communications_Helper.exe"
                            O4 - HKLM\..\Run: [LVCOMSX] "C:\Program Files\Fichiers communs\Logitech\LComMgr\LVComSX.exe"
                            O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
                            O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
                            O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
                            O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                            O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
                            O8 - Extra context menu item: Add to AMV Converter... - G:\PROGRAMME\MP3NEO\AMVConverter\grab.html
                            O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
                            O8 - Extra context menu item: MediaManager tool grab multimedia file - G:\PROGRAMME\MP3NEO\MediaManager\grab.html
                            O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
                            O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
                            O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
                            O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
                            O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
                            O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
                            O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
                            O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
                            O11 - Options group: [INTERNATIONAL] International*
                            O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
                            O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.mail.live.com/mail/w1/resources/MSNPUpld.cab
                            O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
                            O16 - DPF: {9122D757-5A4F-4768-82C5-B4171D8556A7} (PhotoPickConvert Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/PhtPkMSN.cab
                            O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
                            O16 - DPF: {CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA} (Environnement d'exécution Java 1.4.1_02) -
                            O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                            O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                            O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
                            O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
                            O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
                            O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Alpha Networks Inc. - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
                            O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Avast4\aswUpdSv.exe
                            O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
                            O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
                            O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Avast4\ashServ.exe
                            O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Avast4\ashMaiSv.exe" /service (file missing)
                            O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Avast4\ashWebSv.exe" /service (file missing)
                            O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
                            O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
                            O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
                            O23 - Service: AVG Firewall (AVGFwSrv) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgfwsrv.exe
                            O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
                            O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                            O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
                            O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\Logitech\SrvLnch\SrvLnch.exe
                            O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
                            O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
                            1. voici le rapport ot move it:
                              G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll unregistered successfully.
                              G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll moved successfully.
                              G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Users\Propriétaire\Misc\Temp moved successfully.
                              G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Users\Propriétaire\Misc\Backup moved successfully.
                              G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Users\Propriétaire\Misc moved successfully.
                              G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Users\Propriétaire\Data\GenFlash\1 moved successfully.
                              G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Users\Propriétaire\Data\GenFlash moved successfully.
                              G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Users\Propriétaire\Data\ddb moved successfully.
                              G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Users\Propriétaire\Data\b1e moved successfully.
                              G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Users\Propriétaire\Data\a58\a9a3f17 moved successfully.
                              G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Users\Propriétaire\Data\a58\a9a3ef0 moved successfully.
                              G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Users\Propriétaire\Data\a58\a9a3e54 moved successfully.
                              G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Users\Propriétaire\Data\a58\a9a3e53 moved successfully.
                              G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Users\Propriétaire\Data\a58\a9a3e36 moved successfully.
                              G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Users\Propriétaire\Data\a58 moved successfully.
                              G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Users\Propriétaire\Data\4c3a\Upstream moved successfully.
                              G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Users\Propriétaire\Data\4c3a moved successfully.
                              G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Users\Propriétaire\Data moved successfully.
                              G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Users\Propriétaire moved successfully.
                              G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Users moved successfully.
                              G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\Scripts\RuleExec moved successfully.
                              G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\Scripts\Enable_OAS moved successfully.
                              G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\Scripts moved successfully.
                              G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\8876480\Propriétaire moved successfully.
                              G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\8876480 moved successfully.
                              G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program moved successfully.
                              G:\PROGRAMME\Logitech\Desktop Messenger\8876480\InitData\Data\GenFlash\1 moved successfully.
                              G:\PROGRAMME\Logitech\Desktop Messenger\8876480\InitData\Data\GenFlash moved successfully.
                              G:\PROGRAMME\Logitech\Desktop Messenger\8876480\InitData\Data moved successfully.
                              G:\PROGRAMME\Logitech\Desktop Messenger\8876480\InitData moved successfully.
                              G:\PROGRAMME\Logitech\Desktop Messenger\8876480 moved successfully.
                              G:\PROGRAMME\Logitech\Desktop Messenger moved successfully.

                              Created on 08/05/2007 01:03:48
                              1. dans ce cas la supprime comme ceci :

                                avec hijack this coche ceci :

                                O18 - Protocol: bw+0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw+0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw-0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw-0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw00 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw00s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw10 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw10s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw20 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw20s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw30 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw30s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw40 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw40s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw50 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw50s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw60 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw60s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw70 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw70s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw80 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw80s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw90 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bw90s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwa0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwa0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwb0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwb0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwc0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwc0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwd0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwd0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwe0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwe0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwf0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwf0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
                                O18 - Protocol: bwg0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwg0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwh0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwh0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwi0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwi0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwj0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwj0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwk0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwk0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwl0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwl0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwm0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwm0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwn0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwn0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwo0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwo0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwp0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwp0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwq0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwq0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwr0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwr0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bws0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bws0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwt0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwt0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwu0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwu0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwv0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwv0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bww0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bww0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwx0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwx0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwy0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwy0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwz0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                O18 - Protocol: bwz0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop

                                quitte ton navigateur et tes applications et fix les lignes ci dessus

                                et

                                télécharge OTMoveIt http://download.bleepingcomputer.com/oldtimer/OTMoveIt.exe (de Old_Timer) sur ton Bureau.
                                double-clique sur OTMoveIt.exe pour le lancer.
                                copie la liste qui se trouve en citation ci-dessous,
                                et colle-la dans le cadre de gauche de OTMoveIt :Paste List of Files/Folders to be moved.

                                Citation :

                                G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                G:\PROGRAMME\Logitech\Desktop Messenger

                                clique sur MoveIt! pour lancer la suppression.
                                le résultat apparaitra dans le cadre "Results".
                                clique sur Exit pour fermer.
                                poste le rapport situé dans C:\_OTMoveIt\MovedFiles.

                                il te sera peut-être demander de redémarrer le pc pour achever la suppression.si c'est le cas accepte par Yes.
                                http://img137.imageshack.us/img137/3558/refaitjk8.th.jpg

                                post le rapport de ot move it et un nouveau hijack this
                                +
                                1. tu tu sert vraiment de :

                                  G:\PROGRAMME\Logitech\Desktop Messenger???

                                  1. ben non enfin je sais même pas à quoi il sert....

                                    je supprime?
                                2. Logfile of HijackThis v1.99.1
                                  Scan saved at 18:36:17, on 04/08/2007
                                  Platform: Windows XP SP2 (WinNT 5.01.2600)
                                  MSIE: Internet Explorer v7.00 (7.00.6000.16473)

                                  Running processes:
                                  C:\WINDOWS\System32\smss.exe
                                  C:\WINDOWS\system32\winlogon.exe
                                  C:\WINDOWS\system32\services.exe
                                  C:\WINDOWS\system32\lsass.exe
                                  C:\WINDOWS\system32\Ati2evxx.exe
                                  C:\WINDOWS\system32\svchost.exe
                                  C:\WINDOWS\System32\svchost.exe
                                  C:\WINDOWS\system32\svchost.exe
                                  C:\Program Files\Avast4\aswUpdSv.exe
                                  C:\WINDOWS\system32\Ati2evxx.exe
                                  C:\Program Files\Avast4\ashServ.exe
                                  C:\WINDOWS\Explorer.EXE
                                  C:\windows\system\hpsysdrv.exe
                                  C:\HP\KBD\KBD.EXE
                                  C:\WINDOWS\system32\spoolsv.exe
                                  c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
                                  C:\Program Files\D-Link\AirPlus G\AirGCFG.exe
                                  C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
                                  C:\PROGRA~1\Avast4\ashDisp.exe
                                  C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
                                  C:\Program Files\Fichiers communs\Logitech\LComMgr\Communications_Helper.exe
                                  C:\Program Files\Fichiers communs\Logitech\LComMgr\LVComSX.exe
                                  C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
                                  C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
                                  C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
                                  C:\WINDOWS\system32\ctfmon.exe
                                  C:\Program Files\MSN Messenger\msnmsgr.exe
                                  C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
                                  C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
                                  C:\WINDOWS\System32\drivers\CDAC11BA.EXE
                                  C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
                                  C:\Program Files\Spyware Terminator\sp_rsser.exe
                                  C:\WINDOWS\System32\svchost.exe
                                  C:\PROGRA~1\Grisoft\AVG7\avgfwsrv.exe
                                  C:\Program Files\Avast4\ashMaiSv.exe
                                  C:\Program Files\Avast4\ashWebSv.exe
                                  C:\Program Files\MSN Messenger\usnsvc.exe
                                  C:\Program Files\Logitech\QuickCam10\QuickCam10.exe
                                  C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
                                  C:\Program Files\Internet Explorer\iexplore.exe
                                  G:\PROGRAMME\Hijackthis Version Française\hijackthis vf.exe

                                  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://srch-qfr9.hpwis.com/
                                  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://srch-qfr9.hpwis.com/
                                  R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
                                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.01net.com/telecharger/
                                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://srch-qfr9.hpwis.com/
                                  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
                                  R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.01net.com/telecharger/
                                  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                                  O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
                                  O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
                                  O4 - HKLM\..\Run: [hpsysdrv] c:\windows\system\hpsysdrv.exe
                                  O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\System32\hkcmd.exe
                                  O4 - HKLM\..\Run: [KBD] C:\HP\KBD\KBD.EXE
                                  O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
                                  O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
                                  O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet /keeploaded /nodetect
                                  O4 - HKLM\..\Run: [PS2] C:\WINDOWS\system32\ps2.exe
                                  O4 - HKLM\..\Run: [D-Link AirPlus G] C:\Program Files\D-Link\AirPlus G\AirGCFG.exe
                                  O4 - HKLM\..\Run: [ANIWZCS2Service] C:\Program Files\ANI\ANIWZCS2 Service\WZCSLDR2.exe
                                  O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\Avast4\ashDisp.exe
                                  O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
                                  O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
                                  O4 - HKLM\..\Run: [LogitechCommunicationsManager] "C:\Program Files\Fichiers communs\Logitech\LComMgr\Communications_Helper.exe"
                                  O4 - HKLM\..\Run: [LVCOMSX] "C:\Program Files\Fichiers communs\Logitech\LComMgr\LVComSX.exe"
                                  O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
                                  O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
                                  O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
                                  O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
                                  O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
                                  O8 - Extra context menu item: Add to AMV Converter... - G:\PROGRAMME\MP3NEO\AMVConverter\grab.html
                                  O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
                                  O8 - Extra context menu item: MediaManager tool grab multimedia file - G:\PROGRAMME\MP3NEO\MediaManager\grab.html
                                  O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\npjpi160_02.dll
                                  O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\npjpi160_02.dll
                                  O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
                                  O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
                                  O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
                                  O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
                                  O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
                                  O10 - Unknown file in Winsock LSP: c:\windows\system32\avgfwafu.dll
                                  O11 - Options group: [INTERNATIONAL] International*
                                  O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
                                  O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.mail.live.com/mail/w1/resources/MSNPUpld.cab
                                  O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
                                  O16 - DPF: {9122D757-5A4F-4768-82C5-B4171D8556A7} (PhotoPickConvert Class) - http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/PhtPkMSN.cab
                                  O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
                                  O16 - DPF: {CAFEEFAC-0014-0001-0002-ABCDEFFEDCBA} (Environnement d'exécution Java 1.4.1_02) -
                                  O18 - Protocol: bw+0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bw+0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bw-0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bw-0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bw00 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bw00s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bw10 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bw10s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bw20 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bw20s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bw30 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bw30s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bw40 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bw40s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bw50 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bw50s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bw60 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bw60s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bw70 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bw70s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bw80 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bw80s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bw90 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bw90s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwa0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwa0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwb0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwb0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwc0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwc0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwd0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwd0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwe0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwe0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwf0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwf0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
                                  O18 - Protocol: bwg0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwg0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwh0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwh0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwi0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwi0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwj0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwj0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwk0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwk0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwl0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwl0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwm0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwm0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwn0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwn0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwo0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwo0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwp0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwp0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwq0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwq0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwr0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwr0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bws0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bws0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwt0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwt0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwu0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwu0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwv0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwv0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bww0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bww0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwx0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwx0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwy0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwy0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwz0 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: bwz0s - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                                  O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
                                  O18 - Protocol: offline-8876480 - {0222BCE6-F056-489A-9543-704B2895BF09} - G:\PROGRAMME\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
                                  O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxsrvc.dll
                                  O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
                                  O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
                                  O23 - Service: ANIWZCSd Service (ANIWZCSdService) - Alpha Networks Inc. - C:\Program Files\ANI\ANIWZCS2 Service\ANIWZCSdS.exe
                                  O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Avast4\aswUpdSv.exe
                                  O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
                                  O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
                                  O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Avast4\ashServ.exe
                                  O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Avast4\ashMaiSv.exe" /service (file missing)
                                  O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Avast4\ashWebSv.exe" /service (file missing)
                                  O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
                                  O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
                                  O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
                                  O23 - Service: AVG Firewall (AVGFwSrv) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgfwsrv.exe
                                  O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
                                  O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
                                  O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
                                  O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\Logitech\SrvLnch\SrvLnch.exe
                                  O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
                                  O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
                                  • 1
                                  • 2
                                  • 3