Win 32:agent lwp ?????

Bonjour a tous
voila y a quelque jour ,jai choper un virus appeler win 32 :agent lwp sur msn et maintenant j envoye un dossier (du virus surement) a tout mes contact j ai fai un scan avec avast et il le reconai mai ne le mes pas en quarantaine ; jai scanner avec avg et il et toujour la?etant novice dans l informatique je voudrai bien un petit coup de main svp merci d avance pour vos reponse et a bientot a+
ty rey
Configuration: Windows XP
Internet Explorer 6.0

10 réponses

  1. pour moi ton rapport et sans soucis
    juste toute ces lignes 018
    mais je ne pense pas quelle soit néfaste
    si tout marche comme ça il serait sage de laisser
    attend un peu et fait moi signe pour me dire si tout
    est normal
    @+
    ;-)
    1. apparament pas ca roule pour l instant je te remercie ep
      o cas ou je repost mai ca a l air d allez
      et mon rapport a ton avis il et bon,,
      car je ne sais pas le decripter
      merci a toi et a +
      amicalement tyrey
      1. re ep
        ex je relance o cas ou tu n aurai pas vu mon rapport HijackThis
        je te remercie
        tyrey
        1. re
          donc comme prevu voila le dernier rapport comme tu me la demander
          j espere que j ai bien fai ce ke tu ma demander
          et encore un grand merci
          tyrey
          Logfile of HijackThis v1.99.1
          Scan saved at 15:58:58, on 13/10/2007
          Platform: Windows XP SP2 (WinNT 5.01.2600)
          MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

          Running processes:
          C:\WINDOWS\System32\smss.exe
          C:\WINDOWS\system32\winlogon.exe
          C:\WINDOWS\system32\services.exe
          C:\WINDOWS\system32\lsass.exe
          C:\WINDOWS\system32\svchost.exe
          C:\WINDOWS\System32\svchost.exe
          C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
          C:\Program Files\Alwil Software\Avast4\ashServ.exe
          C:\WINDOWS\Explorer.EXE
          C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
          C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
          C:\WINDOWS\system32\spoolsv.exe
          c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
          C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
          C:\Program Files\Bonjour\mDNSResponder.exe
          C:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe
          C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
          C:\WINDOWS\system32\nvsvc32.exe
          C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
          C:\WINDOWS\system32\svchost.exe
          C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
          C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
          C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
          C:\WINDOWS\system32\wscntfy.exe
          C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
          C:\Program Files\Internet Explorer\IEXPLORE.EXE
          C:\PROGRA~1\FREEDO~1\fdm.exe
          C:\Documents and Settings\Moi\Bureau\test.exe

          R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.free.fr/freebox/index.html
          R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
          R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
          O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
          O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
          O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdmcks.dll
          O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
          O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
          O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
          O4 - Startup: RocketDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat 2\RocketDock\RocketDock.exe
          O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
          O8 - Extra context menu item: Tout télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
          O8 - Extra context menu item: Télécharger avec Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
          O8 - Extra context menu item: Télécharger la sélection avec Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
          O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
          O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
          O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
          O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll
          O18 - Protocol: bw+0 - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw+0s - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw-0 - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw-0s - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw00 - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw00s - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw10 - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw10s - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw20 - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw20s - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw30 - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw30s - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw40 - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw40s - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw50 - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw50s - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw60 - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw60s - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw70 - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw70s - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw80 - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw80s - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw90 - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bw90s - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwa0 - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwa0s - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwb0 - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwb0s - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwc0 - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwc0s - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwd0 - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwd0s - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwe0 - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwe0s - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwf0 - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwf0s - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
          O18 - Protocol: bwg0 - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwg0s - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwh0 - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwh0s - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwi0 - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwi0s - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwj0 - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwj0s - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwk0 - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwk0s - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwl0 - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwl0s - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwm0 - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwm0s - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwn0 - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwn0s - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwo0 - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwo0s - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwp0 - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwp0s - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwq0 - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwq0s - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwr0 - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwr0s - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bws0 - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bws0s - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwt0 - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwt0s - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwu0 - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwu0s - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwv0 - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwv0s - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bww0 - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bww0s - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwx0 - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwx0s - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwy0 - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwy0s - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwz0 - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: bwz0s - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
          O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
          O18 - Protocol: offline-8876480 - {14A85691-C428-4F2D-82A4-2A110B76DB46} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
          O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
          O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
          O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
          O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
          O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
          O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
          O23 - Service: Capture Device Service - InterVideo Inc. - C:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe
          O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
          O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
          O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\fichiers communs\logitech\lvmvfm\LVPrcSrv.exe
          O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
          O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
          O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
          O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
          1. re ep
            voila le resultat de msnfix
            MSNFix 1.545

            C:\Downloads\MSNFix
            Fix exécuté le 13/10/2007 - 15:22:24,29 By Moi
            mode normal

            ************************ Recherche les fichiers présents

            ... C:\DOCUME~1\ALLUSE~1\MENUDM~1\carlton
            ... C:\Program Files\Fichiers communs\Carlson\carlton
            ... C:\k3d3t4t8n7l.exe
            ... C:\WINDOWS\LBTWiz.exe
            ... C:\WINDOWS\Nokia_19_jpg.zip
            ... C:\WINDOWS\system32\microsoft\backup.ftp
            ... C:\WINDOWS\system32\microsoft\backup.tftp
            ... C:\WINDOWS\Nokia_19_jpg.zip

            ************************ MSNCHK ***** /!\ beta test /!\

            [!] C:\WINDOWS\Nokia_19_jpg.zip is INFECTED

            ************************ Recherche les dossiers présents

            ... C:\Program Files\Fichiers communs\Carlson\

            ************************ Suppression des fichiers

            .. OK ... C:\DOCUME~1\ALLUSE~1\MENUDM~1\carlton
            .. OK ... C:\Program Files\Fichiers communs\Carlson\carlton
            .. OK ... C:\k3d3t4t8n7l.exe
            /!\ ... C:\WINDOWS\LBTWiz.exe
            .. OK ... C:\WINDOWS\Nokia_19_jpg.zip
            .. OK ... C:\WINDOWS\system32\microsoft\backup.ftp
            .. OK ... C:\WINDOWS\system32\microsoft\backup.tftp
            .. OK ... C:\WINDOWS\Nokia_19_jpg.zip

            ************************ Suppression des dossiers

            .. OK ... C:\Program Files\Fichiers communs\Carlson\

            ************************ Nettoyage du registre

            Les fichiers encore présents seront supprimés au prochain redémarrage

            ************************ Suppression des fichiers

            .. OK ... C:\WINDOWS\LBTWiz.exe

            ************************ Fichiers suspects

            Aucun Fichier trouvé

            Les fichiers et clés de registre supprimés ont été sauvegardés dans le fichier 13102007_15283542.zip

            ------------------------------------------------------------------------
            Auteur : !aur3n7 Contact: https://www.ionos.fr/
            ------------------------------------------------------------------------

            --------------------------------------------- END ---------------------------------------------
            voila je vai faire la derniere chose ke tu ma demander a tal
            merci
            tyrey
            1. Pour l'instant que des cookies de nettoyé
              voir le reste
              1. re bonjour
                voila le rapport de avg en mode sans echec
                je vai faire MSNfix et te recontacte
                merci pour vos rep
                ty rey

                AVG Anti-Spyware - Rapport d'analyse
                ---------------------------------------------------------

                + Créé à: 15:04:52 13/10/2007

                + Résultat de l'analyse:

                C:\Documents and Settings\Moi\Cookies\moi@adrevolver[1].txt -> TrackingCookie.Adrevolver : Nettoyé.
                C:\Documents and Settings\Moi\Cookies\moi@media.adrevolver[2].txt -> TrackingCookie.Adrevolver : Nettoyé.
                C:\Documents and Settings\Moi\Cookies\moi@advertising[2].txt -> TrackingCookie.Advertising : Nettoyé.
                C:\Documents and Settings\Moi\Cookies\moi@atdmt[2].txt -> TrackingCookie.Atdmt : Nettoyé.
                C:\Documents and Settings\Moi\Cookies\moi@bluestreak[2].txt -> TrackingCookie.Bluestreak : Nettoyé.
                C:\Documents and Settings\Moi\Cookies\moi@doubleclick[1].txt -> TrackingCookie.Doubleclick : Nettoyé.
                C:\Documents and Settings\Moi\Cookies\moi@estat[1].txt -> TrackingCookie.Estat : Nettoyé.
                C:\Documents and Settings\Moi\Cookies\moi@overture[1].txt -> TrackingCookie.Overture : Nettoyé.
                C:\Documents and Settings\Moi\Cookies\moi@bs.serving-sys[1].txt -> TrackingCookie.Serving-sys : Nettoyé.
                C:\Documents and Settings\Moi\Cookies\moi@serving-sys[1].txt -> TrackingCookie.Serving-sys : Nettoyé.
                C:\Documents and Settings\Moi\Cookies\moi@smartadserver[2].txt -> TrackingCookie.Smartadserver : Nettoyé.
                C:\Documents and Settings\Moi\Cookies\moi@tradedoubler[1].txt -> TrackingCookie.Tradedoubler : Nettoyé.
                C:\Documents and Settings\Moi\Cookies\moi@weborama[2].txt -> TrackingCookie.Weborama : Nettoyé.
                C:\Documents and Settings\Moi\Cookies\moi@ad.yieldmanager[2].txt -> TrackingCookie.Yieldmanager : Nettoyé.

                Fin du rapport
                1. salut ep
                  merci pour ta reponse je vai essayer de faire tou ceci et te recontact
                  merci a +
                  tyrey
                  1. bonjour commence par ceci
                    suivre les étapes
                    Télécharge:
                    http://www.grisoft.cz/filedir/inst/avgas-setup-7.5.1.43.exe AVG-AntiSpyware
                    = Installer
                    = Le lancer
                    = Clic : Mise à jour
                    ------
                    = Redémarre en mode Sans Échec (le démarrage peut prendre plusieurs minutes)
                    Attention, pas d’accès à internet dans ce mode. Enregistre ou imprime les consignes.

                    Relance le Pc et tapote la touche F8 ( ou F5 pour certains) , jusqu’à l’apparition des inscriptions avec choix de démarrage
                    Avec les touches « flèches », sélectionne Mode sans échec ==> entrée ==>nom utilisateur habituel
                    -------
                    = Dans ANALYSE ( en forme de loupe )
                    ==> Paramètres ==> sous COMMENT REAGIR==>clic sur Actions recommandées ==>Quarantaine
                    ==> Clic : Analyse complète du système
                    En fin de scan ( qui est assez long)
                    ==> Clic Appliquer toutes les actions <== ceci Très important
                    ==> Clic Sauvegarder rapport puis Enregistrer sous et choisir bureau
                    -------
                    En mode normal
                    colle le rapport
                    -------------

                    Télécharge sur le bureau
                    [url=http://sosvirus.changelog.fr/MSNFix.zip]MSNfix[/url]
                    = Clic-Droit sur MSNFix.zip
                    = Extraire ici ( ou extraire sans confirmation ou tout ou unzip)
                    = Double-Clic sur le dossier MSNfix qui vient de se créer
                    = Double-Clic MSNfix ==> Symbole roue dentée
                    = Choisir R
                    = Choisir ensuite N ( si infection)
                    = Enregistre le rapport
                    redémarre le PC et relancer MSN tu sauras ainsi si tout est supprimé
                    =======================

                    et pour contrôle
                    Télécharge sur le bureau
                    [url=http://www.merijn.org/files/hijackthis.zip]hijackthis.zip[/url]
                    = Clic-droit sur Hijackthis
                    = Extraire ici ( ou extraire sans confirmation ou tout ou unzip)
                    = clic droit sur Hijackthis ( en forme de dynamite) ==> renommer ==> écrire : test.exe ( à la place de hijackthis.exe) <== Important
                    =Double-clic dessus
                    = Clic Do a system scan and save the log
                    = ensuite colle le rapport