Infecté par un spyware

Résolu
scan14 -  
Bonsoir a tous
J'ai un problème avec mon ordi, lorsque je suis sur internet, il y a plein de fenetres de publicités qui s'ouvrent sans que je l'ai demandé.De plus, il a des fenetres qui me proposent des antispywares tel que drive cleaner,et mon ordi tourne au ralentit.
On m'a dit que j'avais un spyware,j'aimerais bien m'en debarrasser le plus rapidement possible.
Merci d'avance.
Au fait ,je ne suis pas très douée en informatique.
Configuration: Windows 98
Internet Explorer 6.0

21 réponses

  1.  philae83 Contributeur sécurité
    bonsoir,

    * Télécharge Blacklight
    https://europe.f-secure.com/exclude/blacklight/index.shtml
    (de F-Secure)
    (le premier de la page)

    Enregistre le sur ton Bureau.
    Double-clique fsbl.exe
    Clique sur "I ACCEPT" .
    clique Scan puis Next

    Tu verras une liste de fichiers détectés apparaître. Tu verras également un rapport,
    sur ton Bureau, nommé fsbl.xxxxxxx.log (les xxxxxxx sont des chiffres).

    Copie et colle le contenu de ce rapport dans ta prochaine réponse.
    NE PAS choisir l'option "Rename" de suite : nous devons analyser le rapport,
    car des fichiers légitimes peuvent être présents, tel wbemtest.exe
    1. scan14
      bonjour, merci d'avoir répondu
      j'ai téléchargé Blacklight mais j'ai un souci quand je double clique sur fsbl.exe
      Le message d'erreur est: erreur de démarrage du programme, un fichier .DLL requis, USERENV.DLL, n'a pas été trouvé
      Donc, je n'ai pas pu suivre les instruction suivantes.
      2. scan14
        quand tu parle de OS et XP tu veut dire quoi?Desole pas très doue en informatique.
        Moi j'ai un windows 98, le vieux ordi qui fonctionne bien pour le peu de chose que je fais avec.
        2. philae83 Contributeur sécurité
          quand je parle d'OS et d'XP, justement je voulais connaitre ton système d'exploitation. Bon c'est donc normal car Blacklight ne fonctionne pas sous windows98, et moi j'aime pas du tout .....trop loin dans mes souvenirs.

          on va faire autre chose

          * Télécharge HijackThis et poste le rapport stp

          http://pchelpbordeaux.free.fr/logiciels.html
          Tutorial
          http://pchelpbordeaux.free.fr/tuto.html
          Démo en image
          http://pageperso.aol.fr/balltrap34/demohijack.htm
          1. scan14
            Voici le rapport que tu as demandé:

            Logfile of HijackThis v1.99.1
            Scan saved at 22:47:08, on 21/05/07
            Platform: Windows 98 SE (Win9x 4.10.2222A)
            MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

            Running processes:
            C:\WINDOWS\SYSTEM\KERNEL32.DLL
            C:\WINDOWS\SYSTEM\MSGSRV32.EXE
            C:\WINDOWS\SYSTEM\SPOOL32.EXE
            C:\WINDOWS\SYSTEM\MPREXE.EXE
            C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
            C:\WINDOWS\SYSTEM\KB918547\KB918547.EXE
            C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHSERV.EXE
            C:\PROGRAM FILES\MESSENGERPLUS! 3\MSGPLUS.EXE
            C:\WINDOWS\SYSTEM\mmtask.tsk
            C:\WINDOWS\EXPLORER.EXE
            C:\WINDOWS\SYSTEM\RPCSS.EXE
            C:\WINDOWS\PTSNOOP.EXE
            C:\WINDOWS\TASKMON.EXE
            C:\WINDOWS\SYSTEM\SYSTRAY.EXE
            C:\WINDOWS\SYSTEM\ATIPTAXX.EXE
            C:\WINDOWS\SYSTEM\STIMON.EXE
            C:\WINDOWS\LOADQM.EXE
            C:\WINDOWS\SYSTEM\LVCOMSX.EXE
            C:\PROGRAM FILES\LOGITECH\VIDEO\LOGITRAY.EXE
            C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHWEBSV.EXE
            C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHMAISV.EXE
            C:\WINDOWS\SYSTEM\MSTASK.EXE
            C:\PROGRAM FILES\FICHIERS COMMUNS\DRIVECLEANER FREE\UDCSDR.EXE
            C:\WINDOWS\SYSTEM\XFHKSDPAV.EXE
            C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\LOGITECHDESKTOPMESSENGER.EXE
            C:\OPLIMIT\OCRAWARE.EXE
            C:\PROGRAM FILES\MICROSOFT OFFICE\OFFICE\OSA.EXE
            C:\PROGRAM FILES\MICROSOFT OFFICE\OFFICE\FINDFAST.EXE
            C:\OPLIMIT\OCRAWR32.EXE
            C:\PROGRAM FILES\CAERE\PAGEKEEPER30\SYSTEM\PKJOBS.EXE
            C:\PROGRAM FILES\WANADOO\TASKBARICON.EXE
            C:\PROGRAM FILES\SAGEM\SAGEM F@ST 800-840\DSLMON.EXE
            C:\PROGRAM FILES\NIKON\NKVIEW6\NKVMON.EXE
            C:\PROGRAM FILES\TOOX\GROOM\GROOMAGENT.EXE
            C:\WINDOWS\SYSTEM\WMIEXE.EXE
            C:\WINDOWS\SYSTEM\WBEM\WINMGMT.EXE
            C:\WINDOWS\SYSTEM\TAPISRV.EXE
            C:\PROGRAM FILES\CAERE\PAGEKEEPER30\SYSTEM\PKTOPASS.EXE
            C:\PROGRAM FILES\CAERE\PAGEKEEPER30\SYSTEM\PKSLAPI.EXE
            C:\PROGRAM FILES\LOGITECH\VIDEO\FXSVR2.EXE
            C:\PROGRAM FILES\WANADOO\GESTIONNAIREINTERNET.EXE
            C:\PROGRAM FILES\WANADOO\COMCOMP.EXE
            C:\PROGRAM FILES\WANADOO\TOASTER.EXE
            C:\PROGRAM FILES\WANADOO\INACTIVITY.EXE
            C:\PROGRAM FILES\WANADOO\POLLINGMODULE.EXE
            C:\WINDOWS\SYSTEM32\ALERTMODULE\ALERTMODULE.EXE
            C:\PROGRAM FILES\WANADOO\WATCH.EXE
            C:\WINDOWS\SYSTEM\DDHELP.EXE
            C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE
            C:\WINDOWS\SYSTEM\RNAAPP.EXE
            C:\WINDOWS\SYSTEM\PSTORES.EXE
            C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
            C:\PROGRAM FILES\HIJACKTHIS VERSION FRANçAISE\HIJACKTHIS VF.EXE

            R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
            R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
            R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
            R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\WANADOO\SEARCH~2.DLL
            F1 - win.ini: load=ptsnoop.exe
            O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
            O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
            O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
            O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
            O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
            O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
            O4 - HKLM\..\Run: [AtiPTA] Atiptaxx.exe
            O4 - HKLM\..\Run: [CDApplet] CoolTool.exe
            O4 - HKLM\..\Run: [CriticalUpdate] C:\WINDOWS\SYSTEM\wucrtupd.exe -startup
            O4 - HKLM\..\Run: [AtiCwd32] Aticwd32.exe
            O4 - HKLM\..\Run: [AtiQiPcl] AtiQiPcl.exe
            O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
            O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\WANADOO\Watch.exe
            O4 - HKLM\..\Run: [LoadQM] loadqm.exe
            O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\SYSTEM\LVCOMSX.EXE
            O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
            O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
            O4 - HKLM\..\Run: [DXM6Patch_9904] C:\WINDOWS\p_9904.exe /Q:A
            O4 - HKLM\..\Run: [avast! Web Scanner] C:\PROGRA~1\ALWILS~1\AVAST4\ASHWEBSV.EXE
            O4 - HKLM\..\Run: [ashMaiSv] C:\PROGRA~1\ALWILS~1\AVAST4\ashmaisv.exe
            O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\WANADOO\GestMaj.exe TaskBarIcon.exe
            O4 - HKLM\..\Run: [SDR6V_Check] "C:\PROGRAM FILES\FICHIERS COMMUNS\DRIVECLEANER FREE\UDCSDR.EXE"
            O4 - HKLM\..\Run: [xfhksdpav] c:\windows\system\xfhksdpav.exe
            O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
            O4 - HKLM\..\RunServices: [ATIPOLAB] ati2evxx.exe
            O4 - HKLM\..\RunServices: [KB891711] C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
            O4 - HKLM\..\RunServices: [KB918547] C:\WINDOWS\SYSTEM\KB918547\KB918547.EXE
            O4 - HKLM\..\RunServices: [avast!] C:\Program Files\Alwil Software\Avast4\ashServ.exe
            O4 - HKLM\..\RunServices: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
            O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\PROGRAM FILES\LOGITECH\VIDEO\MANIFESTENGINE.EXE" boot
            O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
            O4 - HKCU\..\Run: [WOOKIT] C:\PROGRAM FILES\WANADOO\GestMaj.exe GestionnaireInternet.exe
            O4 - Startup: OCRAWARE.lnk = C:\OPLIMIT\OCRAWARE.EXE
            O4 - Startup: Démarrage d'Office.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE
            O4 - Startup: Microsoft Recherche accélérée.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
            O4 - Startup: Travaux PageKeeper.lnk = C:\Program Files\Caere\PageKeeper30\system\PKJobs.exe
            O4 - Startup: EPSON Status Monitor 3 Environment Check.lnk = C:\WINDOWS\SYSTEM\E_SRCV03.EXE
            O4 - Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
            O4 - Startup: NkvMon.exe.lnk = C:\Program Files\Nikon\NkView6\NkvMon.exe
            O4 - Startup: Commandes MS-DOS.pif = C:\WINDOWS\COMMAND.COM
            O4 - Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
            O4 - Startup: Groom Agent.lnk = C:\Program Files\TooX\Groom\GroomAgent.exe
            O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
            O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
            O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
            O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - https://www.touslesdrivers.com/index.php?v_page=29
            O17 - HKLM\System\CCS\Services\VxD\MSTCP: SearchList = 212.27.32.176,212.27.32.177
            O18 - Protocol: offline-8876480 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bw00 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bw00s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bw10 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bw10s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bw20 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bw20s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bw30 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bw30s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bw40 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bw40s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bw50 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bw50s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bw60 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bw60s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bw70 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bw70s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bw80 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bw80s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bw90 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bw90s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwa0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwa0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwb0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwb0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwc0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwc0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwd0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwd0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwe0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwe0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwf0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwf0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwg0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwg0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwh0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwh0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwi0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwi0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwj0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwj0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwk0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwk0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwl0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwl0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwm0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwm0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwn0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwn0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwo0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwo0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwp0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwp0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwq0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwq0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwr0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwr0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bws0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bws0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwt0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwt0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwu0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwu0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwv0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwv0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bww0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bww0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwx0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwx0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwy0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwy0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwz0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwz0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bw-0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bw-0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bw+0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bw+0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
            O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\GAPLUGPROTOCOL-8876480.DLL
            1. philae83 Contributeur sécurité
              re

              * lance hijackthis pour un "scan seulement" puis coche ces lignes :

              R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\WANADOO\SEARCH~2.DLL
              F1 - win.ini: load=ptsnoop.exe
              O4 - HKLM\..\Run: [CriticalUpdate] C:\WINDOWS\SYSTEM\wucrtupd.exe -startup
              O4 - HKLM\..\Run: [DXM6Patch_9904] C:\WINDOWS\p_9904.exe /Q:A
              O4 - HKLM\..\Run: [SDR6V_Check] "C:\PROGRAM FILES\FICHIERS COMMUNS\DRIVECLEANER FREE\UDCSDR.EXE"
              O4 - HKLM\..\Run: [xfhksdpav] c:\windows\system\xfhksdpav.exe
              O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
              O4 - Startup: Démarrage d'Office.lnk = C:\Program Files\Microsoft Office\Office\OSA.EXE
              O4 - Startup: Microsoft Recherche accélérée.lnk = C:\Program Files\Microsoft Office\Office\FINDFAST.EXE
              O4 - Startup: Commandes MS-DOS.pif = C:\WINDOWS\COMMAND.COM
              O4 - Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
              O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
              O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
              O18 - Protocol: offline-8876480 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bw00 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bw00s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bw10 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bw10s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bw20 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bw20s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bw30 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bw30s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bw40 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bw40s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bw50 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bw50s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bw60 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bw60s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bw70 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bw70s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bw80 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bw80s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bw90 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bw90s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwa0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwa0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwb0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwb0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwc0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwc0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwd0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwd0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwe0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwe0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwf0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwf0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwg0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwg0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwh0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwh0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwi0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwi0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwj0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwj0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwk0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwk0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwl0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwl0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwm0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwm0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwn0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwn0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwo0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwo0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwp0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwp0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwq0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwq0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwr0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwr0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bws0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bws0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwt0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwt0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwu0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwu0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwv0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwv0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bww0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bww0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwx0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwx0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwy0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwy0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwz0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwz0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bw-0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bw-0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bw+0 - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bw+0s - {9F697DA1-471F-11DA-B49F-F43797211132} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\BWPLUGPROTOCOL-8876480.DLL
              O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\PROGRAM FILES\LOGITECH\DESKTOP MESSENGER\8876480\PROGRAM\GAPLUGPROTOCOL-8876480.DLL

              * ferme toutes les applications ouvertes y compris Internet Explorer et clique sur "fixer objet"

              puis
              pour pouvoir continuer, il faudrait faire un scan antivirus en ligne sur Panda et poster le rapport ici ensuite

              https://www.pandasecurity.com/?ref=www.pandasoftware.com/activescan/fr/activescan_principal.htm
              (désactive ton AV pendant le scan)
              * tuto en image
              http://pageperso.aol.fr/loraline60/panda_scan.htm
              1. scan14
                Salut j'ai fais ce que tu m'as demandé, donc voici le rapport:

                Incident Statut Analyse

                Adware:adware/navipromo No Désinfecté C:\WINDOWS\SYSTEM\xfhksdpav_navps.dat
                Adware:Adware/NaviPromo No Désinfecté C:\WINDOWS\TEMP\Install_WMP.exe[²ÜÇ\NSUtils.dll]
                Outil indésirable:Application/Webmediaplayer No Désinfecté C:\WINDOWS\TEMP\Install_WMP.exe[WebMediaPlayer.exe]
                Outil indésirable:Application/SystemDoctor2006 No Désinfecté C:\WINDOWS\Downloaded Program Files\CONFLICT.1\USDR6V_0001_D18M3107NetInstaller.exe
                Spyware:Cookie/Xiti No Désinfecté C:\WINDOWS\Cookies\suzanne@xiti[1].txt
                Spyware:Cookie/RealMedia No Désinfecté C:\WINDOWS\Cookies\suzanne@247realmedia[1].txt
                Outil indésirable:Application/DriveCleaner No Désinfecté C:\Program Files\Fichiers communs\DriveCleaner Free\udcsdr.exe
                1. Utilisateur anonyme
                  Bonsoir scan14
                  ...Philae est absente quelques jours
                  A sa demande je peux reprendre si tu le souhaites

                  A te lire /c Bonne réception
                  1. scan14
                    Bonsoir
                    je suis d'accord pour que tu m'aide, je te remercie
                    j'attend la suite
                    merci
                    1. Utilisateur anonyme
                      Re Scan14--->Désolé du retard ( plusieurs forum en meme temps !! )

                      / Télécharge : Brute Force Uninstaller http://www.merijn.org/files/bfu.zip et décompresse-le dans un dossier propre à lui (C:\BFU)

                      FAIS UN CLIC-DROIT sur ce lien : http://metallica.geekstogo.com/EGDACCESS.bfu
                      et choisis "Enregistrer sous" (dans IE c'est "Enregistrer le lien sous..")
                      afin de télécharger EGDACCESS.bfu, Type "Tous les fichiers". Sauvegarde dans le dossier créé (c:\BFU)

                      / Navipromo.zip http://www.alt-shift-return.org/Info/Fichiers/Navipromo073.zip et décompresse-le sur ton bureau (merci Lazzzy)

                      Copie la suite des instructions dans un fichier texte, sur ton bureau. et redémarre en mode sans échec comme indiqué ici http://www.microsoft.com/windows2000/fr/server/help/default.asp?url=/windows2000/fr/server/help/boot_failsafe.htm
                      Il faudra choisir ta session habituelle, pas le compte "Administrateur" ou autre.

                      / lance le fichier Navipromo.bat qui se trouve dans le dossier Navipromo, sur ton bureau.

                      Options :

                      * sélectionne d'abord l'option "Vérifications", et patiente quelques minutes. Lorsqu'il a terminé, ferme le rapport qui s'est ouvert
                      * Sélectionne l'option "Recherche et suppression automatique". Patiente.
                      S'il trouve quelque chose, tu verras défiler des lignes dans la fenêtre de commande et au bout de quelques instants, il faudra que tu appuies sur une touche pour que le nettoyage soit lancé.

                      * Relance l'outil, Sélectionne l'option "Suppression Heuristique", et patiente quelques minutes... Lorsqu'il a terminé, ferme le rapport qui s'est ouvert

                      / Démarre le "Brute Force Uninstaller" en double-cliquant sur BFU.exe.
                      Clique sur le petit dossier jaune, à la droite de la boîte "Scriptline to execute", et double-clique sur : EGDACCESS.bfu
                      - Dans la boîte "Scriptline to execute", tu devrais maintenant voir ceci : C:\BFU\EGDACCESS.bfu
                      Clique sur "Execute" et laisse-le faire son travail.
                      Attendre que "Complete script execution" apparaîsse et clique sur OK. Clique exit pour fermer le programme BFU.
                      Recommence encore une fois.

                      / Démarrer -> panneau de configuration -> options internet
                      Clique sur l'onglet "Contenu" puis onglet "Certificats" et si tu trouves ceci, en particulier dans "éditeurs approuvés" :

                      electronic-group - egroup - Montorgueil - VIP - "Sunny Day Design Ltd"

                      => Supprime-les tous

                      / redémarre normalement et poste le contenu du fichier Navipromo.txt qui se trouve dans Poste de travail > disque C:\

                      puis, un nouveau log HJT

                      Nota: il faudra que je revienne pour " DriveCleaner " / OK

                      ...Bonne réception
                      1. scan14
                        bonsoir,

                        J'ai fait comme tu me l'as demandé mais lorsque je redemarre en mode sans echec et que je lance le fichier Navipromo.bat, cela ne fonctionne pas et cela marque:

                        Navipromo.zip n'est pas ou pas encore compatible avec votre systeme d'exploitation, le programme va donc fermer

                        Donc que dois je faire

                        Merci
                        1. Utilisateur anonyme
                          Re Scan14
                          ...OUI, désolé c'est de ma faute, Win98 est incompatible avec ma proposition de désinfection " Navipromo "
                          ...Je me renseigne auprès des Amis / Ok
                          Ne t'inquiètes pas
                          Bonne réception
                          1. Utilisateur anonyme
                            Re Scan14
                            ...J'ai des propositions en BFU ( script / OK )

                            Nous voyons cela demain, car demain job pour Evasion600

                            Bonne nuit, à demain
                            1. Utilisateur anonyme
                              RE Bonsoir
                              Imprime ceci.
                              Télécharge Brute Force Uninstaller (de Merijn).
                              Créé un nouveau dossier directement sur le C:\ et nomme-le BFU.
                              Décompresse le fichier téléchargé dans ce nouveau dossier au moyen d'un clic droit (Extraire vers...C:\BFU).
                              Ouvre le bloc-note de windows.
                              Copie-colle ces lignes dans la fenêtre du bloc-note :

                              OptionUnloadShell
                              RegDeleteKey HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\xfhksdpav
                              RegDelValue HKLM\Software\Microsoft\Windows\CurrentVersion\Run|xfhksdpav
                              FileDelete %SYSDIR%\xfhksdpav*.dat
                              FileDelete %SYSDIR%\xfhksdpav.exe
                              FileDelete C:\WINDOWS\Downloaded Program Files\CONFLICT.1\U*_*_*NetInstaller.exe
                              FolderDelete C:\Program Files\Fichiers communs\DriveCleaner Free
                              SystemEmptyInternetCache
                              SystemEmptyTempFolder
                              SystemEmptyRecycleBin

                              Enregistre le fichier sur le bureau en fix.txt
                              Fais un clic droit sur ce fichier, choisis Renommer et dans la case, indique le nom fix.BFU.
                              Déplace-le dans le même dossier que Brute Force Uninstaller soit dans c:\BFU
                              Tu dois maintenant avoir deux fichiers dans le dossier C:\BFU : fix.bfu et BFU.exe (très important).
                              Redémarre en mode Sans Échec : au redémarrage, tapote immédiatement la touche F8 (ou F5); tu verras un écran avec choix de démarrages apparaître. Utilisant les flèches du clavier, choisis "Mode Sans Échec" et valide avec "Entrée". Choisis ton compte usuel, et non Administrateur.
                              Démarre le "Brute Force Uninstaller" en double-cliquant BFU.exe (du dossier C:\BFU).
                              Clique sur le petit dossier jaune, à la droite de la boîte Scriptline to execute, et double-clique sur : fix.bfu.
                              Dans la boîte "Scriptline to execute", tu devrais maintenant voir ceci : C:\BFU\fix.bfu
                              Clique sur Execute et laisse-le faire son travail.
                              Attendre que Complete script execution apparaîsse et clique sur OK.
                              Clique Exit pour fermer le programme BFU.
                              Redémarre normalement ton PC.

                              Reviens dans ta prochaine réponse avec un nouveau log HijackThis / STP

                              Bonne réception
                              1. scan14
                                bonsoir
                                Voici le nouveau log HijackThis/

                                Logfile of HijackThis v1.99.1
                                Scan saved at 20:55:21, on 29/05/07
                                Platform: Windows 98 SE (Win9x 4.10.2222A)
                                MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

                                Running processes:
                                C:\WINDOWS\SYSTEM\KERNEL32.DLL
                                C:\WINDOWS\SYSTEM\MSGSRV32.EXE
                                C:\WINDOWS\SYSTEM\MPREXE.EXE
                                C:\WINDOWS\SYSTEM\mmtask.tsk
                                C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
                                C:\WINDOWS\SYSTEM\KB918547\KB918547.EXE
                                C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHSERV.EXE
                                C:\PROGRAM FILES\MESSENGERPLUS! 3\MSGPLUS.EXE
                                C:\WINDOWS\EXPLORER.EXE
                                C:\WINDOWS\SYSTEM\RPCSS.EXE
                                C:\WINDOWS\TASKMON.EXE
                                C:\WINDOWS\SYSTEM\SYSTRAY.EXE
                                C:\WINDOWS\SYSTEM\ATIPTAXX.EXE
                                C:\WINDOWS\SYSTEM\STIMON.EXE
                                C:\WINDOWS\LOADQM.EXE
                                C:\WINDOWS\SYSTEM\LVCOMSX.EXE
                                C:\PROGRAM FILES\LOGITECH\VIDEO\LOGITRAY.EXE
                                C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHWEBSV.EXE
                                C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHMAISV.EXE
                                C:\PROGRAM FILES\LOGITECH\VIDEO\MANIFESTENGINE.EXE
                                C:\OPLIMIT\OCRAWARE.EXE
                                C:\PROGRAM FILES\CAERE\PAGEKEEPER30\SYSTEM\PKJOBS.EXE
                                C:\OPLIMIT\OCRAWR32.EXE
                                C:\PROGRAM FILES\WANADOO\TASKBARICON.EXE
                                C:\PROGRAM FILES\SAGEM\SAGEM F@ST 800-840\DSLMON.EXE
                                C:\PROGRAM FILES\NIKON\NKVIEW6\NKVMON.EXE
                                C:\WINDOWS\SYSTEM\SPOOL32.EXE
                                C:\WINDOWS\SYSTEM\WMIEXE.EXE
                                C:\PROGRAM FILES\LOGITECH\VIDEO\FXSVR2.EXE
                                C:\PROGRAM FILES\CAERE\PAGEKEEPER30\SYSTEM\PKTOPASS.EXE
                                C:\PROGRAM FILES\CAERE\PAGEKEEPER30\SYSTEM\PKSLAPI.EXE
                                C:\PROGRAM FILES\HIJACKTHIS VERSION FRANçAISE\HIJACKTHIS VF.EXE

                                R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
                                R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
                                R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
                                R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                                O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
                                O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
                                O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
                                O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
                                O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
                                O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
                                O4 - HKLM\..\Run: [AtiPTA] Atiptaxx.exe
                                O4 - HKLM\..\Run: [CDApplet] CoolTool.exe
                                O4 - HKLM\..\Run: [AtiCwd32] Aticwd32.exe
                                O4 - HKLM\..\Run: [AtiQiPcl] AtiQiPcl.exe
                                O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
                                O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\WANADOO\Watch.exe
                                O4 - HKLM\..\Run: [LoadQM] loadqm.exe
                                O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\SYSTEM\LVCOMSX.EXE
                                O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
                                O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
                                O4 - HKLM\..\Run: [avast! Web Scanner] C:\PROGRA~1\ALWILS~1\AVAST4\ASHWEBSV.EXE
                                O4 - HKLM\..\Run: [ashMaiSv] C:\PROGRA~1\ALWILS~1\AVAST4\ashmaisv.exe
                                O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\WANADOO\GestMaj.exe TaskBarIcon.exe
                                O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
                                O4 - HKLM\..\RunServices: [ATIPOLAB] ati2evxx.exe
                                O4 - HKLM\..\RunServices: [KB891711] C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
                                O4 - HKLM\..\RunServices: [KB918547] C:\WINDOWS\SYSTEM\KB918547\KB918547.EXE
                                O4 - HKLM\..\RunServices: [avast!] C:\Program Files\Alwil Software\Avast4\ashServ.exe
                                O4 - HKLM\..\RunServices: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
                                O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\PROGRAM FILES\LOGITECH\VIDEO\MANIFESTENGINE.EXE" boot
                                O4 - HKCU\..\Run: [WOOKIT] C:\PROGRAM FILES\WANADOO\GestMaj.exe GestionnaireInternet.exe
                                O4 - Startup: OCRAWARE.lnk = C:\OPLIMIT\OCRAWARE.EXE
                                O4 - Startup: Travaux PageKeeper.lnk = C:\Program Files\Caere\PageKeeper30\system\PKJobs.exe
                                O4 - Startup: EPSON Status Monitor 3 Environment Check.lnk = C:\WINDOWS\SYSTEM\E_SRCV03.EXE
                                O4 - Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
                                O4 - Startup: NkvMon.exe.lnk = C:\Program Files\Nikon\NkView6\NkvMon.exe
                                O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - https://www.touslesdrivers.com/index.php?v_page=29
                                O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
                                O17 - HKLM\System\CCS\Services\VxD\MSTCP: SearchList = 212.27.32.176,212.27.32.177
                                1. Utilisateur anonyme
                                  Bonsoir scan14
                                  ...Dis il a sauté cet Adware : c:\windows\system\xfhksdpav.exe
                                  ...Le BFU s'est bien passé ?
                                  ...Ns continuons / OK :

                                  -2- Lance CCleaner, pour un nettoyage, supprime tout ce qu'il trouve

                                  -3- Lance EasyCleaner, pour deux scans : " Inutile ", puis " Registre ", (pas autre chose)
                                  Dans les deux scans supprime tout ce qu'il trouve

                                  -4- Fais moi un scan antivirus en ligne avec Bitdefender:
                                  fais ce scan en ligne : http://www.bitdefender.fr/bd/site/page.php?tab=0#
                                  Clique, en bas à gauche, sur "scan on line (nouveau)"
                                  Accepte ensuite la licence puis laisse-lui installer l'ActiveX
                                  Laisse-toi guider.

                                  Tuto en images pour le scan online : Tuto en image : http://pageperso.aol.fr/rginformatique/mapage/defender.htm

                                  Poste le rapport du scan online, puis un nouveau log HijackThis dans ta prochaine réponse

                                  Bonne réception
                                  1. scan14
                                    bonsoir a toi

                                    voici le premier rapport:

                                    BitDefender Online Scanner - Rapport virus en temps réel

                                    Généré à: Wed, May 30, 2007 - 21:21:29

                                    --------------------------------------------------------------------------------

                                    Info d'analyse

                                    Fichiers scannés
                                    57454

                                    Infectés Fichiers
                                    0

                                    Virus Détectés

                                    Aucun virus trouvé.

                                    --------------------------------------------------------------------------------

                                    Ce sommaire du processus d'analyse sera utilisé par les laboratoires Antivirus BitDefender pour créer des statistiques agréguées sur l'activité des virus dans le monde.

                                    et voici le 2 eme rapport:

                                    Logfile of HijackThis v1.99.1
                                    Scan saved at 21:23:57, on 30/05/07
                                    Platform: Windows 98 SE (Win9x 4.10.2222A)
                                    MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

                                    Running processes:
                                    C:\WINDOWS\SYSTEM\KERNEL32.DLL
                                    C:\WINDOWS\SYSTEM\MSGSRV32.EXE
                                    C:\WINDOWS\SYSTEM\MPREXE.EXE
                                    C:\WINDOWS\SYSTEM\mmtask.tsk
                                    C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
                                    C:\WINDOWS\SYSTEM\KB918547\KB918547.EXE
                                    C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHSERV.EXE
                                    C:\PROGRAM FILES\MESSENGERPLUS! 3\MSGPLUS.EXE
                                    C:\WINDOWS\EXPLORER.EXE
                                    C:\WINDOWS\SYSTEM\RPCSS.EXE
                                    C:\WINDOWS\TASKMON.EXE
                                    C:\WINDOWS\SYSTEM\SYSTRAY.EXE
                                    C:\WINDOWS\SYSTEM\ATIPTAXX.EXE
                                    C:\WINDOWS\SYSTEM\STIMON.EXE
                                    C:\WINDOWS\LOADQM.EXE
                                    C:\WINDOWS\SYSTEM\LVCOMSX.EXE
                                    C:\PROGRAM FILES\LOGITECH\VIDEO\LOGITRAY.EXE
                                    C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHWEBSV.EXE
                                    C:\PROGRAM FILES\ALWIL SOFTWARE\AVAST4\ASHMAISV.EXE
                                    C:\OPLIMIT\OCRAWARE.EXE
                                    C:\PROGRAM FILES\CAERE\PAGEKEEPER30\SYSTEM\PKJOBS.EXE
                                    C:\PROGRAM FILES\SAGEM\SAGEM F@ST 800-840\DSLMON.EXE
                                    C:\PROGRAM FILES\NIKON\NKVIEW6\NKVMON.EXE
                                    C:\WINDOWS\SYSTEM\SPOOL32.EXE
                                    C:\PROGRAM FILES\WANADOO\GESTIONNAIREINTERNET.EXE
                                    C:\OPLIMIT\OCRAWR32.EXE
                                    C:\WINDOWS\SYSTEM\WMIEXE.EXE
                                    C:\PROGRAM FILES\WANADOO\COMCOMP.EXE
                                    C:\PROGRAM FILES\WANADOO\TOASTER.EXE
                                    C:\PROGRAM FILES\WANADOO\INACTIVITY.EXE
                                    C:\PROGRAM FILES\WANADOO\POLLINGMODULE.EXE
                                    C:\PROGRAM FILES\CAERE\PAGEKEEPER30\SYSTEM\PKSLAPI.EXE
                                    C:\WINDOWS\SYSTEM32\ALERTMODULE\ALERTMODULE.EXE
                                    C:\PROGRAM FILES\CAERE\PAGEKEEPER30\SYSTEM\PKTOPASS.EXE
                                    C:\WINDOWS\SYSTEM\TAPISRV.EXE
                                    C:\WINDOWS\SYSTEM\RNAAPP.EXE
                                    C:\PROGRAM FILES\LOGITECH\VIDEO\FXSVR2.EXE
                                    C:\PROGRAM FILES\WANADOO\WATCH.EXE
                                    C:\PROGRAM FILES\INTERNET EXPLORER\IEXPLORE.EXE
                                    C:\WINDOWS\SYSTEM\DDHELP.EXE
                                    C:\PROGRAM FILES\MSN MESSENGER\MSNMSGR.EXE
                                    C:\WINDOWS\SYSTEM\PSTORES.EXE
                                    C:\PROGRAM FILES\HIJACKTHIS VERSION FRANçAISE\HIJACKTHIS VF.EXE

                                    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
                                    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
                                    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
                                    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Orange
                                    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
                                    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\PROGRAM FILES\ADOBE\ACROBAT 5.0\READER\ACTIVEX\ACROIEHELPER.OCX
                                    O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX
                                    O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun
                                    O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe
                                    O4 - HKLM\..\Run: [SystemTray] SysTray.Exe
                                    O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
                                    O4 - HKLM\..\Run: [AtiPTA] Atiptaxx.exe
                                    O4 - HKLM\..\Run: [CDApplet] CoolTool.exe
                                    O4 - HKLM\..\Run: [AtiCwd32] Aticwd32.exe
                                    O4 - HKLM\..\Run: [AtiQiPcl] AtiQiPcl.exe
                                    O4 - HKLM\..\Run: [StillImageMonitor] C:\WINDOWS\SYSTEM\STIMON.EXE
                                    O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\WANADOO\Watch.exe
                                    O4 - HKLM\..\Run: [LoadQM] loadqm.exe
                                    O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\SYSTEM\LVCOMSX.EXE
                                    O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
                                    O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
                                    O4 - HKLM\..\Run: [avast! Web Scanner] C:\PROGRA~1\ALWILS~1\AVAST4\ASHWEBSV.EXE
                                    O4 - HKLM\..\Run: [ashMaiSv] C:\PROGRA~1\ALWILS~1\AVAST4\ashmaisv.exe
                                    O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\WANADOO\GestMaj.exe TaskBarIcon.exe
                                    O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme
                                    O4 - HKLM\..\RunServices: [ATIPOLAB] ati2evxx.exe
                                    O4 - HKLM\..\RunServices: [KB891711] C:\WINDOWS\SYSTEM\KB891711\KB891711.EXE
                                    O4 - HKLM\..\RunServices: [KB918547] C:\WINDOWS\SYSTEM\KB918547\KB918547.EXE
                                    O4 - HKLM\..\RunServices: [avast!] C:\Program Files\Alwil Software\Avast4\ashServ.exe
                                    O4 - HKLM\..\RunServices: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
                                    O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\PROGRAM FILES\LOGITECH\VIDEO\MANIFESTENGINE.EXE" boot
                                    O4 - HKCU\..\Run: [WOOKIT] C:\PROGRAM FILES\WANADOO\GestMaj.exe GestionnaireInternet.exe
                                    O4 - HKCU\..\RunServices: [LogitechSoftwareUpdate] "C:\PROGRAM FILES\LOGITECH\VIDEO\MANIFESTENGINE.EXE" boot
                                    O4 - HKCU\..\RunServices: [WOOKIT] C:\PROGRAM FILES\WANADOO\GestMaj.exe GestionnaireInternet.exe
                                    O4 - Startup: OCRAWARE.lnk = C:\OPLIMIT\OCRAWARE.EXE
                                    O4 - Startup: Travaux PageKeeper.lnk = C:\Program Files\Caere\PageKeeper30\system\PKJobs.exe
                                    O4 - Startup: EPSON Status Monitor 3 Environment Check.lnk = C:\WINDOWS\SYSTEM\E_SRCV03.EXE
                                    O4 - Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
                                    O4 - Startup: NkvMon.exe.lnk = C:\Program Files\Nikon\NkView6\NkvMon.exe
                                    O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
                                    O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
                                    O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - https://www.orange.fr/portail (file missing) (HKCU)
                                    O9 - Extra button: Groom - {66F83792-DAE1-4823-8F20-ADA94B33A4FF} - C:\PROGRAM FILES\TOOX\Groom\Groom.exe (HKCU)
                                    O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - https://www.touslesdrivers.com/index.php?v_page=29
                                    O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
                                    O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
                                    O17 - HKLM\System\CCS\Services\VxD\MSTCP: SearchList = 212.27.32.176,212.27.32.177
                                    1. Utilisateur anonyme
                                      Bonsoir Scan14

                                      ...Pour moi, c'est clean !!!
                                      Si tu n'as plus de disfonctionnements, tu peux marquer ton sujet comme "Résolu"
                                      ...Bonne continuation, attention au Web ( navigations )

                                      Evasion
                                      1. scan14
                                        bonsoir

                                        Je te remercie de ton aide ainsi qu'a philae83, je n'ai plus de disfonctionnement et mon ordi va plus vite

                                        Merci encore, bonne continuation et bonne soirée

                                        Scan14
                                        • 1
                                        • 2

                                        Discussions similaires

                                        Infecte par un virus
                                        sapard

                                        3 réponses
                                        Mon ordinateur a été infecté par un virus ou
                                        henry4002

                                        6 réponses
                                        Infecté par spyware secure
                                        k_eep_walking

                                        4 réponses