W32.mysor.fr@yf

Résolu
julien-54 -  
bonjour je voulais savoir si vous aviez reussi à vous debarasser de votre virus car j'ai le même et je ne m'en sort pas.
en attendant votre reponse merci.

22 réponses

Résumé de la discussion

L'infection par un virus informatique est au cœur des échanges, alors que les utilisateurs cherchent à s'en débarrasser et à comprendre les composants contaminés et les symptômes observés. Parmi les solutions évoquées figurent l'utilisation de HijackThis pour scanner et nettoyer, la suppression de SpyBro et du fichier hp5573.tmp, puis la réalisation d'un scan antivirus en ligne et l'analyse du rapport. Des utilisateurs rapportent des succès partiels, notamment la détection et la suppression d'un cheval de Troie et l'amélioration des messages d'erreur après l'exécution des outils recommandés. En complément, des outils supplémentaires comme SmitfraudFix et BitDefender Online Scanner ont été proposés pour renforcer le nettoyage et vérifier l'absence de résidus dans le système.

Bobot (l’IA à votre service)
  1. Utilisateur anonyme
    Salut,

    télécharges hijackthis:
    Téléchargement de HijackThis

    Installe le dans son propre dossier:
    -cliques droit sur le bureau, nouveau dossier, installes-le dedans.
    Lance le, cliques sur "do a system scan and save logfile"
    Puis copies et colles le rapport ici.
    1. julien-54 Auteur
      une fois lancé j'ai un "bloc note" et une fenêtre avec des cases a cocher
      > j'en fais quoi exactement
      1. Utilisateur anonyme
        colle ce qui a dans le bloc note ici stp
    2. julien-54 Auteur
      Logfile of HijackThis v1.99.1
      Scan saved at 22:46:27, on 07/05/2006
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\system32\Ati2evxx.exe
      C:\WINDOWS\system32\spoolsv.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\system32\atmclk.exe
      C:\WINDOWS\system32\dcomcfg.exe
      C:\WINDOWS\SOUNDMAN.EXE
      C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
      C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
      C:\PROGRA~1\MESSAG~1\StartMessager.exe
      C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      C:\Program Files\Microsoft IntelliPoint\point32.exe
      C:\WINDOWS\system32\qttask.exe
      C:\Program Files\Microsoft IntelliType Pro\type32.exe
      C:\WINDOWS\system32\LVCOMSX.EXE
      C:\Program Files\Logitech\Video\LogiTray.exe
      C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe
      C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
      C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
      C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
      C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
      C:\Program Files\Logitech\Video\FxSvr2.exe
      C:\Program Files\WinZip\WZQKPICK.EXE
      C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
      C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
      C:\Program Files\Network Associates\VirusScan\Mcshield.exe
      C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
      C:\WINDOWS\System32\svchost.exe
      C:\Program Files\Internet Explorer\iexplore.exe
      C:\Program Files\ewido anti-malware\ewidoctrl.exe
      C:\Program Files\Outlook Express\MSIMN.EXE
      C:\Documents and Settings\julien\Bureau\Nouveau dossier\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      O2 - BHO: Nothing - {b0398eca-0bcd-4645-8261-5e9dc70248d0} - C:\WINDOWS\system32\hp5573.tmp
      O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll (file missing)
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
      O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
      O4 - HKLM\..\Run: [] C:\WINDOWS\Options\OEMReset.exe /Audit
      O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
      O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
      O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
      O4 - HKLM\..\Run: [MessagerStarter Wanadoo] C:\PROGRA~1\MESSAG~1\StartMessager.exe Messager Wanadoo
      O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
      O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
      O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\system32\qttask.exe" -atboottime
      O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
      O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
      O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
      O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
      O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
      O4 - HKLM\..\Run: [Vade Retro Outlook Express] "C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe"
      O4 - HKLM\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
      O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
      O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
      O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
      O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
      O4 - HKCU\..\Run: [Felix II] C:\Program Files\ScreenMates\Felix II\Fr\Felix2.exe
      O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
      O4 - HKCU\..\Run: [SpyBrowser] "C:\Program Files\SpyBro\SpyBro.exe" /autostart
      O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
      O4 - Global Startup: hp psc 1000 series.lnk = ?
      O4 - Global Startup: hpoddt01.exe.lnk = ?
      O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
      O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
      O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
      O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
      O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
      O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
      O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
      O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
      O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
      O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
      O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
      O16 - DPF: teleir_cert - https://static.ir.dgi.minefi.gouv.fr/secure/connexion/archives/ie4n4/teleir_cert.cab
      O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
      O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
      O18 - Protocol: bw+0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw+0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw-0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw00s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw10s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw20s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw30s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw40s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw50s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw60s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw70s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw80s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bw90s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwa0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwb0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwc0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwd0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwe0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwf0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
      O18 - Protocol: bwg0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwg0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwh0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwi0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwj0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwk0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwl0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwm0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwn0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwo0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwp0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwq0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwr0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bws0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwt0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwu0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwv0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bww0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwx0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwy0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: bwz0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
      O18 - Protocol: offline-8876480 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
      O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
      O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
      O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
      O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
      O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
      O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
      O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
      1. Utilisateur anonyme
        Relance HijackThis, choisis " do a scan only" coche la case devant les lignes ci-dessous et clique en bas sur "fix checked"

        O2 - BHO: Nothing - {b0398eca-0bcd-4645-8261-5e9dc70248d0} - C:\WINDOWS\system32\hp5573.tmp
        O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\MSN Toolbar\01.02.5000.1021\fr\msntb.dll (file missing)
        O4 - HKCU\..\Run: [SpyBrowser] "C:\Program Files\SpyBro\SpyBro.exe" /autostart
        16 - DPF: teleir_cert - https://static.ir.dgi.minefi.gouv.fr/secure/connexion/archives/ie4n4/teleir_cert.cab
        O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
        O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
        O18 - Protocol: bw+0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw+0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw-0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw-0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw00 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw00s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw10 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw10s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw20 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw20s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw30 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw30s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw40 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw40s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw50 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw50s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw60 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw60s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw70 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw70s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw80 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw80s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw90 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bw90s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwa0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwa0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwb0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwb0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwc0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwc0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwd0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwd0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwe0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwe0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwf0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwf0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
        O18 - Protocol: bwg0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwg0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwh0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwh0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwi0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwi0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwj0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwj0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwk0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwk0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwl0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwl0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwm0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwm0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwn0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwn0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwo0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwo0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwp0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwp0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwq0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwq0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwr0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwr0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bws0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bws0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwt0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwt0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwu0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwu0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwv0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwv0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bww0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bww0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwx0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwx0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwy0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwy0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwz0 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: bwz0s - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)

        clique sur demarrer, poste de travail, C:, program files,cherche et supprime ce programme:

        SpyBro

        Clique sur demarrer, rechercher ,cherche et supprime ce fichier:

        hp5573.tmp

        Puis fait ce scan anti-virus en ligne et colle le rapport ici une fois qu'il a fini

        https://www.bitdefender.com/toolbox/
    3. julien-54 Auteur
      je ne trouve nulle part spybro et quand je veux suprimer hp5573.tmp ca me donne un message qui me dit que je ne peux pas le suprimer
      1. Utilisateur anonyme
        Oki, fait ceci:

        Télécharge SmitfraudFix, enregistre le sur le bureau question de simplicité :-)
        http://siri.urz.free.fr/Fix/SmitfraudFix.zip
        décomprime SmitfraudFix
        Lance le fichier SmitfraudFix, et choisir l’option 1 copie le rapport ici
    5. julien-54 Auteur
      tu trouve quelque chose ?
      1. Utilisateur anonyme
        bah j'attend ton rapport lol :-)
    6. julien-54 Auteur
      SmitFraudFix v2.40

      Rapport fait à 23:55:24,09, 07/05/2006
      Executé à partir de C:\Documents and Settings\julien\Bureau\Nouveau dossier\SmitfraudFix
      OS: Microsoft Windows XP [version 5.1.2600]

      »»»»»»»»»»»»»»»»»»»»»»»» C:\

      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS

      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system

      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\Web

      »»»»»»»»»»»»»»»»»»»»»»»» C:\WINDOWS\system32

      C:\WINDOWS\system32\atmclk.exe PRESENT !
      C:\WINDOWS\system32\dcomcfg.exe PRESENT !
      C:\WINDOWS\system32\hp????.tmp PRESENT !
      C:\WINDOWS\system32\ld????.tmp PRESENT !
      C:\WINDOWS\system32\ot.ico PRESENT !
      C:\WINDOWS\system32\stdole3.tlb PRESENT !
      C:\WINDOWS\system32\1024\ PRESENT !

      »»»»»»»»»»»»»»»»»»»»»»»» C:\Documents and Settings\julien\Application Data

      »»»»»»»»»»»»»»»»»»»»»»»» Menu Démarrer

      »»»»»»»»»»»»»»»»»»»»»»»» C:\DOCUME~1\julien\Favoris

      C:\DOCUME~1\julien\Favoris\Antivirus Test Online.url PRESENT !

      »»»»»»»»»»»»»»»»»»»»»»»» Bureau

      »»»»»»»»»»»»»»»»»»»»»»»» C:\Program Files

      »»»»»»»»»»»»»»»»»»»»»»»» Clés corrompues

      »»»»»»»»»»»»»»»»»»»»»»»» Eléments du bureau

      [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Desktop\Components\0]
      "Source"="About:Home"
      "SubscribedURL"="About:Home"
      "FriendlyName"="Ma page d'accueil"

      »»»»»»»»»»»»»»»»»»»»»»»» Sharedtaskscheduler
      !!!Attention, les clés qui suivent ne sont pas forcément infectées!!!

      SrchSTS.exe by S!Ri
      Search SharedTaskScheduler's .dll

      »»»»»»»»»»»»»»»»»»»»»»»» Recherche infection wininet.dll

      »»»»»»»»»»»»»»»»»»»»»»»» Fin
      1. Utilisateur anonyme
        Redemarres ton pc, dès l'allumage de celui ci tapotes la touche f8, à l'ecran qui va apparaitre choisis "mode sans echec" attends un peu..

        Relance alors SmitfraudFix, choisis l'option 2, repond oui à tout, enregistre le rapport et redemarre normalement.

        Une fois qu'i la redemarré colle le rapport ici, puis fait ça:

        télécharges hijackthis:
        Téléchargement de HijackThis

        Installe le dans son propre dossier:
        -cliques droit sur le bureau, nouveau dossier, installes-le dedans.
        Lance le, cliques sur "do a system scan and save logfile"
        Puis copies et colles le rapport ici.
    7. julien-54 Auteur
      SmitFraudFix v2.40

      Rapport fait à 0:13:29,40, 08/05/2006
      Executé à partir de C:\Documents and Settings\julien\Bureau\Nouveau dossier\SmitfraudFix
      OS: Microsoft Windows XP [version 5.1.2600]

      »»»»»»»»»»»»»»»»»»»»»»»» Arret des processus

      »»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés

      C:\WINDOWS\system32\atmclk.exe supprimé
      C:\WINDOWS\system32\dcomcfg.exe supprimé
      C:\WINDOWS\system32\hp????.tmp supprimé
      C:\WINDOWS\system32\ld????.tmp supprimé
      C:\WINDOWS\system32\ot.ico supprimé
      C:\WINDOWS\system32\simpole.tlb supprimé
      C:\WINDOWS\system32\stdole3.tlb supprimé
      C:\WINDOWS\system32\1024\ supprimé

      »»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires

      »»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre

      Nettoyage terminé.

      »»»»»»»»»»»»»»»»»»»»»»»» Fin
      1. julien-54 Auteur
        Logfile of HijackThis v1.99.1
        Scan saved at 00:20:06, on 08/05/2006
        Platform: Windows XP SP2 (WinNT 5.01.2600)
        MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

        Running processes:
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\system32\Ati2evxx.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\system32\Ati2evxx.exe
        C:\WINDOWS\Explorer.EXE
        C:\WINDOWS\system32\spoolsv.exe
        C:\WINDOWS\SOUNDMAN.EXE
        C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE
        C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe
        C:\PROGRA~1\MESSAG~1\StartMessager.exe
        C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
        C:\Program Files\Microsoft IntelliPoint\point32.exe
        C:\WINDOWS\system32\qttask.exe
        C:\Program Files\Microsoft IntelliType Pro\type32.exe
        C:\WINDOWS\system32\LVCOMSX.EXE
        C:\Program Files\Logitech\Video\LogiTray.exe
        C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe
        C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
        C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
        C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
        C:\Program Files\ScreenMates\Felix II\Fr\Felix2.exe
        C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe
        C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpohmr08.exe
        C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
        C:\Program Files\Logitech\Video\FxSvr2.exe
        C:\Program Files\WinZip\WZQKPICK.EXE
        C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpoevm08.exe
        C:\Program Files\ewido anti-malware\ewidoctrl.exe
        C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
        C:\Program Files\Network Associates\VirusScan\Mcshield.exe
        C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
        C:\WINDOWS\System32\svchost.exe
        C:\WINDOWS\system32\HPZipm12.exe
        C:\WINDOWS\System32\svchost.exe
        C:\Program Files\Hewlett-Packard\Digital Imaging\Bin\hpoSTS08.exe
        C:\Program Files\Outlook Express\MSIMN.EXE
        C:\WINDOWS\system32\wuauclt.exe
        C:\Program Files\Internet Explorer\iexplore.exe
        C:\Documents and Settings\julien\Bureau\Nouveau dossier\HijackThis.exe

        R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
        R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
        O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
        O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
        O4 - HKLM\..\Run: [] C:\WINDOWS\Options\OEMReset.exe /Audit
        O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
        O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\Network Associates\VirusScan\SHSTAT.EXE" /STANDALONE
        O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\Network Associates\Common Framework\UpdaterUI.exe" /StartedFromRunKey
        O4 - HKLM\..\Run: [MessagerStarter Wanadoo] C:\PROGRA~1\MESSAG~1\StartMessager.exe Messager Wanadoo
        O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
        O4 - HKLM\..\Run: [IntelliPoint] "C:\Program Files\Microsoft IntelliPoint\point32.exe"
        O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\system32\qttask.exe" -atboottime
        O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
        O4 - HKLM\..\Run: [type32] "C:\Program Files\Microsoft IntelliType Pro\type32.exe"
        O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
        O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
        O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
        O4 - HKLM\..\Run: [Vade Retro Outlook Express] "C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_oe.exe"
        O4 - HKLM\..\Run: [AnyDVD] C:\Program Files\SlySoft\AnyDVD\AnyDVD.exe
        O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
        O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
        O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
        O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
        O4 - HKCU\..\Run: [Felix II] C:\Program Files\ScreenMates\Felix II\Fr\Felix2.exe
        O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\lib\NMBgMonitor.exe"
        O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
        O4 - Global Startup: hp psc 1000 series.lnk = ?
        O4 - Global Startup: hpoddt01.exe.lnk = ?
        O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
        O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
        O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
        O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
        O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
        O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html
        O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
        O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
        O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html
        O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
        O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
        O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
        O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
        O18 - Protocol: offline-8876480 - {5629871E-F554-4B77-BDA7-3EA59419DB7B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
        O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
        O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
        O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
        O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido anti-malware\ewidoctrl.exe
        O23 - Service: Service Framework McAfee (McAfeeFramework) - Network Associates, Inc. - C:\Program Files\Network Associates\Common Framework\FrameworkService.exe
        O23 - Service: Network Associates McShield (McShield) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\Mcshield.exe
        O23 - Service: Network Associates Task Manager (McTaskManager) - Network Associates, Inc. - C:\Program Files\Network Associates\VirusScan\VsTskMgr.exe
        O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
        1. julien-54 Auteur
          je crois qu'il est parti
          je n'ai plus le message d'erreur et j'ouvre ma page de demarrage comme avant
        2. julien-54 Auteur
          je dois faire le scan en entier parce que la il me donne environ 4h30 avant la fin
          1. Utilisateur anonyme
            oui, t'inquiete pas il devrait accelerer moi il me donne 1h30 et il met 20min ;-)
        3. julien-54 Auteur
          d'apres le message il reste 30 min
          1. Utilisateur anonyme
            ok ;-)

            De toute maniere le temps ne remontera pas dy style 2h00 donc bientot fini :-)
        6. julien-54 Auteur
          je pense que j'ai cliqué trop vite et que le rapport est parti
          1. julien-54 Auteur
            je ferai un autre scan demain et je te renverai le rapport
            en tout cas merci beaucoup pour le depannage .
            a bientot
            1. Utilisateur anonyme
              oki, fait ça alors :-)

              Ce nettoyage:

              ¤Telecharges et installes ceci, dans la colonne de gauche cliques sur "erreurs" coches toutes les cases, puis cliques en bas sur "chercher des erreurs" une fois finit, cliques sur "reparer les erreurs" et tu aura un message pour sauvegarder ta base de registre tu dis "oui" puis tu recommences jusqu'a ce qu'il te trouve plus d'erreurs

              CCleaner:
              Ccleaner

              ¤Relance Ccleaner ,vas dans l'onglet "nettoyeur" present sur la gauche, decoches la derniere case (Avancé si elle est cochée) puis cliques sur "lancer le nettoyage"

              Puis ce scan anti-virus en ligne:

              Clique sur;
              _Online Virus Scanner
              _Kaspersky Scanner Online
              _My computer

              Enregistre bien le rapport et colle le ici stp

              https://www.kaspersky.fr/downloads

              A++
          2. julien-54 Auteur
            BitDefender Online Scanner - Real Time Virus Report

            Generated at: Mon, May 08, 2006 - 10:52:53

            --------------------------------------------------------------------------------

            Scan Info

            Scanned Files
            338601

            Infected Files
            1

            Virus Detected

            Trojan.Spy.HTML.Bankfraud.DQ
            1

            --------------------------------------------------------------------------------

            This summary of the scan process will be used by the BitDefender Antivirus Lab to create agregate statistics about virus activity around the world.
            1. julien-54 Auteur
              KASPERSKY ON-LINE SCANNER REPORT
              Monday, May 08, 2006 12:05:17 PM
              Operating System: Microsoft Windows XP Home Edition, Service Pack 2 (Build 2600)
              Kaspersky On-line Scanner version: 5.0.78.0
              Kaspersky Anti-Virus database last update: 8/05/2006
              Kaspersky Anti-Virus database records: 180757

              Scan Settings
              Scan using the following antivirus database standard
              Scan Archives true
              Scan Mail Bases true

              Scan Target My Computer
              C:\
              D:\
              E:\
              F:\
              G:\
              H:\
              I:\

              Scan Statistics
              Total number of scanned objects 62534
              Number of viruses found 7
              Number of infected objects 15
              Number of suspicious objects 0
              Duration of the scan process 00:46:23

              Infected Object Name Virus Name Last Action
              C:\Documents and Settings\julien\julien\Local Settings\Application Data\Identities\{78547D03-7A1C-4E8C-A2BB-0D9A307FBDA0}\Microsoft\Outlook Express\Boîte de réception.dbx/[From Washington@wanadoo.fr, Mutual@wanadoo.fr,][Date Thu, 10 Feb 2005 20:23:39 +0100]/html Infected: Trojan-Spy.HTML.Wamufraud.bo skipped

              C:\Documents and Settings\julien\julien\Local Settings\Application Data\Identities\{78547D03-7A1C-4E8C-A2BB-0D9A307FBDA0}\Microsoft\Outlook Express\Boîte de réception.dbx Mail MS Outlook 5: infected - 1 skipped

              C:\Documents and Settings\julien\julien\Local Settings\Application Data\Identities\{78547D03-7A1C-4E8C-A2BB-0D9A307FBDA0}\Microsoft\Outlook Express\Éléments supprimés.dbx/[From Regions Bank ][Date Tue, 01 Feb 2005 10:46:51 -0200]/UNNAMED/html Infected: Trojan-Spy.HTML.Bankfraud.dq skipped

              C:\Documents and Settings\julien\julien\Local Settings\Application Data\Identities\{78547D03-7A1C-4E8C-A2BB-0D9A307FBDA0}\Microsoft\Outlook Express\Éléments supprimés.dbx/[From Regions Bank ][Date Tue, 01 Feb 2005 10:46:51 -0200]/UNNAMED Infected: Trojan-Spy.HTML.Bankfraud.dq skipped

              C:\Documents and Settings\julien\julien\Local Settings\Application Data\Identities\{78547D03-7A1C-4E8C-A2BB-0D9A307FBDA0}\Microsoft\Outlook Express\Éléments supprimés.dbx Mail MS Outlook 5: infected - 2 skipped

              C:\System Volume Information\_restore{D2DEEC84-7E99-480A-8E5C-CC61EA5AC508}\RP346\A0061716.tlb Infected: Trojan-Downloader.Win32.Zlob.mt skipped

              C:\System Volume Information\_restore{D2DEEC84-7E99-480A-8E5C-CC61EA5AC508}\RP346\A0061735.tlb Infected: Trojan-Downloader.Win32.Zlob.ne skipped

              C:\System Volume Information\_restore{D2DEEC84-7E99-480A-8E5C-CC61EA5AC508}\RP346\A0061781.tlb Infected: Trojan-Downloader.Win32.Zlob.ne skipped

              C:\System Volume Information\_restore{D2DEEC84-7E99-480A-8E5C-CC61EA5AC508}\RP347\A0061802.tlb Infected: Trojan-Downloader.Win32.Zlob.ne skipped

              C:\System Volume Information\_restore{D2DEEC84-7E99-480A-8E5C-CC61EA5AC508}\RP347\A0061834.tlb Infected: Trojan-Downloader.Win32.Zlob.ne skipped

              C:\System Volume Information\_restore{D2DEEC84-7E99-480A-8E5C-CC61EA5AC508}\RP348\A0061860.tlb Infected: Trojan-Downloader.Win32.Zlob.nc skipped

              C:\System Volume Information\_restore{D2DEEC84-7E99-480A-8E5C-CC61EA5AC508}\RP349\A0061909.exe Infected: Trojan-Downloader.Win32.Zlob.nd skipped

              C:\System Volume Information\_restore{D2DEEC84-7E99-480A-8E5C-CC61EA5AC508}\RP349\A0061926.tlb Infected: Trojan-Downloader.Win32.Zlob.nj skipped

              C:\System Volume Information\_restore{D2DEEC84-7E99-480A-8E5C-CC61EA5AC508}\RP350\A0061951.tlb Infected: Trojan-Downloader.Win32.Zlob.nj skipped

              C:\System Volume Information\_restore{D2DEEC84-7E99-480A-8E5C-CC61EA5AC508}\RP350\A0061961.exe Infected: Trojan-Downloader.Win32.Zlob.nj skipped

              Scan process completed.
              1. Utilisateur anonyme
                Salut,

                Alors ceci C:\System Volume Information\_restore(voir rapport Kaspersky au dessus) indique que ta restauration du systeme est infecté.Nous allons Tout supprimer et créer un point propre.

                Cliques sur demarrer, cliques droit sur poste de travail, propriétés, onglet "restauration du systeme"
                -coches la case, puis cliques sur "appliquer"
                -decoches la case et cliques sur "appliquer" puis "ok".

                Maintenant, que l'ont à effacés les point infectés, nous allons créer un point propre:

                Cliques sur demarrer, tout les programmes, accessoires, outils systemes, restauration du systeme, choisis "creer un point de restauration" nommes le " ccm" par exemple, cliques sur "creer" puis "ok".

                Fait ça:

                Affiche tous les fichiers et dossiers :
                Clique sur démarrer, panneau de configuration, outils ,option des dossiers, affichage

                Coche: afficher les fichiers et dossiers cachés

                Appliquer, puis ok

                Suit ce chemin:

                C:\Documents and Settings\julien\julien\Local Settings\Application Data\Identities\{78547D03-7A1C-4E8C-A2BB-0D9A307FBDA0}\Microsoft\Outlook Express\ puis supprime tout ce qu'il y a dans ce dossier: Boîte de réception.dbx
            2. julien-54 Auteur
              salut
              je fais quoi aprés ?
              je suprime les doc. avec la tête de mort ?
              1. julien-54 Auteur
                et apres je fais quoi d'autre ?
                1. Utilisateur anonyme
                  Fait ce nettoyage et dit moi ou en est ton probléme:

                  ¤Telecharges et installes ceci, dans la colonne de gauche cliques sur "erreurs" coches toutes les cases, puis cliques en bas sur "chercher des erreurs" une fois finit, cliques sur "reparer les erreurs" et tu aura un message pour sauvegarder ta base de registre tu dis "oui" puis tu recommences jusqu'a ce qu'il te trouve plus d'erreurs

                  CCleaner:
                  Ccleaner

                  ¤Relance Ccleaner ,vas dans l'onglet "nettoyeur" present sur la gauche, decoches la derniere case (Avancé si elle est cochée) puis cliques sur "lancer le nettoyage"
              2. julien-54 Auteur
                c'est fais et je n'ai plus de message d'erreur
                1. Utilisateur anonyme
                  Oki, c'est cool alors ;-)

                  Bonne soirée à toi

                  A+++
              • 1
              • 2

              Discussions similaires

              W32 L32: correspondance entre taille US et taille française
              efg

              6 réponses
              Win32:Malware-gen
              botte36

              15 réponses
              W32.jeefo
              Vador

              3 réponses
              infecté par W32/blaster.worm help !
              neton

              31 réponses
              win32:malware-gen bloqué par avast
              ikkual

              69 réponses