

Spartan
Membres-
Compteur de contenus
48 -
Inscription
-
Dernière visite
Type de contenu
Profils
Forums
Blogs
Tout ce qui a été posté par Spartan
-
Demende analyse de log pour un gars debutant dans la chose
Spartan a répondu à un(e) sujet de Spartan dans Analyses et éradication malwares
Ba le probleme c'est que on le voit meme plus ... -
Demende analyse de log pour un gars debutant dans la chose
Spartan a répondu à un(e) sujet de Spartan dans Analyses et éradication malwares
Et mon probleme initiale est revenu, il doit y avoir encore des bete ... et autre chose, mon Antivirus- Firewall F-Secure ne s'enclenche plus au démarrage, on a du viré un truc sur HijackThis (dans les lignes 04) ... au cas ou tu retrouves le truc qui cloche ^^ -
Demende analyse de log pour un gars debutant dans la chose
Spartan a répondu à un(e) sujet de Spartan dans Analyses et éradication malwares
Voila le rapport : KASPERSKY ON-LINE SCANNER - RAPPORT mercredi 26 juillet 2006 17:18:45 Système d'exploitation : Microsoft Windows 2000 Professional, Service Pack 4 (Build 2195) Version de Kaspersky On-line Scanner: 5.0.78.0 Dernière mise à jour de la base antivirus Kaspersky : 26/07/2006 Enregistrements dans la base antivirus Kaspersky : 197440 Paramètres d'analyse Analyser avec la base antivirus suivante standard Analyser les archives vrai Analyser les bases de messagerie. vrai Cible de l'analyse Poste de travail A:\ C:\ D:\ E:\ F:\ G:\ H:\ Statistiques de l'analyse Total d'objets analysés : 60129 Nombre de virus trouvés 2 Nombre d'objets infectés 2 Nombre d'objets suspects 2 Durée de l'analyse 03:59:46 Nom de l'objet infecté Nom du virus Dernière action C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ISearchTechISTsvc20.zip/istsvc.exe Suspect : Password-protected-EXE ignoré C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy\Recovery\ISearchTechISTsvc20.zip ZIP: suspect - 1 ignoré C:\RECYCLER\S-1-5-21-1844237615-706699826-1708537768-1000\Dc3811.0ip/MSN Password Finder v2.0.exe Infecté: HackTool.Win32.MSNPass.b ignoré C:\RECYCLER\S-1-5-21-1844237615-706699826-1708537768-1000\Dc3811.0ip ZIP: infecté - 1 ignoré Analyse terminée. -
Demende analyse de log pour un gars debutant dans la chose
Spartan a répondu à un(e) sujet de Spartan dans Analyses et éradication malwares
Re, bon l'analyse est faite (après 4H30 d'analyse) je la poste dans 10 min Et je confirme, mon Antivirus- Firewall F-Secure ne s'enclenche plus au démarrage, on a du viré un truc sur HijackThis (dans les lignes 04) ... au cas ou tu retrouves le truc qui cloche ^^ -
Demende analyse de log pour un gars debutant dans la chose
Spartan a répondu à un(e) sujet de Spartan dans Analyses et éradication malwares
Re, Voici le rapport Ewido : --------------------------------------------------------- ewido anti-spyware - Scan Report --------------------------------------------------------- + Created at: 23:21:19 07/25/2006 + Scan result: HKLM\SOFTWARE\Classes\CLSID\{804DB5C7-31E6-4885-850A-F1941B58A4C7} -> Adware.Generic : Cleaned with backup (quarantined). HKLM\SOFTWARE\Classes\CLSID\{D240DC29-C093-4388-B71F-A7103C796B0C} -> Adware.Generic : Cleaned with backup (quarantined). C:\Program Files\Media Access -> Adware.MediaAccess : Cleaned with backup (quarantined). C:\Program Files\Media Access\Info.txt -> Adware.MediaAccess : Cleaned with backup (quarantined). C:\Program Files\Media Access\MediaAccC.dll -> Adware.MediaAccess : Cleaned with backup (quarantined). C:\Program Files\Media Access\MediaAccK.exe -> Adware.MediaAccess : Cleaned with backup (quarantined). C:\Program Files\Media Access\MediaAccess.exe -> Adware.MediaAccess : Cleaned with backup (quarantined). C:\RECYCLER\S-1-5-21-1844237615-706699826-1708537768-1000\Dc3818\kmmup.exe -> Adware.Xupiter : Cleaned with backup (quarantined). C:\RECYCLER\S-1-5-21-1844237615-706699826-1708537768-1000\Dc3811.0ip/MSN Password Finder v2.0.exe -> Not-A-Virus.HackTool.Win32.MSNPass.b : Ignored. C:\Program Files\PaqTool\keylog\icosdll.dll -> Not-A-Virus.Monitor.Win32.PaqTool.a : Ignored. :mozilla.89:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.247realmedia : Cleaned. :mozilla.130:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned. :mozilla.154:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned. :mozilla.163:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.2o7 : Cleaned. :mozilla.164:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.2o7 : Cleaned. :mozilla.195:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned. :mozilla.234:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.2o7 : Cleaned. :mozilla.235:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.2o7 : Cleaned. :mozilla.261:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.2o7 : Cleaned. :mozilla.71:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned. :mozilla.72:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.2o7 : Cleaned. :mozilla.293:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Adserver : Cleaned. :mozilla.294:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Adserver : Cleaned. :mozilla.116:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Adtech : Cleaned. :mozilla.117:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Adtech : Cleaned. :mozilla.48:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Adtech : Cleaned. :mozilla.49:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Adtech : Cleaned. :mozilla.75:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Advertising : Cleaned. :mozilla.76:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Advertising : Cleaned. :mozilla.77:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Advertising : Cleaned. :mozilla.78:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Advertising : Cleaned. :mozilla.125:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned. :mozilla.183:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Atdmt : Cleaned. :mozilla.34:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Bluestreak : Cleaned. :mozilla.51:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Bluestreak : Cleaned. :mozilla.176:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned. :mozilla.177:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned. :mozilla.178:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned. :mozilla.230:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Casalemedia : Cleaned. :mozilla.179:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Com : Cleaned. :mozilla.128:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Comclick : Cleaned. :mozilla.129:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Comclick : Cleaned. :mozilla.130:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Comclick : Cleaned. :mozilla.50:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned. :mozilla.94:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Doubleclick : Cleaned. :mozilla.146:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Estat : Cleaned. :mozilla.37:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Estat : Cleaned. :mozilla.110:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Falkag : Cleaned. :mozilla.111:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Falkag : Cleaned. :mozilla.112:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Falkag : Cleaned. :mozilla.299:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Falkag : Cleaned. :mozilla.300:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Falkag : Cleaned. :mozilla.301:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Falkag : Cleaned. :mozilla.302:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Falkag : Cleaned. :mozilla.303:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Falkag : Cleaned. :mozilla.231:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Fastclick : Cleaned. :mozilla.65:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Googleadservices : Cleaned. :mozilla.133:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned. :mozilla.134:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned. :mozilla.135:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned. :mozilla.136:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned. :mozilla.175:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned. :mozilla.176:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Hitbox : Cleaned. :mozilla.220:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned. :mozilla.66:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Mediaplex : Cleaned. :mozilla.252:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned. :mozilla.253:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned. :mozilla.254:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Questionmarket : Cleaned. :mozilla.126:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Revenue : Cleaned. :mozilla.225:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Revenue : Cleaned. :mozilla.120:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned. :mozilla.121:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned. :mozilla.122:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned. :mozilla.123:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned. :mozilla.124:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned. :mozilla.198:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned. :mozilla.199:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned. :mozilla.200:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned. :mozilla.201:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned. :mozilla.202:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Serving-sys : Cleaned. :mozilla.209:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned. :mozilla.210:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned. :mozilla.211:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Sitestat : Cleaned. :mozilla.10:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned. :mozilla.6:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned. :mozilla.7:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned. :mozilla.84:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned. :mozilla.85:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned. :mozilla.86:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned. :mozilla.8:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned. :mozilla.9:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Smartadserver : Cleaned. :mozilla.162:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Statcounter : Cleaned. :mozilla.100:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned. :mozilla.61:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned. :mozilla.62:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Tradedoubler : Cleaned. :mozilla.122:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Valueclick : Cleaned. :mozilla.123:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Valueclick : Cleaned. :mozilla.17:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Weborama : Cleaned. :mozilla.18:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Weborama : Cleaned. :mozilla.20:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Weborama : Cleaned. :mozilla.21:C:\Documents and Settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\a6py4udo.default\cookies.txt -> TrackingCookie.Weborama : Cleaned. :mozilla.91:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Weborama : Cleaned. :mozilla.92:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Weborama : Cleaned. :mozilla.93:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Weborama : Cleaned. :mozilla.138:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned. :mozilla.139:C:\Documents and Settings\kyan\Application Data\Mozilla\Firefox\Profiles\poha40x0.default\cookies.txt -> TrackingCookie.Yieldmanager : Cleaned. ::Report end Et j'ai verifie dans C:\Program Files\ , il n'y a pas de AntiVir PersonalEdition Classic -
Demende analyse de log pour un gars debutant dans la chose
Spartan a répondu à un(e) sujet de Spartan dans Analyses et éradication malwares
Non je t'assure qu'il est desinstallé -
mon pc veut pas s'eteindre...
Spartan a répondu à un(e) sujet de fanche974 dans Analyses et éradication malwares
A toi de voir ce que tu préfere ... -
RApport a analyser SVP!!!
Spartan a répondu à un(e) sujet de boysdav dans Analyses et éradication malwares
Ok alors attends l'aide de quelqu'un de plus competant que moi ... Ils doivent etre en train de manger ! -
Demende analyse de log pour un gars debutant dans la chose
Spartan a répondu à un(e) sujet de Spartan dans Analyses et éradication malwares
Non malgré mes multiples essai, Ewido ne marche pas en Mode sans echec ... c'est etrange ça non ? -
RApport a analyser SVP!!!
Spartan a répondu à un(e) sujet de boysdav dans Analyses et éradication malwares
As tu commencé par la procédure de Pré-Nettoyage ? Si c'est non alors suis les instructions ici => http://forum.zebulon.fr/index.php?showtopic=83986 -
Demende analyse de log pour un gars debutant dans la chose
Spartan a répondu à un(e) sujet de Spartan dans Analyses et éradication malwares
voila le log hijathis, mais ewido ne fonctionne toujours pas en sans echec ... Log Hijathis : Logfile of HijackThis v1.99.1 Scan saved at 20:13:41, on 07/25/2006 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\system32\svchost.exe C:\WINNT\system32\LEXBCES.EXE C:\WINNT\system32\spoolsv.exe C:\WINNT\system32\LEXPPS.EXE C:\PROGRA~1\PACKSE~1\backweb\361343\Program\SERVIC~1.EXE C:\WINNT\System32\svchost.exe C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe C:\Program Files\Pack Securite\Anti-Virus\FSGK32.EXE C:\Program Files\Pack Securite\backweb\361343\program\fsbwsys.exe C:\Program Files\Pack Securite\Common\FSMA32.EXE C:\Program Files\Pack Securite\Common\FSMB32.EXE C:\WINNT\system32\regsvc.exe C:\WINNT\system32\MSTask.exe C:\WINNT\system32\stisvc.exe C:\Program Files\Pack Securite\Common\FCH32.EXE C:\WINNT\System32\WBEM\WinMgmt.exe C:\WINNT\system32\svchost.exe C:\Program Files\Pack Securite\Common\FAMEH32.EXE C:\Program Files\Pack Securite\Anti-Virus\fsrw.exe C:\Program Files\Pack Securite\FSPC\fspc.exe C:\Program Files\Pack Securite\FSPC\fshttps\fshttps.exe C:\Program Files\Pack Securite\Anti-Virus\fssm32.exe C:\Program Files\Pack Securite\Anti-Virus\fsav32.exe C:\WINNT\Explorer.EXE C:\WINNT\system32\wuauclt.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exe C:\Program Files\Trust\350SX CRADLE MOUSE WIRELESS OPTICAL\lwbwheel.exe C:\Program Files\MessengerPlus! 3\MsgPlus.exe C:\Program Files\PROMT5\INTEGRAL\pinmenu.exe C:\Program Files\Lexmark 2200 Series\lxbvbmgr.exe C:\Program Files\Lexmark 2200 Series\lxbvbmon.exe C:\Program Files\Pack Securite\Common\FSM32.EXE C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe C:\WINNT\system32\LVCOMSX.EXE C:\Program Files\Logitech\Video\LogiTray.exe C:\Program Files\Winamp\winampa.exe C:\Program Files\Pack Securite\backweb\361343\Program\fspex.exe C:\Program Files\Logitech\Video\FxSvr2.exe C:\Hijackthis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://jakams.skyblog.com/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://home.neuf.fr R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer fourni par AOL R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O4 - HKLM\..\Run: [synchronization Manager] mobsync.exe /logon O4 - HKLM\..\Run: [hpfsched] C:\WINNT\hpfsched.exe O4 - HKLM\..\Run: [PROMT Integrator] "C:\Program Files\PROMT5\INTEGRAL\PinStart.exe" /autorun O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe O4 - HKLM\..\Run: [ulead AutoDetector] C:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exe O4 - HKLM\..\Run: [LWBMOUSE] C:\Program Files\Trust\350SX CRADLE MOUSE WIRELESS OPTICAL\lwbwheel.exe O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" O4 - HKLM\..\Run: [Lexmark 2200 Series] "C:\Program Files\Lexmark 2200 Series\lxbvbmgr.exe" O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Pack Securite\Common\FSM32.EXE" /splash O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Pack Securite\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Pack Securite\FSGUI\FSSW.EXE" /reboot O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe O4 - HKLM\..\Run: [LVCOMSX] C:\WINNT\system32\LVCOMSX.EXE O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe O4 - HKLM\..\Run: [update] C:\Program Files\AntiVir PersonalEdition Classic\preupd.exe /CALLSCHEDULER /DM="0" /CALLSCHEDULER O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe O4 - HKCU\..\Run: [TVAgent WiFi] C:\Program Files\Kit ADSL\Wizard\Agent_WiFi.exe O4 - HKCU\..\Run: [RealPlayer] "C:\Program Files\Real\RealPlayer\realplay.exe" /RunUPGToolCommandReBoot O4 - Startup: PowerReg Scheduler.exe O4 - Global Startup: Pack Securite.lnk = C:\Program Files\Pack Securite\backweb\361343\Program\fspex.exe O8 - Extra context menu item: &Bloquer cette fenêtre publicitaire - C:\Program Files\Pack Securite\Anti-Spyware\blockpopups.htm O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: Filtre Web - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll O9 - Extra 'Tools' menuitem: Filtre Web - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll O9 - Extra button: Protection Internet Explorer - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Securite\Anti-Spyware\ieshield.dll O9 - Extra 'Tools' menuitem: Protection Internet Explorer... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Securite\Anti-Spyware\ieshield.dll O9 - Extra button: Traduction - {7A2EFD41-E6B3-11D2-89E3-00E0292EE574} - C:\Program Files\PROMT5\PROMTIE4\promtie5.htm O9 - Extra 'Tools' menuitem: Traduire - {7A2EFD41-E6B3-11D2-89E3-00E0292EE574} - C:\Program Files\PROMT5\PROMTIE4\promtie5.htm O9 - Extra button: (no name) - {7A2EFD41-E6B3-11D2-89E3-00E0292EE575} - C:\Program Files\PROMT5\PROMTIE4\options.htm O9 - Extra 'Tools' menuitem: Personnaliser les options de traduction - {7A2EFD41-E6B3-11D2-89E3-00E0292EE575} - C:\Program Files\PROMT5\PROMTIE4\options.htm O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file) O12 - Plugin for .UVR: C:\Program Files\Internet Explorer\Plugins\NPUPano.dll O16 - DPF: teleir_cert - https://static.ir.dgi.minefi.gouv.fr/secure...teleir_cert.cab O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS...er.cab31267.cab O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.av.fr.aol.com/molbin/share...84/mcinsctl.cab O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.av.fr.aol.com/molbin/share...,21/mcgdmgr.cab O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/Solit...wn.cab31267.cab O23 - Service: Pack Securite (BackWeb Plug-in - 361343) - BackWeb Technologies Inc. - C:\PROGRA~1\PACKSE~1\backweb\361343\Program\SERVIC~1.EXE O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Pack Securite\backweb\361343\program\fsbwsys.exe O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - Unknown owner - C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe (file missing) O23 - Service: F-Secure HTTP Server (fshttps) - F-Secure Corporation - C:\Program Files\Pack Securite\FSPC\fshttps\fshttps.exe O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Pack Securite\Common\FSMA32.EXE O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINNT\system32\LEXBCES.EXE O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing) En passant je me suis posé une question, Est t-il possible de modifier cette ligne " R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer fourni par AOL " Par "R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer " ? même si j'utilise Mozilla Firefox j'aimerai bien modifier ça ^^ -
Demende analyse de log pour un gars debutant dans la chose
Spartan a répondu à un(e) sujet de Spartan dans Analyses et éradication malwares
ok c'est parti ! et pendant ce temps pourais-tu voir d'ou vient cette disparition d'icone ? -
Demende analyse de log pour un gars debutant dans la chose
Spartan a répondu à un(e) sujet de Spartan dans Analyses et éradication malwares
Re, elle est jamais masqué d'habitude ^^ mais bon je sais pas si il se lance au demarrage(surtout ça qui m'inquiète je voudrai pas a chaque fois le lancer manuellement ! ) et quand je regarde dans Démarrer>programme>Pack sécurité : toutes les icônes de F-secure on disparu ! A la place il y a la fenêtre flottante de windows (peut être que si on compare le log d'avant et le log d'après le problème on retrouvera pourquoi ça fait ca .... Mais c'est pas trop grave a la limite, le plus important c'est que Ewido ne lance toujours pas de Update et il y a le même message d'erreur ! -
Demende analyse de log pour un gars debutant dans la chose
Spartan a répondu à un(e) sujet de Spartan dans Analyses et éradication malwares
oui je suis bien connecté a internet et j'ai désamorcé le firewall et en regardant de plus près j'ai vu que l'icone de F-Secure qui s'affichait en bas a coté de l'horloge n'y est plus ! Aurais-tu viré un mauvais truc ou c'est par le plus grand des hasards qu'il a disparu ? -
Demende analyse de log pour un gars debutant dans la chose
Spartan a répondu à un(e) sujet de Spartan dans Analyses et éradication malwares
Quand je fait ca il me dit:" Error :Failed to connect to serveur update.ewido.net." !! -
Demende analyse de log pour un gars debutant dans la chose
Spartan a répondu à un(e) sujet de Spartan dans Analyses et éradication malwares
ça y est j'ai rajouté rajouté l'analyse de http://virusscan.jotti.org/ ! (je l'ai édité sur le sujet précèdent. ) -
Demende analyse de log pour un gars debutant dans la chose
Spartan a répondu à un(e) sujet de Spartan dans Analyses et éradication malwares
désolé de répondre si tard j'ai essayé de lancé ewido en mode sans échec toute l'aprem mais j'ai pas réussi ... alors le check du début : Il n'était pas présent dans le répertoire TOUTES les ligne était en rapport avec ma webcam mais c'est pas grave si elle ne marche plus: je ne l'utilise pas souvent AUCUN de ses fichiers était présent ! Je l'ai fait mais a quoi ça sert ? Comme je le disait il ne se lance pas ... il est présent dans le gestionnaire des taches mais nul part autre ! Ensuite les analyses ... j'ai attendu Hyper lomptemps pour http://virusscan.jotti.org/ car leur serveur etait Plein mais je l'ai ! C'est assez alarmant... Service load: 0% 100% File: kmmup.exe Status: INFECTED/MALWARE MD5 6a87b94c5027d0307cab1906a59a7004 Packers detected: - Scanner results AntiVir Found Adware-Spyware/Xupiter.M adware ArcaVir Found Trojan.Downloader.Tsupdate.K Avast Found Win32:Tsupdate-G AVG Antivirus Found Generic.HTH BitDefender Found nothing ClamAV Found Trojan.Downloader.TSUp-9 Dr.Web Found Adware.TargetServer F-Prot Antivirus Found nothing Fortinet Found Uploader Kaspersky Anti-Virus Found not-a-virus:AdWare.Win32.Xupiter.m NOD32 Found nothing Norman Virus Control Found W32/Xupiter.M UNA Found TrojanDownloader.Win32.TSUpdate VirusBuster Found nothing VBA32 Found AdWare.Xupiter.m Ensuite le Log de Hijathis : Logfile of HijackThis v1.99.1 Scan saved at 16:59:17, on 07/25/2006 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\system32\svchost.exe C:\WINNT\system32\LEXBCES.EXE C:\WINNT\system32\spoolsv.exe C:\WINNT\system32\LEXPPS.EXE C:\PROGRA~1\PACKSE~1\backweb\361343\Program\SERVIC~1.EXE C:\WINNT\System32\svchost.exe C:\Program Files\ewido anti-spyware 4.0\guard.exe C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe C:\Program Files\Pack Securite\Anti-Virus\FSGK32.EXE C:\Program Files\Pack Securite\backweb\361343\program\fsbwsys.exe C:\Program Files\Pack Securite\Common\FSMA32.EXE C:\Program Files\Pack Securite\Common\FSMB32.EXE C:\WINNT\system32\regsvc.exe C:\WINNT\system32\MSTask.exe C:\Program Files\Pack Securite\Common\FCH32.EXE C:\WINNT\system32\stisvc.exe C:\WINNT\System32\WBEM\WinMgmt.exe C:\WINNT\system32\svchost.exe C:\Program Files\Pack Securite\Common\FAMEH32.EXE C:\Program Files\Pack Securite\Anti-Virus\fsrw.exe C:\Program Files\Pack Securite\FSPC\fspc.exe C:\Program Files\Pack Securite\FSPC\fshttps\fshttps.exe C:\Program Files\Pack Securite\Anti-Virus\fssm32.exe C:\Program Files\Pack Securite\Anti-Virus\fsav32.exe C:\WINNT\Explorer.EXE C:\WINNT\system32\wuauclt.exe C:\Program Files\QuickTime\qttask.exe C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\Program Files\PROMT5\INTEGRAL\pinmenu.exe C:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exe C:\Program Files\Trust\350SX CRADLE MOUSE WIRELESS OPTICAL\lwbwheel.exe C:\Program Files\MessengerPlus! 3\MsgPlus.exe C:\Program Files\Lexmark 2200 Series\lxbvbmgr.exe C:\Program Files\Lexmark 2200 Series\lxbvbmon.exe C:\Program Files\Pack Securite\Common\FSM32.EXE C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe C:\WINNT\system32\LVCOMSX.EXE C:\Program Files\Logitech\Video\LogiTray.exe C:\Program Files\Winamp\winampa.exe C:\Program Files\Pack Securite\backweb\361343\Program\fspex.exe C:\Program Files\Logitech\Video\FxSvr2.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Hijackthis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://jakams.skyblog.com/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://home.neuf.fr R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer fourni par AOL R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O4 - HKLM\..\Run: [synchronization Manager] mobsync.exe /logon O4 - HKLM\..\Run: [hpfsched] C:\WINNT\hpfsched.exe O4 - HKLM\..\Run: [PROMT Integrator] "C:\Program Files\PROMT5\INTEGRAL\PinStart.exe" /autorun O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe O4 - HKLM\..\Run: [ulead AutoDetector] C:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exe O4 - HKLM\..\Run: [LWBMOUSE] C:\Program Files\Trust\350SX CRADLE MOUSE WIRELESS OPTICAL\lwbwheel.exe O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" O4 - HKLM\..\Run: [Lexmark 2200 Series] "C:\Program Files\Lexmark 2200 Series\lxbvbmgr.exe" O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Pack Securite\Common\FSM32.EXE" /splash O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Pack Securite\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Pack Securite\FSGUI\FSSW.EXE" /reboot O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe O4 - HKLM\..\Run: [LVCOMSX] C:\WINNT\system32\LVCOMSX.EXE O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe O4 - HKLM\..\Run: [update] C:\Program Files\AntiVir PersonalEdition Classic\preupd.exe /CALLSCHEDULER /DM="0" /CALLSCHEDULER O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe O4 - HKCU\..\Run: [kmmu] C:\PROGRA~1\COMMON~1\kmmu\kmmum.exe O4 - HKCU\..\Run: [TVAgent WiFi] C:\Program Files\Kit ADSL\Wizard\Agent_WiFi.exe O4 - HKCU\..\Run: [RealPlayer] "C:\Program Files\Real\RealPlayer\realplay.exe" /RunUPGToolCommandReBoot O4 - Startup: PowerReg Scheduler.exe O4 - Global Startup: Pack Securite.lnk = C:\Program Files\Pack Securite\backweb\361343\Program\fspex.exe O8 - Extra context menu item: &Bloquer cette fenêtre publicitaire - C:\Program Files\Pack Securite\Anti-Spyware\blockpopups.htm O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: Filtre Web - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll O9 - Extra 'Tools' menuitem: Filtre Web - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll O9 - Extra button: Protection Internet Explorer - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Securite\Anti-Spyware\ieshield.dll O9 - Extra 'Tools' menuitem: Protection Internet Explorer... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Securite\Anti-Spyware\ieshield.dll O9 - Extra button: Traduction - {7A2EFD41-E6B3-11D2-89E3-00E0292EE574} - C:\Program Files\PROMT5\PROMTIE4\promtie5.htm O9 - Extra 'Tools' menuitem: Traduire - {7A2EFD41-E6B3-11D2-89E3-00E0292EE574} - C:\Program Files\PROMT5\PROMTIE4\promtie5.htm O9 - Extra button: (no name) - {7A2EFD41-E6B3-11D2-89E3-00E0292EE575} - C:\Program Files\PROMT5\PROMTIE4\options.htm O9 - Extra 'Tools' menuitem: Personnaliser les options de traduction - {7A2EFD41-E6B3-11D2-89E3-00E0292EE575} - C:\Program Files\PROMT5\PROMTIE4\options.htm O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file) O12 - Plugin for .UVR: C:\Program Files\Internet Explorer\Plugins\NPUPano.dll O16 - DPF: teleir_cert - https://static.ir.dgi.minefi.gouv.fr/secure...teleir_cert.cab O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS...er.cab31267.cab O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.av.fr.aol.com/molbin/share...84/mcinsctl.cab O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.av.fr.aol.com/molbin/share...,21/mcgdmgr.cab O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/Solit...wn.cab31267.cab O23 - Service: Pack Securite (BackWeb Plug-in - 361343) - BackWeb Technologies Inc. - C:\PROGRA~1\PACKSE~1\backweb\361343\Program\SERVIC~1.EXE O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Pack Securite\backweb\361343\program\fsbwsys.exe O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - Unknown owner - C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe (file missing) O23 - Service: F-Secure HTTP Server (fshttps) - F-Secure Corporation - C:\Program Files\Pack Securite\FSPC\fshttps\fshttps.exe O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Pack Securite\Common\FSMA32.EXE O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINNT\system32\LEXBCES.EXE O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing) Et le log ewido je le fait sur le mode normal ou il faut persister à essayer en mode sans échec ? Voila ! merci encore de ton attention Bruce lee ^^ -
Demende analyse de log pour un gars debutant dans la chose
Spartan a répondu à un(e) sujet de Spartan dans Analyses et éradication malwares
Et Antivir est déjà supprimé -
Demende analyse de log pour un gars debutant dans la chose
Spartan a répondu à un(e) sujet de Spartan dans Analyses et éradication malwares
Ba malgré plusieurs essai, voila ce que ça donne : " The file you uploaded is 0 bytes. It is very likely a firewall or a piece of malware is prohibiting you from uploading this file " ... et pourtant j'ai désamorcé le firewall ! Et en regardant de plus près .. H:/ est mon lecteur CD et il n'y a rien dedans .... -
Demende analyse de log pour un gars debutant dans la chose
Spartan a répondu à un(e) sujet de Spartan dans Analyses et éradication malwares
Le rapport d'Antivir ? Ah ba la je sais plus si je l'ai vu que dans le Pré-nettoyage il demande de virer Antivir, je suppose que il a du virer le rapport avec .... -
Demende analyse de log pour un gars debutant dans la chose
Spartan a répondu à un(e) sujet de Spartan dans Analyses et éradication malwares
Bonjour ! J'ai lu ton post avec attention et je viens de remarquer que j'ai déjà fait tout les procédures pour faire un bon log donc normalement mon log est correct ! ( même si je n'ai pas pu configurer Antivir car le tuto n'existe plus ... ) -
Demende analyse de log pour un gars debutant dans la chose
Spartan a répondu à un(e) sujet de Spartan dans Analyses et éradication malwares
Tres bien merci de s'occuper de moi je poste tout ça demain ! Bonne nuit ! -
bonjour ! Je souhaiterai faire analyser mon log ! Logfile of HijackThis v1.99.1 Scan saved at 22:23:12, on 07/24/2006 Platform: Windows 2000 SP4 (WinNT 5.00.2195) MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) Running processes: C:\WINNT\System32\smss.exe C:\WINNT\system32\winlogon.exe C:\WINNT\system32\services.exe C:\WINNT\system32\lsass.exe C:\WINNT\system32\svchost.exe C:\WINNT\system32\LEXBCES.EXE C:\WINNT\system32\spoolsv.exe C:\WINNT\system32\LEXPPS.EXE C:\PROGRA~1\PACKSE~1\backweb\361343\Program\SERVIC~1.EXE C:\WINNT\System32\svchost.exe C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe C:\Program Files\Pack Securite\Anti-Virus\FSGK32.EXE C:\Program Files\Pack Securite\backweb\361343\program\fsbwsys.exe C:\Program Files\Pack Securite\Common\FSMA32.EXE C:\Program Files\Pack Securite\Common\FSMB32.EXE C:\WINNT\system32\regsvc.exe C:\WINNT\system32\MSTask.exe C:\Program Files\Pack Securite\Common\FCH32.EXE C:\WINNT\system32\stisvc.exe C:\WINNT\System32\WBEM\WinMgmt.exe C:\Program Files\Pack Securite\Common\FAMEH32.EXE C:\WINNT\system32\svchost.exe C:\Program Files\Pack Securite\Anti-Virus\fsrw.exe C:\Program Files\Pack Securite\FSPC\fspc.exe C:\Program Files\Pack Securite\FSPC\fshttps\fshttps.exe C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe C:\Program Files\Pack Securite\Anti-Virus\fssm32.exe C:\Program Files\Pack Securite\Anti-Virus\fsav32.exe C:\WINNT\Explorer.EXE C:\Program Files\QuickTime\qttask.exe C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\WINNT\system32\wuauclt.exe C:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exe C:\Program Files\PROMT5\INTEGRAL\pinmenu.exe C:\Program Files\Trust\350SX CRADLE MOUSE WIRELESS OPTICAL\lwbwheel.exe C:\Program Files\MessengerPlus! 3\MsgPlus.exe C:\Program Files\Lexmark 2200 Series\lxbvbmgr.exe C:\Program Files\Lexmark 2200 Series\lxbvbmon.exe C:\Program Files\Pack Securite\Common\FSM32.EXE C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe C:\WINNT\system32\LVCOMSX.EXE C:\Program Files\Logitech\Video\LogiTray.exe C:\Program Files\Winamp\winampa.exe C:\Program Files\Pack Securite\backweb\361343\Program\fspex.exe C:\PROGRA~1\PACKSE~1\ANTI-S~1\fsaw.exe C:\Program Files\Pack Securite\FSGUI\fsguidll.exe C:\Program Files\Logitech\Video\FxSvr2.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\WINNT\System32\svchost.exe C:\Hijackthis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = about:blank R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://jakams.skyblog.com/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://home.neuf.fr R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer fourni par AOL R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O4 - HKLM\..\Run: [synchronization Manager] mobsync.exe /logon O4 - HKLM\..\Run: [hpfsched] C:\WINNT\hpfsched.exe O4 - HKLM\..\Run: [PROMT Integrator] "C:\Program Files\PROMT5\INTEGRAL\PinStart.exe" /autorun O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [winupdt] RUNDLL32.EXE c:\winnt\yimpborl.dll,_mainRD O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe O4 - HKLM\..\Run: [ulead AutoDetector] C:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exe O4 - HKLM\..\Run: [AQ3HelperStartUp] C:\PROGRA~1\AQUATI~1\AQ3HEL~1.EXE /partner AQ3 O4 - HKLM\..\Run: [TrustInstaller] H:\Setup.exe O4 - HKLM\..\Run: [LWBMOUSE] C:\Program Files\Trust\350SX CRADLE MOUSE WIRELESS OPTICAL\lwbwheel.exe O4 - HKLM\..\Run: [KOIw00AH7] C:\WINNT\frkycga.exe O4 - HKLM\..\Run: [uharar] C:\WINNT\uharar.exe O4 - HKLM\..\Run: [HELPER] C:\WINNT\system32\temp532.exe -N O4 - HKLM\..\Run: [GdlaXpvf] C:\WINNT\frkycga.exe O4 - HKLM\..\Run: [OUwbTW1] C:\WINNT\frkycga.exe O4 - HKLM\..\Run: [f562BG] C:\WINNT\frkycga.exe O4 - HKLM\..\Run: [lDGD] C:\WINNT\frkycga.exe O4 - HKLM\..\Run: [P6Fi] C:\WINNT\frkycga.exe O4 - HKLM\..\Run: [bGUJXy] C:\WINNT\frkycga.exe O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" O4 - HKLM\..\Run: [Lexmark 2200 Series] "C:\Program Files\Lexmark 2200 Series\lxbvbmgr.exe" O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program Files\Pack Securite\Common\FSM32.EXE" /splash O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program Files\Pack Securite\TNB\TNBUtil.exe" /CHECKALL /WAITFORSW O4 - HKLM\..\Run: [F-Secure Startup Wizard] "C:\Program Files\Pack Securite\FSGUI\FSSW.EXE" /reboot O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe O4 - HKLM\..\Run: [LVCOMSX] C:\WINNT\system32\LVCOMSX.EXE O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe O4 - HKLM\..\Run: [update] C:\Program Files\AntiVir PersonalEdition Classic\preupd.exe /CALLSCHEDULER /DM="0" /CALLSCHEDULER O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\2.bin\mwsoemon.exe O4 - HKCU\..\Run: [kmmu] C:\PROGRA~1\COMMON~1\kmmu\kmmum.exe O4 - HKCU\..\Run: [TVAgent WiFi] C:\Program Files\Kit ADSL\Wizard\Agent_WiFi.exe O4 - HKCU\..\Run: [RealPlayer] "C:\Program Files\Real\RealPlayer\realplay.exe" /RunUPGToolCommandReBoot O4 - Startup: PowerReg Scheduler.exe O4 - Global Startup: Pack Securite.lnk = C:\Program Files\Pack Securite\backweb\361343\Program\fspex.exe O8 - Extra context menu item: &Bloquer cette fenêtre publicitaire - C:\Program Files\Pack Securite\Anti-Spyware\blockpopups.htm O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZSYYYYYYYYFR O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll O9 - Extra button: Filtre Web - {200DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll O9 - Extra button: (no name) - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll O9 - Extra 'Tools' menuitem: Filtre Web - {200DB664-75B5-47c0-8B45-A44ACCF73F01} - C:\Program Files\Pack Securite\FSPC\fspcmsie.dll O9 - Extra button: Protection Internet Explorer - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Securite\Anti-Spyware\ieshield.dll O9 - Extra 'Tools' menuitem: Protection Internet Explorer... - {300DB664-75B5-47c0-8B45-A44ACCF73C00} - C:\Program Files\Pack Securite\Anti-Spyware\ieshield.dll O9 - Extra button: Traduction - {7A2EFD41-E6B3-11D2-89E3-00E0292EE574} - C:\Program Files\PROMT5\PROMTIE4\promtie5.htm O9 - Extra 'Tools' menuitem: Traduire - {7A2EFD41-E6B3-11D2-89E3-00E0292EE574} - C:\Program Files\PROMT5\PROMTIE4\promtie5.htm O9 - Extra button: (no name) - {7A2EFD41-E6B3-11D2-89E3-00E0292EE575} - C:\Program Files\PROMT5\PROMTIE4\options.htm O9 - Extra 'Tools' menuitem: Personnaliser les options de traduction - {7A2EFD41-E6B3-11D2-89E3-00E0292EE575} - C:\Program Files\PROMT5\PROMTIE4\options.htm O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file) O10 - Broken Internet access because of LSP provider 'winsflt.dll' missing O12 - Plugin for .UVR: C:\Program Files\Internet Explorer\Plugins\NPUPano.dll O16 - DPF: teleir_cert - https://static.ir.dgi.minefi.gouv.fr/secure...teleir_cert.cab O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS...er.cab31267.cab O16 - DPF: {4ED9DDF0-7479-4BBE-9335-5A1EDB1D8A21} - http://download.av.fr.aol.com/molbin/share...84/mcinsctl.cab O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab O16 - DPF: {BCC0FF27-31D9-4614-A68E-C18E1ADA4389} - http://download.av.fr.aol.com/molbin/share...,21/mcgdmgr.cab O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/Solit...wn.cab31267.cab O16 - DPF: {FC67BB52-AAB6-4282-9D51-2DAFFE73AFD0} - http://download.spyspotter.com/spyspotter/...rCabInstall.cab O18 - Protocol: bw+0 - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bw+0s - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bw-0 - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bw-0s - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bw00 - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bw00s - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bw10 - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bw10s - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bw20 - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bw20s - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bw30 - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bw30s - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bw40 - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bw40s - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bw50 - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bw50s - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bw60 - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bw60s - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bw70 - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bw70s - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bw80 - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bw80s - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bw90 - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bw90s - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwa0 - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwa0s - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwb0 - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwb0s - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwc0 - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwc0s - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwd0 - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwd0s - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwe0 - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwe0s - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwf0 - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwf0s - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwg0 - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwg0s - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwh0 - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwh0s - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwi0 - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwi0s - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwj0 - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwj0s - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwk0 - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwk0s - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwl0 - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwl0s - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwm0 - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwm0s - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwn0 - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwn0s - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwo0 - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwo0s - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwp0 - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwp0s - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwq0 - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwq0s - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwr0 - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwr0s - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bws0 - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bws0s - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwt0 - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwt0s - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwu0 - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwu0s - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwv0 - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwv0s - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bww0 - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bww0s - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwx0 - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwx0s - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwy0 - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwy0s - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwz0 - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: bwz0s - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O18 - Protocol: offline-8876480 - {2D6090F9-2AC3-45AD-A3B9-CAB92477C9EE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing) O23 - Service: Pack Securite (BackWeb Plug-in - 361343) - BackWeb Technologies Inc. - C:\PROGRA~1\PACKSE~1\backweb\361343\Program\SERVIC~1.EXE O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe O23 - Service: FSGKHS (F-Secure Gatekeeper Handler Starter) - F-Secure Corp. - C:\Program Files\Pack Securite\Anti-Virus\fsgk32st.exe O23 - Service: fsbwsys - F-Secure Corp. - C:\Program Files\Pack Securite\backweb\361343\program\fsbwsys.exe O23 - Service: F-Secure Anti-Virus Firewall Daemon (FSDFWD) - F-Secure Corporation - C:\Program Files\Pack Securite\FWES\Program\fsdfwd.exe O23 - Service: F-Secure HTTP Server (fshttps) - F-Secure Corporation - C:\Program Files\Pack Securite\FSPC\fshttps\fshttps.exe O23 - Service: F-Secure Management Agent (FSMA) - F-Secure Corporation - C:\Program Files\Pack Securite\Common\FSMA32.EXE O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINNT\system32\LEXBCES.EXE O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing) Merci de repondre au plus vite ^^