PC infecté

[sevenperweek]

Bonjour,

 

Depuis quelques jours mon PC reboote et l'ecran de démarrage se fige, j'ai un message sur fond bleu qui me dit que j'ai un problème avec mon system tray il me semble. Je n'y connais rien en virus, j'ai passé ccleaner, spybot, ad aware et avast, ils n'ont pas résolu le problème. Je viens de faire un rapport hijackthis, dois je le poster.

 

 

Si quelqu'un pourrait m'aider à fixer les bons éléments, je lui en serait très reconnaissant.

Merci pour l'aide que vous pourriez m'apporter.

 

Cordialement

Franck

[XmichouX]

Bonjour,

 

Télécharge Hijackthis (de Trend Micro)

Poste un rapport en suivant ce tuto.

Modifié le 18 novembre 2007 par XmichouX

[sevenperweek]

Bonjour,

 

Télécharge Hijackthis (de Trend Micro)

Poste un rapport en suivant ce tuto.

 

 

Bonjour XmichouX,

 

Merci pour votre réponse voici mion rapport :

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 12:38:16, on 18/11/2007

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16544)

Boot mode: Normal

 

Running processes:

F:\WINDOWS\System32\smss.exe

F:\WINDOWS\system32\csrss.exe

F:\WINDOWS\system32\winlogon.exe

F:\WINDOWS\system32\services.exe

F:\WINDOWS\system32\lsass.exe

F:\WINDOWS\system32\svchost.exe

F:\WINDOWS\system32\svchost.exe

F:\WINDOWS\System32\svchost.exe

F:\WINDOWS\System32\svchost.exe

F:\WINDOWS\System32\svchost.exe

F:\WINDOWS\Explorer.EXE

F:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

F:\Program Files\Alwil Software\Avast4\ashServ.exe

F:\WINDOWS\system32\spoolsv.exe

f:\program files\fichiers communs\logishrd\lvmvfm\LVPrcSrv.exe

F:\WINDOWS\sysinteg.exe

F:\WINDOWS\System32\winsys2.exe

F:\WINDOWS\system32\RUNDLL32.EXE

F:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

F:\Program Files\Java\jre1.6.0_02\bin\jusched.exe

F:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe

F:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe

F:\Program Files\Logitech\QuickCam10\QuickCam10.exe

F:\Program Files\Fichiers communs\Logitech\LComMgr\LVComSX.exe

F:\WINDOWS\system32\ctfmon.exe

F:\Program Files\Sony Corporation\Image Transfer\SonyTray.exe

F:\Program Files\Adobe\Acrobat 7.0\Acrobat\acrobat_sl.exe

F:\Program Files\WinZip\WZQKPICK.EXE

F:\Program Files\Bonjour\mDNSResponder.exe

F:\WINDOWS\System32\nvsvc32.exe

F:\WINDOWS\System32\svchost.exe

F:\Program Files\Raxco\PerfectDisk\PDSched.exe

F:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

F:\Program Files\Alwil Software\Avast4\ashWebSv.exe

F:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe

F:\WINDOWS\System32\wbem\wmiprvse.exe

F:\WINDOWS\System32\alg.exe

F:\WINDOWS\System32\svchost.exe

F:\WINDOWS\system32\wuauclt.exe

F:\Program Files\Mozilla Firefox\firefox.exe

F:\Documents and Settings\Franck\Bureau\HijackThis.exe

 

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - F:\Program Files\Java\jre1.6.0_02\bin\ssv.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - F:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - F:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll

O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - F:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE F:\WINDOWS\System32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [sW20] F:\WINDOWS\System32\sw20.exe

O4 - HKLM\..\Run: [sW24] F:\WINDOWS\System32\sw24.exe

O4 - HKLM\..\Run: [WinSys2] F:\WINDOWS\System32\winsys2.exe

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE F:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [avast!] F:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

O4 - HKLM\..\Run: [NeroFilterCheck] F:\WINDOWS\system32\NeroCheck.exe

O4 - HKLM\..\Run: [sunJavaUpdateSched] "F:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"

O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "F:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"

O4 - HKLM\..\Run: [LogitechCommunicationsManager] "F:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"

O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "F:\Program Files\Logitech\QuickCam10\QuickCam10.exe" /hide

O4 - HKLM\..\Run: [LVCOMSX] "F:\Program Files\Fichiers communs\Logitech\LComMgr\LVComSX.exe"

O4 - HKLM\..\Run: [QuickTime Task] "F:\Program Files\QuickTime\QTTask.exe" -atboottime

O4 - HKCU\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [LDM] F:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe

O4 - HKLM\..\Policies\Explorer\Run: [VerifyWinLoad] F:\WINDOWS\Winloadchk.exe

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] F:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] F:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] F:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] F:\WINDOWS\System32\CTFMON.EXE (User 'Default user')

O4 - Global Startup: Image Transfer.lnk = ?

O4 - Global Startup: Lancement rapide d'Adobe Acrobat.lnk = ?

O4 - Global Startup: WinZip Quick Pick.lnk = F:\Program Files\WinZip\WZQKPICK.EXE

O8 - Extra context menu item: Convertir en Adobe PDF - res://F:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

O8 - Extra context menu item: Convertir en un fichier PDF existant - res://F:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: Convertir la cible du lien en Adobe PDF - res://F:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

O8 - Extra context menu item: Convertir la cible du lien en un fichier PDF existant - res://F:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: Convertir la sélection en Adobe PDF - res://F:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

O8 - Extra context menu item: Convertir la sélection en un fichier PDF existant - res://F:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: Convertir les liens sélectionnés en fichier Adobe PDF - res://F:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html

O8 - Extra context menu item: Convertir les liens sélectionnés en un fichier PDF existant - res://F:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://F:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.6.0_02\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.6.0_02\bin\ssv.dll

O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - F:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - F:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - F:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1185576423390

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab

O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} - http://www.creative.com/su2/CTL_V02002/ocx/15030/CTPID.cab

O18 - Protocol: bw+0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bw+0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bw-0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bw-0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bw00 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bw00s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bw10 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bw10s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bw20 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bw20s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bw30 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bw30s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bw40 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bw40s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bw50 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bw50s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bw60 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bw60s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bw70 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bw70s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bw80 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bw80s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bw90 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bw90s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwa0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwa0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwb0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwb0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwc0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwc0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwd0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwd0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwe0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwe0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwf0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwf0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwg0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwg0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwh0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwh0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwi0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwi0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwj0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwj0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwk0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwk0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwl0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwl0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwm0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwm0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwn0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwn0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwo0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwo0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwp0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwp0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwq0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwq0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwr0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwr0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bws0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bws0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwt0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwt0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwu0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwu0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwv0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwv0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bww0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bww0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwx0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwx0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwy0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwy0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwz0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwz0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: offline-8876480 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O23 - Service: Adobe LM Service - Adobe Systems - F:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - F:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

O23 - Service: avast! Antivirus - ALWIL Software - F:\Program Files\Alwil Software\Avast4\ashServ.exe

O23 - Service: avast! Mail Scanner - ALWIL Software - F:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

O23 - Service: avast! Web Scanner - ALWIL Software - F:\Program Files\Alwil Software\Avast4\ashWebSv.exe

O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - F:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - F:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - f:\program files\fichiers communs\logishrd\lvmvfm\LVPrcSrv.exe

O23 - Service: LVSrvLauncher - Logitech Inc. - F:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - F:\WINDOWS\System32\nvsvc32.exe

O23 - Service: PDEngine - Raxco Software, Inc. - F:\Program Files\Raxco\PerfectDisk\PDEngine.exe

O23 - Service: PDScheduler (PDSched) - Raxco Software, Inc. - F:\Program Files\Raxco\PerfectDisk\PDSched.exe

O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - F:\Program Files\Windows Live\installer\WLSetupSvc.exe

 

--

End of file - 22868 bytes

 

Il y a beaucoup de files missing pour un programme (logitech desktop management) que j'ai désinstallé mais ce n'est pas l'origine du problème.

 

Merci

Cordialement

Franck

[XmichouX]

Re ,

 

 

Relance HiJackThis, do a system scan only, coche ces lignes :

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - F:\Program Files\Java\jre1.6.0_02\bin\ssv.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O4 - HKLM\..\Run: [WinSys2] F:\WINDOWS\System32\winsys2.exe

O4 - HKLM\..\Run: [NeroFilterCheck] F:\WINDOWS\system32\NeroCheck.exe

O4 - HKLM\..\Run: [QuickTime Task] "F:\Program Files\QuickTime\QTTask.exe" -atboottime

O4 - HKLM\..\Policies\Explorer\Run: [VerifyWinLoad] F:\WINDOWS\Winloadchk.exe

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.6.0_02\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.6.0_02\bin\ssv.dll

O18 - Protocol: bw+0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bw+0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bw-0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bw-0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bw00 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bw00s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bw10 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bw10s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bw20 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bw20s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bw30 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bw30s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bw40 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bw40s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bw50 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bw50s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bw60 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bw60s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bw70 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bw70s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bw80 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bw80s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bw90 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bw90s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwa0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwa0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwb0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwb0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwc0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwc0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwd0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwd0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwe0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwe0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwf0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwf0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwg0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwg0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwh0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwh0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwi0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwi0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwj0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwj0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwk0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwk0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwl0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwl0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwm0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwm0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwn0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwn0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwo0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwo0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwp0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwp0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwq0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwq0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwr0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwr0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bws0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bws0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwt0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwt0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwu0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwu0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwv0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwv0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bww0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bww0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwx0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwx0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwy0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwy0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwz0 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: bwz0s - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

O18 - Protocol: offline-8876480 - {53AC28DB-9BE2-45BC-9DA1-38B9403A44B8} - F:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (file missing)

Puis Fix Checked !

 

Télécharge OTMoveIt >> Tuto<<

 

Sauvegarde-le sur le Bureau

 

Séléctionne l'encadré ci-dessous

F:\WINDOWS\System32\winsys2.exe

F:\WINDOWS\Winloadchk.exe

Lance maintenant OTMoveIt .

 

Deux cadres apparaissent , clique droit sur le cadre de gauche , puis colle l'encadré ci desssus.

Et clique sur Movelt !

 

Si le programme te demande de redemarrer, accepte.

 

Poste le rapport qui se trouve dans : C:\_OTMoveIt\MovedFiles\date de création!

 

NOTE : Si tu obtiens un message comme quoi le rapport ne peut pas être créé, copie/colle ce qui apparaît dans la colonne droite de l’outil.

 

Puis reposte un Hijackthis.

Modifié le 18 novembre 2007 par XmichouX

[sevenperweek]

Re ,

Relance HiJackThis, do a system scan only, coche ces lignes :

 

Puis Fix Checked !

 

Télécharge OTMoveIt >> Tuto<<

 

Sauvegarde-le sur le Bureau

 

Séléctionne l'encadré ci-dessous

 

Lance maintenant OTMoveIt .

 

Deux cadres apparaissent , clique droit sur le cadre de gauche , puis colle l'encadré ci desssus.

Et clique sur Movelt !

 

Si le programme te demande de redemarrer, accepte.

 

Poste le rapport qui se trouve dans : C:\_OTMoveIt\MovedFiles\date de création!

 

NOTE : Si tu obtiens un message comme quoi le rapport ne peut pas être créé, copie/colle ce qui apparaît dans la colonne droite de l’outil.

 

Puis reposte un Hijackthis.

 

Merci pour la procédure:

 

Voici le post de OTMOveIt (ma partition système s'appelle F:):

 

F:\WINDOWS\System32\winsys2.exe moved successfully.

F:\WINDOWS\Winloadchk.exe moved successfully.

 

Created on 11/18/2007 14:05:32

 

et le nouveau hijackthis:

 

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 14:11:51, on 18/11/2007

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16544)

Boot mode: Normal

 

Running processes:

F:\WINDOWS\System32\smss.exe

F:\WINDOWS\system32\csrss.exe

F:\WINDOWS\system32\winlogon.exe

F:\WINDOWS\system32\services.exe

F:\WINDOWS\system32\lsass.exe

F:\WINDOWS\system32\svchost.exe

F:\WINDOWS\system32\svchost.exe

F:\WINDOWS\System32\svchost.exe

F:\WINDOWS\System32\svchost.exe

F:\WINDOWS\System32\svchost.exe

F:\WINDOWS\Explorer.EXE

F:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

F:\Program Files\Alwil Software\Avast4\ashServ.exe

F:\WINDOWS\system32\spoolsv.exe

f:\program files\fichiers communs\logishrd\lvmvfm\LVPrcSrv.exe

F:\WINDOWS\sysinteg.exe

F:\WINDOWS\system32\RUNDLL32.EXE

F:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

F:\Program Files\Java\jre1.6.0_02\bin\jusched.exe

F:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe

F:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe

F:\Program Files\Logitech\QuickCam10\QuickCam10.exe

F:\Program Files\Fichiers communs\Logitech\LComMgr\LVComSX.exe

F:\WINDOWS\system32\ctfmon.exe

F:\Program Files\Sony Corporation\Image Transfer\SonyTray.exe

F:\Program Files\WinZip\WZQKPICK.EXE

F:\Program Files\Bonjour\mDNSResponder.exe

F:\WINDOWS\System32\nvsvc32.exe

F:\WINDOWS\System32\svchost.exe

F:\Program Files\Raxco\PerfectDisk\PDSched.exe

F:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

F:\Program Files\Alwil Software\Avast4\ashWebSv.exe

F:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe

F:\WINDOWS\System32\alg.exe

F:\WINDOWS\System32\svchost.exe

F:\Program Files\Mozilla Thunderbird\thunderbird.exe

F:\Program Files\Java\jre1.6.0_02\bin\jucheck.exe

F:\Program Files\Mozilla Firefox\firefox.exe

F:\WINDOWS\System32\wbem\wmiprvse.exe

F:\Documents and Settings\Franck\Bureau\HijackThis.exe

 

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - F:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - F:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll

O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - F:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE F:\WINDOWS\System32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [sW20] F:\WINDOWS\System32\sw20.exe

O4 - HKLM\..\Run: [sW24] F:\WINDOWS\System32\sw24.exe

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE F:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [avast!] F:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

O4 - HKLM\..\Run: [sunJavaUpdateSched] "F:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"

O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "F:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"

O4 - HKLM\..\Run: [LogitechCommunicationsManager] "F:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"

O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "F:\Program Files\Logitech\QuickCam10\QuickCam10.exe" /hide

O4 - HKLM\..\Run: [LVCOMSX] "F:\Program Files\Fichiers communs\Logitech\LComMgr\LVComSX.exe"

O4 - HKCU\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [LDM] F:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] F:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] F:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] F:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] F:\WINDOWS\System32\CTFMON.EXE (User 'Default user')

O4 - Global Startup: Image Transfer.lnk = ?

O4 - Global Startup: Lancement rapide d'Adobe Acrobat.lnk = ?

O4 - Global Startup: WinZip Quick Pick.lnk = F:\Program Files\WinZip\WZQKPICK.EXE

O8 - Extra context menu item: Convertir en Adobe PDF - res://F:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

O8 - Extra context menu item: Convertir en un fichier PDF existant - res://F:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: Convertir la cible du lien en Adobe PDF - res://F:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

O8 - Extra context menu item: Convertir la cible du lien en un fichier PDF existant - res://F:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: Convertir la sélection en Adobe PDF - res://F:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

O8 - Extra context menu item: Convertir la sélection en un fichier PDF existant - res://F:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: Convertir les liens sélectionnés en fichier Adobe PDF - res://F:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html

O8 - Extra context menu item: Convertir les liens sélectionnés en un fichier PDF existant - res://F:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://F:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.6.0_02\bin\ssv.dll (file missing)

O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.6.0_02\bin\ssv.dll (file missing)

O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - F:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1185576423390

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab

O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} - http://www.creative.com/su2/CTL_V02002/ocx/15030/CTPID.cab

O23 - Service: Adobe LM Service - Adobe Systems - F:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - F:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

O23 - Service: avast! Antivirus - ALWIL Software - F:\Program Files\Alwil Software\Avast4\ashServ.exe

O23 - Service: avast! Mail Scanner - ALWIL Software - F:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

O23 - Service: avast! Web Scanner - ALWIL Software - F:\Program Files\Alwil Software\Avast4\ashWebSv.exe

O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - F:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - F:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - f:\program files\fichiers communs\logishrd\lvmvfm\LVPrcSrv.exe

O23 - Service: LVSrvLauncher - Logitech Inc. - F:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - F:\WINDOWS\System32\nvsvc32.exe

O23 - Service: PDEngine - Raxco Software, Inc. - F:\Program Files\Raxco\PerfectDisk\PDEngine.exe

O23 - Service: PDScheduler (PDSched) - Raxco Software, Inc. - F:\Program Files\Raxco\PerfectDisk\PDSched.exe

O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - F:\Program Files\Windows Live\installer\WLSetupSvc.exe

 

--

End of file - 9049 bytes

[sevenperweek]

Merci pour la procédure:

 

Voici le post de OTMOveIt (ma partition système s'appelle F:):

 

F:\WINDOWS\System32\winsys2.exe moved successfully.

F:\WINDOWS\Winloadchk.exe moved successfully.

 

Created on 11/18/2007 14:05:32

 

et le nouveau hijackthis:

 

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 14:11:51, on 18/11/2007

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16544)

Boot mode: Normal

 

Running processes:

F:\WINDOWS\System32\smss.exe

F:\WINDOWS\system32\csrss.exe

F:\WINDOWS\system32\winlogon.exe

F:\WINDOWS\system32\services.exe

F:\WINDOWS\system32\lsass.exe

F:\WINDOWS\system32\svchost.exe

F:\WINDOWS\system32\svchost.exe

F:\WINDOWS\System32\svchost.exe

F:\WINDOWS\System32\svchost.exe

F:\WINDOWS\System32\svchost.exe

F:\WINDOWS\Explorer.EXE

F:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

F:\Program Files\Alwil Software\Avast4\ashServ.exe

F:\WINDOWS\system32\spoolsv.exe

f:\program files\fichiers communs\logishrd\lvmvfm\LVPrcSrv.exe

F:\WINDOWS\sysinteg.exe

F:\WINDOWS\system32\RUNDLL32.EXE

F:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

F:\Program Files\Java\jre1.6.0_02\bin\jusched.exe

F:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe

F:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe

F:\Program Files\Logitech\QuickCam10\QuickCam10.exe

F:\Program Files\Fichiers communs\Logitech\LComMgr\LVComSX.exe

F:\WINDOWS\system32\ctfmon.exe

F:\Program Files\Sony Corporation\Image Transfer\SonyTray.exe

F:\Program Files\WinZip\WZQKPICK.EXE

F:\Program Files\Bonjour\mDNSResponder.exe

F:\WINDOWS\System32\nvsvc32.exe

F:\WINDOWS\System32\svchost.exe

F:\Program Files\Raxco\PerfectDisk\PDSched.exe

F:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

F:\Program Files\Alwil Software\Avast4\ashWebSv.exe

F:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe

F:\WINDOWS\System32\alg.exe

F:\WINDOWS\System32\svchost.exe

F:\Program Files\Mozilla Thunderbird\thunderbird.exe

F:\Program Files\Java\jre1.6.0_02\bin\jucheck.exe

F:\Program Files\Mozilla Firefox\firefox.exe

F:\WINDOWS\System32\wbem\wmiprvse.exe

F:\Documents and Settings\Franck\Bureau\HijackThis.exe

 

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - F:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - F:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll

O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - F:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll

O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE F:\WINDOWS\System32\NvCpl.dll,NvStartup

O4 - HKLM\..\Run: [nwiz] nwiz.exe /install

O4 - HKLM\..\Run: [sW20] F:\WINDOWS\System32\sw20.exe

O4 - HKLM\..\Run: [sW24] F:\WINDOWS\System32\sw24.exe

O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE F:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit

O4 - HKLM\..\Run: [avast!] F:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

O4 - HKLM\..\Run: [sunJavaUpdateSched] "F:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"

O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "F:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe"

O4 - HKLM\..\Run: [LogitechCommunicationsManager] "F:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe"

O4 - HKLM\..\Run: [LogitechQuickCamRibbon] "F:\Program Files\Logitech\QuickCam10\QuickCam10.exe" /hide

O4 - HKLM\..\Run: [LVCOMSX] "F:\Program Files\Fichiers communs\Logitech\LComMgr\LVComSX.exe"

O4 - HKCU\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [LDM] F:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] F:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] F:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] F:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] F:\WINDOWS\System32\CTFMON.EXE (User 'Default user')

O4 - Global Startup: Image Transfer.lnk = ?

O4 - Global Startup: Lancement rapide d'Adobe Acrobat.lnk = ?

O4 - Global Startup: WinZip Quick Pick.lnk = F:\Program Files\WinZip\WZQKPICK.EXE

O8 - Extra context menu item: Convertir en Adobe PDF - res://F:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

O8 - Extra context menu item: Convertir en un fichier PDF existant - res://F:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: Convertir la cible du lien en Adobe PDF - res://F:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

O8 - Extra context menu item: Convertir la cible du lien en un fichier PDF existant - res://F:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: Convertir la sélection en Adobe PDF - res://F:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html

O8 - Extra context menu item: Convertir la sélection en un fichier PDF existant - res://F:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html

O8 - Extra context menu item: Convertir les liens sélectionnés en fichier Adobe PDF - res://F:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html

O8 - Extra context menu item: Convertir les liens sélectionnés en un fichier PDF existant - res://F:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://F:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.6.0_02\bin\ssv.dll (file missing)

O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - F:\Program Files\Java\jre1.6.0_02\bin\ssv.dll (file missing)

O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - F:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1185576423390

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab

O16 - DPF: {F6ACF75C-C32C-447B-9BEF-46B766368D29} - http://www.creative.com/su2/CTL_V02002/ocx/15030/CTPID.cab

O23 - Service: Adobe LM Service - Adobe Systems - F:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - F:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

O23 - Service: avast! Antivirus - ALWIL Software - F:\Program Files\Alwil Software\Avast4\ashServ.exe

O23 - Service: avast! Mail Scanner - ALWIL Software - F:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

O23 - Service: avast! Web Scanner - ALWIL Software - F:\Program Files\Alwil Software\Avast4\ashWebSv.exe

O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - F:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - F:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - f:\program files\fichiers communs\logishrd\lvmvfm\LVPrcSrv.exe

O23 - Service: LVSrvLauncher - Logitech Inc. - F:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe

O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - F:\WINDOWS\System32\nvsvc32.exe

O23 - Service: PDEngine - Raxco Software, Inc. - F:\Program Files\Raxco\PerfectDisk\PDEngine.exe

O23 - Service: PDScheduler (PDSched) - Raxco Software, Inc. - F:\Program Files\Raxco\PerfectDisk\PDSched.exe

O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - F:\Program Files\Windows Live\installer\WLSetupSvc.exe

 

--

End of file - 9049 bytes

 

Selon cette source les fichiers sw20 et sw24 c'est pas bon mais je ne sais pas pourquoi ?

http://www.infos-du-net.com/forum/181751-1...ltat-hijackthis

[XmichouX]

Re,

 

Selon CastleCops, c'est pas mauvais : http://www.castlecops.com/StartupList.html

 

C'est mieux ?

 

 

Télécharge sur ton bureau : Clean (de Malekal)

Dézippe le sur ton bureau. Double-clic sur ce dossier clean.

Double-clic sur clean.cmd. Cela va ouvrir une fenêtre noire.

Un menu va apparaître, choisis l'option 1 puis entrée. Ensuite appuies sur une touche comme il te sera demandé et poste le rapport ici.

Le rapport se trouve ici : C:\rapport_clean.txt

Tuto

 

Si tu obtiens un fichier C:\upload_moi.zip, merci de faire ceci.

 

+++++++++++

 

Désinstalle avast, redémarre et supprime ~~>C:\Program Files\Alwil Software

 

Télécharge ccleaner (>>tuto à lire !<<), tu download «the latest version » puis installe le en décochant - Ajouter la Barre d'Outils Yahoo! CCleaner

Puis lance le nettoyage, puis fais chercher des erreurs et sauvegardes si tu le souhaites.

 

Télécharge et installe Antivir. (tuto)

Pourquoi changer ? Avast vs Antivir

Vérifie qu’il soit bien à jour ! Fais une analyse complète, poste le rapport.

[sevenperweek]

Selon cette source les fichiers sw20 et sw24 c'est pas bon mais je ne sais pas pourquoi ?

http://www.infos-du-net.com/forum/181751-1...ltat-hijackthis

j'ai vu pour les fichiers nwiz, sw20et sw24, carte mère, c'est safe. je m'occupe de faire tout le reste.

 

Merci, à plus tard quand j'aurais fini tout ça

[sevenperweek]

Re,

 

Selon CastleCops, c'est pas mauvais : http://www.castlecops.com/StartupList.html

 

C'est mieux ?

Télécharge sur ton bureau : Clean (de Malekal)

Dézippe le sur ton bureau. Double-clic sur ce dossier clean.

Double-clic sur clean.cmd. Cela va ouvrir une fenêtre noire.

Un menu va apparaître, choisis l'option 1 puis entrée. Ensuite appuies sur une touche comme il te sera demandé et poste le rapport ici.

Le rapport se trouve ici : C:\rapport_clean.txt

Tuto

 

Si tu obtiens un fichier C:\upload_moi.zip, merci de faire ceci.

 

+++++++++++

 

Désinstalle avast, redémarre et supprime ~~>C:\Program Files\Alwil Software

 

Télécharge ccleaner (>>tuto à lire !<<), tu download «the latest version » puis installe le en décochant - Ajouter la Barre d'Outils Yahoo! CCleaner

Puis lance le nettoyage, puis fais chercher des erreurs et sauvegardes si tu le souhaites.

 

Télécharge et installe Antivir. (tuto)

Pourquoi changer ? Avast vs Antivir

Vérifie qu’il soit bien à jour ! Fais une analyse complète, poste le rapport.

 

Voici le rapport de clean:

 

18/11/2007 a 14:45:18,31

 

*** Recherche des fichiers dans F:

 

*** Recherche des fichiers dans F:\WINDOWS\

F:\WINDOWS\sys???????????.exe FOUND

 

*** Recherche des fichiers dans F:\WINDOWS\system32

F:\WINDOWS\system32\winsys.exe FOUND

 

*** Recherche des fichiers dans F:\Program Files

[sevenperweek]

Voici le rapport de clean:

 

18/11/2007 a 14:45:18,31

 

*** Recherche des fichiers dans F:

 

*** Recherche des fichiers dans F:\WINDOWS\

F:\WINDOWS\sys???????????.exe FOUND

 

*** Recherche des fichiers dans F:\WINDOWS\system32

F:\WINDOWS\system32\winsys.exe FOUND

 

*** Recherche des fichiers dans F:\Program Files

 

dois je faire autre chose, supprimer les fichiers trouvés par exemple

Question bête surement mais je préfère la poser car le fichier winsys.exe me pose problême. Dois on le réparer ?est ce qu'il ne faut pas le remplacer par un winsys sain?

Dans les pages internet, je trouve le programme UniblueRegistryBooster concernant ces fichiers, je l'ai téléchargé et il trouve 3 fois plus de choses que Ccleaner, est ce un programme fiable ?

 

Merci encore

Franck