impossible de telecharger Hitjackthis

oGu · le 30 mars 2008

Ok. C'est probablement parce que ce fichier n'existe plus (mais comme il apparaît dans le rapport HijackThis, soyons méfiants!).

Pour s'en assurer:

Affichage des dossiers cachés

Menu "Outils" d'une fenêtre quelconque .
" Option des dossiers"
onglet "Affichage"
Active la case "Afficher les fichiers et dossiers cachés".
Désactive la case "Masquer les extensions des fichiers dont le type est connu".
Désactive la case "Masquer les fichiers protégés du système d'exploitation".
Clique sur "Appliquer à tous les dossiers"
Rend-toi dans ce dossier:

c:\windows\system32
Cherche le fichier intitulé:

zcwzxkjch.exe

Pascal62 · le 30 mars 2008

En effet il n'y figure pas, et je remets de suite les options que je viens de changer ...dans options...

Merci

oGu · le 31 mars 2008

HIJACKTHIS

Relance HijackThis
Sélectionne "Do a scan only"
Coche les lignes suivantes:

O4 - HKLM\..\Run: [zcwzxkjch] c:\windows\system32\zcwzxkjch.exe zcwzxkjch
Clique en bas sur "Fix checked"
Redémarre
Poste un nouveau rapport

Pascal62 · le 1 avril 2008

Bonjour!

fichier supprimé

et nouveau rapport :

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 20:32:00, on 01/04/2008

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16608)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

C:\Program Files\Alwil Software\Avast4\ashServ.exe

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

C:\Program Files\McAfee\Common Framework\FrameworkService.exe

c:\program files\mcafee.com\agent\mcdetect.exe

c:\PROGRA~1\mcafee.com\agent\mctskshd.exe

C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe

C:\Program Files\Synaptics\SynTP\SynTPLpr.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\WINDOWS\SOUNDMAN.EXE

C:\WINDOWS\AGRSMMSG.exe

C:\WINDOWS\system32\Rundll32.exe

C:\WINDOWS\system32\keyhook.exe

C:\Program Files\Arcade\PCMService.exe

C:\Program Files\Acer\eRecovery\Monitor.exe

C:\Program Files\Launch Manager\QtZgAcer.EXE

C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe

C:\WINDOWS\tppaldr.exe

C:\WINDOWS\system32\LVCOMSX.EXE

C:\Program Files\Logitech\Video\LogiTray.exe

C:\Program Files\McAfee.com\VSO\mcvsshld.exe

C:\Program Files\McAfee.com\VSO\oasclnt.exe

C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe

c:\program files\mcafee.com\agent\mcagent.exe

C:\PROGRA~1\mcafee.com\mps\mscifapp.exe

C:\Program Files\McAfee\Common Framework\UdaterUI.exe

C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

C:\Program Files\McAfee\Common Framework\McTray.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\MSN Messenger\msnmsgr.exe

C:\Program Files\Messenger\msmsgs.exe

C:\Program Files\Microsoft ActiveSync\wcescomm.exe

C:\PROGRA~1\MICROS~4\rapimgr.exe

C:\WINDOWS\system32\sistray.exe

C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe

C:\Program Files\Google\Google Updater\GoogleUpdater.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Logitech\Video\FxSvr2.exe

C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://global.acer.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.pctools.com/fr/spyware-doctor/p...ef/google_pack/

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll

O2 - BHO: McBrwHelper Class - {227B8AA8-DAF2-4892-BD1D-73F568BCB24E} - c:\program files\mcafee.com\mps\mcbrhlpr.dll

O2 - BHO: McAfee Privacy Service Popup Blocker - {3EC8255F-E043-4cae-8B3B-B191550C2A22} - c:\program files\mcafee.com\mps\popupkiller.dll

O2 - BHO: McAfee AntiPhishing Filter - {41D68ED8-4CFF-4115-88A6-6EBB8AF19000} - c:\program files\mcafee\spamkiller\mcapfbho.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.615.5858\swg.dll

O2 - BHO: (no name) - {C68AE9C0-0909-4DDC-B661-C1AFB9F5AE53} - (no file)

O3 - Toolbar: (no name) - {0BF43445-2F28-4351-9252-17FE6E806AA0} - (no file)

O3 - Toolbar: McAfee VirusScan - {BA52B914-B692-46c4-B683-905236F6F655} - c:\progra~1\mcafee.com\vso\mcvsshl.dll

O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O4 - HKLM\..\Run: [LaunchApp] Alaunch

O4 - HKLM\..\Run: [synTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe

O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

O4 - HKLM\..\Run: [soundMan] SOUNDMAN.EXE

O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe

O4 - HKLM\..\Run: [siSPower] Rundll32.exe SiSPower.dll,ModeAgent

O4 - HKLM\..\Run: [siS Windows KeyHook] C:\WINDOWS\system32\keyhook.exe

O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Arcade\PCMService.exe"

O4 - HKLM\..\Run: [iMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32

O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC

O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC

O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName

O4 - HKLM\..\Run: [LManager] C:\Program Files\Launch Manager\QtZgAcer.EXE

O4 - HKLM\..\Run: [eRecoveryService] C:\Program Files\Acer\eRecovery\Monitor.exe

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"

O4 - HKLM\..\Run: [TPP Auto Loader] C:\WINDOWS\tppaldr.exe

O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE

O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe

O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe

O4 - HKLM\..\Run: [VSOCheckTask] "C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" /checktask

O4 - HKLM\..\Run: [VirusScan Online] C:\Program Files\McAfee.com\VSO\mcvsshld.exe

O4 - HKLM\..\Run: [OASClnt] C:\Program Files\McAfee.com\VSO\oasclnt.exe

O4 - HKLM\..\Run: [MCAgentExe] c:\PROGRA~1\mcafee.com\agent\mcagent.exe

O4 - HKLM\..\Run: [MCUpdateExe] C:\PROGRA~1\mcafee.com\agent\mcupdate.exe

O4 - HKLM\..\Run: [MPFExe] C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe

O4 - HKLM\..\Run: [MPSExe] c:\PROGRA~1\mcafee.com\mps\mscifapp.exe /embedding

O4 - HKLM\..\Run: [MSKAGENTEXE] C:\PROGRA~1\McAfee\SPAMKI~1\MskAgent.exe

O4 - HKLM\..\Run: [MSKDetectorExe] C:\PROGRA~1\McAfee\SPAMKI~1\MSKDetct.exe /startup

O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\McAfee\Common Framework\UdaterUI.exe" /StartedFromRunKey

O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background

O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background

O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\wcescomm.exe"

O4 - HKCU\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033 -noicon

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O4 - Global Startup: Utility Tray.lnk = C:\WINDOWS\system32\sistray.exe

O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE

O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe

O4 - Global Startup: Outil de mise à jour Google.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll

O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll

O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll

O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~4\INetRepl.dll

O9 - Extra button: (no name) - {39FD89BF-D3F1-45b6-BB56-3582CCF489E1} - c:\program files\mcafee\spamkiller\mcapfbho.dll

O9 - Extra 'Tools' menuitem: McAfee AntiPhishing Filter - {39FD89BF-D3F1-45b6-BB56-3582CCF489E1} - c:\program files\mcafee\spamkiller\mcapfbho.dll

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://webscanner.kaspersky.fr/kavwebscan_unicode.cab

O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll

O16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.5 Control) - http://www.photoreflex.com/tools/ImageUplo...geUploader3.cab

O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll

O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - C:\Acer\eManager\anbmServ.exe

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe

O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: McAfee Framework Service (McAfeeFramework) - McAfee, Inc. - C:\Program Files\McAfee\Common Framework\FrameworkService.exe

O23 - Service: McAfee WSC Integration (McDetect.exe) - McAfee, Inc - c:\program files\mcafee.com\agent\mcdetect.exe

O23 - Service: McAfee Task Scheduler (McTskshd.exe) - McAfee, Inc - c:\PROGRA~1\mcafee.com\agent\mctskshd.exe

O23 - Service: McAfee SecurityCenter Update Manager (mcupdmgr.exe) - McAfee, Inc - C:\PROGRA~1\McAfee.com\Agent\mcupdmgr.exe

O23 - Service: McAfee Personal Firewall Service (MpfService) - McAfee Corporation - C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe

O23 - Service: McAfee SpamKiller Server (MskService) - McAfee Inc. - C:\PROGRA~1\McAfee\SPAMKI~1\MSKSrvr.exe

O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe

--

End of file - 12162 bytes

oGu · le 2 avril 2008

Salut Pascal!

Je ne vois plus d'infection, il ne reste que des bricoles à régler. Notes-tu encore des dysfonctionnements, ou bien tout te semble-t-il fonctionner correctement?

REGLAGES

DESKTOP MESSENGER

Le logiciel Desktop Messenger ne sert à rien: il est censé permettre à l'utilisateur de tirer profit de son matériel Logitech: en réalité il installe BackWeb, un soft louche qui se connecte à Logitech pour faire on ne sait trop quoi, considéré comme un simili-spyware...

Va dans ton Panneau de Configuration
Rubrique "Ajout/Suppression des programes"
Supprime : Logitech DESKTOP MESSENGER (fais bien attention au nom !!!)

TOOLBAR

Les toolbars sont déconseillées, en général elles n'aident en rien et ont des visées essentiellement publicitaires:voir ces liens:

Par ailleurs elles pourrissent les navigateurs en se greffant dessus...

Je te conseille de passer par "Ajouter Supprimer des programmes" de ton panneau de configuration" et de désinstaller la Yahoo! Toolbar

AntiVirus

Tu disposes de deux antivirus RESIDENTS: Avast! et McAfee.

Les deux surveillent ta machine en continue et se marchent sur les pieds: en sécurité informatique, il ne faut JAMAIS empiler deux logiciels ayant la même fonction de protection.

A priori tu as du acheter McAfee: sachant en plus que Avast! est un antivirus très médiocre, je te conseille de désinstaller Avast!:

Télécharge aswClear.exe sur ton bureau
Lance-le
Clique sur Uninstall
Redémarre l' ordinateur

Dans la foulée, désinstalle puis réinstalle McAfee car il semblerait que certaines options soient mal installées (en particulier McAfee Advisor). Ou bien clique sur l'installateur McAfee, il proposera sans doute de réparer ton installation.

HIJACKTHIS

Un nouveau rapport siou'plaît!

Modifié le 2 avril 2008 par oGu

Pascal62 · le 3 avril 2008

Bonjour!

Merci pour ton aide au niiveau du foncetionnement cela va mieux!

parc ontre je ne paux pas desinstaller McAfee, je n'y arrive pas !

Dés que j'ai progressé , je t'envoie un nouveau Rapport

Bye!

oGu · le 3 avril 2008

Salut!

Pour McAfee: essaie de retélécharger l'installateur et lance-le, il devrait te proposer soit la désinstallation, soit, mieux encore, la réparation.

Pascal62 · le 4 avril 2008

Bonjour

Bon voici la suite des problèmes :

Le logitech desktop messenger, n'est pas présent dans ajout suppression de programmes, via le pânneau de config.

La tolbar de Yahoo non plus

Quant au logiciel aswclear ... le lien ne fonctionne pas.

@ Plus

oGu · le 4 avril 2008

Salut!

Le logitech desktop messenger, n'est pas présent dans ajout suppression de programmes, via le pânneau de config.
La tolbar de Yahoo non plus

Ok, on va procéder différemment alors.

OTMOVEIT

Double clic sur OTMoveIt.exe
Sélectionne et copie les lignes ci-dessous

C:\Program Files\Logitech\Desktop Messenger
C:\Program Files\Yahoo!
Dans OTMoveIt, fais un clic droit dans la fenêtre "Paste List of Files/Folders to be moved" et choisis "coller".
Clic sur le bouton rouge MoveIt
Si un fichier ou un dossier ne peut être déplacé immédiatement, il te sera demander de redémarrer ta machine pour finir l'exécution: si c'est le cas, clic sur "Yes"
Copie et colle le rapport qu'il va te générer (il se trouve dans ce dossier : C:\_OTMoveIt\MovedFiles)

HIJACKTHIS

Relance HijackThis
Sélectionne "Do a scan only"
Coche les lignes suivantes si elles existent:
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe

O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll

O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll

Ferme tes navigateurs
Clique en bas sur "Fix checked"
Redémarre

CCLEANER SLIM

Lance CCleaner Slim
Clique sur l'onglet : "Registre"
Clique sur "Rechercher des erreurs" puis "Corriger les erreurs"
Répond "oui" à la demande de sauvegarde proposéeet enregistre-la dans tes documents
Clique sur l'onglet "nettoyeur" puis "lancer le nettoyage"

GOOGLE TOOLBAR

As-tu réussi à la supprimer?

Quant au logiciel aswclear ... le lien ne fonctionne pas.

Erreur de ma part, j'avais mal codée l'url.

Clique ici et exécute-le.

HIJACKTHIS #2

Une fois ces manipulations terminées, poste un nouveau rapport pour voir où nous en sommes.

Modifié le 4 avril 2008 par oGu

Pascal62 · le 4 avril 2008

Bon voilà on avance,

Le rapport OTMOVIE :

C:\Program Files\Logitech\Desktop Messenger\8876480\Program moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\8.1.1.50-8876480SL\Install moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\8.1.1.50-8876480SL\Plugins moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\8.1.1.50-8876480SL\Program\EN moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\8.1.1.50-8876480SL\Program moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\8.1.1.50-8876480SL moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOUTE\Misc\Temp moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOUTE\Misc moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOUTE\Data\2608 moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOUTE\Data\fde moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOUTE\Data\fdb moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOUTE\Data\fd8\a9a3f17 moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOUTE\Data\fd8\a9a3ef0 moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOUTE\Data\fd8\a9a3e36 moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOUTE\Data\fd8\a9a3e54 moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOUTE\Data\fd8\a9a3e53 moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOUTE\Data\fd8 moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOUTE\Data\LowIntegrity moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOUTE\Data\GenFlash\1 moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOUTE\Data\GenFlash moved successfully.

Folder move failed. C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOUTE\Data scheduled to be moved on reboot.

Folder move failed. C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOUTE scheduled to be moved on reboot.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOU\Misc\Temp moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOU\Misc moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOU\Data\LowIntegrity moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOU\Data\a20 moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOU\Data\34e1\a9a3f17 moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOU\Data\34e1\a9a3ef0 moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOU\Data\34e1\a9a3e54 moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOU\Data\34e1\a9a3e53 moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOU\Data\34e1\a9a3e36 moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOU\Data\34e1 moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOU\Data\6023 moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOU\Data\34de\Upstream moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOU\Data\34de moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOU\Data\GenFlash\1 moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOU\Data\GenFlash moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOU\Data moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOULOU moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOU\Misc\Temp moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOU\Misc moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOU\Data\LowIntegrity moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOU\Data\7f30 moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOU\Data\5da6\a9a3f17 moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOU\Data\5da6\a9a3ef0 moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOU\Data\5da6\a9a3e54 moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOU\Data\5da6\a9a3e53 moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOU\Data\5da6\a9a3e36 moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOU\Data\5da6 moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOU\Data\2fd2 moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOU\Data\6270\Upstream moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOU\Data\6270 moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOU\Data\GenFlash\1 moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOU\Data\GenFlash moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOU\Data moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOU moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOUTE\Misc\Backup moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOUTE\Misc\Temp moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOUTE\Misc moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOUTE\Data\6deb moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOUTE\Data\5a73\10685e1c moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOUTE\Data\5a73\10685d92\LDM Release Multi moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOUTE\Data\5a73\10685d92 moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOUTE\Data\5a73\a9a3f17 moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOUTE\Data\5a73\a9a3ef0 moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOUTE\Data\5a73\a9a3e54 moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOUTE\Data\5a73\a9a3e53 moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOUTE\Data\5a73\a9a3e36 moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOUTE\Data\5a73 moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOUTE\Data\4463 moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOUTE\Data\4460\a9acb42 moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOUTE\Data\4460\Upstream moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOUTE\Data\4460 moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOUTE\Data\LowIntegrity moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOUTE\Data\GenFlash\1 moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOUTE\Data\GenFlash moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOUTE\Data moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\Users\LOUTE moved successfully.

Folder move failed. C:\Program Files\Logitech\Desktop Messenger\8876480\Users scheduled to be moved on reboot.

C:\Program Files\Logitech\Desktop Messenger\8876480\InitData\Data\GenFlash\1 moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\InitData\Data\GenFlash moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\InitData\Data moved successfully.

C:\Program Files\Logitech\Desktop Messenger\8876480\InitData moved successfully.

Folder move failed. C:\Program Files\Logitech\Desktop Messenger\8876480 scheduled to be moved on reboot.

Folder move failed. C:\Program Files\Logitech\Desktop Messenger scheduled to be moved on reboot.

C:\Program Files\Yahoo!\Common moved successfully.

C:\Program Files\Yahoo!\Companion\Data moved successfully.

Folder move failed. C:\Program Files\Yahoo!\Companion\Installs\cpn scheduled to be moved on reboot.

Folder move failed. C:\Program Files\Yahoo!\Companion\Installs scheduled to be moved on reboot.

Folder move failed. C:\Program Files\Yahoo!\Companion scheduled to be moved on reboot.

Folder move failed. C:\Program Files\Yahoo! scheduled to be moved on reboot.

OTMoveIt2 by OldTimer - Version 1.0.21 log created on 04042008_214703

Le rapport Hijackthis :

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 23:23:37, on 04/04/2008

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16608)

Boot mode: Normal

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

C:\Program Files\McAfee\Common Framework\FrameworkService.exe

c:\program files\mcafee.com\agent\mcdetect.exe

c:\PROGRA~1\mcafee.com\agent\mctskshd.exe

C:\PROGRA~1\McAfee.com\PERSON~1\MpfService.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\wuauclt.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Synaptics\SynTP\SynTPLpr.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\WINDOWS\SOUNDMAN.EXE

C:\WINDOWS\AGRSMMSG.exe

C:\WINDOWS\system32\Rundll32.exe

C:\WINDOWS\system32\keyhook.exe

C:\Program Files\Arcade\PCMService.exe

C:\Program Files\Launch Manager\QtZgAcer.EXE

C:\Program Files\Acer\eRecovery\Monitor.exe

C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe

C:\WINDOWS\tppaldr.exe

C:\WINDOWS\system32\LVCOMSX.EXE

C:\Program Files\Logitech\Video\LogiTray.exe

C:\Program Files\McAfee.com\VSO\mcvsshld.exe

C:\Program Files\McAfee.com\VSO\oasclnt.exe

c:\program files\mcafee.com\agent\mcagent.exe

C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe

C:\PROGRA~1\mcafee.com\mps\mscifapp.exe

C:\Program Files\McAfee\Common Framework\UdaterUI.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\MSN Messenger\msnmsgr.exe

C:\Program Files\McAfee\Common Framework\McTray.exe

C:\Program Files\Messenger\msmsgs.exe

C:\Program Files\Microsoft ActiveSync\wcescomm.exe

C:\WINDOWS\system32\wuauclt.exe

C:\PROGRA~1\MICROS~4\rapimgr.exe

C:\WINDOWS\system32\sistray.exe

C:\Program Files\Google\Google Updater\GoogleUpdater.exe

C:\PROGRA~1\McAfee.com\PERSON~1\MpfAgent.exe

C:\Program Files\Logitech\Video\FxSvr2.exe

C:\Program Files\Internet Explorer\iexplore.exe