fenêtre inconnu qui s'ouvre continuellement - Sécurité - Windows & Software
Marsh Posté le 22-07-2006 à 01:17:27
voici mon rapport Hijackthis: 
 
Logfile of HijackThis v1.99.1 
Scan saved at 01:16:17, on 22/07/2006 
Platform: Windows XP SP2 (WinNT 5.01.2600) 
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) 
 
Running processes: 
C:\WINDOWS\System32\smss.exe 
C:\WINDOWS\system32\csrss.exe 
C:\WINDOWS\system32\winlogon.exe 
C:\WINDOWS\system32\services.exe 
C:\WINDOWS\system32\lsass.exe 
C:\WINDOWS\system32\Ati2evxx.exe 
C:\WINDOWS\system32\svchost.exe 
C:\WINDOWS\system32\svchost.exe 
C:\WINDOWS\System32\svchost.exe 
C:\WINDOWS\system32\svchost.exe 
C:\WINDOWS\system32\svchost.exe 
C:\WINDOWS\system32\spoolsv.exe 
C:\WINDOWS\system32\Ati2evxx.exe 
C:\WINDOWS\Explorer.EXE 
C:\WINDOWS\system32\ishost.exe 
C:\WINDOWS\system32\isnotify.exe 
C:\WINDOWS\system32\issearch.exe 
C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVTray.exe 
C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVRID.exe 
C:\Program Files\Logitech\G-series Software\LGDCore.exe 
C:\Program Files\Logitech\G-series Software\LCDMon.exe 
C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe 
C:\WINDOWS\system32\ismon.exe 
C:\WINDOWS\SOUNDMAN.EXE 
C:\WINDOWS\ALCWZRD.EXE 
C:\WINDOWS\ALCMTR.EXE 
C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe 
C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe 
C:\Program Files\Logitech\G-series Software\Applets\LCDClock.exe 
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe 
C:\Program Files\Logitech\G-series Software\Applets\LCDMedia.exe 
C:\Program Files\Schmads Inc\G15_TeamSpeak\G15_TeamSpeak.exe 
C:\Program Files\G15 BF2 ServerInfo\G15 BF2 ServerInfo.exe 
C:\PROGRA~1\Wanadoo\TaskBarIcon.exe 
C:\WINDOWS\ATKKBService.exe 
C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\ISafe.exe 
C:\WINDOWS\System32\FTRTSVC.exe 
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe 
C:\WINDOWS\system32\PPATCH~1\wuaclt.exe 
C:\WINDOWS\?dobe\??rss.exe 
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe 
C:\program files\steam\steam.exe 
C:\Program Files\Logitech\SetPoint\SetPoint.exe 
C:\Program Files\Fichiers communs\Logitech\KHAL\KHALMNPR.EXE 
C:\PROGRA~1\Wanadoo\EspaceWanadoo.exe 
C:\WINDOWS\System32\alg.exe 
C:\PROGRA~1\Wanadoo\ComComp.exe 
C:\PROGRA~1\Wanadoo\Toaster.exe 
C:\PROGRA~1\Wanadoo\Inactivity.exe 
C:\PROGRA~1\Wanadoo\PollingModule.exe 
C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\VetMsg.exe 
C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE 
C:\PROGRA~1\Wanadoo\Watch.exe 
C:\WINDOWS\system32\svchost.exe 
C:\WINDOWS\ALCFDRTM.EXE 
C:\Program Files\Teamspeak2_RC2\TeamSpeak.exe 
C:\Program Files\Xfire\Xfire.exe 
C:\Fraps\fraps.exe 
C:\Program Files\TheTurtle\TheTurtle.exe 
C:\WINDOWS\system32\svchost.exe 
C:\Program Files\ewido anti-spyware 4.0\guard.exe 
C:\Program Files\ewido anti-spyware 4.0\ewido.exe 
C:\Program Files\MSN Messenger\msnmsgr.exe 
C:\Program Files\Internet Explorer\iexplore.exe 
C:\Documents and Settings\Le_killer\Bureau\HijackThis.exe 
 
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens 
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\Wanadoo\SEARCH~1.DLL 
R3 - URLSearchHook: (no name) - _{CFBFAE00-17A6-11D0-99CB-00C04FD64497} - (no file) 
O2 - BHO: (no name) - {5f4c3d09-b3b9-4f88-aa82-31332fee1c08} - C:\WINDOWS\system32\hp100.tmp (file missing) 
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll 
O2 - BHO: (no name) - {873eb32d-ae1a-4183-89bd-45a77f761be4} - C:\WINDOWS\system32\ixt0.dll 
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll 
O2 - BHO: XBTBPos00 - {E552EEFC-DE97-45D4-BA1A-F534A1B4A579} - C:\PROGRA~1\MORPHE~1\MORPHE~1.DLL 
O3 - Toolbar: Morpheus Toolbar - {119DBEDA-9c41-4F97-94B4-B6BCD01133CF} - C:\Program Files\Morpheus Toolbar\morpheustoolbar.dll 
O4 - HKLM\..\Run: [CaAvTray] "C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVTray.exe" 
O4 - HKLM\..\Run: [CAVRID] "C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\CAVRID.exe" 
O4 - HKLM\..\Run: [Raccourci vers la page des propriétés de High Definition Audio] HDAudPropShortcut.exe 
O4 - HKLM\..\Run: [Launch LGDCore] "C:\Program Files\Logitech\G-series Software\LGDCore.exe" /SHOWHIDE 
O4 - HKLM\..\Run: [Launch LCDMon] "C:\Program Files\Logitech\G-series Software\LCDMon.exe" 
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE 
O4 - HKLM\..\Run: [mmtask] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe" 
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE 
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE 
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE 
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exe 
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\GestMaj.exe TaskBarIcon.exe 
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_07\bin\jusched.exe 
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe 
O4 - HKLM\..\Run: [VirtualCloneDrive] "C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe" /s 
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe 
O4 - HKLM\..\Run: [SpyQuake2.com] C:\Program Files\SpyQuake2.com\Spy-Quake2.exe /h 
O4 - HKLM\..\Run: [!ewido] "C:\Program Files\ewido anti-spyware 4.0\ewido.exe" /minimized 
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe 
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\Wanadoo\Shell.exe appLaunchClientZone.shl|DEFAULT=cnx|PARAM= 
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background 
O4 - HKCU\..\Run: [Cwsa] "C:\WINDOWS\system32\PPATCH~1\wuaclt.exe" -vt yazb 
O4 - HKCU\..\Run: [Khay] C:\WINDOWS\?dobe\??rss.exe 
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe" 
O4 - HKCU\..\Run: [Steam] "c:\program files\steam\steam.exe" -silent 
O4 - HKCU\..\Run: [TheTurtle] C:\Program Files\TheTurtle\TheTurtle.exe 
O4 - Startup: Morpheus.lnk = C:\Program Files\Morpheus\Morpheus.exe 
O4 - Startup: Xfire.lnk = C:\Program Files\Xfire\Xfire.exe 
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe 
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe 
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll 
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_07\bin\ssv.dll 
O9 - Extra button: Morpheus Toolbar - {119DBEDA-9c41-4F97-94B4-B6BCD01133CF} - C:\Program Files\Morpheus Toolbar\morpheustoolbar.dll 
O9 - Extra 'Tools' menuitem: Morpheus Toolbar - {119DBEDA-9c41-4F97-94B4-B6BCD01133CF} - C:\Program Files\Morpheus Toolbar\morpheustoolbar.dll 
O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe 
O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\WANADO~1\Wanadoo Messager.exe 
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU) 
O16 - DPF: {74CD40EA-EF77-4BAD-808A-B5982DA73F20} - http://yax-download.yazzle.net/Yaz [...] refid=1123 
O18 - Protocol: bw+0 - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw+0s - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw-0 - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw-0s - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw00 - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw00s - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw10 - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw10s - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw20 - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw20s - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw30 - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw30s - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw40 - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw40s - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw50 - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw50s - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw60 - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw60s - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw70 - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw70s - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw80 - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw80s - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw90 - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw90s - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwa0 - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwa0s - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwb0 - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwb0s - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwc0 - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwc0s - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwd0 - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwd0s - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwe0 - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwe0s - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwf0 - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwf0s - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll 
O18 - Protocol: bwg0 - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwg0s - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwh0 - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwh0s - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwi0 - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwi0s - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwj0 - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwj0s - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwk0 - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwk0s - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwl0 - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwl0s - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwm0 - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwm0s - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwn0 - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwn0s - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwo0 - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwo0s - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwp0 - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwp0s - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwq0 - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwq0s - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwr0 - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwr0s - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bws0 - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bws0s - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwt0 - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwt0s - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwu0 - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwu0s - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwv0 - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwv0s - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bww0 - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bww0s - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwx0 - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwx0s - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwy0 - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwy0s - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwz0 - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwz0s - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL 
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL 
O18 - Protocol: offline-8876480 - {058D84FF-E904-4CA1-9AA7-FF9CF5E57844} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O20 - AppInit_DLLs:  C:\WINDOWS\system32\wuauclt.dll 
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll 
O20 - Winlogon Notify: winemx32 - winemx32.dll (file missing) 
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll 
O21 - SSODL: cinnamomum - {93ac7c30-3878-4eaa-9420-7977285df5b1} - C:\WINDOWS\system32\pmnqguh.dll (file missing) 
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe 
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe 
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe 
O23 - Service: CAISafe - Computer Associates International, Inc. - C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\ISafe.exe 
O23 - Service: ewido anti-spyware 4.0 guard - Anti-Malware Development a.s. - C:\Program Files\ewido anti-spyware 4.0\guard.exe 
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe 
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe 
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe 
O23 - Service: VET Message Service (VETMSGNT) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust EZ Armor\eTrust EZ Antivirus\VetMsg.exe 
Marsh Posté le 22-07-2006 à 01:30:02
Passe un coup d'ad-ware ou spybot et corrige les erreurs qu'ils te signalent. 
Vide les fichiers temporaires de ton navigateur. 
Vide les cookies de ton navigateur 
Utilise firefox 
Evite de visiter les sites porno, cela fou la grouille sur les ordinateurs. 
 
Pour le Hijackthis, passe par la, tout est expliqué. 
http://forum.hardware.fr/forum2.ph [...] w=0&nojs=0
Marsh Posté le 22-07-2006 à 12:01:35
Bonjour. 
 
Tu es victime de plusieurs infections, nous allons donc proceder etape par etape. 
 
1/Télécharger SmitfraudFix (de S!Ri, balltrap34 et moel31) : http://siri.urz.free.fr/Fix/SmitfraudFix.zip 
 
2/ Dézipper la totalité de l'archive sur ton bureau. 
 
3/ Déconnecte toi du net. 
 
4/ Double cliquer sur smitfraudfix.cmd 
 
5/ Sélectionner 1 dans le menu pour créer un rapport des fichiers responsables de l'infection. 
 
6/ Sauvegarde le rapport. 
 
7/ Démarre en Mode sans Echec : http://www.sosordi.net/Faq/Faq.2.html 
 
8/* Double cliquer sur smitfraudfix.cmd 
 
* Sélectionner 2 dans le menu pour supprimer les fichiers respondables de l'infection. 
 
* A la question: Voulez-vous nettoyer le registre ? répondre O (oui) 
 
9/ Sauvegarde le rapport puis colle le dans ta prochaine reponse. 
Marsh Posté le 22-07-2006 à 16:31:53
voila et merci 
 
SmitFraudFix v2.74 
 
Rapport fait à 16:24:41,54, 22/07/2006 
Executé à partir de C:\Documents and Settings\Le_killer\Mes documents\Mille et un Services\SmitfraudFix 
OS: Microsoft Windows XP [version 5.1.2600] - Windows_NT 
Fix executé en mode normal 
 
»»»»»»»»»»»»»»»»»»»»»»»» Avant SmitFraudFix 
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!! 
 
SrchSTS.exe by S!Ri 
Search SharedTaskScheduler's .dll 
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler] 
"{7916f057-223f-4612-ac84-e882cbe043d4}"="bals" 
 
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler] 
"cinnamomum"="{93ac7c30-3878-4eaa-9420-7977285df5b1}" 
 
 
»»»»»»»»»»»»»»»»»»»»»»»» Arret des processus 
 
 
»»»»»»»»»»»»»»»»»»»»»»»» Generic Renos Fix 
 
GenericRenosFix by S!Ri 
 
 
»»»»»»»»»»»»»»»»»»»»»»»» Suppression des fichiers infectés 
 
C:\WINDOWS\system32\isnotify.exe supprimé 
C:\WINDOWS\system32\issearch.exe supprimé 
Problème suppression C:\WINDOWS\system32\ixt?.dll 
Problème suppression C:\WINDOWS\system32\ixt??.dll 
C:\WINDOWS\system32\ot.ico supprimé 
C:\WINDOWS\system32\ts.ico supprimé 
C:\WINDOWS\system32\components\flx?.dll supprimé 
C:\DOCUME~1\LE_KIL~1\Favoris\Antivirus Test Online.url supprimé 
C:\Program Files\SpyQuake2.com\ supprimé 
 
»»»»»»»»»»»»»»»»»»»»»»»» Suppression Fichiers Temporaires 
 
 
»»»»»»»»»»»»»»»»»»»»»»»» Nettoyage du registre 
  
Nettoyage terminé.  
  
»»»»»»»»»»»»»»»»»»»»»»»» Après SmitFraudFix 
!!!Attention, les clés qui suivent ne sont pas forcément infectées!!! 
 
SrchSTS.exe by S!Ri 
Search SharedTaskScheduler's .dll 
 
 
»»»»»»»»»»»»»»»»»»»»»»»» Reboot 
 
C:\WINDOWS\system32\ixt?.dll supprimé  
 
»»»»»»»»»»»»»»»»»»»»»»»» Fin 
 
Marsh Posté le 22-07-2006 à 01:13:28
Bonjour a tous, mon problème c'est que des fenetre de page internet s'ouvre toutes seul.Soit c'est des fenetre pour des antivirus (PestTrap) soit des fenetre de pornographie, sa m'énerve car quand je joue sa me mes sur le bureau.Alors si quelqu'un peut m'aider sa serai trop bien.merci