Disque dur tourne sans cesse avec IE - Win NT/2K/XP - Windows & Software
Marsh Posté le 14-11-2005 à 08:59:07
avec IE, il est pas rare que certaint Spyware demande en page de depart l appel d une DLL sur des serveur ou des connerie comme ca. 
 
post un Hijackthis on y vera un peut plus clair.
Marsh Posté le 14-11-2005 à 09:42:17
> post un Hijackthis on y vera un peut plus clair. 
 
Désolé, je ne comprends pas ce qu'est un "Hijackthis" 
Marsh Posté le 14-11-2005 à 10:14:20
J'ai trouvé un logiciel qui s'appelle "Hijackthis", voici ce qu'il a donné : 
 
Logfile of HijackThis v1.99.1 
Scan saved at 10:11:25, on 14/11/2005 
Platform: Windows XP SP1 (WinNT 5.01.2600) 
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106) 
 
Running processes: 
C:\WINDOWS\System32\smss.exe 
C:\WINDOWS\system32\csrss.exe 
C:\WINDOWS\system32\winlogon.exe 
C:\WINDOWS\system32\services.exe 
C:\WINDOWS\system32\lsass.exe 
C:\WINDOWS\System32\Ati2evxx.exe 
C:\WINDOWS\system32\svchost.exe 
C:\WINDOWS\System32\svchost.exe 
C:\WINDOWS\System32\svchost.exe 
C:\WINDOWS\System32\svchost.exe 
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe 
C:\WINDOWS\Explorer.EXE 
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe 
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe 
C:\WINDOWS\SOUNDMAN.EXE 
C:\WINDOWS\AGRSMMSG.exe 
C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe 
C:\Program Files\Aspire Arcade\PCMService.exe 
C:\Program Files\CRW\shwicon.exe 
C:\PROGRA~1\LAUNCH~1\CPLCL32.EXE 
D:\iTunes\iTunesHelper.exe 
C:\Program Files\QuickTime\qttask.exe 
C:\Program Files\Logitech\MouseWare\system\em_exec.exe 
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe 
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe 
D:\Logiciels Installes\Micorsoft AntiSpyware\gcasDtServ.exe 
C:\Program Files\Messenger\msmsgs.exe 
C:\PROGRA~1\PANICW~1\POP-UP~1\PSFREE.EXE 
C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe 
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe 
D:\Logiciels Installes\Steganos\SIA2006.exe 
C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe 
C:\Program Files\IE New Window Maximizer\iemaximizer.exe 
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe 
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe 
C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe 
D:\Logiciels Installes\Mightyfax\MFNTCTL.EXE 
C:\Program Files\ATnotes\ATnotes.exe 
C:\Program Files\SpamPal\spampal.exe 
C:\WINDOWS\System32\brsvc01a.exe 
C:\WINDOWS\system32\spoolsv.exe 
C:\WINDOWS\System32\brss01a.exe 
C:\WINDOWS\System32\alg.exe 
C:\WINDOWS\system32\drivers\KodakCCS.exe 
D:\Logiciels Installes\Kerio\Personal Firewall 4\kpf4ss.exe 
C:\Program Files\Norton AntiVirus\navapsvc.exe 
D:\Logiciels Installes\Kerio\Personal Firewall 4\kpf4gui.exe 
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe 
D:\Logiciels Installes\Spyware Doctor\sdhelp.exe 
C:\WINDOWS\System32\svchost.exe 
C:\WINDOWS\System32\wdfmgr.exe 
D:\Logiciels Installes\Kerio\Personal Firewall 4\kpf4gui.exe 
D:\Logiciels Installes\Raxco\Perfect Disk\PDSched.exe 
C:\Program Files\iPod\bin\iPodService.exe 
C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE 
C:\Program Files\Internet Explorer\IEXPLORE.EXE 
C:\Program Files\Outlook Express\msimn.exe 
C:\Documents and Settings\Franck\Mes documents\Logiciels installes\Pfe32\PFE32.EXE 
D:\Logiciels telecharges\HijackThis\HijackThis.exe 
 
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://news.google.fr/nwshp?tab=wn [...] fr&topic=t 
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://news.google.fr/nwshp?tab=wn [...] fr&topic=t 
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://global.acer.com/ 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens 
N3 - Netscape 7: user_pref("browser.startup.homepage", "http://www.netscape.fr" ); (C:\Documents and Settings\Franck\Application Data\Mozilla\Profiles\default\jcryr2ef.slt\prefs.js) 
N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CNetscape_France.src" ); (C:\Documents and Settings\Franck\Application Data\Mozilla\Profiles\default\jcryr2ef.slt\prefs.js) 
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll 
O2 - BHO: Trellian BHO Impl - {24180B00-2EB6-11d7-BD6F-004854603DCE} - C:\Program Files\TRELLIAN\Toolbar\toolbar.dll 
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - D:\LOGICI~1\SPYWAR~1\tools\iesdsg.dll 
O2 - BHO: NAV Helper - {A8F38D8D-E480-4D52-B7A2-731BB6995FDD} - C:\Program Files\Norton AntiVirus\NavShExt.dll 
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - D:\LOGICI~1\SPYWAR~1\tools\iesdpb.dll 
O2 - BHO: NTIECatcher Class - {C56CB6B0-0D96-11D6-8C65-B2868B609932} - C:\Program Files\Xi\NetTransport 2\NTIEHelper.dll 
O3 - Toolbar: ToolbarBrowser - {71AAABE5-1F0F-11d7-BD6F-004854603DCE} - C:\Program Files\TRELLIAN\Toolbar\toolbar.dll 
O3 - Toolbar: Steganos Internet Anonyme - {00000000-5736-4205-0008-f7ed0776fb27} - d:\logiciels installes\steganos\sia2006iep.dll 
O3 - Toolbar: SYSTRAN Web Translator 5.0  - {A5899B52-3AF9-4F56-85FE-AD7B3BE8490F} - D:\Logiciels Installes\systran\web translator\IEPlugIn.dll 
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton AntiVirus\NavShExt.dll 
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx 
O4 - HKLM\..\Run: [LaunchApp] Alaunch 
O4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exe 
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe 
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE 
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe 
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe 
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe 
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exe 
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Aspire Arcade\PCMService.exe" 
O4 - HKLM\..\Run: [ShowIcon_Chander_CRW Series Driver v1.17r019] "C:\Program Files\CRW\shwicon.exe" -t"Chander\CRW Series Driver v1.17r019" 
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\CPLCL32.EXE 
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exe 
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe 
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe 
O4 - HKLM\..\Run: [iTunesHelper] D:\iTunes\iTunesHelper.exe 
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime 
O4 - HKLM\..\Run: [Pqzxzs] C:\Program Files\Thcnqp\Tlohug.exe 
O4 - HKLM\..\Run: [gcasServ] "D:\Logiciels Installes\Micorsoft AntiSpyware\gcasServ.exe" 
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot 
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe" 
O4 - HKLM\..\Run: [SSC_UserPrompt] "C:\Program Files\Fichiers communs\Symantec Shared\Security Center\UsrPrmpt.exe" 
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background 
O4 - HKCU\..\Run: [PopUpStopperFreeEdition] "C:\PROGRA~1\PANICW~1\POP-UP~1\PSFREE.EXE" 
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe 
O4 - HKCU\..\Run: [SIA2006] "D:\Logiciels Installes\Steganos\SIA2006.exe" -boot 
O4 - HKCU\..\Run: [IE New Window Maximizer] C:\Program Files\IE New Window Maximizer\iemaximizer.exe 
O4 - Startup: ATnotes.lnk = C:\Program Files\ATnotes\ATnotes.exe 
O4 - Startup: SpamPal.lnk = C:\Program Files\SpamPal\spampal.exe 
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe 
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe 
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe 
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE 
O4 - Global Startup: Kodak software updater.lnk = C:\Program Files\Kodak\KODAK Software Updater\7288971\Program\Kodak Software Updater.exe 
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe 
O4 - Global Startup: MightyFAX Controller.lnk = D:\Logiciels Installes\Mightyfax\MFNTCTL.EXE 
O8 - Extra context menu item: Grab &Selected Text... - res://C:\Program Files\Cogitum Co-Citer\CogitumHelpers.dll/ctGrab.htm 
O8 - Extra context menu item: Tout Télécharger avec Net Transport - C:\Program Files\Xi\NetTransport 2\NTAddList.html 
O8 - Extra context menu item: Télécharger avec Net Transport - C:\Program Files\Xi\NetTransport 2\NTAddLink.html 
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_04\bin\npjpi142_04.dll 
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_04\bin\npjpi142_04.dll 
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - D:\LOGICI~1\SPYWAR~1\tools\iesdpb.dll 
O9 - Extra button: Co-Citer - {CDE56277-42BE-11d4-B79C-00C0F04903DC} - C:\Program Files\Cogitum Co-Citer\Co-Citer.exe 
O9 - Extra 'Tools' menuitem: Cogitum &Co-Citer - {CDE56277-42BE-11d4-B79C-00C0F04903DC} - C:\Program Files\Cogitum Co-Citer\Co-Citer.exe 
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE 
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE 
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204 
O18 - Protocol: bw+0 - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw+0s - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw-0 - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw-0s - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw00 - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw00s - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw10 - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw10s - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw20 - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw20s - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw30 - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw30s - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw40 - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw40s - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw50 - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw50s - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw60 - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw60s - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw70 - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw70s - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw80 - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw80s - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw90 - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bw90s - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwa0 - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwa0s - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwb0 - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwb0s - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwc0 - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwc0s - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwd0 - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwd0s - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwe0 - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwe0s - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwf0 - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwf0s - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll 
O18 - Protocol: bwg0 - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwg0s - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwh0 - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwh0s - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwi0 - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwi0s - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwj0 - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwj0s - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwk0 - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwk0s - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwl0 - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwl0s - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwm0 - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwm0s - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwn0 - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwn0s - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwo0 - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwo0s - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwp0 - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwp0s - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwq0 - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwq0s - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwr0 - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwr0s - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bws0 - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bws0s - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwt0 - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwt0s - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwu0 - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwu0s - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwv0 - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwv0s - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bww0 - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bww0s - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwx0 - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwx0s - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwy0 - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwy0s - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwz0 - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: bwz0s - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O18 - Protocol: offline-8876480 - {35942CE9-C6B8-4B0F-857D-4E85A5FCA9FE} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll 
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe 
O23 - Service: BrSplService (Brother XP spl Service) - brother Industries Ltd - C:\WINDOWS\System32\brsvc01a.exe 
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe 
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe 
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\Program Files\iPod\bin\iPodService.exe 
O23 - Service: Kodak Camera Connection Software (KodakCCS) - Eastman Kodak Company - C:\WINDOWS\system32\drivers\KodakCCS.exe 
O23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies - D:\Logiciels Installes\Kerio\Personal Firewall 4\kpf4ss.exe 
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Macromedia Shared\Service\Macromedia Licensing.exe 
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe 
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe 
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE 
O23 - Service: PDEngine - Raxco Software, Inc. - D:\Logiciels Installes\Raxco\Perfect Disk\PDEngine.exe 
O23 - Service: PDScheduler (PDSched) - Raxco Software, Inc. - D:\Logiciels Installes\Raxco\Perfect Disk\PDSched.exe 
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe 
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exe 
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools - D:\Logiciels Installes\Spyware Doctor\sdhelp.exe 
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe 
O23 - Service: SPBBCSvc - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe 
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe 
 
Marsh Posté le 14-11-2005 à 12:19:08
ouaaa j ai rarement vu un log aussi long. 
 
tu peux aller la : http://www.hijackthis.de/fr pour une 1ier evaluation la la louche automaitque.
Marsh Posté le 14-11-2005 à 17:00:07
Je suis allé à l'évaluation automatique, j'ai suivi les conseils en enlevant les deux programmes "Trellian". Ensuite, j'ai enlevé la collection de Logitech Desktop (je me demande pourquoi il y en avait autant). 
Et cela a calmé mon disque dur. 
Merci pour ces infos !
Marsh Posté le 14-11-2005 à 20:31:09
Pas de chance, ce soir, mon disque dur a recommencé à s'agiter. 
Je ne sais pas ce qui se passe.
Marsh Posté le 15-11-2005 à 14:22:00
J'ai déjà fait scandisk hélas. 
Je me demande si je ne devrais pas passer au SP2, pour le moment j'ai préféré éviter de peur que certains de mes logiciels ne fonctionnent plus.
Marsh Posté le 14-11-2005 à 08:40:42
J'ai Windows XP SP1 et IE version 6 sur un ordinateur portable Acer Aspire.
Depuis une semaine, lorsque je lance Internet Explorer, le disque dur est constamment actif. Même si je ne surfe pas. Même si je charge une page locale. Même si je bloque tout le trafic avec mon pare-feu. Je ne comprends pas ce que fait IE.
J'ai successivement tué tous les processus, c'est bien IE qui provoque l'activité du disque.
J'ai scanné toute la machine pour les virus (Norton Antivirus 2006) et pour les spywares (Spyware Doctor). J'ai effacé tous les Cookies et fichiers temporaires. J'ai fait une défragmentation avec DiskPerfect. J'ai fait un scandisk. Le problème persiste.
J'ai voulu restaurer le système à une date antérieure à l'apparition du problème : restauration impossible, Windows prétend que le système n'a pas changé depuis (ce qui est faux).
Que se passe-t-il sur ma machine ? Quelqu'un peut-il me conseiller ?
Merci d'avance.