salut les gens
voila j’ai un soucis, j’ai 2 pc en reseau, et ces 2 pc ont le probleme: des fenetres qui s’ouvrent seules
je suis chez Orange avec la Livebox Inventel
j’ai essayer touts mes anti trucs 
et toujours ce probleme d’ouverture de fenetres intenpestives.
comment virer ce truc? plz
merci pour vos reponses
oh faite je suis un boulet en info donc soyez patient
si je pige pas de suite lol
encore merci pour vos reponses les pros
+++++
voici ce que HijackThis m’a trouver:
Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 11:23 , on 07/08/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\a-squared Free\a2service.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Logitech\QuickCam10\QuickCam10.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\MICROS~3\wcescomm.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe
C:\Program Files\McAfee\Common Framework\FrameworkService.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Windows Media Player\WMPNSCFG.exe
C:\PROGRA~1\MICROS~3\rapimgr.exe
C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexStoreSvr.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Sunbelt Software\CounterSpy\SBCSSvc.exe
C:\Program Files\Fichiers communs\Logishrd\LQCVFX\COCIManager.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Steam\Steam.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\LAURENT\Bureau\HiJackThis_v2.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Favoris
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\WANADOO\SEARCH~1.DLL
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: (no name) - {ED0E8CA5-42FB-4B18-997B-769E0408E79D} - (no file)
O4 - HKLM…\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM…\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM…\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM…\Run: [nwiz] nwiz.exe /install
O4 - HKLM…\Run: [Logitech Hardware Abstraction Layer] “C:\Program Files\Fichiers communs\Logitech\khalshared\KHALMNPR.EXE”
O4 - HKLM…\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM…\Run: [LogitechCommunicationsManager] “C:\Program Files\Fichiers communs\LogiShrd\LComMgr\Communications_Helper.exe”
O4 - HKLM…\Run: [LogitechQuickCamRibbon] “C:\Program Files\Logitech\QuickCam10\QuickCam10.exe” /hide
O4 - HKLM…\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM…\Run: [FaxCenterServer] “C:\Program Files\Dell PC Fax\fm3032.exe” /s
O4 - HKLM…\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\FirstStart.exe
O4 - HKLM…\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM…\Run: [!AVG Anti-Spyware] “C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe” /minimized
O4 - HKLM…\Run: [SunJavaUpdateSched] “C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe”
O4 - HKCU…\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU…\Run: [H/PC Connection Agent] “C:\PROGRA~1\MICROS~3\wcescomm.exe”
O4 - HKCU…\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] “C:\Program Files\Fichiers communs\Ahead\Lib\NMBgMonitor.exe”
O4 - HKCU…\Run: [MSMSGS] “C:\Program Files\Messenger\msmsgs.exe” /background
O4 - HKCU…\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU…\Run: [OM_Monitor] C:\Program Files\OLYMPUS\OLYMPUS Master\Monitor.exe -NoStart
O4 - HKUS\S-1-5-19…\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘SERVICE LOCAL’)
O4 - HKUS\S-1-5-20…\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘SERVICE RÉSEAU’)
O4 - HKUS\S-1-5-18…\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘SYSTEM’)
O4 - HKUS.DEFAULT…\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User ‘Default user’)
O8 - Extra context menu item: E&xporter vers Microsoft Excel - C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE…
O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra ‘Tools’ menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra ‘Tools’ menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra ‘Tools’ menuitem: Créer un favori mobile… - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra ‘Tools’ menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: FreshDownload - {A2B4309B-4AF7-49FF-B1BD-216B99A0EABF} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Orange - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - www.orange.fr… (file missing) (HKCU)
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - messenger.zone.msn.com…
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - go.microsoft.com…
O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - eu-housecall.trendmicro-europe.com…
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - security.symantec.com…
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - www.bitdefender.fr…
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - update.microsoft.com…
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - security.symantec.com…
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - update.microsoft.com…
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - a840.g.akamai.net…
O16 - DPF: {79E0C1C0-316D-11D5-A72A-006097BFA1AC} (EPSON Web Printer-SelfTest Control Class) - esupport.epson-europe.com…
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - messenger.zone.msn.com…
O16 - DPF: {BD8667B7-38D8-4C77-B580-18C3E146372C} (Creative Toolbox Plug-in) - caebmm.imgag.com…
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - fpdownload2.macromedia.com…
O18 - Protocol: bw+0 - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {CCA43543-D44A-4ECF-B4AA-B401248B0A8D} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: dlcx_device - Unknown owner - C:\WINDOWS\system32\dlcxcoms.exe (file missing)
O23 - Service: Service d’administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVCOMSER\LVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: LVSrvLauncher - Logitech Inc. - C:\Program Files\Fichiers communs\LogiShrd\SrvLnch\SrvLnch.exe
O23 - Service: McAfee Framework Service (McAfeeFramework) - McAfee, Inc. - C:\Program Files\McAfee\Common Framework\FrameworkService.exe
O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: Gestionnaire de session d’aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
O23 - Service: Sunbelt CounterSpy Antispyware (SBCSSvc) - Sunbelt Software - C:\Program Files\Sunbelt Software\CounterSpy\SBCSSvc.exe
O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:\Program Files\Windows Live\installer\WLSetupSvc.exe
O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe
O23 - Service: Service Partage réseau du Lecteur Windows Media (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\WMPNetwk.exe
–
End of file - 25332 bytes
Qui peux m’aider plz
Merci a vous
Ce sont des publicités ? Si oui, télécharge Navilog1 exécute-le et appuie sur “1”. Copie sur ta réponse ce qui apparait dans le bloc notes.
ok le barbier fou
je tiens a te remercier deja
et voici le copier de Navilog1
Ce fix a ete teste plusieurs fois sur un PC volontairement infecte.
Aucune defaillance n’a ete constate apres application du fix sur le PC
Toute infection, quelle qu’elle soit, une fois installee peut causer des dommage
s sur votre ordinateur.
La desinfection, quelle qu’elle soit, peut dans certains cas entrainer des anoma
lies de fonctionnement.
Nous ne pourrions etre tenu comme responsable de toute defaillance ulterieure ap
res application du fix.
BlackLight Engine est un produit de F-secure, pour + d’infos :
www.f-secure.com…
Process.exe by Craig.Peacock added www.beyondlogic.org…
Gnc.exe by IL-MAFIOSO - Credits : “Malware Analysis & Diagnostic”
Thanks jean-chretien1 et dude2005
Thanks to Metallica
Thanks to S!ri
Appuyez sur une touche pour continuer…
Ce fix a ete teste plusieurs fois sur un PC volontairement infecte.
Aucune defaillance n’a ete constate apres application du fix sur le PC
Toute infection, quelle qu’elle soit, une fois installee peut causer des dommage
s sur votre ordinateur.
La desinfection, quelle qu’elle soit, peut dans certains cas entrainer des anoma
lies de fonctionnement.
Nous ne pourrions etre tenu comme responsable de toute defaillance ulterieure ap
res application du fix.
BlackLight Engine est un produit de F-secure, pour + d’infos :
www.f-secure.com…
Process.exe by Craig.Peacock added www.beyondlogic.org…
Gnc.exe by IL-MAFIOSO - Credits : “Malware Analysis & Diagnostic”
Thanks jean-chretien1 et dude2005
Thanks to Metallica
Thanks to S!ri
Appuyez sur une touche pour continuer…
1 fichier(s) copié(s).
Creation de la liste des programmes installes
Veuillez patienter
Search Navipromo version 2.0.6 commence le 07/08/2007 Ó 13:45:11,39
!!! Attention,ce rapport peut indiquer des fichiers/programmes legitimes !!!
!!! Poster ce rapport sur le forum pour le faire analyser !!!
!!! Ne pas lancer la partie desinfection sans l’avis d’un specialiste !!!
*** Recherche Programmes installes ***
Veuillez patienter
Recherche terminee
*** Recherche dossiers dans C:\WINDOWS ***
Veuillez patienter
Recherche terminee
*** Recherche dossiers dans C:\Program Files ***
Veuillez patienter
Recherche terminee
*** Recherche dossiers dans C:\Documents and Settings\All Users\Application Data
Veuillez patienter
Recherche terminee
*** Recherche dossiers dans C:\Documents and Settings\LAURENT\Application Data *
**
Veuillez patienter
Recherche terminee
*** Recherche avec BlackLight Engine/F-secure ***
BlackLight Engine est un produit de F-secure, pour + d’infos :
www.f-secure.com…
Veuillez patienter … le scan peut durer une dizaine de minutes …
C:\Program Files\navilog1\fsbl-20070807114514.log
1 fichier(s) copié(s).
FINDSTR : Impossible d’ouvrir C:\Program Files\navilog1\fsbl2.txt
*** Recherche fichiers ***
Veuillez patienter
Recherche terminee
*** Recherche cles registre ***
Veuillez patienter
! REG.EXE VERSION 3.0
HKEY_CURRENT_USER\Software\Lanconfig
LAN REG_SZ UP
Le fichier spécifié est introuvable.
*** Module de Recherche complementaire ***
(recherche fichiers specifiques)
Veuillez patienter…
! REG.EXE VERSION 3.0
HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\TrustedPublisher\Certifi
cates\62119EF862C6B3A0D853419B87EB3E2F6C78640A
Blob REG_BINARY 0F0000000100000010000000718B9510613CCAF8AFCAFCBF
945663A103000000010000001400000062119EF862C6B3A0D853419B87EB3E2F6C78640A20000000
01000000DF030000308203DB30820344A00302010202033FC398300D06092A864886F70D01010405
003055310B3009060355040613025A4131253023060355040A131C54686177746520436F6E73756C
74696E67202850747929204C74642E311F301D0603550403131654686177746520436F6465205369
676E696E67204341301E170D3035303831353031353134345A170D3037303931363133323531325A
30818B310B3009060355040613024652310E300C0603550408130552686F6E65310D300B06035504
0713044C796F6E31193017060355040A1310656C656374726F6E69632D67726F7570312730250603
55040B131E536563757265204170706C69636174696F6E20446576656C6F706D656E743119301706
035504031310656C656374726F6E69632D67726F757030820122300D06092A864886F70D01010105
000382010F003082010A0282010100E2754D8A4E6D4DB6E025B0073520DDD7EEEC116A813940FDA2
C4C66F7A354ADB3036188D4078F8891B3FE15D467DFBA5E17984CAC2B246C27C052E63956DFE817E
B423B9615BDDFDDAADAC5E2AC0F41F583EDD24D7830F5875DF2937A9152B741EEF3950E5116E76D2
E7E3FFDF6FCB5858AF26F5E2EFFD019A1F82B98D7F21ED089D5BB8553CD89C823BECAEB62EA1CC4B
455CB4E93E8AC715320F31DC3FBC2D0BE0D65C608C58C19FF06DA7BC1EC48A45EF0219EEF4029450
4E2663B1C9DAD6A2241DF996C59CF110B706285FBAEAE0C55D776573536218C3C7AE248B82CAE015
13CD8B2828A94F4A70BA6E199919A0F5EAE20643FEAABEBE2BA3B2819E92790203010001A381FD30
81FA301F0603551D250418301606082B06010505070303060A2B0601040182370201163011060960
86480186F8420101040403020410301D0603551D0404163014300E300C060A2B0601040182370201
160302078030230603551D11041C301A82187777772E656C656374726F6E69632D67726F75702E63
6F6D303E0603551D1F043730353033A031A02F862D687474703A2F2F63726C2E7468617774652E63
6F6D2F546861777465436F64655369676E696E6743412E63726C303206082B060105050701010426
3024302206082B060105050730018616687474703A2F2F6F6373702E7468617774652E636F6D300C
0603551D130101FF04023000300D06092A864886F70D01010405000381810075160A692F4BC2096B
CE67C58B0D88320552104E4D35F5018BC2AB1BE03ECAE3C0ABE7DB45629B1B3C1812039145C15D6F
2774C211A2C86F93A819573D58A3C0E66D1E19E84638800E3372880B4E9CDCF70CC769BDEFF236ED
3AC6F20E370122FA791E71B0EA8BE78077FFC288C382B201D78EA8BBF9E9457FAD4EE80273279C
[+] C:\WINDOWS\system32\jfbdzvrnjf.exe
[!] NaviPromo - Malware/Packer.
[+] Total: 1
1 fichier(s) copié(s).
*** Analyse Termine le 07/08/2007 a 13:46:40,50 ***
Appuyez sur une touche pour continuer…
Voila encore merci a toi
;)
Appuie sur “2” maintenant et ça devrait aller.
ok j’essaye
voici le compte rendu mais la c’est du vocabulaire de pro;)
Clean Navipromo version 2.0.6 commencé le 07/08/2007 à 13:59:56,95
Fix lancé depuis C:\Program Files\navilog1
Mise a jour le 06.08.2007 a 20h00 by IL-MAFIOSO
Mode suppression automatique avec prise en charge résultats Blacklight
*** Creation backups fichiers trouvés par Blacklight ***
Copie vers “C:\Program Files\navilog1\Backupnavi”
*** Suppression des fichiers trouvés avec Blacklight ***
** 2ème passage **
C:\WINDOWS\system32\jfbdzvrnjf_navup.dat absent !
C:\WINDOWS\system32\jfbdzvrnjf_navtmp.dat absent !
C:\WINDOWS\system32\jfbdzvrnjf_m2s.xml absent !
C:\WINDOWS\system32\jfbdzvrnjf.dat trouvé !
Copie C:\WINDOWS\system32\jfbdzvrnjf.dat réalise avec succes !
C:\WINDOWS\system32\jfbdzvrnjf.dat supprimé !
C:\WINDOWS\system32\jfbdzvrnjf_nav.dat trouvé !
Copie C:\WINDOWS\system32\jfbdzvrnjf_nav.dat réalise avec succes !
C:\WINDOWS\system32\jfbdzvrnjf_nav.dat supprimé !
C:\WINDOWS\system32\jfbdzvrnjf_navps.dat trouvé !
Copie C:\WINDOWS\system32\jfbdzvrnjf_navps.dat réalise avec succes !
C:\WINDOWS\system32\jfbdzvrnjf_navps.dat supprimé !
C:\WINDOWS\prefetch\jfbdzvrnjf*.pf trouvé !
Copie C:\WINDOWS\prefetch\jfbdzvrnjf*.pf réalise avec succes !
C:\WINDOWS\prefetch\jfbdzvrnjf*.pf supprimé !
C:\WINDOWS\system32\jfbdzvrnjf.exe trouvé !
Copie C:\WINDOWS\system32\jfbdzvrnjf.exe réalise avec succes !
C:\WINDOWS\system32\jfbdzvrnjf.exe supprimé !
*** Suppression dossiers dans C:\WINDOWS ***
*** Suppression dossiers dans C:\Program Files ***
C:\Program Files\WebMediaPlayer …suppression…
C:\Program Files\WebMediaPlayer supprimé !
*** Suppression dossiers dans C:\Documents and Settings\All Users\Application Data ***
*** Suppression dossiers dans C:\Documents and Settings\LAURENT\Application Data ***
*** Suppression fichiers ***
C:\WINDOWS\pack.epk supprimé !
*** Suppression fichiers temporaires ***
Nettoyage contenu C:\WINDOWS\Temp effectué !
Nettoyage contenu C:\Documents and Settings\LAURENT\Local Settings\Temp effectué !
*** Sauvegarde du registre vers dossier Backupnavi ***
sauvegarde du registre réalise avec succes !
*** Nettoyage registre ***
Nettoyage registre Ok
*** Traitement Recherche complémentaire ***
(Recherche fichiers spécifiques)
1)Recherche fichiers connus:
2)Recherche et Suppression Heuristique :
**
3)Contrôle présence clés Rootkit dans le registre :
Aucune autre clés présente dans le registre !
4)Certificats :
Certificat Egroup supprimé !
*** Recherche avec GenericNaviSearch Beta ***
!!! Ces résultats peuvent révéler des fichiers légitimes !!!
!!! A verifier impérativement avant toute suppression manuelle !!!
Fichiers trouvés non supprimés - Malware Packer :
Aucun Fichier trouvé !
Fichiers suspects non supprimés :
Aucun Fichier suspect trouvé !
*** Nettoyage termine le 07/08/2007 à 14:02:44,62 ***
J’espere que ca va aller maintenant
je te redis ca
merci a toi
Oui, tu ne devrais plus avoir de problèmes de pubs maintenant. A l’avenir, prends un antispyware avec protection en temps réel ( Windows Defender, par exemple ) ou change d’antivirus car Avast ne détecte pas les spywares ( ou très peu ).
ok merci beaucoup le barbier fou, tu m’a sauver ^^
je vais mettre defender comme antispyware
et comme antivirus a la ploace de avast tu me recommande quoi plz
merci bien;)
Active virus shield ( pour l’activation, voir mon lien dans “quel antivirus choisir” ) ou Antivir ( en anglais, mais efficace ). Content de t’avoir aidé !
merci encore le barbier fou
pour ton aide bien professionnelle ;)
j’ai mis Antivir comme anti virus, je verrai bien si ca va le faire
sinon ej changerai apres
bonne soirée
+++
et encore merci
Antivir est très bien, juste qu’il ne détecte pas les spywares. :neutre: Un conseil : dans les options, active le mode avancé et active l’analyse heuristique ( cela trouvera les virus, trojans ou rootkits non répertoriés ). A+ et bonne continuation !