Supprimer KeyLoggerFermé

Question

Bonjour,

APres avoir parcouru en long et en travers le forum de CCM, je viens demander un peu d'aide... 
Je voudrais supprimer un KeyLOggger de mon ordinateur. Celui ci ne figure pas dans la liste des programmes du panneau de configuration. J'ai donc installé CCleaner, mais il ne le détecte pas non plus. Je suis en train de faire une analyse complete à l'aide de MalwareBytes mais je ne comprends pas grand chose...

Quelqu'un peut il m'aider ?

Merci et bonne soirée

gen-hackman · Accepted Answer

ceci m interesse :

1 Des virus ou programmes indésirables ont été trouvés 

et ca :

69 Impossible de contrôler des fichiers (3 du debut , 3 du milieu , et 3 de la fin)

gen-hackman · Answer

salut ne supprime pas avec malwarebytes Desactive ton antivirus le temps de la manip ainsi que ton parefeu si présent ▶ Télécharge List&Kill'em et enregistre le sur ton bureau Il ne necessite pas d'installation ▶double clic (clic droit "executer en tant qu'administrateur" pour Vista) pour lancer le scan choisis la langue puis choisis l'option 1 = Mode Recherche ▶laisse travailler l'outil le rapport va s'afficher , une fois le scan fini ▶colle le contenu dans ta prochaine réponse

Diamanka · Answer

Merci de ta réponse. J'essaie ca tout de suite et je te tiens au courant. Merci

Diamanka · Answer

Voila, j'ai fait ce que tu m'as dit de faire. 

Voici le résultat obtenu : 



List'em by g3n-h@ckm@n 1.0.2.6 

updated on 19.08.2009 ::::: 13.00 


Microsoft Windows [version 6.0.6001]
 

18/08/2009    17:42:20,11 
 
Infections : 
======== 
 

¤¤¤¤¤¤¤¤¤¤ Fichiers et dossiers presents : 

"C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat"  
"C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat"  
C:\Windows\System32\SET86AF.tmp  
 
¤¤¤¤¤¤¤¤¤¤ Clés de registre Presentes : 

 
¤¤¤¤¤¤¤¤¤¤ C:\Windows\Prefetch : 

9LAUNCH.EXE-20837904.pf
ACROBROKER.EXE-DB3245F0.pf
ACRORD32.EXE-172CF576.pf
AgAppLaunch.db
AgCx_SC1.db
AgCx_SC1.db.trx
AgGlFaultHistory.db
AgGlFgAppHistory.db
AgGlGlobalHistory.db
AgGlUAD_P_S-1-5-21-366844691-4290838981-367203893-1000.db
AgGlUAD_S-1-5-21-366844691-4290838981-367203893-1000.db
AgRobust.db
APPLEMOBILEBACKUP.EXE-95F79166.pf
APPLEMOBILEDEVICEHELPER.EXE-4AA961B8.pf
APPLEMOBILESYNC.EXE-20F2A491.pf
APPLESYNCUIHANDLER.EXE-CFFF1E3D.pf
ASHMAISV.EXE-2A45B8D1.pf
ASHWEBSV.EXE-67F8F104.pf
AU_.EXE-7206B443.pf
AVAST.SETUP-499863F4.pf
A~NSISU_.EXE-828BE9FF.pf
CCLEANER.EXE-D4D76A60.pf
CCSETUP222.EXE-2FD5F6DE.pf
CMD.EXE-4A81B364.pf
CODE CALCULATOR 5.4.EXE-FB320897.pf
CONIME.EXE-9781FD5F.pf
CONSENT.EXE-531BD9EA.pf
CONTROL.EXE-817F8F1D.pf
DISKAID.EXE-1597978C.pf
DISTNOTED.EXE-04155A8C.pf
DLLHOST.EXE-5E46FA0D.pf
DLLHOST.EXE-6A473D35.pf
DLLHOST.EXE-766398D2.pf
DLLHOST.EXE-7FAA2E4C.pf
DLLHOST.EXE-B2EB1806.pf
FIREWALLSETTINGS.EXE-26A7E14B.pf
FLASHUTIL10B.EXE-06DAF439.pf
HPQBAM08.EXE-5B656772.pf
HPQSTE08.EXE-8FA26316.pf
HTTPD.EXE-D145E7BA.pf
IELOWUTIL.EXE-3885C25E.pf
IESYNCCLIENT.EXE-5DD37F50.pf
IEXPLORE.EXE-908C99F8.pf
IPODSERVICE.EXE-37C43D64.pf
IS-F7PS2.TMP-5422764E.pf
ITUNES.EXE-2A42B776.pf
Layout.ini
LIST_KILLEM.EXE-7891BC3A.pf
LOGONUI.EXE-09140401.pf
MBAM-SETUP.EXE-CF58734C.pf
MBAM-SETUP.TMP-8C262250.pf
MBAM-SETUP.TMP-D26E806E.pf
MBAM.EXE-305FF92C.pf
MBAMGUI.EXE-4FE652ED.pf
MDCRASHREPORTTOOL.EXE-9728B8CA.pf
MFPMP.EXE-26F35380.pf
MOBSYNC.EXE-C5E2284F.pf
MODE.COM-DB34C082.pf
MPAS-D.EXE-40FE95BA.pf
MPSIGSTUB.EXE-A230FE6E.pf
MSASCUI.EXE-07E0123F.pf
MSFEEDSSYNC.EXE-6E6FBDF4.pf
MSIEXEC.EXE-A2D55CB6.pf
MSNMSGR.EXE-9974F251.pf
NCLRSSRV.EXE-5A857AD6.pf
NCLUSBSRV.EXE-EC4FC96F.pf
NMINDEXINGSERVICE.EXE-BAABA37B.pf
NMINDEXSTORESVR.EXE-D98D8FC0.pf
NOTEPAD.EXE-D8414F97.pf
NTOSBOOT-B00DFAAD.pf
OUTLOOKSYNCCLIENT.EXE-B0412A73.pf
PfSvPerfStats.bin
PICTUREVIEWER.EXE-624252B8.pf
PKTRAINER.EXE-3590BDA1.pf
POWERED_KEYLOGGER.EXE-DD83F523.pf
QK_SETUP.EXE-5222A389.pf
QPANEL.EXE-5AD9D1B7.pf
QUICK_ENGINE.EXE-E10B79DC.pf
ReadyBoot
REG.EXE-E7E8BD26.pf
REGSVR32.EXE-8461DBEE.pf
RUNDLL32.EXE-1304AE86.pf
RUNDLL32.EXE-230FC512.pf
RUNDLL32.EXE-6BFBA16A.pf
SEARCHFILTERHOST.EXE-77482212.pf
SEARCHPROTOCOLHOST.EXE-0CB8CADE.pf
SERVICELAYER.EXE-5436186F.pf
SNDVOL.EXE-5D4CC7D6.pf
ST6UNST.EXE-229A0EDD.pf
SVCHOST.EXE-7CFEDEA3.pf
SVCHOST.EXE-DD6406E8.pf
SYNCSERVER.EXE-4092EE0A.pf
TASKENG.EXE-48D4E289.pf
TASKMGR.EXE-5F5F473D.pf
THUNDERBIRD.EXE-5119524C.pf
TRUSTEDINSTALLER.EXE-3CC531E5.pf
UNINS000.EXE-7F62EA13.pf
UNINST.EXE-64D749C3.pf
UNINSTALL.EXE-8D36934C.pf
VERCLSID.EXE-7C52E31C.pf
VSSVC.EXE-B8AFC319.pf
WERFAULT.EXE-E69F695A.pf
WERMGR.EXE-0F2AC88C.pf
WINRAR.EXE-94E7D80C.pf
WINSCP.EXE-7E75579E.pf
WINWORD.EXE-C91725A1.pf
WLCOMM.EXE-272FF9F7.pf
WLXPGSS.SCR-B6681400.pf
WMIADAP.EXE-F8DFDFA2.pf
WMIPRVSE.EXE-1628051C.pf
WMPLAYER.EXE-BAD6BD53.pf
WMPNSCFG.EXE-FC0D39BF.pf
WSQMCONS.EXE-118B52B7.pf
WUAUCLT.EXE-70318591.pf
WUDFHOST.EXE-AFFEF87C.pf
YAHOOSYNC.EXE-F40F1197.pf
_IU14D2N.TMP-1EE95E68.pf
 
 
 

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤( EOF )¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

gen-hackman · Answer

Ferme toutes tes fenetres(y compris internet et windows live messenger) ,  puis :

&#9654 Relance List&Kill'em comme tu as fait pour l'option 1 (soit en clic droit pour vista),

mais cette fois-ci :

&#9654 choisis l'option 2 = Mode Destruction

laisse travailler l'outil

apres les verifications , un rapport va s'ouvrir.

&#9654 ferme-le.

un deuxieme rapport va s'ouvrir , 

&#9654 colle son contenu dans ta reponse

Diamanka · Answer

Super ! Merci encore de ta réponse !!!

Voici le rapport : 

List'em by g3n-h@ckm@n 1.0.2.6 

updated on 19.08.2009 ::::: 13.00 


Microsoft Windows [version 6.0.6001]
 

18/08/2009    18:28:16,36 
 
Infections : 
======== 
 

¤¤¤¤¤¤¤¤¤¤ Fichiers et dossiers presents : 

"C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat"  
"C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat"  
 
¤¤¤¤¤¤¤¤¤¤ Clés de registre Presentes : 

 
¤¤¤¤¤¤¤¤¤¤ C:\Windows\Prefetch : 

AgAppLaunch.db
AgCx_SC1.db
AgCx_SC1.db.trx
AgGlFaultHistory.db
AgGlFgAppHistory.db
AgGlGlobalHistory.db
AgGlUAD_P_S-1-5-21-366844691-4290838981-367203893-1000.db
AgGlUAD_S-1-5-21-366844691-4290838981-367203893-1000.db
AgRobust.db
Layout.ini
NTOSBOOT-B00DFAAD.pf
PfSvPerfStats.bin
ReadyBoot
REG.EXE-E7E8BD26.pf
WMPLAYER.EXE-BAD6BD53.pf
 
 
 

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤( EOF )¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

gen-hackman · Answer

colle le rapport C:\Kill'em.txt stp

Diamanka · Answer

Voila :



Kill'em by g3n-h@ckm@n 1.0.2.6 

updated on 19.08.2009 ::::: 13.00 


Microsoft Windows [version 6.0.6001]
 

18/08/2009    18:27:43,83 

Fichiers analysés : 
================= 
 

¤¤¤¤¤¤¤¤¤¤ Fichiers et dossiers presents : 

"C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat"  
"C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat"  
C:\Windows\System32\SET86AF.tmp  
 
 
¤¤¤¤¤¤¤¤¤¤ Action sur les fichiers : 
  
Quarantaine : 

SET86AF.tmp.Kill'em

¤¤¤¤¤¤¤¤¤¤ Verification : 
 

List'em by g3n-h@ckm@n 1.0.2.6 

updated on 19.08.2009 ::::: 13.00 


Microsoft Windows [version 6.0.6001]
 

18/08/2009    18:28:16,36 
 
Infections : 
======== 
 

¤¤¤¤¤¤¤¤¤¤ Fichiers et dossiers presents : 

"C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat"  
"C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat"  
 
¤¤¤¤¤¤¤¤¤¤ Clés de registre Presentes : 

 
¤¤¤¤¤¤¤¤¤¤ C:\Windows\Prefetch : 

AgAppLaunch.db
AgCx_SC1.db
AgCx_SC1.db.trx
AgGlFaultHistory.db
AgGlFgAppHistory.db
AgGlGlobalHistory.db
AgGlUAD_P_S-1-5-21-366844691-4290838981-367203893-1000.db
AgGlUAD_S-1-5-21-366844691-4290838981-367203893-1000.db
AgRobust.db
Layout.ini
NTOSBOOT-B00DFAAD.pf
PfSvPerfStats.bin
ReadyBoot
REG.EXE-E7E8BD26.pf
WMPLAYER.EXE-BAD6BD53.pf
 
 
 

¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤( EOF )¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤

gen-hackman · Answer

tu es sure d'avoir coupé toutes tes fenetres internet et windows live messenger  pendant la suppression ?

Diamanka · Answer

Oui j'ai tout coupé. Pas d'anti-virus, pas msn, pas internet, et j'ia mm desactivé mon pare feu.

gen-hackman · Answer

bien :

Télécharge OTL de OLDTimer

&#9654 enregistre le sur ton Bureau.

&#9654 Double clic sur OTL.exe pour le lancer.

&#9654 Coche les 2 cases Lop et Purity

&#9654 Coche la case devant scan all users

&#9654 règle-le sur "60 Days"

&#9654 dans la colonne de gauche , mets tout sur all

&#9654Clic sur Run Scan.

A la fin du scan, le Bloc-Notes va s'ouvrir avec le rapport (OTL.txt).

Ce fichier est sur ton Bureau (en général C:\Documents and settings\le_nom_de_ta_session\OTL.txt)

&#9654&#9654&#9654 NE LE POSTE PAS SUR LE FORUM

Pour me le transmettre clique sur ce lien : http://www.cijoint.fr/

&#9654 Clique sur Parcourir et cherche le fichier ci-dessus.

&#9654 Clique sur Ouvrir.

&#9654 Clique sur "Cliquez ici pour déposer le fichier".

Un lien de cette forme :

http://www.cijoint.fr/cjlink.php?file=cjge368/cijSKAP5fU.txt

est ajouté dans la page.

&#9654 Copie ce lien dans ta réponse.

Tu feras la meme chose avec le "Extra.txt".

Diamanka · Answer

Voila : http://www.cijoint.fr/cjlink.php?file=cj200908/ciju4HDpfb.txt 

Extra : http://www.cijoint.fr/cjlink.php?file=cj200908/cijmTOOkac.txt

Diamanka · Answer

Alors c'est grave docteur ??? :-)

gen-hackman · Answer

vois si tu arrives à supprimer ceci manuellement :

C:\Windows\bwUnin-7.2.0.137-8876480SL.exe

le cas echeant en mode sans echec

et ensuite je te donnerai une procedure suivant la reussite de la suppression de ce fichier

je m'absente une heure

afideg · Answer

Bonsoir,

Euh,
--> les deux sont illisibles (texte continu!)
Pourquoi ?
Merci
Al.

Diamanka · Answer

C'est bon, j'ai reussi à le supprimer chef!!! 

Maintenant ??

gen-hackman · Answer

bonjour :

Al passe par Mozilla ^^ tu verras comme sur les rapports :)

&#9654 Clique sur le menu Demarrer /Panneau de configuration/Options des dossiers/ puis dans l'onglet Affichage
* - Coche    Afficher les fichiers et dossiers cachés
* - Décoche Masquer les extensions des fichiers dont le type est connu
* - Décoche Masquer les fichiers protégés du système d'exploitation (recommandé)

&#9654 clique sur Appliquer, puis OK.

N'oublie pas de recacher à nouveau les fichiers cachés et protégés du système d'exploitation en fin de désinfection, c'est important

Fais analyser le(s) fichier(s) suivants sur Virustotal :

Virus Total

    * Clique sur Parcourir en haut, choisis Poste de travail et cherche ces fichiers :

C:\Windows\System32\63BBAE79AB.sys

    * Clique maintenant sur Envoyer le fichier. et laisse travailler tant que "Situation actuelle : en cours d'analyse" est affiché.
    * Il est possible que le fichier soit mis en file d'attente en raison d'un grand nombre de demandes d'analyses. En ce cas, il te faudra patienter sans actualiser la page.
    * Lorsque l'analyse est terminée ("Situation actuelle: terminé"), clique sur Formaté
    * Une nouvelle fenêtre de ton navigateur va apparaître
    * Clique alors sur les deux fleches
    * Fais un clic droit sur la page, et choisis Sélectionner tout, puis copier
    * Enfin colle le résultat dans ta prochaine réponse.

Note : Pour analyser un autre fichier, clique en bas sur Autre fichier.

ensuite :

&#9654 Double clic sur OTL.exe pour le lancer.


&#9654Copie la liste qui se trouve en gras ci-dessous,

&#9654 colle-la dans la zone sous Customs Scans/Fixes :

:processes
explorer.exe
iexplore.exe
firefox.exe
msnmsgr.exe
Teatimer.exe

:OTL
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O4 - HKLM..\Run: [Acer Tour]  File not found
O4 - HKLM..\Run: [eRecoveryService]  File not found
O4 - HKU\.DEFAULT..\Run: []  File not found
O4 - HKU\S-1-5-18..\Run: []  File not found
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O18 - Protocol\Handler\bw+0 {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bw+0s {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bw-0 {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bw00 {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bw00s {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bw-0s {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bw10 {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bw10s {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bw20 {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bw20s {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bw30 {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bw30s {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bw40 {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bw40s {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bw50 {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bw50s {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bw60 {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bw60s {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bw70 {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bw70s {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bw80 {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bw80s {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bw90 {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bw90s {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwa0 {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwa0s {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwb0 {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwb0s {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwc0 {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwc0s {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwd0 {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwd0s {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwe0 {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwe0s {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwf0 {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwf0s {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwfile-8876480 {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwg0 {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwg0s {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwh0 {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwh0s {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwi0 {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwi0s {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwj0 {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwj0s {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwk0 {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwk0s {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwl0 {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwl0s {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwm0 {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwm0s {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwn0 {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwn0s {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwo0 {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwo0s {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwp0 {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwp0s {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwq0 {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwq0s {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwr0 {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwr0s {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bws0 {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bws0s {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwt0 {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwt0s {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwu0 {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwu0s {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwv0 {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwv0s {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bww0 {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bww0s {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwx0 {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwx0s {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwy0 {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwy0s {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwz0 {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
O18 - Protocol\Handler\bwz0s {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc.                         )
@Alternate Data Stream - 118 bytes -> C:\ProgramData\TEMP:3E2028C8
@Alternate Data Stream - 109 bytes -> C:\ProgramData\TEMP:D1B5B4F1


:reg
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"Adobe Reader Speed Launcher"=-
"HP Software Update"=-
"iTunesHelper"=-
"NeroFilterCheck"=-
"QuickTime Task"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
"DisableMonitoring"=0

:files
C:\Users\Diamanka\Desktop\List_Killem.exe

:commands
[emptytemp]
[reboot]


&#9654 Clique sur RunFix pour lancer la suppression.


&#9654 Poste le rapport.

afideg · Answer

Bonjour à vous,
Salut gen-hackman, 

Merci; mais j'ai finalement trouvé une solution pour lire ce fichier OTL logfile (97 pages!) sans devoir se charger de Mozilla ou autre. ==> J'ai téléchargé le fichier sur le bureau, et je l'ai renommé en .rtf (codage Unicode).


Pour info sur cette liste en O18; elle concerne Logitec (comme tu le sais):

C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe 
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O18 - Protocol\Handler\bwx0 {3826381a-7ad3-49d4-909e-92438d52a646} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll (BackWeb Technologies Inc. ) 

MAIS:
- C'est un prog espion qui soi-disant sert à faire des mises à jour...mais rien n'est prouvé et il semblerait qu'il soit plus espion que programme de mise à jour. 
- Mais il peut aussi se trouver dans d'autres programmes. 
- Le problème majeur étant qu'il provoque une faille de sécurité. 

Pour résoudre ce type de problèmes en dehors du fait qu'il expose votre vie privée aux fournisseurs: Désinstaller "Logitech Desktop Messenger" dans « Panneau de Configuration » >  "Ajout/Suppr.de programmes" et le prog « backweb-8876480.exe » disparaîtra (fini les O18).
- Il ne sert pas à grand-chose sinon à bouffer de la mémoire et de la bande passante Internet.
- Les mises à jour de logiciels "Logitech" se font aisément à partir des programmes  eux-mêmes ( en manuel : cliquer sur la miniature de la WebCam -par exemple- près de l’horloge ), donc pas de souci de ce côté.

Une fiche bien détaillée :< http://assiste.com.free.fr/p/parasites/backweb.html > 

Je le poste en public ici, pour le tenir informé.
Merci pour ta bienveillance.
Albert.

Merci pour tout.

gen-hackman · Answer

merci pour l'info je suis sur qu'elle servira

Diamanka · Answer

Normal que ca soit toujours en Analyse en Cours ??? Je l'ai mis a 13h30... Merci !

gen-hackman · Answer

passe a la suite et fais ce que dit Afideg , en l'occurence :

Désinstaller "Logitech Desktop Messenger" dans « Panneau de Configuration » > "Ajout/Suppr.de programmes"

Diamanka · Answer

Voici le rapport : All processes killed ========== PROCESSES ========== No active process named explorer.exe was found! No active process named iexplore.exe was found! No active process named firefox.exe was found! No active process named msnmsgr.exe was found! No active process named Teatimer.exe was found! ========== OTL ========== Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{5C255C8A-E604-49b4-9D64-90988571CECB}\ not found. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Acer Tour deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\eRecoveryService deleted successfully. Registry value HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run\ deleted successfully. Registry value HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Run\ not found. Starting removal of ActiveX control {E2883E8F-472F-4FB0-9522-AC9BF37916A7} C:\Windows\Downloaded Program Files\gp.inf not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Code Store Database\Distribution Units\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{E2883E8F-472F-4FB0-9522-AC9BF37916A7}\ not found. C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll unregistered successfully. C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll moved successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw+0\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw+0s\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw-0\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw00\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw00s\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw-0s\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw10\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw10s\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw20\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw20s\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw30\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw30s\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw40\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw40s\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw50\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw50s\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw60\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw60s\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw70\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw70s\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw80\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw80s\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw90\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bw90s\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwa0\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwa0s\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwb0\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwb0s\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwc0\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwc0s\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwd0\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwd0s\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwe0\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwe0s\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwf0\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwf0s\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll unregistered successfully. C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll moved successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwfile-8876480\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwg0\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwg0s\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwh0\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwh0s\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwi0\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwi0s\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwj0\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwj0s\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwk0\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwk0s\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwl0\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwl0s\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwm0\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwm0s\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwn0\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwn0s\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwo0\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwo0s\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwp0\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwp0s\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwq0\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwq0s\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwr0\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwr0s\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bws0\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bws0s\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwt0\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwt0s\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwu0\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwu0s\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwv0\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwv0s\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bww0\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bww0s\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwx0\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwx0s\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwy0\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwy0s\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwz0\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PROTOCOLS\Handler\bwz0s\ not found. Invalid CLSID key: C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll File C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll not found. ADS C:\ProgramData\TEMP:3E2028C8 deleted successfully. ADS C:\ProgramData\TEMP:D1B5B4F1 deleted successfully. ========== REGISTRY ========== Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Adobe Reader Speed Launcher deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\HP Software Update deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\iTunesHelper deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\NeroFilterCheck deleted successfully. Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\QuickTime Task deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\"DisableMonitoring"|0 /E : value set successfully! ========== FILES ========== File\Folder C:\Users\Diamanka\Desktop\List_Killem.exe not found. ========== COMMANDS ========== [EMPTYTEMP] User: All Users User: Default ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Default User ->Temp folder emptied: 0 bytes ->Temporary Internet Files folder emptied: 0 bytes User: Diamanka ->Temp folder emptied: 25017505 bytes ->Temporary Internet Files folder emptied: 112243859 bytes User: Public %systemdrive% .tmp files removed: 0 bytes %systemroot% .tmp files removed: 108140830 bytes %systemroot%\System32 .tmp files removed: 0 bytes File delete failed. C:\Windows emp\_avast4_\Webshlock.txt scheduled to be deleted on reboot. Windows Temp folder emptied: 9741 bytes RecycleBin emptied: 33824804 bytes Total Files Cleaned = 266,30 mb OTL by OldTimer - Version 3.0.10.7 log created on 08192009_150502 Files\Folders moved on Reboot... File move failed. C:\Windows emp\_avast4_\Webshlock.txt scheduled to be moved on reboot. Registry entries deleted on Reboot... Et voila le résultat de Virul Total : Fichier 63BBAE79AB.sys reçu le 2009.08.19 11:33:43 (UTC)Antivirus Version Dernière mise à jour Résultat a-squared 4.5.0.24 2009.08.19 - AhnLab-V3 5.0.0.2 2009.08.19 - AntiVir 7.9.1.3 2009.08.19 - Antiy-AVL 2.0.3.7 2009.08.18 - Authentium 5.1.2.4 2009.08.18 - Avast 4.8.1335.0 2009.08.18 - AVG 8.5.0.406 2009.08.19 - BitDefender 7.2 2009.08.19 - CAT-QuickHeal 10.00 2009.08.19 - ClamAV 0.94.1 2009.08.19 - Comodo 2021 2009.08.19 - DrWeb 5.0.0.12182 2009.08.19 - eSafe 7.0.17.0 2009.08.18 - eTrust-Vet 31.6.6687 2009.08.19 - F-Prot 4.4.4.56 2009.08.18 - F-Secure 8.0.14470.0 2009.08.19 - Fortinet 3.120.0.0 2009.08.19 - GData 19 2009.08.19 - Ikarus T3.1.1.68.0 2009.08.19 - Jiangmin 11.0.800 2009.08.19 - K7AntiVirus 7.10.821 2009.08.18 - Kaspersky 7.0.0.125 2009.08.19 - McAfee 5713 2009.08.18 - McAfee+Artemis 5713 2009.08.18 - McAfee-GW-Edition 6.8.5 2009.08.19 - Microsoft 1.4903 2009.08.19 - NOD32 4347 2009.08.19 - Norman 6.01.09 2009.08.18 - nProtect 2009.1.8.0 2009.08.19 - Panda 10.0.0.14 2009.08.18 - PCTools 4.4.2.0 2009.08.18 - Prevx 3.0 2009.08.19 - Rising 21.43.23.00 2009.08.19 - Sophos 4.44.0 2009.08.19 - Sunbelt 3.2.1858.2 2009.08.19 - Symantec 1.4.4.12 2009.08.19 - TheHacker 6.3.4.3.383 2009.08.13 - TrendMicro 8.950.0.1094 2009.08.19 - VBA32 3.12.10.9 2009.08.19 - ViRobot 2009.8.19.1891 2009.08.19 - VirusBuster 4.6.5.0 2009.08.18 - Information additionnelle File size: 88 bytes MD5 : 9673b912713a5d1f09d7fed564512bae SHA1 : 5a97509346f419c96e6ef347668ede0237d30aa4 SHA256: 87fde6dca64ebf7a8e009eee56646f808090342414de7bcb5d6adfd725cfe30f ssdeep: 3:hl/hdYf8MRnn:9dKn PEiD : - RDS : NSRL Reference Data Set
- Antivirus Version Dernière mise à jour Résultat a-squared 4.5.0.24 2009.08.19 - AhnLab-V3 5.0.0.2 2009.08.19 - AntiVir 7.9.1.3 2009.08.19 - Antiy-AVL 2.0.3.7 2009.08.18 - Authentium 5.1.2.4 2009.08.18 - Avast 4.8.1335.0 2009.08.18 - AVG 8.5.0.406 2009.08.19 - BitDefender 7.2 2009.08.19 - CAT-QuickHeal 10.00 2009.08.19 - ClamAV 0.94.1 2009.08.19 - Comodo 2021 2009.08.19 - DrWeb 5.0.0.12182 2009.08.19 - eSafe 7.0.17.0 2009.08.18 - eTrust-Vet 31.6.6687 2009.08.19 - F-Prot 4.4.4.56 2009.08.18 - F-Secure 8.0.14470.0 2009.08.19 - Fortinet 3.120.0.0 2009.08.19 - GData 19 2009.08.19 - Ikarus T3.1.1.68.0 2009.08.19 - Jiangmin 11.0.800 2009.08.19 - K7AntiVirus 7.10.821 2009.08.18 - Kaspersky 7.0.0.125 2009.08.19 - McAfee 5713 2009.08.18 - McAfee+Artemis 5713 2009.08.18 - McAfee-GW-Edition 6.8.5 2009.08.19 - Microsoft 1.4903 2009.08.19 - NOD32 4347 2009.08.19 - Norman 6.01.09 2009.08.18 - nProtect 2009.1.8.0 2009.08.19 - Panda 10.0.0.14 2009.08.18 - PCTools 4.4.2.0 2009.08.18 - Prevx 3.0 2009.08.19 - Rising 21.43.23.00 2009.08.19 - Sophos 4.44.0 2009.08.19 - Sunbelt 3.2.1858.2 2009.08.19 - Symantec 1.4.4.12 2009.08.19 - TheHacker 6.3.4.3.383 2009.08.13 - TrendMicro 8.950.0.1094 2009.08.19 - VBA32 3.12.10.9 2009.08.19 - ViRobot 2009.8.19.1891 2009.08.19 - VirusBuster 4.6.5.0 2009.08.18 - Information additionnelle File size: 88 bytes MD5 : 9673b912713a5d1f09d7fed564512bae SHA1 : 5a97509346f419c96e6ef347668ede0237d30aa4 SHA256: 87fde6dca64ebf7a8e009eee56646f808090342414de7bcb5d6adfd725cfe30f ssdeep: 3:hl/hdYf8MRnn:9dKn PEiD : - RDS : NSRL Reference Data Set
-

Diamanka · Answer

Alors ? C'est du chinois pour moi !!

gen-hackman · Answer

refais le post de suppression en mode sans echec sans prise en charge reseau stp

gen-hackman · Answer

Comment aller en Mode sans échec :

&#9654 Redémarres ton ordi 
&#9654 Tapote la touche F8 immédiatement, (F5 sur certains PC) juste après le "Bip" 
&#9654 Tu verras un écran avec options de démarrage apparaître 
&#9654 Choisis la première option : Sans Échec, et valide avec "Entrée" 
&#9654 Choisis ton compte habituel, et non Administrateur (si besoin ... )

Diamanka · Answer

Ok merci. Je suis au boulot, je m'occupe de cela des que je rentre, merci !

Diamanka · Answer

Bonjour, 

C'est bon, j'ai fait ce que vous m'avez demandé. J'ai refait les étapes de la suppression. 


Kill'em by g3n-h@ckm@n 1.0.2.6 

updated on 20.08.2009 ::::: 00.30 


Microsoft Windows [version 6.0.6001]
 

20/08/2009    14:01:42,87 

Fichiers analysés : 
================= 
 

¤¤¤¤¤¤¤¤¤¤ Fichiers et dossiers presents : 

"C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat"  
"C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat"  
 
 
¤¤¤¤¤¤¤¤¤¤ Action sur les fichiers : 
  
Quarantaine : 

qmgr0.dat.Kill'em
qmgr1.dat.Kill'em

¤¤¤¤¤¤¤¤¤¤ Verification :

gen-hackman · Answer

bien refais OTL stp

Diamanka · Answer

Je narrive pas a te mettre le resultats

Ils me disent que j'ai deja posté ce message..... Comprend rien

gen-hackman · Answer

par le biais de :

https://www.cjoint.com/

Diamanka · Answer

Merci 

https://www.cjoint.com/?iuuimmR8KV

https://www.cjoint.com/?iuuiPFBQFX

gen-hackman · Answer

&#9654 Clique sur le menu Demarrer /Panneau de configuration/Options des dossiers/ puis dans l'onglet Affichage
* - Coche    Afficher les fichiers et dossiers cachés
* - Décoche Masquer les extensions des fichiers dont le type est connu
* - Décoche Masquer les fichiers protégés du système d'exploitation (recommandé)

&#9654 clique sur Appliquer, puis OK.

N'oublie pas de recacher à nouveau les fichiers cachés et protégés du système d'exploitation en fin de désinfection, c'est important

Fais analyser le(s) fichier(s) suivants sur Virustotal :

Virus Total

    * Clique sur Parcourir en haut, choisis Poste de travail et cherche ces fichiers :

C:\Windows\System32\Jvpr03.0cx
C:\Windows\Pref34.D1l
C:\Windows\Setup1.exe
C:\Windows\ST6UNST.EXE

    * Clique maintenant sur Envoyer le fichier. et laisse travailler tant que "Situation actuelle : en cours d'analyse" est affiché.
    * Il est possible que le fichier soit mis en file d'attente en raison d'un grand nombre de demandes d'analyses. En ce cas, il te faudra patienter sans actualiser la page.
    * Lorsque l'analyse est terminée ("Situation actuelle: terminé"), clique sur Formaté
    * Une nouvelle fenêtre de ton navigateur va apparaître
    * Clique alors sur les deux fleches
    * Fais un clic droit sur la page, et choisis Sélectionner tout, puis copier
    * Enfin colle le résultat dans ta prochaine réponse.

Note : Pour analyser un autre fichier, clique en bas sur Autre fichier.

Diamanka · Answer

Fichier Jvpr03.0cx reçu le 2009.08.20 18:32:24 (UTC)Antivirus Version Dernière mise à jour Résultat a-squared 4.5.0.24 2009.08.20 - AhnLab-V3 5.0.0.2 2009.08.20 - AntiVir 7.9.1.3 2009.08.20 - Antiy-AVL 2.0.3.7 2009.08.20 - Authentium 5.1.2.4 2009.08.19 - Avast 4.8.1335.0 2009.08.20 - AVG 8.5.0.406 2009.08.20 - BitDefender 7.2 2009.08.20 - CAT-QuickHeal 10.00 2009.08.20 - ClamAV 0.94.1 2009.08.20 - Comodo 2037 2009.08.20 - DrWeb 5.0.0.12182 2009.08.20 - eSafe 7.0.17.0 2009.08.20 - eTrust-Vet 31.6.6691 2009.08.20 - F-Prot 4.4.4.56 2009.08.19 - F-Secure 8.0.14470.0 2009.08.20 - Fortinet 3.120.0.0 2009.08.20 - GData 19 2009.08.20 - Ikarus T3.1.1.68.0 2009.08.20 - Jiangmin 11.0.800 2009.08.20 - K7AntiVirus 7.10.823 2009.08.20 - Kaspersky 7.0.0.125 2009.08.20 - McAfee 5715 2009.08.20 - McAfee+Artemis 5715 2009.08.20 - McAfee-GW-Edition 6.8.5 2009.08.20 - Microsoft 1.4903 2009.08.20 - NOD32 4353 2009.08.20 - Norman 6.01.09 2009.08.20 - nProtect 2009.1.8.0 2009.08.20 - Panda 10.0.0.14 2009.08.20 - PCTools 4.4.2.0 2009.08.20 - Prevx 3.0 2009.08.20 - Rising 21.43.34.00 2009.08.20 - Sophos 4.44.0 2009.08.20 - Sunbelt 3.2.1858.2 2009.08.20 - Symantec 1.4.4.12 2009.08.20 - TheHacker 6.3.4.3.384 2009.08.20 - TrendMicro 8.950.0.1094 2009.08.20 - VBA32 3.12.10.9 2009.08.20 - ViRobot 2009.8.20.1893 2009.08.20 - VirusBuster 4.6.5.0 2009.08.19 - Information additionnelle File size: 60 bytes MD5...: 85358f4074972f8490ea8088fba1fbaa SHA1..: 5a7388a0b5b053087a1f5887a9ba2ea3feae9759 SHA256: 714a6ef6fdf548cd6346df58ee7a901926fea3dea1e06fc82fbc6d90bd86b15a ssdeep: 3:UNNFOhvSS8k/AHGGbnn:UvA5SS5omGbnn
PEiD..: - TrID..: File type identification
Unknown! PEInfo: - PDFiD.: - RDS...: NSRL Reference Data Set
- Antivirus Version Dernière mise à jour Résultat a-squared 4.5.0.24 2009.08.20 - AhnLab-V3 5.0.0.2 2009.08.20 - AntiVir 7.9.1.3 2009.08.20 - Antiy-AVL 2.0.3.7 2009.08.20 - Authentium 5.1.2.4 2009.08.19 - Avast 4.8.1335.0 2009.08.20 - AVG 8.5.0.406 2009.08.20 - BitDefender 7.2 2009.08.20 - CAT-QuickHeal 10.00 2009.08.20 - ClamAV 0.94.1 2009.08.20 - Comodo 2037 2009.08.20 - DrWeb 5.0.0.12182 2009.08.20 - eSafe 7.0.17.0 2009.08.20 - eTrust-Vet 31.6.6691 2009.08.20 - F-Prot 4.4.4.56 2009.08.19 - F-Secure 8.0.14470.0 2009.08.20 - Fortinet 3.120.0.0 2009.08.20 - GData 19 2009.08.20 - Ikarus T3.1.1.68.0 2009.08.20 - Jiangmin 11.0.800 2009.08.20 - K7AntiVirus 7.10.823 2009.08.20 - Kaspersky 7.0.0.125 2009.08.20 - McAfee 5715 2009.08.20 - McAfee+Artemis 5715 2009.08.20 - McAfee-GW-Edition 6.8.5 2009.08.20 - Microsoft 1.4903 2009.08.20 - NOD32 4353 2009.08.20 - Norman 6.01.09 2009.08.20 - nProtect 2009.1.8.0 2009.08.20 - Panda 10.0.0.14 2009.08.20 - PCTools 4.4.2.0 2009.08.20 - Prevx 3.0 2009.08.20 - Rising 21.43.34.00 2009.08.20 - Sophos 4.44.0 2009.08.20 - Sunbelt 3.2.1858.2 2009.08.20 - Symantec 1.4.4.12 2009.08.20 - TheHacker 6.3.4.3.384 2009.08.20 - TrendMicro 8.950.0.1094 2009.08.20 - VBA32 3.12.10.9 2009.08.20 - ViRobot 2009.8.20.1893 2009.08.20 - VirusBuster 4.6.5.0 2009.08.19 - Information additionnelle File size: 60 bytes MD5...: 85358f4074972f8490ea8088fba1fbaa SHA1..: 5a7388a0b5b053087a1f5887a9ba2ea3feae9759 SHA256: 714a6ef6fdf548cd6346df58ee7a901926fea3dea1e06fc82fbc6d90bd86b15a ssdeep: 3:UNNFOhvSS8k/AHGGbnn:UvA5SS5omGbnn
PEiD..: - TrID..: File type identification
Unknown! PEInfo: - PDFiD.: - RDS...: NSRL Reference Data Set
-

gen-hackman · Answer

ok pour celui-là

Diamanka · Answer

Fichier ST6UNST.EXE reçu le 2009.08.20 18:42:35 (UTC)Antivirus Version Dernière mise à jour Résultat a-squared 4.5.0.24 2009.08.20 - AhnLab-V3 5.0.0.2 2009.08.20 - AntiVir 7.9.1.3 2009.08.20 - Antiy-AVL 2.0.3.7 2009.08.20 - Authentium 5.1.2.4 2009.08.19 - Avast 4.8.1335.0 2009.08.20 - AVG 8.5.0.406 2009.08.20 - BitDefender 7.2 2009.08.20 - CAT-QuickHeal 10.00 2009.08.20 - ClamAV 0.94.1 2009.08.20 - Comodo 2037 2009.08.20 - DrWeb 5.0.0.12182 2009.08.20 - eTrust-Vet 31.6.6691 2009.08.20 - F-Prot 4.4.4.56 2009.08.19 - F-Secure 8.0.14470.0 2009.08.20 - Fortinet 3.120.0.0 2009.08.20 - GData 19 2009.08.20 - Ikarus T3.1.1.68.0 2009.08.20 - Jiangmin 11.0.800 2009.08.20 - K7AntiVirus 7.10.823 2009.08.20 - Kaspersky 7.0.0.125 2009.08.20 - McAfee 5715 2009.08.20 - McAfee+Artemis 5715 2009.08.20 - McAfee-GW-Edition 6.8.5 2009.08.20 - Microsoft 1.4903 2009.08.20 - NOD32 4353 2009.08.20 - Norman 6.01.09 2009.08.20 - nProtect 2009.1.8.0 2009.08.20 - Panda 10.0.0.14 2009.08.20 - PCTools 4.4.2.0 2009.08.20 - Prevx 3.0 2009.08.20 - Rising 21.43.34.00 2009.08.20 - Sophos 4.44.0 2009.08.20 - Sunbelt 3.2.1858.2 2009.08.20 - Symantec 1.4.4.12 2009.08.20 - TheHacker 6.3.4.3.384 2009.08.20 - TrendMicro 8.950.0.1094 2009.08.20 - VBA32 3.12.10.9 2009.08.20 - ViRobot 2009.8.20.1893 2009.08.20 - VirusBuster 4.6.5.0 2009.08.19 - Information additionnelle File size: 73216 bytes MD5...: 996f83e516552ca3b51445bb994a6d38 SHA1..: 56fc6ba49195dedf735e6ce1b03ab36d72334f66 SHA256: 7e60c894a8cead6880fd3ed040504d02304a0b961304e40741340e31f5fa973d ssdeep: 1536:hKTg6tZkYVxqdE5NLt3mZCSRCxDka6tg7N4G:IsixsE5b3mZCwC1AtgZ4G
PEiD..: InstallShield 2000 TrID..: File type identification
Win32 Executable MS Visual C++ (generic) (75.0%)
Win32 Executable Generic (16.9%)
Generic Win/DOS Executable (3.9%)
DOS Executable Generic (3.9%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%) PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x80c0
timedatestamp.....: 0x35895e6d (Thu Jun 18 18:37:33 1998)
machinetype.......: 0x14c (I386)

( 4 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0xa9f5 0xaa00 6.38 be72f98a15ebe8bc983139a077df8032
.rdata 0xc000 0x1a52 0x1c00 5.15 c86d8eb1bd161433edaebb9900da49ad
.data 0xe000 0x4678 0x2e00 1.72 be105b956c09e423dbd672cd44ddc0ba
.rsrc 0x13000 0x24e0 0x2600 3.54 362a8a318293fe1f63a341f5db7fe423

( 7 imports )
> KERNEL32.dll: CreateFileA, ReadFile, LocalFree, SetFilePointer, LocalAlloc, GlobalDeleteAtom, Sleep, GlobalAddAtomA, GlobalFree, GlobalAlloc, IsDBCSLeadByte, GlobalLock, GlobalFindAtomA, CompareStringA, WideCharToMultiByte, WriteFile, CloseHandle, GetWindowsDirectoryA, OpenProcess, GetVersion, FreeLibrary, RemoveDirectoryA, GetLastError, DeleteFileA, FindFirstFileA, FindClose, lstrlenA, lstrcpyA, lstrcatA, lstrcmpA, lstrcpynA, MultiByteToWideChar, CreateProcessA, WaitForSingleObject, SetErrorMode, GetCurrentDirectoryA, OutputDebugStringA, LoadLibraryA, GetProcAddress, GetFileAttributesA, GlobalUnlock, VirtualAlloc, IsBadWritePtr, IsBadReadPtr, SetUnhandledExceptionFilter, VirtualFree, HeapCreate, HeapDestroy, GetFileType, GetStdHandle, SetHandleCount, GetEnvironmentStringsW, GetEnvironmentStrings, IsBadCodePtr, FreeEnvironmentStringsW, FreeEnvironmentStringsA, lstrcmpiA, GetModuleFileNameA, UnhandledExceptionFilter, GetOEMCP, GetACP, GetCPInfo, HeapAlloc, HeapFree, GetCommandLineA, GetStartupInfoA, GetModuleHandleA, GetCurrentProcess, TerminateProcess, ExitProcess, SetCurrentDirectoryA, SetEnvironmentVariableA, RtlUnwind, LCMapStringA, LCMapStringW, GetStringTypeA, GetStringTypeW
> USER32.dll: PackDDElParam, SendMessageA, DispatchMessageA, DefWindowProcA, CharNextA, DestroyWindow, UnregisterClassA, CreateWindowExA, RegisterClassA, wsprintfA, UnpackDDElParam, LoadStringA, LoadIconA, LoadCursorA, MessageBoxA, wvsprintfA, TranslateMessage, GetMessageA, SetCursor, ShowCursor, SetDlgItemTextA, SetWindowLongA, EndDialog, GetDlgItem, SetFocus, DialogBoxParamA, UpdateWindow, SetWindowTextA, InvalidateRect, CharUpperA, CharPrevA, BeginPaint, GetClientRect, DrawTextA, SetRect, EndPaint, PostQuitMessage, GetSystemMenu, EnableMenuItem, CreateDialogParamA, GetWindowRect, GetSystemMetrics, SetWindowPos, ShowWindow, PostMessageA, PeekMessageA, FillRect, SetClassLongA
> GDI32.dll: CreateSolidBrush, SetROP2, Rectangle, SelectObject, SetTextColor, SetBkMode, GetStockObject, GetTextMetricsA, ExtTextOutA, CreateFontIndirectA, DeleteObject
> ADVAPI32.dll: RegOpenKeyA, RegEnumValueA, RegEnumKeyA, RegDeleteKeyA, RegCloseKey, RegDeleteValueA, RegQueryValueExA, RegSetValueExA, RegCreateKeyA
> SHELL32.dll: SHGetMalloc, SHGetSpecialFolderLocation, SHGetPathFromIDListA
> ole32.dll: OleInitialize, OleUninitialize
> OLEAUT32.dll: -

( 0 exports )
PDFiD.: - RDS...: NSRL Reference Data Set

( Ziff-Davis Publishing Company L.P. )

> 3 Volume Software Library I: ST6UNST.EXE

( PC Utilities )

> PC Utilities - 510 utilities: ST6UNST.EXE

( Autodesk )

> Autodesk Map: ST6UNST.EXE

( Whirlwind Software )

> Hackers Encyclopedia 2002: ST6UNST.EXE

( Paraben Corporation )

> ftp madness: ST6UNST.EXE
> Paraben Corporation Bits and Info: ST6UNST.EXE

( Unknown )

> Miscellaneous Software: ST6UNST.EXE
> StegoArchive CD: ST6UNST.EXE

( TradeTouch.com inc. )

> Hard drive Tools 2003: ST6UNST.EXE,St6unst.exe
> Network Toolbox 2003: ST6UNST.EXE
> PC Hardware Tools 2003: ST6UNST.EXE
> PC Diagnostics & Repair Tools 2003: ST6UNST.EXE
> Car Hacker and Care Tools 2003: ST6UNST.EXE
> Windows XP/NT Tools for Administrators: ST6UNST.EXE
> WinCE Tools 2003: st6unst.exe
> Game Crackers and Tools Pro: ST6UNST.EXE
> Digital Camera Photography: ST6UNST.EXE
> Mobile Phone Tools 2003: ST6UNST.EXE

( Cosmi Corporation )

> 225 Winning Educational Programs: ST6UNST.EXE
> 300 Arcade Games: ST6UNST.EXE
> 1,000 Solitare Games: ST6UNST.EXE

( Dark Bay Ltd. )

> Hackers Handbook: ST6UNST.EXE

( ZG Financial Corp )

> Hard Drives & Subsystems: ST6UNST.EXE

( RonsWare )

> Ulitimate Golf Scorecard: ST6UNST.EXE

( Wingear )

> PCHardDriveUtilities: ST6UNST.EXE
> MP3 Studio Deluxe: ST6UNST.EXE
> Internet Utilities: ST6UNST.EXE

( Next Step Publishing )

> Network Tools: ST6UNST.EXE
> Desktop Security: ST6UNST.EXE
> System Tools: ST6UNST.EXE
> System Tools 2003: ST6UNST.EXE

( Core Publishing Inc. )

> Master Hacker Internet Terrorism: ST6UNST.EXE

( Mortgage Marketing Inc. )

> Mortgage Master: ST6UNST.EXE

( Sierra Inc. )

> NasCar Racing: ST6UNST.EXE

( Vlad Pambucol )

> Drive log: ST6UNST.EXE

( Barnes & Noble )

> Free Unlimited Internet Service Barnes & Nobles: ST6UNST.EXE

( Microsoft )

> Disc 2435.4: ST6UNST.EXE
> Applications, Developer Tools: ST6UNST.EXE
> Windows DNA XML Resource Kit: ST6UNST.EXE
> MSDN Development Platform Disc 1: ST6UNST.EXE
> Platforms, SDK/DDK: ST6UNST.EXE
> Mobile Information Server Developer Edition: ST6UNST.EXE
> MSDN Development Platform Disc 2: ST6UNST.EXE
> MSDN BizTalk Server 2004 beta, BizTalk server 2002 dev. ed., MS content mgmt server, eMbedded visual C++ 4.0 with SP2, Exchange server 2000, SMS 2003: ST6UNST.EXE
> MSDN Disc MSDN Index Oct 2000 IE Versions Platform SDK July 2000 Edition: ST6UNST.EXE
> MSDN Disc 2427.2: ST6UNST.EXE
> Developer Tools, Servers: ST6UNST.EXE
> MSDN MS .NET framework 1.1 SDK, App. Center 2000 dev. ed., Commerce server 2002 dev. ed., Data Analyzer 3.5, Host Integration server 2000: ST6UNST.EXE
> Exchange Server 2000: ST6UNST.EXE
> SDK/DDK, Servers - Special Release: ST6UNST.EXE
> Servers: ST6UNST.EXE
> Platforms, SDK/DDK, Developer Tools: ST6UNST.EXE
> Windows Server Resource Kit: ST6UNST.EXE
> MSDN Disc 0003: ST6UNST.EXE
> Windows 2000 Server Resource Kit: ST6UNST.EXE
> .NET Framework SDK: ST6UNST.EXE
> Windows DNA XML Resource Kit: ST6UNST.EXE
> Applications, Developer Tools, Servers: ST6UNST.EXE
> MSDN Disc 1016.1: ST6UNST.EXE
> Microsoft Visual Basic 6.0 Learning Edition: ST6UNST.EXE
> MSDN Development Platform Disc12: ST6UNST.EXE
> MSDN Disc 2432.9: ST6UNST.EXE
> BackOffice Server - Developers edition: ST6UNST.EXE
> Exchange 2000 Enterprise Server: ST6UNST.EXE
> Windows DDks: ST6UNST.EXE
> MSDN Disc 2427.1: ST6UNST.EXE
> Platforms, Servers, Applications: ST6UNST.EXE
> MSDN Disc 2432.2: ST6UNST.EXE
> Exchange 2000 Conference Server: ST6UNST.EXE
> MSDN Development Platform Disc 19: ST6UNST.EXE
> MSDN Disc 0727.1: ST6UNST.EXE
> Microsoft Security Resource Kit: ST6UNST.EXE
> MSDN Disc 0727.3: ST6UNST.EXE
> MSDN Disc 0727.2: ST6UNST.EXE
> MSDN Disc 2435.5: ST6UNST.EXE
> Commerce Server Resource Kit: ST6UNST.EXE
> MSDN Disc 2435.2: ST6UNST.EXE
> MSDN Disc 2435.1: ST6UNST.EXE
> MSDN Disc 0727.4: ST6UNST.EXE
> Windows 2000 Server Administrators Companion: ST6UNST.EXE
> MSDN Disc 2432.4: ST6UNST.EXE
> MSDN Disc 0727.5: ST6UNST.EXE
> MSDN Disc 2435: ST6UNST.EXE
> Tahoe Server: st6unst.exe
> SDKs and Tools: ST6UNST.EXE
> Visual Studio Enterprise Edition: ST6UNST.EXE
> Visual Basic 6.0 Prof. Edition Upgrade: St6unst.exe
> Visual Basic Professional Edition: St6unst.exe
> MSDN Disc 2432: ST6UNST.EXE
> MSDN Disc 2085: ST6UNST.EXE
> MSDN Disc 2432.7: ST6UNST.EXE
> MSDN Disc 2432.12: ST6UNST.EXE
> MSDN Disc 2432.10: ST6UNST.EXE
> MSDN Development Platform Disc1: ST6UNST.EXE
> MSDN Disc 2427.3: ST6UNST.EXE
> MSDN Disc 0727: ST6UNST.EXE
> MSDN Disk 2436.22: ST6UNST.EXE
> MSDN Disc 2435.3: ST6UNST.EXE
> BackOffice Server: ST6UNST.EXE
> MSDN Disc 0527.1: ST6UNST.EXE
> MSDN Disc 0526: ST6UNST.EXE
> Building Interactive Entertainment and E-Commerce Content: ST6UNST.EXE
> MSDN Disc 0527.2: ST6UNST.EXE
> MSDN Disc 3235: ST6UNST.EXE
> MSDN Disc0003: ST6UNST.EXE
> MSDN Disc 2436.20: ST6UNST.EXE
> MSDN MS Commerce Server 2002 Developer ed., Exchange Server 2003 Enterprise ed., Exchange Server 2003 Standard ed., Host Integration server 2000, SQL: ST6UNST.EXE
> Visual Basic: St6unst.exe
> MSDN Disc 2432.11: ST6UNST.EXE
> MSDN Development Platform Disc1: ST6UNST.EXE
> MSDN Development Platform Disc2: ST6UNST.EXE
> MSDN Disc 2436.22: ST6UNST.EXE

( Silver Star Publishing )

> Guide to Hacking Software Security 2002: ST6UNST.EXE

( Bytesize CD-ROM Inc. )

> PC Maintenance: ST6UNST.EXE
> CD Recorder: ST6UNST.EXE

ThreatExpert info: https://www.symantec.com?md5=996f83e516552ca3b51445bb994a6d38 Antivirus Version Dernière mise à jour Résultat a-squared 4.5.0.24 2009.08.20 - AhnLab-V3 5.0.0.2 2009.08.20 - AntiVir 7.9.1.3 2009.08.20 - Antiy-AVL 2.0.3.7 2009.08.20 - Authentium 5.1.2.4 2009.08.19 - Avast 4.8.1335.0 2009.08.20 - AVG 8.5.0.406 2009.08.20 - BitDefender 7.2 2009.08.20 - CAT-QuickHeal 10.00 2009.08.20 - ClamAV 0.94.1 2009.08.20 - Comodo 2037 2009.08.20 - DrWeb 5.0.0.12182 2009.08.20 - eTrust-Vet 31.6.6691 2009.08.20 - F-Prot 4.4.4.56 2009.08.19 - F-Secure 8.0.14470.0 2009.08.20 - Fortinet 3.120.0.0 2009.08.20 - GData 19 2009.08.20 - Ikarus T3.1.1.68.0 2009.08.20 - Jiangmin 11.0.800 2009.08.20 - K7AntiVirus 7.10.823 2009.08.20 - Kaspersky 7.0.0.125 2009.08.20 - McAfee 5715 2009.08.20 - McAfee+Artemis 5715 2009.08.20 - McAfee-GW-Edition 6.8.5 2009.08.20 - Microsoft 1.4903 2009.08.20 - NOD32 4353 2009.08.20 - Norman 6.01.09 2009.08.20 - nProtect 2009.1.8.0 2009.08.20 - Panda 10.0.0.14 2009.08.20 - PCTools 4.4.2.0 2009.08.20 - Prevx 3.0 2009.08.20 - Rising 21.43.34.00 2009.08.20 - Sophos 4.44.0 2009.08.20 - Sunbelt 3.2.1858.2 2009.08.20 - Symantec 1.4.4.12 2009.08.20 - TheHacker 6.3.4.3.384 2009.08.20 - TrendMicro 8.950.0.1094 2009.08.20 - VBA32 3.12.10.9 2009.08.20 - ViRobot 2009.8.20.1893 2009.08.20 - VirusBuster 4.6.5.0 2009.08.19 - Information additionnelle File size: 73216 bytes MD5...: 996f83e516552ca3b51445bb994a6d38 SHA1..: 56fc6ba49195dedf735e6ce1b03ab36d72334f66 SHA256: 7e60c894a8cead6880fd3ed040504d02304a0b961304e40741340e31f5fa973d ssdeep: 1536:hKTg6tZkYVxqdE5NLt3mZCSRCxDka6tg7N4G:IsixsE5b3mZCwC1AtgZ4G
PEiD..: InstallShield 2000 TrID..: File type identification
Win32 Executable MS Visual C++ (generic) (75.0%)
Win32 Executable Generic (16.9%)
Generic Win/DOS Executable (3.9%)
DOS Executable Generic (3.9%)
Autodesk FLIC Image File (extensions: flc, fli, cel) (0.0%) PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x80c0
timedatestamp.....: 0x35895e6d (Thu Jun 18 18:37:33 1998)
machinetype.......: 0x14c (I386)

( 4 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0xa9f5 0xaa00 6.38 be72f98a15ebe8bc983139a077df8032
.rdata 0xc000 0x1a52 0x1c00 5.15 c86d8eb1bd161433edaebb9900da49ad
.data 0xe000 0x4678 0x2e00 1.72 be105b956c09e423dbd672cd44ddc0ba
.rsrc 0x13000 0x24e0 0x2600 3.54 362a8a318293fe1f63a341f5db7fe423

( 7 imports )
> KERNEL32.dll: CreateFileA, ReadFile, LocalFree, SetFilePointer, LocalAlloc, GlobalDeleteAtom, Sleep, GlobalAddAtomA, GlobalFree, GlobalAlloc, IsDBCSLeadByte, GlobalLock, GlobalFindAtomA, CompareStringA, WideCharToMultiByte, WriteFile, CloseHandle, GetWindowsDirectoryA, OpenProcess, GetVersion, FreeLibrary, RemoveDirectoryA, GetLastError, DeleteFileA, FindFirstFileA, FindClose, lstrlenA, lstrcpyA, lstrcatA, lstrcmpA, lstrcpynA, MultiByteToWideChar, CreateProcessA, WaitForSingleObject, SetErrorMode, GetCurrentDirectoryA, OutputDebugStringA, LoadLibraryA, GetProcAddress, GetFileAttributesA, GlobalUnlock, VirtualAlloc, IsBadWritePtr, IsBadReadPtr, SetUnhandledExceptionFilter, VirtualFree, HeapCreate, HeapDestroy, GetFileType, GetStdHandle, SetHandleCount, GetEnvironmentStringsW, GetEnvironmentStrings, IsBadCodePtr, FreeEnvironmentStringsW, FreeEnvironmentStringsA, lstrcmpiA, GetModuleFileNameA, UnhandledExceptionFilter, GetOEMCP, GetACP, GetCPInfo, HeapAlloc, HeapFree, GetCommandLineA, GetStartupInfoA, GetModuleHandleA, GetCurrentProcess, TerminateProcess, ExitProcess, SetCurrentDirectoryA, SetEnvironmentVariableA, RtlUnwind, LCMapStringA, LCMapStringW, GetStringTypeA, GetStringTypeW
> USER32.dll: PackDDElParam, SendMessageA, DispatchMessageA, DefWindowProcA, CharNextA, DestroyWindow, UnregisterClassA, CreateWindowExA, RegisterClassA, wsprintfA, UnpackDDElParam, LoadStringA, LoadIconA, LoadCursorA, MessageBoxA, wvsprintfA, TranslateMessage, GetMessageA, SetCursor, ShowCursor, SetDlgItemTextA, SetWindowLongA, EndDialog, GetDlgItem, SetFocus, DialogBoxParamA, UpdateWindow, SetWindowTextA, InvalidateRect, CharUpperA, CharPrevA, BeginPaint, GetClientRect, DrawTextA, SetRect, EndPaint, PostQuitMessage, GetSystemMenu, EnableMenuItem, CreateDialogParamA, GetWindowRect, GetSystemMetrics, SetWindowPos, ShowWindow, PostMessageA, PeekMessageA, FillRect, SetClassLongA
> GDI32.dll: CreateSolidBrush, SetROP2, Rectangle, SelectObject, SetTextColor, SetBkMode, GetStockObject, GetTextMetricsA, ExtTextOutA, CreateFontIndirectA, DeleteObject
> ADVAPI32.dll: RegOpenKeyA, RegEnumValueA, RegEnumKeyA, RegDeleteKeyA, RegCloseKey, RegDeleteValueA, RegQueryValueExA, RegSetValueExA, RegCreateKeyA
> SHELL32.dll: SHGetMalloc, SHGetSpecialFolderLocation, SHGetPathFromIDListA
> ole32.dll: OleInitialize, OleUninitialize
> OLEAUT32.dll: -

( 0 exports )
PDFiD.: - RDS...: NSRL Reference Data Set

( Ziff-Davis Publishing Company L.P. )

> 3 Volume Software Library I: ST6UNST.EXE

( PC Utilities )

> PC Utilities - 510 utilities: ST6UNST.EXE

( Autodesk )

> Autodesk Map: ST6UNST.EXE

( Whirlwind Software )

> Hackers Encyclopedia 2002: ST6UNST.EXE

( Paraben Corporation )

> ftp madness: ST6UNST.EXE
> Paraben Corporation Bits and Info: ST6UNST.EXE

( Unknown )

> Miscellaneous Software: ST6UNST.EXE
> StegoArchive CD: ST6UNST.EXE

( TradeTouch.com inc. )

> Hard drive Tools 2003: ST6UNST.EXE,St6unst.exe
> Network Toolbox 2003: ST6UNST.EXE
> PC Hardware Tools 2003: ST6UNST.EXE
> PC Diagnostics & Repair Tools 2003: ST6UNST.EXE
> Car Hacker and Care Tools 2003: ST6UNST.EXE
> Windows XP/NT Tools for Administrators: ST6UNST.EXE
> WinCE Tools 2003: st6unst.exe
> Game Crackers and Tools Pro: ST6UNST.EXE
> Digital Camera Photography: ST6UNST.EXE
> Mobile Phone Tools 2003: ST6UNST.EXE

( Cosmi Corporation )

> 225 Winning Educational Programs: ST6UNST.EXE
> 300 Arcade Games: ST6UNST.EXE
> 1,000 Solitare Games: ST6UNST.EXE

( Dark Bay Ltd. )

> Hackers Handbook: ST6UNST.EXE

( ZG Financial Corp )

> Hard Drives & Subsystems: ST6UNST.EXE

( RonsWare )

> Ulitimate Golf Scorecard: ST6UNST.EXE

( Wingear )

> PCHardDriveUtilities: ST6UNST.EXE
> MP3 Studio Deluxe: ST6UNST.EXE
> Internet Utilities: ST6UNST.EXE

( Next Step Publishing )

> Network Tools: ST6UNST.EXE
> Desktop Security: ST6UNST.EXE
> System Tools: ST6UNST.EXE
> System Tools 2003: ST6UNST.EXE

( Core Publishing Inc. )

> Master Hacker Internet Terrorism: ST6UNST.EXE

( Mortgage Marketing Inc. )

> Mortgage Master: ST6UNST.EXE

( Sierra Inc. )

> NasCar Racing: ST6UNST.EXE

( Vlad Pambucol )

> Drive log: ST6UNST.EXE

( Barnes & Noble )

> Free Unlimited Internet Service Barnes & Nobles: ST6UNST.EXE

( Microsoft )

> Disc 2435.4: ST6UNST.EXE
> Applications, Developer Tools: ST6UNST.EXE
> Windows DNA XML Resource Kit: ST6UNST.EXE
> MSDN Development Platform Disc 1: ST6UNST.EXE
> Platforms, SDK/DDK: ST6UNST.EXE
> Mobile Information Server Developer Edition: ST6UNST.EXE
> MSDN Development Platform Disc 2: ST6UNST.EXE
> MSDN BizTalk Server 2004 beta, BizTalk server 2002 dev. ed., MS content mgmt server, eMbedded visual C++ 4.0 with SP2, Exchange server 2000, SMS 2003: ST6UNST.EXE
> MSDN Disc MSDN Index Oct 2000 IE Versions Platform SDK July 2000 Edition: ST6UNST.EXE
> MSDN Disc 2427.2: ST6UNST.EXE
> Developer Tools, Servers: ST6UNST.EXE
> MSDN MS .NET framework 1.1 SDK, App. Center 2000 dev. ed., Commerce server 2002 dev. ed., Data Analyzer 3.5, Host Integration server 2000: ST6UNST.EXE
> Exchange Server 2000: ST6UNST.EXE
> SDK/DDK, Servers - Special Release: ST6UNST.EXE
> Servers: ST6UNST.EXE
> Platforms, SDK/DDK, Developer Tools: ST6UNST.EXE
> Windows Server Resource Kit: ST6UNST.EXE
> MSDN Disc 0003: ST6UNST.EXE
> Windows 2000 Server Resource Kit: ST6UNST.EXE
> .NET Framework SDK: ST6UNST.EXE
> Windows DNA XML Resource Kit: ST6UNST.EXE
> Applications, Developer Tools, Servers: ST6UNST.EXE
> MSDN Disc 1016.1: ST6UNST.EXE
> Microsoft Visual Basic 6.0 Learning Edition: ST6UNST.EXE
> MSDN Development Platform Disc12: ST6UNST.EXE
> MSDN Disc 2432.9: ST6UNST.EXE
> BackOffice Server - Developers edition: ST6UNST.EXE
> Exchange 2000 Enterprise Server: ST6UNST.EXE
> Windows DDks: ST6UNST.EXE
> MSDN Disc 2427.1: ST6UNST.EXE
> Platforms, Servers, Applications: ST6UNST.EXE
> MSDN Disc 2432.2: ST6UNST.EXE
> Exchange 2000 Conference Server: ST6UNST.EXE
> MSDN Development Platform Disc 19: ST6UNST.EXE
> MSDN Disc 0727.1: ST6UNST.EXE
> Microsoft Security Resource Kit: ST6UNST.EXE
> MSDN Disc 0727.3: ST6UNST.EXE
> MSDN Disc 0727.2: ST6UNST.EXE
> MSDN Disc 2435.5: ST6UNST.EXE
> Commerce Server Resource Kit: ST6UNST.EXE
> MSDN Disc 2435.2: ST6UNST.EXE
> MSDN Disc 2435.1: ST6UNST.EXE
> MSDN Disc 0727.4: ST6UNST.EXE
> Windows 2000 Server Administrators Companion: ST6UNST.EXE
> MSDN Disc 2432.4: ST6UNST.EXE
> MSDN Disc 0727.5: ST6UNST.EXE
> MSDN Disc 2435: ST6UNST.EXE
> Tahoe Server: st6unst.exe
> SDKs and Tools: ST6UNST.EXE
> Visual Studio Enterprise Edition: ST6UNST.EXE
> Visual Basic 6.0 Prof. Edition Upgrade: St6unst.exe
> Visual Basic Professional Edition: St6unst.exe
> MSDN Disc 2432: ST6UNST.EXE
> MSDN Disc 2085: ST6UNST.EXE
> MSDN Disc 2432.7: ST6UNST.EXE
> MSDN Disc 2432.12: ST6UNST.EXE
> MSDN Disc 2432.10: ST6UNST.EXE
> MSDN Development Platform Disc1: ST6UNST.EXE
> MSDN Disc 2427.3: ST6UNST.EXE
> MSDN Disc 0727: ST6UNST.EXE
> MSDN Disk 2436.22: ST6UNST.EXE
> MSDN Disc 2435.3: ST6UNST.EXE
> BackOffice Server: ST6UNST.EXE
> MSDN Disc 0527.1: ST6UNST.EXE
> MSDN Disc 0526: ST6UNST.EXE
> Building Interactive Entertainment and E-Commerce Content: ST6UNST.EXE
> MSDN Disc 0527.2: ST6UNST.EXE
> MSDN Disc 3235: ST6UNST.EXE
> MSDN Disc0003: ST6UNST.EXE
> MSDN Disc 2436.20: ST6UNST.EXE
> MSDN MS Commerce Server 2002 Developer ed., Exchange Server 2003 Enterprise ed., Exchange Server 2003 Standard ed., Host Integration server 2000, SQL: ST6UNST.EXE
> Visual Basic: St6unst.exe
> MSDN Disc 2432.11: ST6UNST.EXE
> MSDN Development Platform Disc1: ST6UNST.EXE
> MSDN Development Platform Disc2: ST6UNST.EXE
> MSDN Disc 2436.22: ST6UNST.EXE

( Silver Star Publishing )

> Guide to Hacking Software Security 2002: ST6UNST.EXE

( Bytesize CD-ROM Inc. )

> PC Maintenance: ST6UNST.EXE
> CD Recorder: ST6UNST.EXE

ThreatExpert info: https://www.symantec.com?md5=996f83e516552ca3b51445bb994a6d38

Diamanka · Answer

Fichier Setup1.exe reçu le 2009.08.20 18:42:05 (UTC)Antivirus Version Dernière mise à jour Résultat a-squared 4.5.0.24 2009.08.20 - AhnLab-V3 5.0.0.2 2009.08.20 - AntiVir 7.9.1.3 2009.08.20 - Antiy-AVL 2.0.3.7 2009.08.20 - Authentium 5.1.2.4 2009.08.19 - Avast 4.8.1335.0 2009.08.20 - AVG 8.5.0.406 2009.08.20 - BitDefender 7.2 2009.08.20 - CAT-QuickHeal 10.00 2009.08.20 - ClamAV 0.94.1 2009.08.20 - Comodo 2037 2009.08.20 - DrWeb 5.0.0.12182 2009.08.20 - eSafe 7.0.17.0 2009.08.20 - eTrust-Vet 31.6.6691 2009.08.20 - F-Prot 4.4.4.56 2009.08.19 - F-Secure 8.0.14470.0 2009.08.20 - Fortinet 3.120.0.0 2009.08.20 - GData 19 2009.08.20 - Ikarus T3.1.1.68.0 2009.08.20 - Jiangmin 11.0.800 2009.08.20 - K7AntiVirus 7.10.823 2009.08.20 - Kaspersky 7.0.0.125 2009.08.20 - McAfee 5715 2009.08.20 - McAfee+Artemis 5715 2009.08.20 - McAfee-GW-Edition 6.8.5 2009.08.20 - Microsoft 1.4903 2009.08.20 - NOD32 4353 2009.08.20 - Norman 6.01.09 2009.08.20 - nProtect 2009.1.8.0 2009.08.20 - Panda 10.0.0.14 2009.08.20 - PCTools 4.4.2.0 2009.08.20 - Prevx 3.0 2009.08.20 - Rising 21.43.34.00 2009.08.20 - Sophos 4.44.0 2009.08.20 - Sunbelt 3.2.1858.2 2009.08.20 - Symantec 1.4.4.12 2009.08.20 - TheHacker 6.3.4.3.384 2009.08.20 - TrendMicro 8.950.0.1094 2009.08.20 - VBA32 3.12.10.9 2009.08.20 - ViRobot 2009.8.20.1893 2009.08.20 - VirusBuster 4.6.5.0 2009.08.19 - Information additionnelle File size: 286720 bytes MD5 : b941549d8f8167cc573c460ae20ba5ea SHA1 : f1fb5952beef486d116a525d2655695050fd04a9 SHA256: bbb7d06b0bc43049515471a78a458b6ce67684b3b63e75a2d40a535edd3908ea PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x3E94
timedatestamp.....: 0x4922F263 (Tue Nov 18 17:50:43 2008)
machinetype.......: 0x14C (Intel I386)

( 3 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x3DDA4 0x3E000 6.01 b214f9956a9b35e7de39564377303004
.data 0x3F000 0x4D54 0x1000 0.00 620f0b67a91f7f74151bc5be745b7110
.rsrc 0x44000 0x5958 0x6000 3.37 cce7a5a53091dd27705c59d7bdf405ea

( 1 imports )

> msvbvm60.dll: __vbaVarTextTstLe, __vbaVarSub, __vbaStrI2, _CIcos, _adj_fptan, __vbaVarMove, __vbaStrI4, __vbaVarVargNofree, __vbaFreeVar, __vbaLineInputStr, __vbaGosubReturn, -, __vbaStrVarMove, __vbaLenBstr, -, -, __vbaFreeVarList, _adj_fdiv_m64, __vbaFreeObjList, -, _adj_fprem1, __vbaRecAnsiToUni, -, -, __vbaCopyBytes, __vbaResume, __vbaStrCat, __vbaLsetFixstr, -, __vbaVarTextTstEq, __vbaSetSystemError, __vbaRecDestruct, __vbaNameFile, __vbaHresultCheckObj, __vbaLenVar, _adj_fdiv_m32, -, __vbaAryDestruct, __vbaLateMemSt, -, __vbaForEachCollObj, __vbaBoolStr, __vbaExitProc, __vbaFileCloseAll, -, __vbaCyAdd, __vbaOnError, __vbaObjSet, _adj_fdiv_m16i, -, __vbaObjSetAddref, _adj_fdivr_m16i, -, __vbaStrFixstr, __vbaBoolVar, -, __vbaForEachCollVar, -, __vbaStrTextCmp, -, __vbaBoolVarNull, _CIsin, -, __vbaErase, __vbaVarCmpGt, __vbaLateMemStAd, __vbaNextEachCollObj, -, -, __vbaVarZero, __vbaChkstk, __vbaGosubFree, __vbaFileClose, -, EVENT_SINK_AddRef, -, -, __vbaGenerateBoundsError, __vbaStrCmp, __vbaCyI2, -, __vbaCyI4, __vbaObjVar, __vbaNextEachCollVar, __vbaPrintObj, __vbaI2I4, DllFunctionCall, __vbaVarOr, __vbaVarLateMemSt, __vbaLbound, __vbaRedimPreserve, _adj_fpatan, __vbaR4Var, __vbaLateIdCallLd, __vbaRedim, __vbaRecUniToAnsi, EVENT_SINK_Release, __vbaNew, -, __vbaVarTextTstNe, __vbaUI1I2, _CIsqrt, __vbaVarAnd, EVENT_SINK_QueryInterface, __vbaFpCmpCy, __vbaVarTextCmpEq, __vbaVarMul, __vbaExceptHandler, __vbaPrintFile, __vbaStrToUnicode, -, _adj_fprem, _adj_fdivr_m64, __vbaGosub, -, __vbaI2Str, __vbaVarDiv, -, -, -, __vbaFPException, __vbaInStrVar, -, -, __vbaStrVarVal, __vbaUbound, -, -, __vbaVarCat, __vbaDateVar, __vbaI2Var, -, -, -, _CIlog, -, __vbaErrorOverflow, __vbaFileOpen, -, -, __vbaInStr, __vbaNew2, -, __vbaCyMulI2, _adj_fdiv_m32i, -, _adj_fdivr_m32i, -, __vbaStrCopy, -, __vbaFreeStrList, -, __vbaDerefAry1, __vbaVarTextTstGt, _adj_fdivr_m32, __vbaPowerR8, -, _adj_fdiv_r, -, -, -, -, __vbaI4Var, __vbaAryLock, __vbaLateMemCall, __vbaVarAdd, __vbaVarDup, __vbaStrToAnsi, -, __vbaFpI2, -, __vbaFpI4, __vbaVarCopy, __vbaVarLateMemCallLd, -, __vbaLateMemCallLd, _CIatan, -, __vbaStrMove, __vbaCastObj, __vbaStrVarCopy, -, -, _allmul, __vbaLenVarB, __vbaLateIdSt, -, __vbaVarTextCmpNe, _CItan, -, __vbaAryUnlock, __vbaFPInt, _CIexp, __vbaMidStmtBstr, -, __vbaFreeStr, __vbaFreeObj, -

( 0 exports )
TrID : File type identification
Win32 Executable Microsoft Visual Basic 6 (68.5%)
Win32 Executable MS Visual C++ (generic) (20.5%)
Win32 Executable Generic (4.6%)
Win32 Dynamic Link Library (generic) (4.1%)
Generic Win/DOS Executable (1.0%) ssdeep: 6144:iTxCa82WzGsomiviXHW1gh1YpnopuCzbujoe:A3WzYZqgpnLo PEiD : - RDS : NSRL Reference Data Set
- Antivirus Version Dernière mise à jour Résultat a-squared 4.5.0.24 2009.08.20 - AhnLab-V3 5.0.0.2 2009.08.20 - AntiVir 7.9.1.3 2009.08.20 - Antiy-AVL 2.0.3.7 2009.08.20 - Authentium 5.1.2.4 2009.08.19 - Avast 4.8.1335.0 2009.08.20 - AVG 8.5.0.406 2009.08.20 - BitDefender 7.2 2009.08.20 - CAT-QuickHeal 10.00 2009.08.20 - ClamAV 0.94.1 2009.08.20 - Comodo 2037 2009.08.20 - DrWeb 5.0.0.12182 2009.08.20 - eSafe 7.0.17.0 2009.08.20 - eTrust-Vet 31.6.6691 2009.08.20 - F-Prot 4.4.4.56 2009.08.19 - F-Secure 8.0.14470.0 2009.08.20 - Fortinet 3.120.0.0 2009.08.20 - GData 19 2009.08.20 - Ikarus T3.1.1.68.0 2009.08.20 - Jiangmin 11.0.800 2009.08.20 - K7AntiVirus 7.10.823 2009.08.20 - Kaspersky 7.0.0.125 2009.08.20 - McAfee 5715 2009.08.20 - McAfee+Artemis 5715 2009.08.20 - McAfee-GW-Edition 6.8.5 2009.08.20 - Microsoft 1.4903 2009.08.20 - NOD32 4353 2009.08.20 - Norman 6.01.09 2009.08.20 - nProtect 2009.1.8.0 2009.08.20 - Panda 10.0.0.14 2009.08.20 - PCTools 4.4.2.0 2009.08.20 - Prevx 3.0 2009.08.20 - Rising 21.43.34.00 2009.08.20 - Sophos 4.44.0 2009.08.20 - Sunbelt 3.2.1858.2 2009.08.20 - Symantec 1.4.4.12 2009.08.20 - TheHacker 6.3.4.3.384 2009.08.20 - TrendMicro 8.950.0.1094 2009.08.20 - VBA32 3.12.10.9 2009.08.20 - ViRobot 2009.8.20.1893 2009.08.20 - VirusBuster 4.6.5.0 2009.08.19 - Information additionnelle File size: 286720 bytes MD5 : b941549d8f8167cc573c460ae20ba5ea SHA1 : f1fb5952beef486d116a525d2655695050fd04a9 SHA256: bbb7d06b0bc43049515471a78a458b6ce67684b3b63e75a2d40a535edd3908ea PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x3E94
timedatestamp.....: 0x4922F263 (Tue Nov 18 17:50:43 2008)
machinetype.......: 0x14C (Intel I386)

( 3 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x3DDA4 0x3E000 6.01 b214f9956a9b35e7de39564377303004
.data 0x3F000 0x4D54 0x1000 0.00 620f0b67a91f7f74151bc5be745b7110
.rsrc 0x44000 0x5958 0x6000 3.37 cce7a5a53091dd27705c59d7bdf405ea

( 1 imports )

> msvbvm60.dll: __vbaVarTextTstLe, __vbaVarSub, __vbaStrI2, _CIcos, _adj_fptan, __vbaVarMove, __vbaStrI4, __vbaVarVargNofree, __vbaFreeVar, __vbaLineInputStr, __vbaGosubReturn, -, __vbaStrVarMove, __vbaLenBstr, -, -, __vbaFreeVarList, _adj_fdiv_m64, __vbaFreeObjList, -, _adj_fprem1, __vbaRecAnsiToUni, -, -, __vbaCopyBytes, __vbaResume, __vbaStrCat, __vbaLsetFixstr, -, __vbaVarTextTstEq, __vbaSetSystemError, __vbaRecDestruct, __vbaNameFile, __vbaHresultCheckObj, __vbaLenVar, _adj_fdiv_m32, -, __vbaAryDestruct, __vbaLateMemSt, -, __vbaForEachCollObj, __vbaBoolStr, __vbaExitProc, __vbaFileCloseAll, -, __vbaCyAdd, __vbaOnError, __vbaObjSet, _adj_fdiv_m16i, -, __vbaObjSetAddref, _adj_fdivr_m16i, -, __vbaStrFixstr, __vbaBoolVar, -, __vbaForEachCollVar, -, __vbaStrTextCmp, -, __vbaBoolVarNull, _CIsin, -, __vbaErase, __vbaVarCmpGt, __vbaLateMemStAd, __vbaNextEachCollObj, -, -, __vbaVarZero, __vbaChkstk, __vbaGosubFree, __vbaFileClose, -, EVENT_SINK_AddRef, -, -, __vbaGenerateBoundsError, __vbaStrCmp, __vbaCyI2, -, __vbaCyI4, __vbaObjVar, __vbaNextEachCollVar, __vbaPrintObj, __vbaI2I4, DllFunctionCall, __vbaVarOr, __vbaVarLateMemSt, __vbaLbound, __vbaRedimPreserve, _adj_fpatan, __vbaR4Var, __vbaLateIdCallLd, __vbaRedim, __vbaRecUniToAnsi, EVENT_SINK_Release, __vbaNew, -, __vbaVarTextTstNe, __vbaUI1I2, _CIsqrt, __vbaVarAnd, EVENT_SINK_QueryInterface, __vbaFpCmpCy, __vbaVarTextCmpEq, __vbaVarMul, __vbaExceptHandler, __vbaPrintFile, __vbaStrToUnicode, -, _adj_fprem, _adj_fdivr_m64, __vbaGosub, -, __vbaI2Str, __vbaVarDiv, -, -, -, __vbaFPException, __vbaInStrVar, -, -, __vbaStrVarVal, __vbaUbound, -, -, __vbaVarCat, __vbaDateVar, __vbaI2Var, -, -, -, _CIlog, -, __vbaErrorOverflow, __vbaFileOpen, -, -, __vbaInStr, __vbaNew2, -, __vbaCyMulI2, _adj_fdiv_m32i, -, _adj_fdivr_m32i, -, __vbaStrCopy, -, __vbaFreeStrList, -, __vbaDerefAry1, __vbaVarTextTstGt, _adj_fdivr_m32, __vbaPowerR8, -, _adj_fdiv_r, -, -, -, -, __vbaI4Var, __vbaAryLock, __vbaLateMemCall, __vbaVarAdd, __vbaVarDup, __vbaStrToAnsi, -, __vbaFpI2, -, __vbaFpI4, __vbaVarCopy, __vbaVarLateMemCallLd, -, __vbaLateMemCallLd, _CIatan, -, __vbaStrMove, __vbaCastObj, __vbaStrVarCopy, -, -, _allmul, __vbaLenVarB, __vbaLateIdSt, -, __vbaVarTextCmpNe, _CItan, -, __vbaAryUnlock, __vbaFPInt, _CIexp, __vbaMidStmtBstr, -, __vbaFreeStr, __vbaFreeObj, -

( 0 exports )
TrID : File type identification
Win32 Executable Microsoft Visual Basic 6 (68.5%)
Win32 Executable MS Visual C++ (generic) (20.5%)
Win32 Executable Generic (4.6%)
Win32 Dynamic Link Library (generic) (4.1%)
Generic Win/DOS Executable (1.0%) ssdeep: 6144:iTxCa82WzGsomiviXHW1gh1YpnopuCzbujoe:A3WzYZqgpnLo PEiD : - RDS : NSRL Reference Data Set
-

Diamanka · Answer

Le dernier est long mais ca arrive.... Alors ca donne quoi pour l'instant ?

gen-hackman · Answer

&#9654 Double clic sur OTL.exe pour le lancer.


&#9654Copie la liste qui se trouve en gras ci-dessous,

&#9654 colle-la dans la zone sous Customs Scans/Fixes :

:processes
explorer.exe
iexplore.exe
firefox.exe
msnmsgr.exe
Teatimer.exe

:OTL
@Alternate Data Stream - 118 bytes -> C:\ProgramData\TEMP:3E2028C8


:reg
[HKEY_USERS\S-1-5-21-366844691-4290838981-367203893-1000\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks]
"{EF99BD32-C1FB-11D2-892F-0090271D4F88}"=-

:files
C:\Windows\System32\reg.exe
C:\Windows\System32\actskin4.ocx

:commands
[emptytemp]
[reboot]


&#9654 Clique sur RunFix pour lancer la suppression.


&#9654 Poste le rapport.

ensuite :

&#9654 Passer de Avast à AntiVir :

&#9654 Télécharge Désinstalleur d'Avast!.

&#9654 redemarre en mode sans echec :

Comment aller en Mode sans échec 
1) Redémarres ton ordi 
2) Tapote la touche F8 immédiatement, (F5 sur certains PC) juste après le "Bip" 
3) Tu verras un écran avec options de démarrage apparaître 
4) Choisis la première option : Sans Échec, et valide avec "Entrée" 
5) Choisis ton compte habituel, et non Administrateur (si besoin ... ) 
(attention : pas de connexion possible en mode sans échec , donc copies ou imprimes bien la manipe pour éviter les erreurs ...) 


&#9654 Désinstalle via Ajout/Suppression de Programmes (si présents) :

    * Avast!


&#9654 ensuite execute le desinstaller
 
Ceci effacera la majorité des traces du produit Avast! d'Alwil Software.

&#9654 redemarre

&#9654 Télécharge Ccleaner sur ton Bureau. : 

  &#9654 Clique sur  "download the latest version"
  &#9654 Installe-le en laissant seulement les options suivantes cochées :

- Ajouter un raccourci sur le Bureau
- Contrôler automatiquement les mises à jour de CCleaner

  &#9654 Lance le Nettoyage
  &#9654 Clique sur Chercher des erreurs et sauvegarde si tu le souhaites.

plus de precision sur la configuration de ccleaner te seront donnees plus tard


 tuto Comment utiliser CCleaner.
***************

&#9654 Télécharge Antivir en Francais ou Antivir en Francais sur ton Bureau.: 



 &#9654 Double clique sur l'exécutable téléchargé pour lancer l'installation.
 &#9654 À la fin de l'installation, clique sur Finish.
 &#9654 Ouvre Antivir, assure-toi qu’il soit bien à jour !
 &#9654 Dans l'onglet Protection Locale, choisis Contrôler.
 &#9654 Active la recherche de rootkits via le + de Recherche de Rootkits, puis dans Sélection manuelle, coche tout (tes partitions de disque dur).
 &#9654 Clique sur la loupe du milieu pour lancer le scan en tant qu'Administrateur.
 &#9654 Poste moi le rapport généré : Pour cela, clique sur l'onglet Aperçu, puis choisis Rapports, tu trouveras son rapport..
 &#9654 Sélectionne le rapport et clique sur l'icône "Afficher le fichier de rapport du rapport sélectionné.


&#9654 Note : Pour une éradication des menaces plus efficace, lance le scan en mode sans échec.

Pourquoi changer ? :Avast Vs Antivir

 Tuto de configuration en vidéo (Merci Nico)

Diamanka · Answer

All processes killed
========== PROCESSES ==========
No active process named explorer.exe was found!
No active process named iexplore.exe was found!
No active process named firefox.exe was found!
No active process named msnmsgr.exe was found!
No active process named Teatimer.exe was found!
========== OTL ==========
ADS C:\ProgramData\TEMP:3E2028C8 deleted successfully.
========== REGISTRY ==========
Registry value HKEY_USERS\S-1-5-21-366844691-4290838981-367203893-1000\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\{EF99BD32-C1FB-11D2-892F-0090271D4F88} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88}\ deleted successfully.
========== FILES ==========
File move failed. C:\Windows\System32eg.exe scheduled to be moved on reboot.
C:\Windows\System32\actskin4.ocx unregistered successfully.
C:\Windows\System32\actskin4.ocx moved successfully.
========== COMMANDS ==========
 
[EMPTYTEMP]
 
User: All Users
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: Diamanka
->Temp folder emptied: 1573456 bytes
->Temporary Internet Files folder emptied: 138828722 bytes
 
User: Public
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
File delete failed. C:\Windows	emp\_avast4_\Webshlock.txt scheduled to be deleted on reboot.
Windows Temp folder emptied: 7958 bytes
RecycleBin emptied: 0 bytes
 
Total Files Cleaned = 133,91 mb
 
 
OTL by OldTimer - Version 3.0.10.7 log created on 08202009_210206

Files\Folders moved on Reboot...
File move failed. C:\Windows\System32eg.exe scheduled to be moved on reboot.
File move failed. C:\Windows	emp\_avast4_\Webshlock.txt scheduled to be moved on reboot.

Registry entries deleted on Reboot...

Diamanka · Answer

Fichier Pref34.D1l reçu le 2009.08.20 18:27:10 (UTC)Antivirus Version Dernière mise à jour Résultat a-squared 4.5.0.24 2009.08.20 - AhnLab-V3 5.0.0.2 2009.08.20 - AntiVir 7.9.1.3 2009.08.20 - Antiy-AVL 2.0.3.7 2009.08.20 - Authentium 5.1.2.4 2009.08.19 - Avast 4.8.1335.0 2009.08.20 - AVG 8.5.0.406 2009.08.20 - BitDefender 7.2 2009.08.20 - CAT-QuickHeal 10.00 2009.08.20 - ClamAV 0.94.1 2009.08.20 - Comodo 2013 2009.08.20 - DrWeb 5.0.0.12182 2009.08.20 - eSafe 7.0.17.0 2009.08.20 - eTrust-Vet 31.6.6691 2009.08.20 - F-Prot 4.4.4.56 2009.08.19 - F-Secure 8.0.14470.0 2009.08.20 - Fortinet 3.120.0.0 2009.08.20 - GData 19 2009.08.20 - Ikarus T3.1.1.68.0 2009.08.20 - Jiangmin 11.0.800 2009.08.20 - K7AntiVirus 7.10.823 2009.08.20 - Kaspersky 7.0.0.125 2009.08.20 - McAfee 5715 2009.08.20 - McAfee+Artemis 5715 2009.08.20 - McAfee-GW-Edition 6.8.5 2009.08.20 - Microsoft 1.4903 2009.08.20 - NOD32 4353 2009.08.20 - Norman 2009.08.20 - nProtect 2009.1.8.0 2009.08.20 - Panda 10.0.0.14 2009.08.20 - PCTools 4.4.2.0 2009.08.20 - Prevx 3.0 2009.08.20 - Rising 21.43.34.00 2009.08.20 - Sophos 4.44.0 2009.08.20 - Sunbelt 3.2.1858.2 2009.08.20 - Symantec 1.4.4.12 2009.08.20 - TheHacker 6.3.4.3.384 2009.08.20 - TrendMicro 8.950.0.1094 2009.08.20 - VBA32 3.12.10.9 2009.08.20 - ViRobot 2009.8.20.1893 2009.08.20 - VirusBuster 4.6.5.0 2009.08.19 - Information additionnelle File size: 25 bytes MD5 : 9d07fce28434db954a1693bdcd06d545 SHA1 : de3bbfe130ffeeef53320e56eaf897a105a97d0f SHA256: 7cb297841668e2d87e460f1a65617ee8c2d52d01a2ba1681da25614e0730a77b TrID : File type identification
Unknown! ssdeep: 3:s08jXU:s3jXU PEiD : - RDS : NSRL Reference Data Set
- Antivirus Version Dernière mise à jour Résultat a-squared 4.5.0.24 2009.08.20 - AhnLab-V3 5.0.0.2 2009.08.20 - AntiVir 7.9.1.3 2009.08.20 - Antiy-AVL 2.0.3.7 2009.08.20 - Authentium 5.1.2.4 2009.08.19 - Avast 4.8.1335.0 2009.08.20 - AVG 8.5.0.406 2009.08.20 - BitDefender 7.2 2009.08.20 - CAT-QuickHeal 10.00 2009.08.20 - ClamAV 0.94.1 2009.08.20 - Comodo 2013 2009.08.20 - DrWeb 5.0.0.12182 2009.08.20 - eSafe 7.0.17.0 2009.08.20 - eTrust-Vet 31.6.6691 2009.08.20 - F-Prot 4.4.4.56 2009.08.19 - F-Secure 8.0.14470.0 2009.08.20 - Fortinet 3.120.0.0 2009.08.20 - GData 19 2009.08.20 - Ikarus T3.1.1.68.0 2009.08.20 - Jiangmin 11.0.800 2009.08.20 - K7AntiVirus 7.10.823 2009.08.20 - Kaspersky 7.0.0.125 2009.08.20 - McAfee 5715 2009.08.20 - McAfee+Artemis 5715 2009.08.20 - McAfee-GW-Edition 6.8.5 2009.08.20 - Microsoft 1.4903 2009.08.20 - NOD32 4353 2009.08.20 - Norman 2009.08.20 - nProtect 2009.1.8.0 2009.08.20 - Panda 10.0.0.14 2009.08.20 - PCTools 4.4.2.0 2009.08.20 - Prevx 3.0 2009.08.20 - Rising 21.43.34.00 2009.08.20 - Sophos 4.44.0 2009.08.20 - Sunbelt 3.2.1858.2 2009.08.20 - Symantec 1.4.4.12 2009.08.20 - TheHacker 6.3.4.3.384 2009.08.20 - TrendMicro 8.950.0.1094 2009.08.20 - VBA32 3.12.10.9 2009.08.20 - ViRobot 2009.8.20.1893 2009.08.20 - VirusBuster 4.6.5.0 2009.08.19 - Information additionnelle File size: 25 bytes MD5 : 9d07fce28434db954a1693bdcd06d545 SHA1 : de3bbfe130ffeeef53320e56eaf897a105a97d0f SHA256: 7cb297841668e2d87e460f1a65617ee8c2d52d01a2ba1681da25614e0730a77b TrID : File type identification
Unknown! ssdeep: 3:s08jXU:s3jXU PEiD : - RDS : NSRL Reference Data Set
-

gen-hackman · Answer

bien j attends la suite

Diamanka · Answer

Bah ca y est non ?

gen-hackman · Answer

https://forums.commentcamarche.net/forum/affich-13940441-supprimer-keylogger?entiere#41

Diamanka · Answer

Je t'ia tout mis dans le message 42 pour OTL...

Diamanka · Answer

ET message 43 pour le fichier qui manquait, analysé avec VirusTotal. J'ai oublié quelque chose....?

gen-hackman · Answer

oui mais si tu actionnes la roulette de ta souris , tu vois qu'il y a une suite

Diamanka · Answer

Oui j'ai vu pour Antivir à la place d'Avast :-)

Mais le probleme, c'est que je peux pas faire le mode sans echec avec ma souris et mon clavier sans fil... C'est trop galère.. Je peux pas mettre les deux en même temps ? Avast + Antivir ou bien ca va faire des conflits ?

Diamanka · Answer

Je peux le virer en normal ? Sans le mode sans echec ? Et mettre Antivir à la place ? Il est gratuit aussi ?

gen-hackman · Answer

bien sur qu il est gratuit et 100 fois plus performant

Diamanka · Answer

Ok :-) POur ANtivir, je l'utilise seul ou bien il faut quelque chose en complément ??

Parce que WIndows me dit que mon ordinateur n'est pas protégé et que je ne dispose pas d'antivirus...

Merci et je te poste le rapport des que c'est fini.

gen-hackman · Answer

oui windows te dit ca au demarrage , c est normal

Diamanka · Answer

D'accord.... J'ai fini mais le document texte fait 3Mo.... Comment faire pour te le passer ???


Il dit :

  23896 Les répertoires ont été contrôlés
 336670 Des fichiers ont été contrôlés
      1 Des virus ou programmes indésirables ont été trouvés
      0 Des fichiers ont été classés comme suspects
      1 Des fichiers ont été supprimés
      0 Des virus ou programmes indésirables ont été réparés
      0 Les fichiers ont été déplacés dans la quarantaine
      0 Les fichiers ont été renommés
     69 Impossible de contrôler des fichiers
 336600 Fichiers non infectés
   2042 Les archives ont été contrôlées
    146 Avertissements
      1 Consignes
 565880 Des objets ont été contrôlés lors du Rootkitscan
      0 Des objets cachés ont été trouvés

Diamanka · Answer

Bonjour, 

Desolée de mon retard, j'etais en week end... Je n'arrive pas à trouver ce qui t'interesse, il y a tellement de choses.... Meme avec la fonction recherche je n'y arrive pas.... Bon, j'essaie encore

gen-hackman · Answer

tu as toujours le rapport sauvegardé quelque part , donc tu dois pouvoir trouver ce que je cherche ^^

Supprimer KeyLogger

54 réponses

Newsletters