1ERE ANALYSE HIJACKTHIS Fermé

Question

Bonjour,
 QUELQU UN PEUT IL ANALYSER MON RAPPORT HIJACKTHIS  ET ME DIRE SI JE SUIS INFECTER . SACHANT QUE MBAM ME TROUVE RIEN . ZEB HELP PROCESS ME TROUVE DES INFECTION DANS LA BASE DE REGISTRE . MERCI A VOUSLogfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:00:18, on 21/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\PROGRAM FILES\A-SQUARED FREE\a2service.exe
C:\WINDOWS\arservice.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\Program Files\iolo\common\lib\ioloServiceManager.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\System32\svchost.exe
C:\HP\KBD\KBD.EXE
c:\windows\system\hpsysdrv.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Opera\opera.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn5\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn5\yt.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {1CB20BF0-BBAE-40A7-93F4-6435FF3D0411} - C:\PROGRA~1\Crawler\ctbr.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.0.926.3450\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Barre d'outils &Crawler - {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - C:\PROGRA~1\Crawler\ctbr.dll
O3 - Toolbar: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn5\yt.dll
O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)
O4 - HKLM\..\Run: [ftutil2] rundll32.exe ftutil2.dll,SetWriteCacheMode
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [AlwaysReady Power Message APP] ARPWRMSG.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [HPBootOp] "C:\Program Files\Hewlett-Packard\HP Boot Optimizer\HPBootOp.exe" /run
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [EPSON Stylus C84 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE /P23 "EPSON Stylus C84 Series" /O6 "USB001" /M "Stylus C84"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - .DEFAULT User Startup: Pin.lnk = C:\hp\bin\CLOAKER.EXE (User 'Default user')
O4 - .DEFAULT User Startup: PinMcLnk.lnk = C:\hp\bin\cloaker.exe (User 'Default user')
O4 - Global Startup: Google Updater.lnk = C:\Program Files\Google\Google Updater\GoogleUpdater.exe
O8 - Extra context menu item: Ajouter à Kaspersky Anti-Bannière - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm
O8 - Extra context menu item: Crawler Search - tbr:iemenu
O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll
O9 - Extra button: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra 'Tools' menuitem: Aide à la connexion - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:\WINDOWS\PCHEALTH\HELPCTR\Vendors\CN=Hewlett-Packard,L=Cupertino,S=Ca,C=US\IEButton\support.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/...
O18 - Protocol: tbr - {4D25FB7A-8902-4291-960E-9ADA051CFBBF} - C:\PROGRA~1\Crawler\ctbr.dll
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\Kaspersky Internet Security 2009\mzvkbd.dll,C:\PROGRA~1\KASPER~1\Kaspersky Internet Security 2009\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\Kaspersky Internet Security 2009\adialhk.dll,C:\PROGRA~1\KASPER~1\Kaspersky Internet Security 2009\kloehk.dll
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\PROGRAM FILES\A-SQUARED FREE\a2service.exe
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
O23 - Service: Google Update Service (gupdate1c95c6782de1870) (gupdate1c95c6782de1870) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iolo FileInfoList Service (ioloFileInfoList) - Unknown owner - C:\Program Files\iolo\common\lib\ioloServiceManager.exe
O23 - Service: iolo System Service (ioloSystemService) - Unknown owner - C:\Program Files\iolo\common\lib\ioloServiceManager.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe

toptitbal · Answer

Bonjour

Télécharge Toolbar-S&D (Team IDN) sur ton Bureau. 
https://77b4795d-a-62cb3a1a-s-sites.googlegroups.com/site/eric71mespages/ToolBarSD.exe?attachauth=ANoY7cqJWPphpudyTqv7TRo5RQ3nm_Sx8JluVMO59X5E9cyE3j3LqKlmStIqiDqJdIgMJLi7MXn2nKVajQfoWuVvZZ2wIx_vkqO4k4P0K9jh-ra9jaKPXdZcoaVF2UqJZNH8ubL_42uIwh6f35xJ2GJMuzddVj2Qth1DgZ839lxEIFGkgWz3TdfvNMy-YtxfA3gqBUrj4U4LFeAPiWr3ClmjIP0t_Xs5PQ%3D%3D&attredirects=2 

* Lance l'installation du programme en exécutant le fichier téléchargé. 
* Double-clique maintenant sur le raccourci de Toolbar-S&D. 
* Sélectionne la langue souhaitée en tapant la lettre de ton choix puis en validant avec la touche Entrée. 
* Choisis maintenant l'option 1 (Recherche). Patiente jusqu'à la fin de la recherche. 
* Poste le rapport généré. (C:\TB.txt)

fred · Answer

VOICI LE RAPPORT 

   -----------\  ToolBar S&D 1.2.7   XP/Vista

   Microsoft Windows XP Professionnel ( v5.1.2600 ) Service Pack 3
   X86-based PC ( Uniprocessor Free : AMD Athlon(tm) 64 Processor 3500+ )
   BIOS : Phoenix - AwardBIOS v6.00PG
   USER : Administrateur ( Administrator )
   BOOT : Normal boot
   Antivirus : Kaspersky Internet Security 8.0.0.506 (Activated)
   Firewall  : Kaspersky Internet Security 8.0.0.506 (Activated)
   C:\ (Local Disk) - NTFS - Total:142 Go (Free:105 Go)
   D:\ (Local Disk) - FAT32 - Total:6 Go (Free:1 Go)
   E:\ (CD or DVD)

   "C:\ToolBar SD" ( MAJ : 19-12-2008|22:30 )
   Option : [1] ( 21/12/2008|12:37 )

   -----------\  Recherche de Fichiers / Dossiers ...

   C:\Program Files\Crawler
   C:\Program Files\Crawler\adrkeys.dat
   C:\Program Files\Crawler\COMMON_FF.dat
   C:\Program Files\Crawler\confirm.dat
   C:\Program Files\Crawler\ctbcomm.dll
   C:\Program Files\Crawler\ctbr.dll
   C:\Program Files\Crawler\CTConf.dat
   C:\Program Files\Crawler\CTipsDef.dll
   C:\Program Files\Crawler\CToolbar.exe
   C:\Program Files\Crawler\CUpdate.exe
   C:\Program Files\Crawler\Download
   C:\Program Files\Crawler\firefox
   C:\Program Files\Crawler\Languages
   C:\Program Files\Crawler\lookfor.dat
   C:\Program Files\Crawler\majorse.dat
   C:\Program Files\Crawlerootmenu.dat
   C:\Program Files\Crawler\services.dat
   C:\Program Files\Crawler\STWSGLanguageAct
   C:\Program Files\Crawler\STWSG_FF.dat
   C:\Program Files\Crawler\TBR5LanguageAct
   C:\Program Files\Crawler\Update
   C:\Program Files\Crawler\WebSecurityGuard.dll
   C:\Program Files\Crawler\WSGData
   C:\Program Files\Crawler\firefox\chrome
   C:\Program Files\Crawler\firefox\chrome.manifest
   C:\Program Files\Crawler\firefox\components
   C:\Program Files\Crawler\firefox\install.ini
   C:\Program Files\Crawler\firefox\install.rdf
   C:\Program Files\Crawler\firefox\stwsg_ff.ini
   C:\Program Files\Crawler\firefox\chrome\common.jar
   C:\Program Files\Crawler\firefox\chrome\stwsg.jar
   C:\Program Files\Crawler\firefox\components\xcomm.dll
   C:\Program Files\Crawler\firefox\components\xplugin.xpt
   C:\Program Files\Crawler\firefox\components\xshared.dll
   C:\Program Files\Crawler\firefox\components\xshared.xpt
   C:\Program Files\Crawler\firefox\components\xsupport.dll
   C:\Program Files\Crawler\firefox\components\xsupport.xpt
   C:\Program Files\Crawler\firefox\components\xwsg.dll
   C:\Program Files\Crawler\Languages\STWSG_CS.cab
   C:\Program Files\Crawler\Languages\STWSG_DE.cab
   C:\Program Files\Crawler\Languages\STWSG_EN.cab
   C:\Program Files\Crawler\Languages\STWSG_ES.cab
   C:\Program Files\Crawler\Languages\STWSG_FF.cab
   C:\Program Files\Crawler\Languages\STWSG_FR.cab
   C:\Program Files\Crawler\Languages\STWSG_IT.cab
   C:\Program Files\Crawler\Languages\STWSG_PT-BR.cab
   C:\Program Files\Crawler\Languages\STWSG_PT.cab
   C:\Program Files\Crawler\Languages\TBR5_CS.cab
   C:\Program Files\Crawler\Languages\TBR5_DE.cab
   C:\Program Files\Crawler\Languages\TBR5_EN.cab
   C:\Program Files\Crawler\Languages\TBR5_ES.cab
   C:\Program Files\Crawler\Languages\TBR5_FR.cab
   C:\Program Files\Crawler\Languages\TBR5_IT.cab
   C:\Program Files\Crawler\Languages\TBR5_NL.cab
   C:\Program Files\Crawler\Languages\TBR5_PL.cab
   C:\Program Files\Crawler\Languages\TBR5_PT-BR.cab
   C:\Program Files\Crawler\Languages\TBR5_PT.cab
   C:\Program Files\Crawler\Languages\TBR5_RU.cab
   C:\Program Files\Crawler\STWSGLanguageAct\info.ini
   C:\Program Files\Crawler\STWSGLanguageAct\language.ini
   C:\Program Files\Crawler\TBR5LanguageAct\info.ini
   C:\Program Files\Crawler\TBR5LanguageAct\language.ini
   C:\Program Files\Crawler\Update\domains.cab
   C:\Program Files\Crawler\Update\Languages
   C:\Program Files\Crawler\Update\STWSGLanguageAct
   C:\Program Files\Crawler\Update\Languages\STWSG_CS.cab
   C:\Program Files\Crawler\Update\Languages\STWSG_DE.cab
   C:\Program Files\Crawler\Update\Languages\STWSG_EN.cab
   C:\Program Files\Crawler\Update\Languages\STWSG_ES.cab
   C:\Program Files\Crawler\Update\Languages\STWSG_FF.cab
   C:\Program Files\Crawler\Update\Languages\STWSG_FR.cab
   C:\Program Files\Crawler\Update\Languages\STWSG_IT.cab
   C:\Program Files\Crawler\Update\Languages\STWSG_NL.cab
   C:\Program Files\Crawler\Update\Languages\STWSG_PT-BR.cab
   C:\Program Files\Crawler\Update\Languages\STWSG_PT.cab
   C:\Program Files\Crawler\Update\STWSGLanguageAct\info.ini
   C:\Program Files\Crawler\Update\STWSGLanguageAct\language.ini
   C:\Program Files\Crawler\WSGData\domains
   C:\Program Files\Crawler\WSGData\g_S-1-5-21-3618412983-3286456768-4731485-500.dat
   C:\Program Files\Crawler\WSGData\g_S-1-5-21-553034175-2581091395-2867653378-500.dat
   C:\Program Files\Crawler\WSGData\p_S-1-5-21-3618412983-3286456768-4731485-500.dat
   C:\Program Files\Crawler\WSGData\p_S-1-5-21-553034175-2581091395-2867653378-500.dat
   C:\Program Files\Crawler\WSGData\ud_S-1-5-21-3618412983-3286456768-4731485-500.dat
   C:\Program Files\Crawler\WSGData\ud_S-1-5-21-553034175-2581091395-2867653378-500.dat
   C:\Program Files\Crawler\WSGData\wfilter.dat
   C:\Program Files\Crawler\WSGData\w_S-1-5-21-3618412983-3286456768-4731485-500.dat
   C:\Program Files\Crawler\WSGData\w_S-1-5-21-553034175-2581091395-2867653378-500.dat
   C:\Program Files\Crawler\WSGData\domains\domains_000.dat
   C:\Program Files\Crawler\WSGData\domains\domains_000_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_001.dat
   C:\Program Files\Crawler\WSGData\domains\domains_001_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_002.dat
   C:\Program Files\Crawler\WSGData\domains\domains_002_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_003.dat
   C:\Program Files\Crawler\WSGData\domains\domains_003_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_004.dat
   C:\Program Files\Crawler\WSGData\domains\domains_004_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_005.dat
   C:\Program Files\Crawler\WSGData\domains\domains_005_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_006.dat
   C:\Program Files\Crawler\WSGData\domains\domains_006_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_007.dat
   C:\Program Files\Crawler\WSGData\domains\domains_007_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_008.dat
   C:\Program Files\Crawler\WSGData\domains\domains_008_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_009.dat
   C:\Program Files\Crawler\WSGData\domains\domains_009_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_010.dat
   C:\Program Files\Crawler\WSGData\domains\domains_010_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_011.dat
   C:\Program Files\Crawler\WSGData\domains\domains_011_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_012.dat
   C:\Program Files\Crawler\WSGData\domains\domains_012_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_013.dat
   C:\Program Files\Crawler\WSGData\domains\domains_013_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_014.dat
   C:\Program Files\Crawler\WSGData\domains\domains_014_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_015.dat
   C:\Program Files\Crawler\WSGData\domains\domains_015_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_016.dat
   C:\Program Files\Crawler\WSGData\domains\domains_016_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_017.dat
   C:\Program Files\Crawler\WSGData\domains\domains_017_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_018.dat
   C:\Program Files\Crawler\WSGData\domains\domains_018_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_019.dat
   C:\Program Files\Crawler\WSGData\domains\domains_019_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_020.dat
   C:\Program Files\Crawler\WSGData\domains\domains_020_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_021.dat
   C:\Program Files\Crawler\WSGData\domains\domains_021_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_022.dat
   C:\Program Files\Crawler\WSGData\domains\domains_022_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_023.dat
   C:\Program Files\Crawler\WSGData\domains\domains_023_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_024.dat
   C:\Program Files\Crawler\WSGData\domains\domains_024_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_025.dat
   C:\Program Files\Crawler\WSGData\domains\domains_025_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_026.dat
   C:\Program Files\Crawler\WSGData\domains\domains_026_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_027.dat
   C:\Program Files\Crawler\WSGData\domains\domains_027_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_028.dat
   C:\Program Files\Crawler\WSGData\domains\domains_028_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_029.dat
   C:\Program Files\Crawler\WSGData\domains\domains_029_diff.dat
   C:\Program Files\Crawler\WSGData\domains\domains_030.dat
   C:\Program Files\Crawler\WSGData\domains\domains_030_diff.dat
   C:\Program Files\Crawler\WSGData\domains\index.dat
   C:\DOCUME~1\ALLUSE~1\MENUDÉ~1\PROGRA~1\Barre d'outils Crawler
   C:\WINDOWS\iun6002.exe
   C:\Program Files\Mozilla Firefox\plugins\NPAskSBr.dll

   -----------\  Extensions

   (Administrateur) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar

   (All Users) - {3112ca9c-de6d-4884-a869-9855de68056c} => google-toolbar

   (Default User) - {635abd67-4fe9-1b23-4f01-e679fa7484c1} => ytoolbar


   -----------\  [..\Internet Explorer\Main]

   [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
   "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
   "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "Local Page"="C:\windows\system32\blank.htm"

   [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
   "Default_Page_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome"
   "Default_Search_URL"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "Search Page"="http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch"
   "Start Page"="http://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home"
   "Local Page"="C:\windows\system32\blank.htm"


   --------------------\  Recherche d'autres infections


   Aucune autre infection trouvée  !


   1 - "C:\ToolBar SD\TB_1.txt" - 13/12/2008|13:58 - Option : [1]
   2 - "C:\ToolBar SD\TB_2.txt" - 21/12/2008|12:38 - Option : [1]

   -----------\  Fin du rapport a 12:38:28,48

^^Marie^^ · Answer

Triplon

1ERE ANALYSE HIJACKTHIS

3 réponses

Discussions similaires