hidjack this

Question

j'ai utilisé hidjackthis,et je voudrais de l'aide pour lire le log .merci

bernie61 · Answer

salutqqs explications làhttp://www.commentcamarche.net/faq/266-Analyse-d%27un-log-HiJackThisa+

Pierre · Answer

Logfile of HijackThis v1.98.2Scan saved at 08:53:02, on 02/12/2004Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\csrss.exeC:\WINDOWS\SYSTEM32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\Norman\Nvc\BIN\Zanda.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\ZoneLabs\vsmon.exeC:\NORMAN\Nvc\BIN\NVCSCHED.EXEC:\NORMAN\Nvc\BIN\NJEEVES.EXEC:\NORMAN\Nvc\BIN
vcoas.exeC:\NORMAN\Nvc\BIN
ipsvc.exeC:\WINDOWS\System32\alg.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exeC:\Program Files\Messenger Plus! 3\MsgPlus.exeC:\WINDOWS\system32undll32.exeC:\PROGRA~1\OpiStat\OpiStat\OpiStat.exeC:\NORMAN\Nvc\BIN\ZLH.EXEC:\Program Files\Zone Labs\ZoneAlarm\zlclient.exeC:\PROGRA~1\HEWLET~1\HPSHAR~1\hpgs2wnf.exeC:\Program Files\Messenger\msmsgs.exeC:\NORMAN\Nvc\BIN\NYMSE.EXEC:\NORMAN\Nvc\BIN\NIP.EXEC:\NORMAN\Nvc\BIN\cclaw.exeC:\Program Files\Nikon\NkView6\NkvMon.exeC:\Program Files\Fichiers communs\Microsoft Shared\Works Shared\wkcalrem.exeC:\Program Files\MSN Messenger\msnmsgr.exeC:\Program Files\Messenger Plus! 3\Plugins\openConvo.exeC:\Documents and Settings\Pierre\Bureau\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://www.google.fr/keyword/%sR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.tele2.fr/startpage/adsl/frR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet ExplorerR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dllO2 - BHO: TGTSoft Explorer Toolbar Changer - {C333CF63-767F-4831-94AC-E683D962C63C} - C:\Program Files\TGTSoft\StyleXP\TGT_BHO.dllO3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dllO4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initializeO4 - HKLM\..\Run: [WorksFUD] C:\Program Files\Microsoft Works\wkfud.exeO4 - HKLM\..\Run: [Microsoft Works Portfolio] C:\Program Files\Microsoft Works\WksSb.exe /AllUsersO4 - HKLM\..\Run: [Microsoft Works Update Detection] C:\Program Files\Microsoft Works\WkDetect.exeO4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exeO4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exeO4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottimeO4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe"O4 - HKLM\..\Run: [AdslTaskBar] rundll32.exe stmctrl.dll,TaskBarO4 - HKLM\..\Run: [OpiStat] C:\PROGRA~1\OpiStat\OpiStat\OpiStat.exeO4 - HKLM\..\Run: [Norman ZANDA] C:\NORMAN\Nvc\BIN\ZLH.EXE /LOAD /SPLASHO4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"O4 - HKLM\..\Run: [CloneCDTray] "C:\Documents and Settings\Vincent\Mes documents\My Ebooks\Programmes\cloncd\CloneCD\CloneCDTray.exe" /sO4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\Messenger Plus! 3\MsgPlus.exe" /WinStartO4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /backgroundO4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /backgroundO4 - Global Startup: Adobe Gamma Loader.lnk = ?O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXEO4 - Global Startup: NkvMon.exe.lnk = C:\Program Files\Nikon\NkView6\NkvMon.exeO4 - Global Startup: Rappels du Calendrier Microsoft Works.lnk = ?O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel presentO10 - Broken Internet access because of LSP provider 'nmtracer.dll' missingO16 - DPF: Interface Chat Voila - http://chat7.x-echo.com/version5/Applet/vchatsign.cabO16 - DPF: PackageHtmlCab - http://acces.blonde.com/package/op/PackageHtmlCab.CABO16 - DPF: ppctlcab - http://www.pestscan.com/scanner/ppctlcab.cabO16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab30149.cabO16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab30149.cabO16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cabO16 - DPF: {6DB731A3-B074-4118-8B1C-32511C65D836} (FotovistaPhotoUploader.ctrFpu) - http://www.mypixmania.com/tools/activex/fpu.cabO16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} (GSDACtl Class) - http://launch.gamespyarcade.com/software/launch/alaunch.cabO16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cabO16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.inoculer.com/antivirus/Msie/bitdefender.cabO16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab30149.cabO16 - DPF: {8F48147B-78D9-40F9-ACC0-BDDE59B246F4} (AccountHelper Class) - https://ssl.tele2.com/inc/accounthelper.cabO16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cabO16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab30149.cabO17 - HKLM\System\CCS\Services\Tcpip\..\{D4B81CCB-7A22-4961-9A10-1532CE574E08}: NameServer = 212.151.136.250 130.244.127.169Grand merci de ton aide Bernie,voici le log peut-tu m'aider encore merci!!

Utilisateur anonyme · Answer

salut,rien dans ce log - pkoi un log hijack?*Devise : Je m'intéresse à l'avenir parceque  c'est là que je vais passer le reste de ma vie*

pierre · Answer

Salut DOLLY,devise trés réaliste.Pour mon log j'ai vu sur le site hidjack que le 010Broken internet était  méchant et le 016 {74RA88c8-DAF8..............} aussi Je fais quoi ? merci de réponse.

Utilisateur anonyme · Answer

re Pierre ^_^Nmtracer.dll (See previous entry) Added as part of a research program called Opistat, which offers users a free download of Norman Antivirus for joining. Opistat also makes Netmeter/Netratings, which is either the same or a similar program and is considered spyware/adware. It appears Opistat must stay installed to be able to update Norman <-- comme tu as Norman antivirus ça tombe bien lollllhttp://computercops.biz/lsp-107.htmlO16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} (GSDACtl Class) - ht$$$://launch.gamespyarcade. <-- celle-là? bof! c'est un jeu que l'on trouve sur des chats type MSN/Voilà... etc..... ton log est clean, c'est bon :-)*Devise : Je m'intéresse à l'avenir parceque  c'est là que je vais passer le reste de ma vie*

pierre · Answer

Merci por tes réponses DOLLY.Ou commece le reste de ta vie,Salut

Hidjack this

6 réponses

Votre réponse

Discussions similaires

Newsletters