Dde aide pour Log HijackThis

Question

bonjourvala, pour mon 4 ou 5 post, ça sera le 1er en demande d'aide, j'ai ajouté à la fin les lignes dont je ne suis pas sûr...Merci pour vos confirmations et pour être original "Bonne année, bonne santé" :))Logfile of HijackThis v1.99.0Scan saved at 02:00:52, on 03/01/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\OUINEDOZ\System32\smss.exeC:\OUINEDOZ\system32\winlogon.exeC:\OUINEDOZ\system32\services.exeC:\OUINEDOZ\system32\lsass.exeC:\OUINEDOZ\System32\Ati2evxx.exeC:\OUINEDOZ\system32\svchost.exeC:\OUINEDOZ\System32\svchost.exeC:\Program Files\Sygate\SPF\smc.exeC:\OUINEDOZ\system32\Ati2evxx.exeC:\OUINEDOZ\Explorer.EXEC:\OUINEDOZ\system32\spoolsv.exeC:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXEC:\Program Files\Fichiers communs\Logitech\QCDriver3\LVCOMS.EXEC:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeC:\Program Files\Java\jre1.5.0_01\bin\jusched.exeC:\Program Files\AVPersonal\AVSCHED32.EXEC:\Program Files\AVPersonal\AVGNT.EXEC:\Program Files\AVPersonal\AVWUPSRV.EXEC:\OUINEDOZ\system32\ctfmon.exeC:\OUINEDOZ\system32\cisvc.exeC:\Program Files\Spybot - Search & Destroy\TeaTimer.exeC:\OUINEDOZ\system32\drivers\KodakCCS.exeC:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exeC:\OUINEDOZ\system32\pctspk.exeC:\OUINEDOZ\System32	cpsvcs.exeC:\OUINEDOZ\System32\svchost.exeC:\OUINEDOZ\system32\cidaemon.exeC:\Program Files\AVPersonal\AVGUARD.EXEC:\OUINEDOZ\system32	askmgr.exeC:\Program Files\Internet Explorer\iexplore.exeC:\Program Files\Java\jre1.5.0_01\bin\javaw.exeC:\Program Files\FlashGet\flashget.exeC:\Program Files\WinRAR\WinRAR.exeC:\Documents and Settings\Propriétaire\Bureau\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.9online.frR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://fr.rd.yahoo.com/customize/ie/defaults/sb/ymsgr6/fr/*http://www.yahoo.com/ext/search/search.htmlR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://fr.rd.yahoo.com/customize/ie/defaults/sp/ymsgr6/fr/*http://fr.yahoo.comR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.comR1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://home.free.fr/R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://fr.rd.yahoo.com/customize/ie/defaults/sb/ymsgr6/fr/*http://www.yahoo.com/ext/search/search.htmlR0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.rd.yahoo.com/customize/ie/defaults/stp/ymsgr6/fr/*http://fr.yahoo.comR1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blankR1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://fr.rd.yahoo.com/customize/ie/defaults/su/ymsgr6/fr/*http://fr.yahoo.comR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO1 - Hosts: 62.189.6.85 _sip._tls.sip5.phoneserve.comO1 - Hosts: 62.189.6.85 _sip._ssl.sip5.phoneserve.comO1 - Hosts: 62.189.6.86 _sip._tls.sip6.phoneserve.comO1 - Hosts: 62.189.6.86 _sip._ssl.sip6.phoneserve.comO1 - Hosts: 62.189.6.93 _sip._tls.sip7.phoneserve.comO1 - Hosts: 62.189.6.93 _sip._ssl.sip7.phoneserve.comO1 - Hosts: 62.189.6.78 _sip._tls.sip1.callserve.comO1 - Hosts: 62.189.6.78 _sip._ssl.sip1.callserve.comO1 - Hosts: 62.189.6.79 _sip._tls.sip2.callserve.comO1 - Hosts: 62.189.6.79 _sip._ssl.sip2.callserve.comO1 - Hosts: 62.189.6.108 _sip._tls.sip8.phoneserve.comO1 - Hosts: 62.189.6.108 _sip._ssl.sip8.phoneserve.comO2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\ycomp5_5_7_0.dllO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dllO2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dllO3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn3\ycomp5_5_7_0.dllO3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\fgiebar.dllO4 - HKLM\..\Run: [EM_EXEC] C:\PROGRA~1\Logitech\MOUSEW~1\SYSTEM\EM_EXEC.EXEO4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Fichiers communs\Logitech\QCDriver3\LVCOMS.EXEO4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeO4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startguiO4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_01\bin\jusched.exeO4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWndO4 - HKLM\..\Run: [AVSCHED32] C:\Program Files\AVPersonal\AVSCHED32.EXE /minO4 - HKLM\..\Run: [AVGCtrl] C:\Program Files\AVPersonal\AVGNT.EXE /minO4 - HKLM\..\Run: [MSConfig] C:\OUINEDOZ\PCHealth\HelpCtr\Binaries\MSConfig.exe /autoO4 - HKCU\..\Run: [ctfmon.exe] C:\OUINEDOZ\system32\ctfmon.exeO4 - HKCU\..\Run: [Yahoo! Pager] C:\Program Files\Yahoo!\Messenger\ypager.exe -quietO4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exeO8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\binesources\WebMenuImg.htmO8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000O8 - Extra context menu item: Tout télécharger en utilisant FlashGet - C:\Program Files\FlashGet\jc_all.htmO8 - Extra context menu item: Télécharger en utilisant FlashGet - C:\Program Files\FlashGet\jc_link.htmO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin
pjpi150_01.dllO9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_01\bin
pjpi150_01.dllO9 - Extra button: Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes.dllO9 - Extra 'Tools' menuitem: Yahoo! Messenger - {4528BBE0-4E08-11D5-AD55-00010333D0AD} - C:\Program Files\Yahoo!\Messenger\yhexbmes.dllO9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exeO9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exeO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO12 - Plugin for .pdf: C:\Program Files\Internet Explorer\PLUGINS
ppdf32.dllO14 - IERESET.INF: START_PAGE_URL=http://home.free.fr/O16 - DPF: ConferenceRoom Java Client - http://mail.igl.net:8000/java/cr.cabO16 - DPF: Interface Chat Voila - http://chat14.x-echo.com/version5/Applet/vchatsign.cabO16 - DPF: JT's Blocks - http://download.games.yahoo.com/games/clients/y/blt1_x.cabO16 - DPF: teleir_cert - https://static.ir.dgi.minefi.gouv.fr/secure/connexion/archives/ie4n4/teleir_cert.cabO16 - DPF: Yahoo! Chat - http://us.chat1.yimg.com/us.yimg.com/i/chat/applet/c381/chat.cabO16 - DPF: Yahoo! Dominoes - http://download.games.yahoo.com/games/clients/y/dot4_x.cabO16 - DPF: Yahoo! Go - http://download.games.yahoo.com/games/clients/y/gt2_x.cabO16 - DPF: Yahoo! Hearts - http://download.games.yahoo.com/games/clients/y/ht1_x.cabO16 - DPF: Yahoo! Poker - http://download.games.yahoo.com/games/clients/y/pt1_x.cabO16 - DPF: Yahoo! Pool 2 - http://download.games.yahoo.com/games/clients/y/pote_x.cabO16 - DPF: {084DAC27-6FA3-4F55-9005-033F2F102F5C} (ITPPDiagIE Class) - http://images.goa.com/v3/InstallGoaIT/Itpp/V2,0,1,6/npwwg.cabO16 - DPF: {2FC9A21E-2069-4E47-8235-36318989DB13} (PPSDKActiveXScanner.MainScreen) - http://ppupdates.ca.com/downloads/scanner/axscanner.cabO16 - DPF: {5CE7A7AF-8C5E-48CF-AE30-8FC6F01C27E3} (Yahoo! Photos - Outil de publication Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/ydropper/ydropper1_4fr.cabO16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Controls/en/x86/client/wuweb_site.cab?1096996526031O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cabO16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cabO16 - DPF: {80DD2229-B8E4-4C77-B72F-F22972D723EA} (AvxScanOnline Control) - http://www.inoculer.com/antivirus/Msie/bitdefender.cabO16 - DPF: {A18962F6-E6ED-40B1-97C9-1FB36F38BFA8} (Aurigma Image Uploader 3.0 Control) - http://www.extrafilm.fr/import/ImageUploader3b.cabO16 - DPF: {B9191F79-5613-4C76-AA2A-398534BB8999} - http://us.dl1.yimg.com/download.yahoo.com/dl/installs/suite/autocomplete.cabO16 - DPF: {EF99BD32-C1FB-11D2-892F-0090271D4F88} (Yahoo! Toolbar) - http://us.dl1.yimg.com/download.companion.yahoo.com/dl/toolbar/yiebio5_1_6_0.cabO16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IMDownloader Class) - http://www2.incredimail.com/contents/setup/downloader/imloader.cabO16 - DPF: {FD40EC41-D860-4579-8BA4-52671A45C71C} (AxHtChat Class) - http://images.goa.com/v3/InstallGoaIT/ChatAx/V4,0,5,4/npaxchat.cabO23 - Service: AntiVir Service - H+BEDV Datentechnik GmbH - C:\Program Files\AVPersonal\AVGUARD.EXEO23 - Service: Ati HotKey Poller - Unknown - C:\OUINEDOZ\System32\Ati2evxx.exeO23 - Service: ATI Smart - Unknown - C:\OUINEDOZ\system32\ati2sgag.exeO23 - Service: AntiVir Update - H+BEDV Datentechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXEO23 - Service: Service d'administration du Gestionnaire de disque logique - Unknown - C:\OUINEDOZ\System32\dmadmin.exeO23 - Service: Journal des événements - Unknown - C:\OUINEDOZ\system32\services.exeO23 - Service: Service COM de gravage de CD IMAPI - Unknown - C:\OUINEDOZ\System32\imapi.exeO23 - Service: Kodak Camera Connection Software - Eastman Kodak Company - C:\OUINEDOZ\system32\drivers\KodakCCS.exeO23 - Service: Partage de Bureau à distance NetMeeting - Unknown - C:\OUINEDOZ\System32\mnmsrvc.exeO23 - Service: PCTEL Speaker Phone - Unknown - C:\OUINEDOZ\system32\pctspk.exeO23 - Service: Plug-and-Play - Unknown - C:\OUINEDOZ\system32\services.exeO23 - Service: Gestionnaire de session d'aide sur le Bureau à distance - Unknown - C:\OUINEDOZ\system32\sessmgr.exeO23 - Service: Carte à puce - Unknown - C:\OUINEDOZ\System32\SCardSvr.exeO23 - Service: Sygate Personal Firewall - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exeO23 - Service: Sony SPTI Service - Sony Corporation - C:\Program Files\Fichiers communs\Sony Shared\AVLib\SPTISRV.exeO23 - Service: Journaux et alertes de performance - Unknown - C:\OUINEDOZ\system32\smlogsvc.exeO23 - Service: Cliché instantané de volume - Unknown - C:\OUINEDOZ\System32\vssvc.exeO23 - Service: Carte de performance WMI - Unknown - C:\OUINEDOZ\System32\wbem\wmiapsrv.exeVoila où j'ai des doutes O1 - Hosts: 62.189.6.85 _sip._tls.sip5.phoneserve.comO1 - Hosts: 62.189.6.85 _sip._ssl.sip5.phoneserve.comO1 - Hosts: 62.189.6.86 _sip._tls.sip6.phoneserve.comO1 - Hosts: 62.189.6.86 _sip._ssl.sip6.phoneserve.comO1 - Hosts: 62.189.6.93 _sip._tls.sip7.phoneserve.comO1 - Hosts: 62.189.6.93 _sip._ssl.sip7.phoneserve.comO1 - Hosts: 62.189.6.78 _sip._tls.sip1.callserve.comO1 - Hosts: 62.189.6.78 _sip._ssl.sip1.callserve.comO1 - Hosts: 62.189.6.79 _sip._tls.sip2.callserve.comO1 - Hosts: 62.189.6.79 _sip._ssl.sip2.callserve.comO1 - Hosts: 62.189.6.108 _sip._tls.sip8.phoneserve.comO1 - Hosts: 62.189.6.108 _sip._ssl.sip8.phoneserve.comc'est censé ête le téléphone internet de callserveSinon le reste me parait acceptable... à votre avis ???

darkcrystal33 · Answer

télécharge/installe/met a jour et nettoie ton pc avec spybot
http://users.skynet.be/fa936042/spybotsd13.exe

télécharge/installe/met a jour et nettoie ton pc avec adaware
http://www.lavasoftusa.com/default.shtml.fr

télécharge/installe et vaccine ton pc avec spywareblaster
http://www.javacoolsoftware.com/spywareblaster.html

change de navigateur internet
remplace internet explorer par firefox
http://www.mozilla-europe.org/fr/products/firefox/

si tu est sous Windows 2000 / XP / 2003 server
vaccine ton pc avec Windows Worms Doors Cleaner ci-dessous:
http://www.firewallleaktester.com/tools/wwdc.exe

tutoriel hijackthis
http://www.zebulon.fr/articles/HijackThis.php
analyse automatique en ligne
http://www.hijackthis.de/index.php?langselect=french

Dde aide pour Log HijackThis

1 réponse

Votre réponse

Discussions similaires

Newsletters