rapport hijack

Question

bonjour ben voila mon rapport Logfile of HijackThis v1.99.1Scan saved at 13:07:16, on 09/05/2005Platform: Windows XP  (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 (6.00.2600.0000)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exeC:\Program Files\SiS300_V1.04.50\utility\khooker.exeC:\Program Files\SiS300_V1.04.50\utility\sistray.EXEC:\WINDOWS\System32\LVCOMSX.EXEC:\Program Files\Logitech\Video\LogiTray.exeC:\Program Files\Winamp\Winampa.exeC:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exeC:\Program Files\MessengerPlus! 3\MsgPlus.exeC:\Program Files\Java\jre1.5.0_02\bin\jusched.exeC:\WINDOWS\System32\MSMSN7.exeC:\WINDOWS\System32\ctfmon.exeC:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exeC:\Program Files\Creative\MediaSource\Detector\CTDetect.exeC:\Program Files\Messenger\msmsgs.exeC:\WINDOWS\System32\MSMSN7.exeC:\Program Files\Logitech\Video\FxSvr2.exeC:\Program Files\MSN Messenger\msnmsgr.exeC:\Program Files\Alwil Software\Avast4\aswUpdSv.exeC:\Program Files\Alwil Software\Avast4\ashServ.exeC:\WINDOWS\System32\CTsvcCDA.EXEC:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exeC:\PROGRA~1\Agnitum\OUTPOS~1\outpost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\wuauclt.exeC:\Program Files\Alwil Software\Avast4\ashWebSv.exeC:\Program Files\Alwil Software\Avast4\ashMaiSv.exeC:\WINDOWS\System32\wuauclt.exeC:\Documents and Settings\Administrateur\Mes documents\hijack\hijackthis\HijackThis.exeR1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhostR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dllO2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\PROGRA~1\FlashFXP\IEFlash.dllO3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocxO4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exeO4 - HKLM\..\Run: [khooker] C:\Program Files\SiS300_V1.04.50\utility\khooker.exeO4 - HKLM\..\Run: [SiS Tray] C:\Program Files\SiS300_V1.04.50\utility\sistray.EXEO4 - HKLM\..\Run: [Outpost Firewall] C:\PROGRA~1\Agnitum\OUTPOS~1\outpost.exe /waitserviceO4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -kO4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXEO4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exeO4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\Winampa.exe"O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exeO4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exeO4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exeO4 - HKLM\..\Run: [MS MSN Menssenger 7.0] MSMSN7.exeO4 - HKLM\..\RunServices: [MS MSN Menssenger 7.0] MSMSN7.exeO4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exeO4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exeO4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" bootO4 - HKCU\..\Run: [Creative Detector] C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe /RO4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStartO4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /backgroundO4 - HKCU\..\Run: [MS MSN Menssenger 7.0] MSMSN7.exeO4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /backgroundO4 - Global Startup: FTP Voyager Scheduler.lnk = C:\Program Files\RhinoSoft.com\FTP Voyager\FVScheduler.exeO4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exeO8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin
pjpi150_02.dllO9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin
pjpi150_02.dllO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXEO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXEO9 - Extra button: Trashcan - {072F3B8A-2DA2-40e2-B841-88899F240200} - C:\Program Files\Agnitum\Outpost Firewall\TRASH.EXE (HKCU)O9 - Extra 'Tools' menuitem: Show Trashcan - {072F3B8A-2DA2-40e2-B841-88899F240200} - C:\Program Files\Agnitum\Outpost Firewall\TRASH.EXE (HKCU)O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cabO16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30043.www3.hp.com/hpdj/fr/check/qdiagh.cab?325O18 - Protocol: bw+0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw+0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw-0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw-0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw00 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw00s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw10 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw10s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw20 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw20s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw30 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw30s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw40 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw40s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw50 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw50s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw60 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw60s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw70 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw70s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw80 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw80s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw90 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw90s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwa0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwa0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwb0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwb0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwc0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwc0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwd0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwd0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwe0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwe0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwf0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwf0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dllO18 - Protocol: bwg0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwg0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwh0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwh0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwi0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwi0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwj0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwj0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwk0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwk0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwl0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwl0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwm0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwm0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwn0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwn0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwo0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwo0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwp0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwp0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwq0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwq0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwr0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwr0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bws0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bws0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwt0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwt0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwu0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwu0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwv0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwv0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bww0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bww0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwx0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwx0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwy0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwy0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwz0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwz0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: offline-8876480 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exeO23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exeO23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.EXEO23 - Service: Outpost Firewall Service (OutpostFirewall) - Agnitum - C:\PROGRA~1\Agnitum\OUTPOS~1\outpost.exemerci d avanceps: mon la mise a jours de mon antivirus avast ne semble pas fonctioner par ce que quand je clic sur telecharger la nouvelle base de donnee il me marque directement que la mise a jours est effectuee par contre quand c est une nouvelle version d avast la il telecharge voila et encore merci

todd15 · Answer

personne ne peut m aider?

k_rote · Answer

Bonjour, je crois que mon ordi est infecté par un virus, j'ai des plantages inopinés, hier impossible de redémarrer, j'avais un message d'erreur du style "System32\ZoneLabbs\...html.drr  je sais pas quoi n'est pas valide " et hop plantage pas le temps de lire.J'ai plusieurs partitions, xp familial sur C:, xp pro sur D:, mes données sur E: et le probleme s'est déclenché sur C: ou jy suis le plus svt. ce matin jai reussi a allumer, jai lancé spybot qui ma trouvé des elements etrangers, et au moment ou jai voulu corriger les problemes jai eu ce message "la dll C:\WINDOWS\wt\wt3d.dll n'est pas une dll valide vérifier à l'aide de votre cd d'installation" jai cliqué sur OK et là spybot a planté dc je sais pas si il a pu corriger le probleme.j'ai voulu effacer zone alarm de mes programmes cu qu'il a l'air de poser probleme et là encore plantage.jai scanné mon C:\windows avec antivir rienjai scanné mon C:\ProgramFiles avec antivir plantagejai lancé spybot : plantagejai démarré en mode sans echec et lancé ad aware : plantageje vous joint le scan highjack si quelqu'un pouvait m'aider ça seriat super sympa je sais pas quoi faire, a chaque fois que je lance une tache ça planejai voulu lancer le scan de secuser.com pareil....je reussi a allumer mon ordi au bout d'un moment mais je saisplus quoi faire voila le logmerci beaucoup!!!!!!!!!Logfile of HijackThis v1.99.1Scan saved at 09:58:18, on 10/05/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Fujitsu Siemens Computers\Odyssey Client for Fujitsu Siemens Computers\odClientService.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeC:\WINDOWS\SOUNDMAN.EXEC:\Program Files\Wireless 11Mbps Network\XPFix.exeC:\Program Files\Fujitsu Siemens Computers\Odyssey Client for Fujitsu Siemens Computers\OdTray.exeC:\Program Files\Java\j2re1.4.2_05\bin\jusched.exeC:\Program Files\MSN Apps\Updater\01.02.3000.1001\fr\msnappau.exeC:\Program Files\Fichiers communs\Real\Update_OBealsched.exeC:\Program Files\AVPersonal\AVGNT.EXEC:\WINDOWS\system32\ctfmon.exeC:\Program Files\AVPersonal\AVGUARD.EXEC:\WINDOWS\System32\Ati2evxx.exeC:\Program Files\AVPersonal\AVWUPSRV.EXEC:\WINDOWS\system32\CTsvcCDA.EXEC:\WINDOWS\system32\slserv.exeC:\WINDOWS\system32undll32.exeC:\DOCUME~1\carole\LOCALS~1\Temp\zauninst.exeC:\DOCUME~1\carole\LOCALS~1\Temp\GLB42.tmpC:\Program Files\Mozilla Firefox\firefox.exeC:\Program Files\MSN Messenger\msnmsgr.exeC:\Documents and Settings\carole\Bureau\HijackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com/R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet ExplorerR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocxO2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dllO2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dllO2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dllO3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dllO4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exeO4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeO4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXEO4 - HKLM\..\Run: [Alice] C:\Program Files\Wireless 11Mbps Network\XPFix.exeO4 - HKLM\..\Run: [OdTray.exe] "C:\Program Files\Fujitsu Siemens Computers\Odyssey Client for Fujitsu Siemens Computers\OdTray.exe"O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exeO4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exeO4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fr\msnappau.exe"O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osbootO4 - HKLM\..\Run: [AVGCtrl] C:\Program Files\AVPersonal\AVGNT.EXE /minO4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exeO4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXEO8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin
pjpi142_05.dllO9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin
pjpi142_05.dllO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO16 - DPF: {3A7FE611-1994-4EF1-A09F-99456752289D} - http://install.wildtangent.com/ActiveLauncher/ActiveLauncher.cabO16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/0118a978dbbfc3475518/netzip/RdxIE601_fr.cabO16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cabO16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cabO16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cabO16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cabO17 - HKLM\System\CCS\Services\Tcpip\..\{C6625170-F631-42A6-80FB-047E6A2505CC}: NameServer = 212.151.136.250 130.244.127.161O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - C:\Program Files\AVPersonal\AVGUARD.EXEO23 - Service: Apache2Triad Apache2 Service (Apache2) - Unknown owner - C:\apache2triad\bin\apache.exe" -n Apache2 -k runservice (file missing)O23 - Service: Apache2Triad Apache2 Service with SSL (Apache2(SSL)) - Unknown owner - C:\apache2triad\bin\apache.exe" -D SSL -n Apache2(SSL) -k runservice (file missing)O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exeO23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXEO23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXEO23 - Service: Apache2Triad MySql Service (MySql) - Unknown owner - C:\apache2triad\mysql\bin\mysqld.exeO23 - Service: Odyssey Client (odClientService) - Funk Software, Inc. - C:\Program Files\Fujitsu Siemens Computers\Odyssey Client for Fujitsu Siemens Computers\odClientService.exeO23 - Service: OracleMTSRecoveryService - Oracle Corporation - C:\oracle\bin\omtsreco.exeO23 - Service: OracleOraHome1Agent - Oracle Corporation - C:\oracle\bin\agntsrvc.exeO23 - Service: OracleOraHome1ClientCache - Unknown owner - C:\oracle\BIN\ONRSD.EXEO23 - Service: OracleOraHome1HTTPServer - Unknown owner - C:\oracle\Apache\Apache\apache.exe" --ntservice (file missing)O23 - Service: OracleOraHome1PagingServer - Unknown owner - C:\oracle/bin/pagntsrv.exeO23 - Service: OracleOraHome1SNMPPeerEncapsulator - Unknown owner - C:\oracle\BIN\ENCSVC.EXEO23 - Service: OracleOraHome1SNMPPeerMasterAgent - Unknown owner - C:\oracle\BIN\AGNTSVC.EXEO23 - Service: OracleOraHome1TNSListener - Unknown owner - C:\oracle\BIN\TNSLSNR.exeO23 - Service: OracleOraHome92TNSListener - Unknown owner - C:\oracle\ora92\BIN\TNSLSNR.exeO23 - Service: OracleServiceCAROLE - Oracle Corporation - c:\oracle\bin\ORACLE.EXEO23 - Service: Apache2Triad SlimFTPd Server (SlimFTPd) - Unknown owner - C:\apache2triad\ftp\SlimFTPd.exe" -service (file missing)O23 - Service: SmartLinkService (SLService) -   - C:\WINDOWS\SYSTEM32\slserv.exeO23 - Service: Apache2Triad Xmail Service (XMail) - Unknown owner - C:\apache2triad\mail\bin\XMail.exe

jean38 · Answer

salut c'est quoi ton pb?as tu installé messenger 7 car çà me parait bizard ton[MS MSN Menssenger 7.0] MSMSN7.exeJean

jean38 · Answer

Pa simple les amis quand vous vous mettez à 2 sur le même post

k_rote · Answer

tu parles a qui? lol parrcque jai mis mon probleme dessous celui de qqun d'autre sans faire expresen tout cas moi caro oui jai mis msn version 7

k_rote · Answer

mon probleme je lavais mis sur un autre message "caro" ce matin et personne ma repondu, je veux bien que tu m'aides stp jean!! je sais plus quoi faire merci

jean38 · Answer

Alors tout d'abord pour k-rote,

tu dervais déjà faire un petit nettoyage de printemps, alors suit bien ces etapes(imprime le pour ne rien oublier)

A/ si tu ne les as pas, telecharge: ad-aware et spyboot
http://www.florensac-chasse-trap.com

pointe ton curseur sur « section virus » sans cliquer
click sur le menu qui apparaît et charge
ad-aware et spyboot
ainsi que CleanUp312.exe
ne les utilise pas tout de suite

met à jour les 2 premiers sur internet (tu trouves l’option dans les menus) mais ne lance pas les scan.

1) clic droit sur poste de travail
propriété
restauration systeme
coche desactivé puis appliquer

2) demarrer
panneau de configuration
outil
option des dossiers
affichage,
coche afficher dossier cachés
decoche : masquer extension des fichiers dont le type est connu
masquer les fichiers protégés du systeme d'exploitation.

3) demarre en mode sans echec.
Soit tu tapotte sur la touche F8 alancement de Windows et tu choisi sans echec (pas d’inquiétude pour l’aspect de l’ecran)

execute cleanup312.exe

tu relances tes scan ad aware
puis spy boot
et vire tout ce qu'ils trouvent (c'est un peu long mais tu devrais t'en sortir).

vide ta poubelle et redemarre en mode normal, c'est à dire avant de redemarrer, tu refais les manip de départ mais en recochant ... pour retrouver la config de départ.

redemarre

Refait un log hijack et post le

A+

Jean

k-rote · Answer

merci pour tes conseilstout allait bien jusquau cleanup en mode sans echecplantage ua bout de 10 minutesje viens de reussir a rallumerjai essayé de relancé le mode sans echec mais plantageje te mets le log que je viens juste de faire, si tu y vois qqe chse!!merci!!Logfile of HijackThis v1.99.1Scan saved at 12:32:04, on 10/05/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Fujitsu Siemens Computers\Odyssey Client for Fujitsu Siemens Computers\odClientService.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeC:\WINDOWS\SOUNDMAN.EXEC:\Program Files\Wireless 11Mbps Network\XPFix.exeC:\Program Files\Fujitsu Siemens Computers\Odyssey Client for Fujitsu Siemens Computers\OdTray.exeC:\Program Files\Java\j2re1.4.2_05\bin\jusched.exeC:\Program Files\MSN Apps\Updater\01.02.3000.1001\fr\msnappau.exeC:\Program Files\Fichiers communs\Real\Update_OBealsched.exeC:\Program Files\AVPersonal\AVGNT.EXEC:\WINDOWS\system32\ctfmon.exeC:\Program Files\AVPersonal\AVGUARD.EXEC:\WINDOWS\System32\Ati2evxx.exeC:\Program Files\AVPersonal\AVWUPSRV.EXEC:\WINDOWS\system32\CTsvcCDA.EXEC:\WINDOWS\system32\slserv.exeC:\WINDOWS\system32\wuauclt.exeC:\Program Files\Mozilla Firefox\firefox.exeC:\Program Files\MSN Messenger\msnmsgr.exeC:\Documents and Settings\carole\Bureau\HijackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com/R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet ExplorerR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocxO2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dllO2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dllO2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dllO3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dllO4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exeO4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeO4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXEO4 - HKLM\..\Run: [Alice] C:\Program Files\Wireless 11Mbps Network\XPFix.exeO4 - HKLM\..\Run: [OdTray.exe] "C:\Program Files\Fujitsu Siemens Computers\Odyssey Client for Fujitsu Siemens Computers\OdTray.exe"O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exeO4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exeO4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fr\msnappau.exe"O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osbootO4 - HKLM\..\Run: [AVGCtrl] C:\Program Files\AVPersonal\AVGNT.EXE /minO4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exeO4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXEO8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin
pjpi142_05.dllO9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin
pjpi142_05.dllO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cabO16 - DPF: {3A7FE611-1994-4EF1-A09F-99456752289D} - http://install.wildtangent.com/ActiveLauncher/ActiveLauncher.cabO16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/0118a978dbbfc3475518/netzip/RdxIE601_fr.cabO16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cabO16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cabO16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cabO16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cabO16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cabO17 - HKLM\System\CCS\Services\Tcpip\..\{C6625170-F631-42A6-80FB-047E6A2505CC}: NameServer = 212.151.136.246 130.244.127.169O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - C:\Program Files\AVPersonal\AVGUARD.EXEO23 - Service: Apache2Triad Apache2 Service (Apache2) - Unknown owner - C:\apache2triad\bin\apache.exe" -n Apache2 -k runservice (file missing)O23 - Service: Apache2Triad Apache2 Service with SSL (Apache2(SSL)) - Unknown owner - C:\apache2triad\bin\apache.exe" -D SSL -n Apache2(SSL) -k runservice (file missing)O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exeO23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXEO23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXEO23 - Service: Apache2Triad MySql Service (MySql) - Unknown owner - C:\apache2triad\mysql\bin\mysqld.exeO23 - Service: Odyssey Client (odClientService) - Funk Software, Inc. - C:\Program Files\Fujitsu Siemens Computers\Odyssey Client for Fujitsu Siemens Computers\odClientService.exeO23 - Service: OracleMTSRecoveryService - Oracle Corporation - C:\oracle\bin\omtsreco.exeO23 - Service: OracleOraHome1Agent - Oracle Corporation - C:\oracle\bin\agntsrvc.exeO23 - Service: OracleOraHome1ClientCache - Unknown owner - C:\oracle\BIN\ONRSD.EXEO23 - Service: OracleOraHome1HTTPServer - Unknown owner - C:\oracle\Apache\Apache\apache.exe" --ntservice (file missing)O23 - Service: OracleOraHome1PagingServer - Unknown owner - C:\oracle/bin/pagntsrv.exeO23 - Service: OracleOraHome1SNMPPeerEncapsulator - Unknown owner - C:\oracle\BIN\ENCSVC.EXEO23 - Service: OracleOraHome1SNMPPeerMasterAgent - Unknown owner - C:\oracle\BIN\AGNTSVC.EXEO23 - Service: OracleOraHome1TNSListener - Unknown owner - C:\oracle\BIN\TNSLSNR.exeO23 - Service: OracleOraHome92TNSListener - Unknown owner - C:\oracle\ora92\BIN\TNSLSNR.exeO23 - Service: OracleServiceCAROLE - Oracle Corporation - c:\oracle\bin\ORACLE.EXEO23 - Service: Apache2Triad SlimFTPd Server (SlimFTPd) - Unknown owner - C:\apache2triad\ftp\SlimFTPd.exe" -service (file missing)O23 - Service: SmartLinkService (SLService) -   - C:\WINDOWS\SYSTEM32\slserv.exeO23 - Service: Apache2Triad Xmail Service (XMail) - Unknown owner - C:\apache2triad\mail\bin\XMail.exe

moe · Answer

salut k-rote

A par celle ci:
O16 - DPF: {3A7FE611-1994-4EF1-A09F-99456752289D} - http://install.wildtangent.com/ActiveLauncher/ActiveLauncher.cab

il n'y a pas grand chose sur le log.
Tu fais tourner un serveur sur ta machine (apache, oracle) ?

Peut etre qu'un scan av en ligne en dira un peux plus:
http://www.ravantivirus.com/scan/
Clic sur "To continue without subscribing click here"
accepte le control active x
Lorsque "Ready" est affiché dans "status", clic sur "Scan my PC".
A la fin de l'analyse, copier/coller le rapport ici

a+

todd15 · Answer

salut tout le monde
jean38 moi aussi jai instaler msn7 mais jai autre chose de louche que msmsn7.exe
jai aussi msmsn7.exe qui lui veut avoir une conection exterieur que jai bloquer avec outpost
je doit avoir tout plein dautre salete du genre aussi

jean38 · Answer

ce qui me parait etrange, c'est que je ne suis pas sur qeuMSMSN7.exe soit vraiment msn V7 acr tu regarde le log de k rote, elle a Msn 7 mais son log a le nomn de messanger et on ne trouve pas de trace de ce MSMSN7.exe.

Je pencherais assez bien pour une saleté.

Pour etre sur,

fait la chose suivante

sur le site http://virusscan.jotti.org

recherche à l'aide du boutton parcourir, le fichier

C:\WINDOWS\System32\MSMSN7.exe

ensuite submit et informe nous des reponses

todd15 · Answer

ouai ce sont tout les deux des malwarejavai un log pour les malware avant mais je ne lai plus tu n en a pas un toi?

jean38 · Answer

Alors
relancer HijackThis et cocher puis fix de ces lignes

C:\WINDOWS\System32\MSMSN7.exe

C:\WINDOWS\System32\MSMSN7.exe
O4 - HKLM\..\Run: [MS MSN Menssenger 7.0] MSMSN7.exe
O4 - HKLM\..\RunServices: [MS MSN Menssenger 7.0] MSMSN7.exe
O4 - HKCU\..\Run: [MS MSN Menssenger 7.0] MSMSN7.exe

eventuellement:

C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe (C'est cette entrée qui te génére toutes les lignes 018) Tu n'es pas obligé de la cocher car elle n'est pas méchante en soi, mais à force elle ralentit ta connexion internet. Donc, c'est toi qui vois.

ensuite rechercher les fichier MSMSN7.EXE et les effacer tous, si récalcitrant à effacer en mode sans échec(redemarrage tapotter touche F8).

refait un log

moe · Answer

salut jeandsl, je n'avais regardé que le dernier log hijack et pas relu depuis le debut lolbien vu !a+

k-rote · Answer

re salut jeanalors jai reussi a faire tt ce ke tu mavais dit jai lancé cleanUp, spybot et adaware ( les 2 nont rien trouvé!!) et ça planté a chaque fois mais jai reussi a scanner tout du longapres jai essayé d elancé mon antivirus mais pareil au bout de 10 min mon ordi s'eteind je te remets quend meme le log de maintenant au cas ouje suis allée voir un pote qui dit que mon ordi chauffe bcp et que mon ventilo tourne bcp, il a installé un logiciel qui "prend la température" SpeedFAN qui dit "HDO 52°C et Temp1 75°C" !!!! alors il pense que c mon processeur qui chauffe trop et que peut etre ça viendrait de mon ventilo qui fonctionne mal(jai un fujitsu siemens )qu'en penses tu?merci encore k-roteLogfile of HijackThis v1.99.1Scan saved at 17:17:39, on 10/05/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Fujitsu Siemens Computers\Odyssey Client for Fujitsu Siemens Computers\odClientService.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\Explorer.EXEC:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeC:\WINDOWS\SOUNDMAN.EXEC:\Program Files\Wireless 11Mbps Network\XPFix.exeC:\Program Files\Fujitsu Siemens Computers\Odyssey Client for Fujitsu Siemens Computers\OdTray.exeC:\Program Files\Java\j2re1.4.2_05\bin\jusched.exeC:\Program Files\MSN Apps\Updater\01.02.3000.1001\fr\msnappau.exeC:\Program Files\Fichiers communs\Real\Update_OBealsched.exeC:\Program Files\AVPersonal\AVGNT.EXEC:\WINDOWS\system32\ctfmon.exeC:\Program Files\AVPersonal\AVGUARD.EXEC:\WINDOWS\System32\Ati2evxx.exeC:\Program Files\AVPersonal\AVWUPSRV.EXEC:\WINDOWS\system32\CTsvcCDA.EXEC:\WINDOWS\system32\slserv.exeC:\WINDOWS\system32\wuauclt.exeC:\Documents and Settings\carole\Bureau\HijackThis.exeR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.yahoo.com/R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet ExplorerR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocxO2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dllO2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.02.3000.1002\en-xu\stmain.dllO2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dllO3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dllO4 - HKLM\..\Run: [ATIModeChange] Ati2mdxx.exeO4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeO4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXEO4 - HKLM\..\Run: [Alice] C:\Program Files\Wireless 11Mbps Network\XPFix.exeO4 - HKLM\..\Run: [OdTray.exe] "C:\Program Files\Fujitsu Siemens Computers\Odyssey Client for Fujitsu Siemens Computers\OdTray.exe"O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exeO4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_05\bin\jusched.exeO4 - HKLM\..\Run: [msnappau] "C:\Program Files\MSN Apps\Updater\01.02.3000.1001\fr\msnappau.exe"O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osbootO4 - HKLM\..\Run: [AVGCtrl] C:\Program Files\AVPersonal\AVGNT.EXE /minO4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exeO4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXEO8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin
pjpi142_05.dllO9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_05\bin
pjpi142_05.dllO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exeO16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cabO16 - DPF: {3A7FE611-1994-4EF1-A09F-99456752289D} - http://install.wildtangent.com/ActiveLauncher/ActiveLauncher.cabO16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/0118a978dbbfc3475518/netzip/RdxIE601_fr.cabO16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cabO16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cabO16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cabO16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cabO16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cabO17 - HKLM\System\CCS\Services\Tcpip\..\{C6625170-F631-42A6-80FB-047E6A2505CC}: NameServer = 212.151.136.250 130.244.127.161O23 - Service: AntiVir Service (AntiVirService) - H+BEDV Datentechnik GmbH - C:\Program Files\AVPersonal\AVGUARD.EXEO23 - Service: Apache2Triad Apache2 Service (Apache2) - Unknown owner - C:\apache2triad\bin\apache.exe" -n Apache2 -k runservice (file missing)O23 - Service: Apache2Triad Apache2 Service with SSL (Apache2(SSL)) - Unknown owner - C:\apache2triad\bin\apache.exe" -D SSL -n Apache2(SSL) -k runservice (file missing)O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exeO23 - Service: AntiVir Update (AVWUpSrv) - H+BEDV Datentechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXEO23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.EXEO23 - Service: Apache2Triad MySql Service (MySql) - Unknown owner - C:\apache2triad\mysql\bin\mysqld.exeO23 - Service: Odyssey Client (odClientService) - Funk Software, Inc. - C:\Program Files\Fujitsu Siemens Computers\Odyssey Client for Fujitsu Siemens Computers\odClientService.exeO23 - Service: OracleMTSRecoveryService - Oracle Corporation - C:\oracle\bin\omtsreco.exeO23 - Service: OracleOraHome1Agent - Oracle Corporation - C:\oracle\bin\agntsrvc.exeO23 - Service: OracleOraHome1ClientCache - Unknown owner - C:\oracle\BIN\ONRSD.EXEO23 - Service: OracleOraHome1HTTPServer - Unknown owner - C:\oracle\Apache\Apache\apache.exe" --ntservice (file missing)O23 - Service: OracleOraHome1PagingServer - Unknown owner - C:\oracle/bin/pagntsrv.exeO23 - Service: OracleOraHome1SNMPPeerEncapsulator - Unknown owner - C:\oracle\BIN\ENCSVC.EXEO23 - Service: OracleOraHome1SNMPPeerMasterAgent - Unknown owner - C:\oracle\BIN\AGNTSVC.EXEO23 - Service: OracleOraHome1TNSListener - Unknown owner - C:\oracle\BIN\TNSLSNR.exeO23 - Service: OracleOraHome92TNSListener - Unknown owner - C:\oracle\ora92\BIN\TNSLSNR.exeO23 - Service: OracleServiceCAROLE - Oracle Corporation - c:\oracle\bin\ORACLE.EXEO23 - Service: Apache2Triad SlimFTPd Server (SlimFTPd) - Unknown owner - C:\apache2triad\ftp\SlimFTPd.exe" -service (file missing)O23 - Service: SmartLinkService (SLService) -   - C:\WINDOWS\SYSTEM32\slserv.exeO23 - Service: Apache2Triad Xmail Service (XMail) - Unknown owner - C:\apache2triad\mail\bin\XMail.exe

jean38 · Answer

Suis d'accord avec çà, la temp est trop haute et processeur n'aime pas. Verifie que ton ventilo tourne normalement et qu'il n'est pas sal. Autrement il peut s'agir d'un manque de graisse thermique sur le processeur...

Peut être un petit voyage chez un pro ferait pas de mal.

pour le reste, resultat des scans??

jean38 · Answer

PS ton log ne me parait pas mauvais...Jean

k-rote · Answer

ben le scan de spybot na révélé aucun mouchard,
et celui de ad aware que des choses négligeables!

par contre tu sais ce matin jai eu un message d'erreur bizare a l'allumage "la dll C:\WINDOWS\wt\wt3d.dll n'est pas une dll valide vérifier à l'aide de votre cd d'installation" ça te dit quelque chose??
dois je faire une réparation systeme avec mon cd d'xp, cest ça ke ça veut dire???
et hier System32\ZoneLabbs\...html.drr je sais pas quoi n'est pas valide " et hop plantage pas le temps de lire. Du coup jai enlevé zone alarm et je nai plus eu ce message
mais je trouve que ces messages sont bizares quand meme, non??
est ce que avec le log de ce soir qui te parait "pas mal" ça signifie qu'il n'y a pas de virus ou troyen? sil yen avait eu, tu l'aurais vu sur le log, ca marche comme ça? excuse mais je sais pas trop moi!!!!

alors maintenant je n'ai plus que antivir qui me "protège", est ce que ça suffit ou tu me conseilles de rajouter autre chose?

sinon, ben cest vrai que mon ventilo tourne des que je l'allume, pour voir s'il est sale, ben c'est un portable je m'y suis jamais attaquée, je sais faire sur lunité centrale dévissage et tt, mais là a vrai dire non j'ai jamais fait...;

dc tu penses ke ça peut venir du ventilo le fait ke l'ordi s'eteigne des ke je lance une tache un peu "complexe"?? et puis aussi quand il s'etiend, il faut tjs que j'attende 2min avant de pouvoir le rallumer, avant il veut pas....
bon je te fais confiance les yeux , encore merci pour tt
k-rote

moe · Answer

salut

il s'agit de wildtangent, c'est pas vraiment un spy mais il s'installe sans te demander.
Est ce que tu as participé a un jeu en ligne et accepté un controle active x ?

Est ce que tu fais tourner un site sur ton pc ?
oracle, apache est ce que ca te dis quelque chose ?

k-rote · Answer

oui jai un serveur apache et mysql car j'utilise easy php pour faire un site internet,
jai un ftp pour cherhcer et déposer des fichiers chez mon collègue,
et je me connecte sur son serveur de chez free pour remplir la base de données
et javais installé oracle durant l'année mais je ne m 'en sers plus maintenant, je vais le désistaller.

je suis en formation informatique, c'est bien beau mais ça ne m'apprends pas a resoudre les problèmes que jai actuellement!!!

sinon je nai pas participé a de jeu en ligne mais oui jai du accepter des controle activex en essayant de lancer le scan de secuser.com

est ce que mes réponses t'aident a m'aider??
merci

moe · Answer

apparement le message d'erreur pour la dll correspond a wildtangent ainsi que cette ligne dans hijack:O16 - DPF: {3A7FE611-1994-4EF1-A09F-99456752289D} - http://install.wildtangent.com/ActiveLauncher/ActiveLauncher.cabc'est un control active x.Plus de renseignements ici: (en anglais)http://www.iamnotageek.com/a/245-p1.phpMais bon, je pense pas que ce soit ca qui fasse chauffer ton pc.Peut etre essayer le conseil de jean au post 16.a+

k-rote · Answer

si tu penses que cest pas ça ça me rassureet le rapport avec les serveurs dont tu me parlais c'est quoi??et tu penses que le chauffage peut faire les plantages? je vais peut etre contacter mon SAV vu ke mon ordi est encore sous garantiemerci

moe · Answer

pour les serveurs c'est ok, juste pour etre sur que c'etait bien installé par toi.Quand à la surchauffe, c'est pratiquement la premiere cause des plantages.Profite de la garantie de ton pc.Tu peux quand meme faire un scan av ici, histoire d'etre sur...http://www.ravantivirus.com/scan/ Clic sur "To continue without subscribing click here"Accepte le control active x Lorsque "Ready" est affiché dans "status", clic sur "Scan my PC". A la fin de l'analyse, copier/coller le rapporta+

moe · Answer

on sera là, je passe generalement en fin d'apres midi.a+

todd15 · Answer

desoler pour le retard jean38: voila jai fait ce que tu ma dit de fairevooila mon nouveau raprot hijackLogfile of HijackThis v1.99.1Scan saved at 13:28:32, on 14/05/2005Platform: Windows XP  (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 (6.00.2600.0000)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\Explorer.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exeC:\Program Files\SiS300_V1.04.50\utility\khooker.exeC:\Program Files\SiS300_V1.04.50\utility\sistray.EXEC:\WINDOWS\System32\LVCOMSX.EXEC:\Program Files\Logitech\Video\LogiTray.exeC:\Program Files\Winamp\Winampa.exeC:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exeC:\Program Files\MessengerPlus! 3\MsgPlus.exeC:\Program Files\Java\jre1.5.0_02\bin\jusched.exeC:\WINDOWS\System32\ctfmon.exeC:\Program Files\Creative\MediaSource\Detector\CTDetect.exeC:\Program Files\MSN Messenger\msnmsgr.exeC:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exeC:\Program Files\Messenger\msmsgs.exeC:\Program Files\Logitech\Video\FxSvr2.exeC:\Program Files\Alwil Software\Avast4\aswUpdSv.exeC:\Program Files\Alwil Software\Avast4\ashServ.exeC:\WINDOWS\System32\CTsvcCDA.EXEC:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exeC:\PROGRA~1\Agnitum\OUTPOS~1\outpost.exeC:\WINDOWS\System32\svchost.exeC:\Program Files\Alwil Software\Avast4\ashWebSv.exeC:\Program Files\Alwil Software\Avast4\ashMaiSv.exeC:\WINDOWS\System32\wuauclt.exeC:\WINDOWS\System32\wuauclt.exeC:\Documents and Settings\Administrateur\Mes documents\hijack\hijackthis\HijackThis.exeR1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhostR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dllO3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocxO4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exeO4 - HKLM\..\Run: [khooker] C:\Program Files\SiS300_V1.04.50\utility\khooker.exeO4 - HKLM\..\Run: [SiS Tray] C:\Program Files\SiS300_V1.04.50\utility\sistray.EXEO4 - HKLM\..\Run: [Outpost Firewall] C:\PROGRA~1\Agnitum\OUTPOS~1\outpost.exe /waitserviceO4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -kO4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXEO4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exeO4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\Winampa.exe"O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exeO4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exeO4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exeO4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exeO4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" bootO4 - HKCU\..\Run: [Creative Detector] C:\Program Files\Creative\MediaSource\Detector\CTDetect.exe /RO4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /backgroundO4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exeO4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /backgroundO4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exeO8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin
pjpi150_02.dllO9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin
pjpi150_02.dllO9 - Extra button: Trashcan - {072F3B8A-2DA2-40e2-B841-88899F240200} - C:\Program Files\Agnitum\Outpost Firewall\TRASH.EXE (HKCU)O9 - Extra 'Tools' menuitem: Show Trashcan - {072F3B8A-2DA2-40e2-B841-88899F240200} - C:\Program Files\Agnitum\Outpost Firewall\TRASH.EXE (HKCU)O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cabO16 - DPF: {EB387D2F-E27B-4D36-979E-847D1036C65D} (QDiagHUpdateObj Class) - http://h30043.www3.hp.com/hpdj/fr/check/qdiagh.cab?325O18 - Protocol: bw+0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw+0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw-0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw-0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw00 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw00s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw10 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw10s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw20 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw20s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw30 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw30s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw40 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw40s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw50 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw50s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw60 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw60s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw70 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw70s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw80 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw80s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw90 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bw90s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwa0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwa0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwb0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwb0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwc0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwc0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwd0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwd0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwe0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwe0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwf0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwf0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dllO18 - Protocol: bwg0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwg0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwh0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwh0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwi0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwi0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwj0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwj0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwk0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwk0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwl0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwl0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwm0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwm0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwn0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwn0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwo0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwo0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwp0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwp0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwq0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwq0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwr0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwr0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bws0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bws0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwt0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwt0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwu0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwu0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwv0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwv0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bww0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bww0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwx0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwx0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwy0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwy0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwz0 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: bwz0s - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO18 - Protocol: offline-8876480 - {0B37B0F5-F009-4B0C-B4E7-65968CF0AB12} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dllO20 - AppInit_DLLs: MsgPlusLoader.dllO23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exeO23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exeO23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.EXEO23 - Service: Outpost Firewall Service (OutpostFirewall) - Agnitum - C:\PROGRA~1\Agnitum\OUTPOS~1\outpost.exe

Rapport hijack

25 réponses

Votre réponse

Discussions similaires

Newsletters