Demande d'analyse d'un log HijackThis

Question

Demande d'analyse d'un log HijackThis. Sérieux prob à voir ce log

darkcrystal33 · Answer

tutoriel hijackthis (gratuit)
http://www.zebulon.fr/articles/HijackThis.php
analyse automatique en ligne (gratuit)
http://www.hijackthis.de/index.php?langselect=french
analyse automatique en ligne (gratuit)
http://hjt.iamnotageek.com/

dorifor · Answer

milles excuses g oublié de joindre le log. DORIFORLogfile of HijackThis v1.98.2Scan saved at 09:01:11, on 31/05/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\drivers\CDAC11BA.EXEC:\WINDOWS\system32\cisvc.exeC:\WINDOWS\System32\snmp.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exeC:\Program Files\Generic\USB Card Reader Driver v2.2d\Disk_Monitor.exeC:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exeC:\Program Files\HP\hpcoretech\hpcmpmgr.exeC:\Program Files\Java\j2re1.4.2_04\bin\jusched.exeC:\WINDOWS\system32\RunDll32.exeC:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exeC:\PROGRA~1\Wanadoo\CnxMon.exeC:\PROGRA~1\MESSAG~1\StartMessager.exeC:\PROGRA~1\Wanadoo\TaskbarIcon.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exeC:\Program Files\Fichiers communs\GMT\GMT.exeC:\WINDOWS\system32\cidaemon.exeC:\Program Files\WinRAR\WinRAR.exeC:\DOCUME~1\FINALU~1\LOCALS~1\Temp\Rar$EX00.000\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.wanadoo.fr/go/page_recherche/R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wanadoo.frR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = WanadooR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensF2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\userinit32.exe,O1 - Hosts: 222.89.98.219 www.wo365.comO1 - Hosts: 222.89.98.219 cmfu.comO1 - Hosts: 222.89.98.219 www.cmfu.comO1 - Hosts: 222.89.98.219 9i0.comO1 - Hosts: 222.89.98.219 www.9flash.comO1 - Hosts: 222.89.98.219 9flash.comO1 - Hosts: 222.89.98.219 www.nowok.netO1 - Hosts: 222.89.98.219 nowok.netO1 - Hosts: 222.89.98.219 wisa.com.cnO1 - Hosts: 222.89.98.219 www.sia.com.cnO1 - Hosts: 222.89.98.219 www.wisa.cnO1 - Hosts: 222.89.98.219 wisa.cnO1 - Hosts: 222.89.98.219 www.zhao99.comO1 - Hosts: 222.89.98.219 zhao99.comO1 - Hosts: 222.89.98.219 www.wo123.comO1 - Hosts: 222.89.98.219 wo123.comO1 - Hosts: 222.89.98.219 wo99.comO1 - Hosts: 222.89.98.219 www.wo99.comO1 - Hosts: 222.89.98.219 www.page.com.cnO1 - Hosts: 222.89.98.219 page.com.cnO1 - Hosts: 222.89.98.219 www.432.cnO1 - Hosts: 222.89.98.219 432.cnO1 - Hosts: 222.89.98.219 wysw.comO1 - Hosts: 222.89.98.219 14.com.cnO1 - Hosts: 222.89.98.219 www.14.com.cnO1 - Hosts: 222.89.98.219 cnww.netO1 - Hosts: 222.89.98.219 www.mv99.comO1 - Hosts: 222.89.98.219 mv99.comO1 - Hosts: 222.89.98.219 www.youav.comO1 - Hosts: 222.89.98.219 www.mtvav.comO1 - Hosts: 222.89.98.219 www.98983.comO1 - Hosts: 222.89.98.219 98983.comO1 - Hosts: 222.89.98.219 www.114.com.cnO1 - Hosts: 222.89.98.219 114.com.cnO1 - Hosts: 222.89.98.219 www.net114.comO1 - Hosts: 222.89.98.219 www.skywz.comO1 - Hosts: 222.89.98.219 skywz.comO1 - Hosts: 222.89.98.219 www.hao6.comO1 - Hosts: 222.89.98.219 hao6.comO1 - Hosts: 222.89.98.219 www.678a.comO1 - Hosts: 222.89.98.219 678a.comO1 - Hosts: 222.89.98.219 www.7510.comO1 - Hosts: 222.89.98.219 7510.comO1 - Hosts: 222.89.98.219 www.zzkan.comO1 - Hosts: 222.89.98.219 zzkan.comO1 - Hosts: 222.89.98.219 www.ca183.comO1 - Hosts: 222.89.98.219 ca183.comO1 - Hosts: 222.89.98.219 3tom.comO1 - Hosts: 222.89.98.219 www.yhjm.comO1 - Hosts: 222.89.98.219 yhjm.comO1 - Hosts: 222.89.98.219 www.k369.comO1 - Hosts: 222.89.98.219 www.xxwww.comO1 - Hosts: 222.89.98.219 xxwww.comO1 - Hosts: 222.89.98.219 www.fm1000.netO1 - Hosts: 222.89.98.219 fm1000.netO1 - Hosts: 222.89.98.219 www.ok135.comO1 - Hosts: 222.89.98.219 ok135.comO1 - Hosts: 222.89.98.219 www.link999.comO1 - Hosts: 222.89.98.219 link999.comO1 - Hosts: 222.89.98.219 www.001wz.comO1 - Hosts: 222.89.98.219 001wz.comO1 - Hosts: 222.89.98.219 www.7t7t.comO1 - Hosts: 222.89.98.219 7t7t.comO1 - Hosts: 222.89.98.219 www.7k7k.comO1 - Hosts: 222.89.98.219 7k7k.comO1 - Hosts: 222.89.98.219 www.webcool.netO1 - Hosts: 222.89.98.219 webcool.netO1 - Hosts: 222.89.98.219 www.51sobu.comO1 - Hosts: 222.89.98.219 51sobu.comO1 - Hosts: 222.89.98.219 cy.51sobu.comO1 - Hosts: 222.89.98.219 www.fj3721.comO1 - Hosts: 222.89.98.219 fj3721.comO1 - Hosts: 222.89.98.219 www.msncn.comO1 - Hosts: 222.89.98.219 msncn.comO1 - Hosts: 222.89.98.219 www.6235.comO1 - Hosts: 222.89.98.219 6235.comO1 - Hosts: 222.89.98.219 www.8goo.comO1 - Hosts: 222.89.98.219 8goo.comO1 - Hosts: 222.89.98.219 www.baimin.comO1 - Hosts: 222.89.98.219 baimin.comO1 - Hosts: 222.89.98.219 www.bwwz.comO1 - Hosts: 222.89.98.219 bwwz.comO1 - Hosts: 222.89.98.219 www.howow.netO1 - Hosts: 222.89.98.219 howow.netO1 - Hosts: 222.89.98.219 www.tongchi.comO1 - Hosts: 222.89.98.219 tongchi.comO1 - Hosts: 222.89.98.219 www.65658.comO1 - Hosts: 222.89.98.219 65658.comO1 - Hosts: 222.89.98.219 www.7o7o.comO1 - Hosts: 222.89.98.219 7o7o.comO1 - Hosts: 222.89.98.219 5126.netO1 - Hosts: 222.89.98.219 www.5126.netO1 - Hosts: 222.89.98.219 www.wangzhiku.comO1 - Hosts: 222.89.98.219 wangzhiku.comO1 - Hosts: 222.89.98.219 www.soyeah.comO1 - Hosts: 222.89.98.219 soyeah.comO1 - Hosts: 222.89.98.219 www.sowang.cnO1 - Hosts: 222.89.98.219 sowang.cnO1 - Hosts: 222.89.98.219 www.77177.comO1 - Hosts: 222.89.98.219 77177.comO1 - Hosts: 222.89.98.219 www.look8.netO2 - BHO: (no name) - {00000049-8F91-4D9C-9573-F016E7626484} - (no file)O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dllO2 - BHO: Shorty - {11A4CA8C-A8B9-49c2-A6D3-3F64C9EEBAE6} - C:\Program Files\DNS\Catcher.dllO2 - BHO: CDllBho Object - {5A5B6916-ED71-4531-8018-E792DD44156E} - C:\WINDOWS\wqew.dll (file missing)O2 - BHO: BHOmodObj Class - {7F6828CA-9E42-462C-BC60-418C8144012C} - c:\windows\system\BHOmod.dll (file missing)O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exeO4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exeO4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe"O4 - HKLM\..\Run: [Disk Monitor] C:\Program Files\Generic\USB Card Reader Driver v2.2d\Disk_Monitor.exeO4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exeO4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exeO4 - HKLM\..\Run: [MMSystem] c:\windowsundll32.exe "c:\windows\system32\mmsystem.dll"", RunDll32O4 - HKLM\..\Run: [qdkaor] c:\windows\system32\qdkaor.exeO4 - HKLM\..\Run: [farmmext] C:\WINDOWS\farmmext.exeO4 - HKLM\..\Run: [avnort] C:\WINDOWS\msmbw.exeO4 - HKLM\..\Run: [sp2ctr] c:\windows\system32\sp2ctr.exe /nocommO4 - HKLM\..\Run: [Qtime] C:\WINDOWS
rchk.exe /iO4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWndO4 - HKLM\..\Run: [resagnt] C:\WINDOWSestun.exeO4 - HKLM\..\Run: [WinAmpAgent] C:\WINDOWS\shch.exe /iO4 - HKLM\..\Run: [NeroCheck] C:\WINDOWSealsched.exe /iO4 - HKLM\..\Run: [Ulead AutoDetector] C:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exeO4 - HKLM\..\Run: [dxvid] c:\windows\system32\dxvid.exe /nocommO4 - HKLM\..\Run: [ltwob] C:\WINDOWS\system32\formatsys.exeO4 - HKLM\..\Run: [EbatesMoeMoneyMaker0] "C:\Program Files\Ebates_MoeMoneyMaker\EbatesMoeMoneyMaker0.exe"O4 - HKLM\..\Run: [lRmUAgcasServ.exe] C:\WINDOWS\lRmUAgcasServ.exeO4 - HKLM\..\Run: [TkBellExee] C:\WINDOWSealschd.exeO4 - HKLM\..\Run: [KAVPersonal50] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe" /minimizeO4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\Wanadoo\CnxMon.exeO4 - HKLM\..\Run: [MessagerStarter Wanadoo] C:\PROGRA~1\MESSAG~1\StartMessager.exe Messager WanadooO4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exeO4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\TaskbarIcon.exeO4 - HKLM\..\RunServices: [avnort] C:\WINDOWS\msmbw.exeO4 - HKLM\..\RunServices: [ltwob] C:\WINDOWS\system32\formatsys.exeO4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [MMSystem] c:\windowsundll32.exe "c:\windows\system32\mmsystem.dll"", RunDll32O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimizedO4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exeO4 - Global Startup: GStartup.lnk = C:\Program Files\Fichiers communs\GMT\GMT.exeO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - (no file)O9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exeO9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSAG~1\Messager Wanadoo.exeO9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSAG~1\Messager Wanadoo.exeO9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU)O9 - Extra button: Ebates - {6685509E-B47B-4f47-8E16-9A5F3A62F683} - file://C:\Program Files\Ebates_MoeMoneyMaker\Sy350\Tp350\scri350a.htm (file missing) (HKCU)O12 - Plugin for .fpx: C:\Program Files\Internet Explorer\PLUGINS\NPRVRT32.dllO12 - Plugin for .ivr: C:\Program Files\Internet Explorer\PLUGINS\NPRVRT32.dllO12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dllO16 - DPF: v3cab - http://searchmiracle.com/cab/v3cab.cabO16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cabO16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cabO16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=36467&clcid=0x409O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwebproducts/ei-2/CursorManiaFWBInitialSetup1.0.0.8-2.cabO16 - DPF: {205FF73B-CA67-11D5-99DD-444553540006} (CInstall Class) - http://www.errorguard.com/installation/Install.cabO16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cabO16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cabO16 - DPF: {91433D86-9F27-402C-B5E3-DEBDD122C339} - http://www.netvenda.com/sites/games-ww/frw/games3.cabO16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cabO16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cabO16 - DPF: {E055C02E-6258-40FF-80A7-3BDA52FACAD7} (Installer Class) - http://www.maxifiles.com/sx/speedtest.dllO16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cabO18 - Protocol: cetihpz - {CF184AD3-CDCB-4168-A3F7-8E447D129300} - C:\Program Files\HP\hpcoretech\comp\hpuiprot.dll

dorifor · Answer

bojour à vsg fait un peu le menage, suis je encore loin de la verité . merciLogfile of HijackThis v1.99.1Scan saved at 11:25:03, on 31/05/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\drivers\CDAC11BA.EXEC:\WINDOWS\system32\cisvc.exeC:\WINDOWS\System32\snmp.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exeC:\Program Files\Generic\USB Card Reader Driver v2.2d\Disk_Monitor.exeC:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exeC:\Program Files\HP\hpcoretech\hpcmpmgr.exeC:\Program Files\Java\j2re1.4.2_04\bin\jusched.exeC:\WINDOWS\system32\RunDll32.exeC:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exeC:\PROGRA~1\Wanadoo\CnxMon.exeC:\PROGRA~1\MESSAG~1\StartMessager.exeC:\PROGRA~1\Wanadoo\TaskbarIcon.exeC:\WINDOWS\system32\ctfmon.exeC:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exeC:\WINDOWS\system32\cidaemon.exeC:\Program Files\WinRAR\WinRAR.exeC:\DOCUME~1\FINALU~1\LOCALS~1\Temp\Rar$EX00.265\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.wanadoo.fr/go/page_recherche/R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.wanadoo.frR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = WanadooR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensF2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32\userinit32.exe,O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dllO2 - BHO: Shorty - {11A4CA8C-A8B9-49c2-A6D3-3F64C9EEBAE6} - C:\Program Files\DNS\Catcher.dllO2 - BHO: BHOmodObj Class - {7F6828CA-9E42-462C-BC60-418C8144012C} - c:\windows\system\BHOmod.dll (file missing)O4 - HKLM\..\Run: [SiSUSBRG] C:\WINDOWS\SiSUSBrg.exeO4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exeO4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd2.exe"O4 - HKLM\..\Run: [Disk Monitor] C:\Program Files\Generic\USB Card Reader Driver v2.2d\Disk_Monitor.exeO4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb10.exeO4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_04\bin\jusched.exeO4 - HKLM\..\Run: [MMSystem] c:\windowsundll32.exe "c:\windows\system32\mmsystem.dll"", RunDll32O4 - HKLM\..\Run: [qdkaor] c:\windows\system32\qdkaor.exeO4 - HKLM\..\Run: [farmmext] C:\WINDOWS\farmmext.exeO4 - HKLM\..\Run: [Qtime] C:\WINDOWS
rchk.exe /iO4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWndO4 - HKLM\..\Run: [resagnt] C:\WINDOWSestun.exeO4 - HKLM\..\Run: [WinAmpAgent] C:\WINDOWS\shch.exe /iO4 - HKLM\..\Run: [NeroCheck] C:\WINDOWSealsched.exe /iO4 - HKLM\..\Run: [Ulead AutoDetector] C:\Program Files\Ulead Systems\Ulead Photo Explorer 8.0 SE Basic\Monitor.exeO4 - HKLM\..\Run: [dxvid] c:\windows\system32\dxvid.exe /nocommO4 - HKLM\..\Run: [lRmUAgcasServ.exe] C:\WINDOWS\lRmUAgcasServ.exeO4 - HKLM\..\Run: [TkBellExee] C:\WINDOWSealschd.exeO4 - HKLM\..\Run: [KAVPersonal50] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe" /minimizeO4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\Wanadoo\CnxMon.exeO4 - HKLM\..\Run: [MessagerStarter Wanadoo] C:\PROGRA~1\MESSAG~1\StartMessager.exe Messager WanadooO4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\Wanadoo\Watch.exeO4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\Wanadoo\TaskbarIcon.exeO4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [MMSystem] c:\windowsundll32.exe "c:\windows\system32\mmsystem.dll"", RunDll32O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimizedO4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exeO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_04\bin
pjpi142_04.dllO9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_04\bin
pjpi142_04.dllO9 - Extra button: AIM - {AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} - C:\Program Files\AIM\aim.exeO9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSAG~1\Messager Wanadoo.exeO9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\PROGRA~1\MESSAG~1\Messager Wanadoo.exeO9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU)O9 - Extra button: Ebates - {6685509E-B47B-4f47-8E16-9A5F3A62F683} - file://C:\Program Files\Ebates_MoeMoneyMaker\Sy350\Tp350\scri350a.htm (file missing) (HKCU)O12 - Plugin for .fpx: C:\Program Files\Internet Explorer\PLUGINS\NPRVRT32.dllO12 - Plugin for .ivr: C:\Program Files\Internet Explorer\PLUGINS\NPRVRT32.dllO12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dllO16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cabO16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cabO16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=36467&clcid=0x409O16 - DPF: {205FF73B-CA67-11D5-99DD-444553540006} (CInstall Class) - http://www.errorguard.com/installation/Install.cabO16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cabO16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cabO16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/msnmessengersetupdownloader.cabO16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cabO16 - DPF: {E055C02E-6258-40FF-80A7-3BDA52FACAD7} (Installer Class) - http://www.maxifiles.com/sx/speedtest.dllO16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab31267.cabO23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXEO23 - Service: kavsvc - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe

Demande d'analyse d'un log HijackThis

3 réponses

Votre réponse

Discussions similaires

Newsletters