Rapport Hijackthis Fermé

Question

Bonjour,


je poste un rapport hijackthis, je voudrais savoir:

=> si il s'agit d'un "véritable windows"

=> ce qu'il y a a viré car je viens de désinfecter mon pc mais je voudrais faire encore un peu le ménage dans ce rapport.

Merci d'avance

Narko21 · Answer

Logfile of random's system information tool 1.06 (written by random/random)
Run by Administrateur at 2010-01-14 20:44:13
Microsoft Windows XP Professionnel Service Pack 2 
System drive C: has 20 GB (59%) free of 34 GB 
Total RAM: 1015 MB (63% free) 

Logfile of Trend Micro HijackThis v2.0.2 
Scan saved at 20:44:18, on 14/01/2010
Platform: Windows XP SP2 (WinNT 5.01.2600) 
MSIE: Internet Explorer v7.00 (7.00.6000.16512) 

C:\WINDOWS\System32\smss.exe     
C:\WINDOWS\system32\winlogon.exe     
C:\WINDOWS\system32\services.exe     
C:\WINDOWS\system32\lsass.exe     
C:\WINDOWS\system32\svchost.exe     
C:\WINDOWS\System32\svchost.exe     
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe     
C:\WINDOWS\system32\spoolsv.exe     
C:\Program Files\Avira\AntiVir Desktop\sched.exe     
C:\Program Files\Avira\AntiVir Desktop\avguard.exe     
C:\Program Files\Fichiers communs\InterVideo\RegMgr\iviRegMgr.exe     
C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe     
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE     
C:\Program Files\OCS Inventory Agent\ocsservice.exe     
C:\WINDOWS\system32\HPZipm12.exe     
C:\Novadigm\ManagementAgent
vdkit.exe     
C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe     
C:\Program Files\HPQ\Shared\Sierra Wireless\Win32\Unicode\SWIHPWMI.exe     
C:\Program Files\Avira\AntiVir Desktop\update.exe     
C:\WINDOWS\Explorer.EXE     
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe     
C:\WINDOWS\system32\igfxtray.exe     
C:\WINDOWS\system32\hkcmd.exe     
C:\WINDOWS\system32\igfxpers.exe     
C:\WINDOWS\system32\igfxsrvc.exe     
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe     
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe     
C:\Program Files\Java\j2re1.4.2_09\bin\jusched.exe     
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe     
C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe     
C:\WINDOWS\system32\ctfmon.exe     
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe     
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe     
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe     
C:\Program Files\Adobe\Reader 9.0\Reader\AcroRd32Info.exe     
D:\Mes Documents\Downloadersit.exe     
C:\Program Files	rend micro\Administrateur.exe     

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.fr/ie     
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.fr     
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/     
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157     
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896     
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157     
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.fr/ie     
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.fr/keyword/%s     
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.forclum.fr:8080     
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 3.*;10.*;192*;eiffanet*;lecap*;<local>     
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens 
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll     
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll 
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe     
O4 - HKLM\..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe /tray     
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe     
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe     
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe     
O4 - HKLM\..\Run: [hpWirelessAssistant] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe     
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start     
O4 - HKLM\..\Run: [WatchDog] C:\Program Files\InterVideo\DVD Check\DVDCheck.exe     
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\j2re1.4.2_09\bin\jusched.exe     
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"     
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min     
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\ISUSPM.exe" -scheduler     
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe     
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SERVICE LOCAL') 
O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SERVICE RÉSEAU') 
O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM') 
O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user') 
O4 - Global Startup: BTTray.lnk = ? 
O4 - Global Startup: Démarrage rapide du logiciel HP Image Zone.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe     
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe     
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000     
O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm     
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_09\bin
pjpi142_09.dll     
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\j2re1.4.2_09\bin
pjpi142_09.dll     
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL     
O10 - Unknown file in Winsock LSP: c:\windows\system32
wprovau.dll     
O14 - IERESET.INF: START_PAGE_URL=http://eiffanet.eiffage.fr/portal/page/portal/EIFFAGE/TAB_ACCUEIL     
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/...     
O23 - Service: Avira AntiVir Planificateur (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe     
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe     
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe     
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe     
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Roxio\Roxio MyDVD Basic v9\InstallShield\Driver\1050\Intel 32\IDriverT.exe     
O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Fichiers communs\InterVideo\RegMgr\iviRegMgr.exe     
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe     
O23 - Service: OCS INVENTORY SERVICE (OCS INVENTORY) - http://www.ocsinventory-ng.org - C:\Program Files\OCS Inventory Agent\ocsservice.exe     
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe     
O23 - Service: Radia Management Agent (rma) - Unknown owner - C:/Novadigm/ManagementAgent/nvdkit.exe     
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Fichiers communs\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe     
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Fichiers communs\SureThing Shared\stllssvr.exe     
O23 - Service: SWIHPWMI - Sierra Wireless Inc. - C:\Program Files\HPQ\Shared\Sierra Wireless\Win32\Unicode\SWIHPWMI.exe

Rapport Hijackthis

1 réponse

Discussions similaires