Log hijackthis analyse
Bonsoir,
voila je trouve que mon pc ramme fortement depuis quelque mois déja.
J'ai déjà passer ad-aware, spybot... mais il ramme toujours.
J'ai donc fais un scan avec hijackthis, voila le log trouvé:
voila donc si quelqu'un pouvait m'éclairer sur ce qui est bon et surtout ce qui n'est pas bon pour l'ordi, ca serait gentil de sa part.
Merci d'avance.
voila je trouve que mon pc ramme fortement depuis quelque mois déja.
J'ai déjà passer ad-aware, spybot... mais il ramme toujours.
J'ai donc fais un scan avec hijackthis, voila le log trouvé:
Logfile of HijackThis v1.99.1 Scan saved at 18:11:29, on 25/08/2005 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\SYSTEM32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\System32\drivers\CDAC11BA.EXE C:\WINDOWS\SYSTEM\DRIVER\ntuser.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system\lsass.exe C:\Program Files\MessengerPlus! 3\MsgPlus.exe C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe C:\Program Files\Club-Internet\Lanceur\lanceur.exe C:\WINDOWS\BricoPacks\Longhorn Inspirat\ObjectDock\ObjectDock.exe C:\Documents and Settings\Flo\Bureau\hijackthis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://wfqfgetamcqdmqdgqxexnet.com/b6mNxDiuOy5jcbUyAAkg/s6rw61t7jQbtPNflPF1zqF4lblWJ5tHO0_ngNsIZQxx.asp R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/ R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer avec Club-Internet R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O1 - Hosts: 127.148.54.57 www.symantec.com O1 - Hosts: 127.223.78.105 securityresponse.symantec.com O1 - Hosts: 127.8.70.188 www.mcafee.com O1 - Hosts: 127.163.200.207 mcafee.com O1 - Hosts: 127.165.230.174 us.mcafee.com O1 - Hosts: 127.225.178.225 www.sophos.com O1 - Hosts: 127.172.232.225 sophos.com O1 - Hosts: 127.82.121.6 www.viruslist.com O1 - Hosts: 127.155.223.31 viruslist.com O1 - Hosts: 127.144.88.31 f-secure.com O1 - Hosts: 127.153.170.176 www.f-secure.com O1 - Hosts: 127.219.154.103 kaspersky.com O1 - Hosts: 127.58.181.119 www.avp.com O1 - Hosts: 127.220.129.159 www.kaspersky.com O1 - Hosts: 127.34.149.54 avp.com O1 - Hosts: 127.11.249.170 www.networkassociates.com O1 - Hosts: 127.251.229.201 networkassociates.com O1 - Hosts: 127.39.70.40 www.ca.com O1 - Hosts: 127.120.106.66 ca.com O1 - Hosts: 127.84.41.236 my-etrust.com O1 - Hosts: 127.96.234.37 www.my-etrust.com O1 - Hosts: 127.161.41.96 secure.nai.com O1 - Hosts: 127.211.59.52 nai.com O1 - Hosts: 127.49.16.50 www.nai.com O1 - Hosts: 127.68.116.140 trendmicro.com O1 - Hosts: 127.69.185.230 www.trendmicro.com O1 - Hosts: 127.227.72.6 housecall.trendmicro.com O1 - Hosts: 127.193.182.30 www.pandasoftware.com O1 - Hosts: 127.103.235.21 www.bitdefender.com O1 - Hosts: 127.25.134.177 www.ravantivirus.com O1 - Hosts: 127.120.27.154 www3.ca.com O1 - Hosts: 127.159.76.240 v4.windowsupdate.microsoft.com O1 - Hosts: 127.52.35.96 v5.windowsupdate.microsoft.com O1 - Hosts: 127.165.71.168 v5windowsupdate.microsoft.nsatc.net O1 - Hosts: 127.112.230.70 windowsupdate.microsoft.com O1 - Hosts: 127.255.123.191 www.windowsupdate.com O1 - Hosts: 127.212.96.59 windowsupdate.com O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\apps\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: PK IE Plugin - {1E1B2879-88FF-11D3-8D96-D7ACAC95951A} - C:\WINDOWS\System32\bpkwb.dll O2 - BHO: Barre d'outils Texto Web - {4E7BD74F-2B8D-469E-C0FF-FD63A08DBF29} - C:\WINDOWS\DOWNLO~1\textobar.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: Barre d'outils Texto Web - {4E7BD74F-2B8D-469E-C0FF-FD63A08DBF29} - C:\WINDOWS\DOWNLO~1\textobar.dll O4 - HKLM\..\Run: [mswnvmx32] explorer O4 - HKLM\..\Run: [lsass Service] C:\WINDOWS\system\lsass.exe O4 - HKLM\..\Run: [KAVPersonal50] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe" /minimize O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto O4 - HKLM\..\RunServices: [SystemConfig16] chkmon16.exe -services O4 - Startup: Club Internet.lnk = C:\Program Files\Club-Internet\Lanceur\lanceur.exe O4 - Startup: Stardock ObjectDock.lnk = C:\WINDOWS\BricoPacks\Longhorn Inspirat\ObjectDock\ObjectDock.exe O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file) O10 - Broken Internet access because of LSP provider 'nmtracer.dll' missing O16 - DPF: PackageHtmlCab - http://acces.blonde.com/package/PackageHtmlCab.CAB O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab O16 - DPF: {01347765-1965-426B-91A4-AA6BB342B9A3} (InstallerObj Class) - http://www.1-click.com/common/files/installer-hidden-test.cab O16 - DPF: {084DAC27-6FA3-4F55-9005-033F2F102F5C} (ITPPDiagIE Class) - http://images.goa.com/v3/InstallGoaIT/Itpp/V2,0,1,6/npwwg.cab O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab O16 - DPF: {469C7080-8EC8-43A6-AD97-45848113743C} - http://akamai.downloadv3.com/binaries/IA/nethv32_FR_XP.cab O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab O16 - DPF: {92CA8ACC-4E99-4A2A-93F1-B2C5CADC8613} (OPInstall Control) - http://a14.g.akamai.net/f/14/7141/144000s/download.opistat.com/opistat/activex/opinstall_fr_4.1.14.0.cab O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab31267.cab O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab31267.cab O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697514} (NsvPlayX Control) - http://www.nullsoft.com/nsv/embed/nsvplayx_vp3_mp3.cab O16 - DPF: {D1B80EBF-1A26-4FEC-B0B9-DCB934C6507E} - http://dialup.carpediem.fr/CABS/cd/1,0,3,8/fr/AccesMembre.cab O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab31267.cab O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://by8fd.bay8.hotmail.msn.com/activex/HMAtchmt.ocx O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab O16 - DPF: {FD40EC41-D860-4579-8BA4-52671A45C71C} (AxHtChat Class) - http://images.goa.com/v3/InstallGoaIT/ChatAx/V4,0,5,4/npaxchat.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{4F119709-FB6A-4C76-B5B6-1FA5403CEFF1}: NameServer = 194.117.200.10 194.117.200.15 O17 - HKLM\System\CS1\Services\Tcpip\..\{4F119709-FB6A-4C76-B5B6-1FA5403CEFF1}: NameServer = 194.117.200.10 194.117.200.15 O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE O23 - Service: kavsvc - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe O23 - Service: NTBOOTMGR (NTBOOT) - Unknown owner - C:\WINDOWS\SYSTEM\DRIVER\ntuser.exe
voila donc si quelqu'un pouvait m'éclairer sur ce qui est bon et surtout ce qui n'est pas bon pour l'ordi, ca serait gentil de sa part.
Merci d'avance.
Configuration: Windows xp (SP1), 1.2GHz, 256 de RAM, carte graphique Nvidia GeForce 2 MX/MX400
1 réponse
-
Salut
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\drivers\CDAC11BA.EXE
C:\WINDOWS\SYSTEM\DRIVER\ntuser.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system\lsass.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
C:\Program Files\Club-Internet\Lanceur\lanceur.exe
C:\WINDOWS\BricoPacks\Longhorn Inspirat\ObjectDock\ObjectDock.exe
C:\Documents and Settings\Flo\Bureau\hijackthis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://wfqfgetamcqdmqdgqxexnet.com/b6mNxDiuOy5jcbUyAAkg/s6rw61t7jQbtPNflPF1zqF4lblWJ5tHO0_ngNsIZQxx.asp
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer avec Club-Internet
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O1 - Hosts: 127.148.54.57 www.symantec.com
O1 - Hosts: 127.223.78.105 securityresponse.symantec.com
O1 - Hosts: 127.8.70.188 www.mcafee.com
O1 - Hosts: 127.163.200.207 mcafee.com
O1 - Hosts: 127.165.230.174 us.mcafee.com
O1 - Hosts: 127.225.178.225 www.sophos.com
O1 - Hosts: 127.172.232.225 sophos.com
O1 - Hosts: 127.82.121.6 www.viruslist.com
O1 - Hosts: 127.155.223.31 viruslist.com
O1 - Hosts: 127.144.88.31 f-secure.com
O1 - Hosts: 127.153.170.176 www.f-secure.com
O1 - Hosts: 127.219.154.103 kaspersky.com
O1 - Hosts: 127.58.181.119 www.avp.com
O1 - Hosts: 127.220.129.159 www.kaspersky.com
O1 - Hosts: 127.34.149.54 avp.com
O1 - Hosts: 127.11.249.170 www.networkassociates.com
O1 - Hosts: 127.251.229.201 networkassociates.com
O1 - Hosts: 127.39.70.40 www.ca.com
O1 - Hosts: 127.120.106.66 ca.com
O1 - Hosts: 127.84.41.236 my-etrust.com
O1 - Hosts: 127.96.234.37 www.my-etrust.com
O1 - Hosts: 127.161.41.96 secure.nai.com
O1 - Hosts: 127.211.59.52 nai.com
O1 - Hosts: 127.49.16.50 www.nai.com
O1 - Hosts: 127.68.116.140 trendmicro.com
O1 - Hosts: 127.69.185.230 www.trendmicro.com
O1 - Hosts: 127.227.72.6 housecall.trendmicro.com
O1 - Hosts: 127.193.182.30 www.pandasoftware.com
O1 - Hosts: 127.103.235.21 www.bitdefender.com
O1 - Hosts: 127.25.134.177 www.ravantivirus.com
O1 - Hosts: 127.120.27.154 www3.ca.com
O1 - Hosts: 127.159.76.240 v4.windowsupdate.microsoft.com
O1 - Hosts: 127.52.35.96 v5.windowsupdate.microsoft.com
O1 - Hosts: 127.165.71.168 v5windowsupdate.microsoft.nsatc.net
O1 - Hosts: 127.112.230.70 windowsupdate.microsoft.com
O1 - Hosts: 127.255.123.191 www.windowsupdate.com
O1 - Hosts: 127.212.96.59 windowsupdate.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\apps\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: PK IE Plugin - {1E1B2879-88FF-11D3-8D96-D7ACAC95951A} - C:\WINDOWS\System32\bpkwb.dll
O2 - BHO: Barre d'outils Texto Web - {4E7BD74F-2B8D-469E-C0FF-FD63A08DBF29} - C:\WINDOWS\DOWNLO~1\textobar.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Barre d'outils Texto Web - {4E7BD74F-2B8D-469E-C0FF-FD63A08DBF29} - C:\WINDOWS\DOWNLO~1\textobar.dll
O4 - HKLM\..\Run: [mswnvmx32] explorer
O4 - HKLM\..\Run: [lsass Service] C:\WINDOWS\system\lsass.exe
O4 - HKLM\..\Run: [KAVPersonal50] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe" /minimize
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKLM\..\RunServices: [SystemConfig16] chkmon16.exe -services
O4 - Startup: Club Internet.lnk = C:\Program Files\Club-Internet\Lanceur\lanceur.exe
O4 - Startup: Stardock ObjectDock.lnk = C:\WINDOWS\BricoPacks\Longhorn Inspirat\ObjectDock\ObjectDock.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O10 - Broken Internet access because of LSP provider 'nmtracer.dll' missing
O16 - DPF: PackageHtmlCab - http://acces.blonde.com/package/PackageHtmlCab.CAB
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab
O16 - DPF: {01347765-1965-426B-91A4-AA6BB342B9A3} (InstallerObj Class) - http://www.1-click.com/common/files/installer-hidden-test.cab
O16 - DPF: {084DAC27-6FA3-4F55-9005-033F2F102F5C} (ITPPDiagIE Class) - http://images.goa.com/v3/InstallGoaIT/Itpp/V2,0,1,6/npwwg.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab
O16 - DPF: {469C7080-8EC8-43A6-AD97-45848113743C} - http://akamai.downloadv3.com/binaries/IA/nethv32_FR_XP.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab
O16 - DPF: {92CA8ACC-4E99-4A2A-93F1-B2C5CADC8613} (OPInstall Control) - http://a14.g.akamai.net/f/14/7141/144000s/download.opistat.com/opistat/activex/opinstall_fr_4.1.14.0.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab31267.cab
O16 - DPF: {BD393C14-72AD-4790-A095-76522973D6B8} (CBreakshotControl Class) - http://messenger.zone.msn.com/binary/Bankshot.cab31267.cab
O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697514} (NsvPlayX Control) - http://www.nullsoft.com/nsv/embed/nsvplayx_vp3_mp3.cab
O16 - DPF: {D1B80EBF-1A26-4FEC-B0B9-DCB934C6507E} - http://dialup.carpediem.fr/CABS/cd/1,0,3,8/fr/AccesMembre.cab
O16 - DPF: {E6187999-9FEC-46A1-A20F-F4CA977D5643} (ZoneChess Object) - http://messenger.zone.msn.com/binary/Chess.cab31267.cab
O16 - DPF: {F04A8AE2-A59D-11D2-8792-00C04F8EF29D} (Hotmail Attachments Control) - http://by8fd.bay8.hotmail.msn.com/activex/HMAtchmt.ocx
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/bin/msnchat45.cab
O16 - DPF: {FD40EC41-D860-4579-8BA4-52671A45C71C} (AxHtChat Class) - http://images.goa.com/v3/InstallGoaIT/ChatAx/V4,0,5,4/npaxchat.cabO17 - HKLM\System\CCS\Services\Tcpip\..\{4F119709-FB6A-4C76-B5B6-1FA5403CEFF1}: NameServer = 194.117.200.10 194.117.200.15
O17 - HKLM\System\CS1\Services\Tcpip\..\{4F119709-FB6A-4C76-B5B6-1FA5403CEFF1}: NameServer = 194.117.200.10 194.117.200.15
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE
O23 - Service: kavsvc - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe
O23 - Service: NTBOOTMGR (NTBOOT) - Unknown owner - C:\WINDOWS\SYSTEM\DRIVER\ntuser.exe
Tout ce qui est en gras est a FIXÉ
Ensuite des que tout es FIXÉ
tu télécharge ceci : http://securityresponse.symantec.com/avcenter/FxSasser.exe
Ceci te débarassera du vers sasser-
jvien de fixer tout ce que tu m'a dit
et j'ai lancer le logiciel pour sasser mais il n'a rien trouver
le log de FxSasserC:\WINDOWS\$NtUninstallKB833330$\Blastcln: (not scanned) W32.Sasser.Worm has not been found on your computer.
je réfé un hijackthis => log->Logfile of HijackThis v1.99.1 Scan saved at 22:37:56, on 25/08/2005 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\SYSTEM32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\System32\drivers\CDAC11BA.EXE C:\WINDOWS\SYSTEM\DRIVER\ntuser.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\MessengerPlus! 3\MsgPlus.exe C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe C:\WINDOWS\BricoPacks\Longhorn Inspirat\ObjectDock\ObjectDock.exe C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe C:\Program Files\MSN Messenger\msnmsgr.exe C:\WINDOWS\Explorer.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Documents and Settings\Flo\Bureau\hijackthis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/ R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer avec Club-Internet R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\apps\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O2 - BHO: PK IE Plugin - {1E1B2879-88FF-11D3-8D96-D7ACAC95951A} - C:\WINDOWS\System32\bpkwb.dll O2 - BHO: Barre d'outils Texto Web - {4E7BD74F-2B8D-469E-C0FF-FD63A08DBF29} - C:\WINDOWS\DOWNLO~1\textobar.dll O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O3 - Toolbar: Barre d'outils Texto Web - {4E7BD74F-2B8D-469E-C0FF-FD63A08DBF29} - C:\WINDOWS\DOWNLO~1\textobar.dll O4 - HKLM\..\Run: [mswnvmx32] explorer O4 - HKLM\..\Run: [KAVPersonal50] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kav.exe" /minimize O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_02\bin\jusched.exe O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot O4 - Startup: Club Internet.lnk = C:\Program Files\Club-Internet\Lanceur\lanceur.exe O4 - Startup: Stardock ObjectDock.lnk = C:\WINDOWS\BricoPacks\Longhorn Inspirat\ObjectDock\ObjectDock.exe O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_02\bin\npjpi150_02.dll O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file) O10 - Broken Internet access because of LSP provider 'nmtracer.dll' missing O17 - HKLM\System\CCS\Services\Tcpip\..\{4F119709-FB6A-4C76-B5B6-1FA5403CEFF1}: NameServer = 194.117.200.10 194.117.200.15 O17 - HKLM\System\CS1\Services\Tcpip\..\{4F119709-FB6A-4C76-B5B6-1FA5403CEFF1}: NameServer = 194.117.200.10 194.117.200.15 O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\System32\drivers\CDAC11BA.EXE O23 - Service: kavsvc - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe O23 - Service: NTBOOTMGR (NTBOOT) - Unknown owner - C:\WINDOWS\SYSTEM\DRIVER\ntuser.exe
merci de ton aide
-
