Interprétation log Hijackthis
bulonze
Messages postés
1
Statut
Membre
-
Regis59 Messages postés 21466 Statut Contributeur sécurité -
Regis59 Messages postés 21466 Statut Contributeur sécurité -
Bonjour
j'ai utilisé hijackthis pour tester mon micro, je ne comprend pas les interprétations du fichier log joint
Merci de m'aider.
Logfile of HijackThis v1.99.1
Scan saved at 15:16:25, on 24/06/2006
Platform: Windows 2000 SP2 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
I:\WINNT\Explorer.EXE
E:\quicktime\qttask.exe
I:\Program Files\ZTE Corporation\ZXDSL852\CnxDslTb.exe
E:\AntiVir PersonalEdition Classic\avgnt.exe
I:\PROGRA~1\WANADOO\TaskBarIcon.exe
E:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
i:\progra~1\intern~1\iexplore.exe
I:\WINNT\system32\spool\drivers\w32x86\3\CAP3LAK.EXE
E:\Common\Bin\WinCinemaMgr.exe
I:\Program Files\Internet Explorer\iexplore.exe
I:\Program Files\Wanadoo\EspaceWanadoo.exe
I:\Program Files\Wanadoo\ComComp.exe
I:\PROGRA~1\Wanadoo\Toaster.exe
I:\PROGRA~1\Wanadoo\Inactivity.exe
I:\PROGRA~1\Wanadoo\PollingModule.exe
I:\WINNT\System32\ALERTM~1\ALERTM~1.EXE
I:\Program Files\Wanadoo\Watch.exe
E:\firefox\firefox.exe
E:\mozilla\thunderbird.exe
E:\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - I:\PROGRA~1\WANADOO\SEARCH~1.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - I:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {74F664DE-257B-8940-AA52-DCEA51BB786D} - I:\DOCUME~1\felin\APPLIC~1\BOOBBO~1\Clock Funk.exe
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - I:\WINNT\System32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [CAP3ON] I:\WINNT\System32\spool\drivers\w32x86\3\CAP3ONN.EXE
O4 - HKLM\..\Run: [QuickTime Task] "E:\quicktime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [CnxDslTaskBar] "I:\Program Files\ZTE Corporation\ZXDSL852\CnxDslTb.exe" "ZTE Corporation\ZXDSL852"
O4 - HKLM\..\Run: [WOOWATCH] I:\PROGRA~1\WANADOO\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] I:\PROGRA~1\WANADOO\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [AVAUTODELETE] "I:\Documents and Settings\All Users.WINNT\Application Data\AntiVir PersonalEdition classic\UPGRADE\upgrade.exe"
O4 - HKLM\..\Run: [avgnt] "E:\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [Zone Labs Client] E:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKCU\..\Run: [WOOKIT] I:\PROGRA~1\WANADOO\GestMaj.exe EspaceWanadoo.exe
O4 - HKCU\..\Run: [Lies Love] I:\DOCUME~1\felin\APPLIC~1\SHOWOP~1\Live Idle 01.exe
O4 - HKCU\..\Run: [Ref balm bolt pure] I:\Documents and Settings\All Users.WINNT\Application Data\Support info ref balm\Memo Time.exe
O4 - Global Startup: Microsoft Office.lnk = E:\Office\Office\OSA9.EXE
O4 - Global Startup: Canon LASER SHOT LBP-1120 ª¬ºAµøµ¡.LNK = I:\WINNT\system32\spool\drivers\w32x86\3\CAP3LAK.EXE
O4 - Global Startup: Fenêtre d'état de Canon LASER SHOT LBP-1120.LNK = I:\WINNT\system32\spool\drivers\w32x86\3\CAP3LAK.EXE
O4 - Global Startup: InterVideo WinCinema Manager.lnk = E:\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = I:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - I:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - I:\WINNT\web\related.htm
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{95F735D0-253E-4594-A711-6699A0C8CD49}: NameServer = 80.10.246.1 80.10.246.132
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - E:\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - E:\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - VERITAS Software Corp. - I:\WINNT\System32\dmadmin.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - I:\WINNT\System32\FTRTSVC.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - I:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - I:\WINNT\system32\ZONELABS\vsmon.exe
j'ai utilisé hijackthis pour tester mon micro, je ne comprend pas les interprétations du fichier log joint
Merci de m'aider.
Logfile of HijackThis v1.99.1
Scan saved at 15:16:25, on 24/06/2006
Platform: Windows 2000 SP2 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
I:\WINNT\Explorer.EXE
E:\quicktime\qttask.exe
I:\Program Files\ZTE Corporation\ZXDSL852\CnxDslTb.exe
E:\AntiVir PersonalEdition Classic\avgnt.exe
I:\PROGRA~1\WANADOO\TaskBarIcon.exe
E:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
i:\progra~1\intern~1\iexplore.exe
I:\WINNT\system32\spool\drivers\w32x86\3\CAP3LAK.EXE
E:\Common\Bin\WinCinemaMgr.exe
I:\Program Files\Internet Explorer\iexplore.exe
I:\Program Files\Wanadoo\EspaceWanadoo.exe
I:\Program Files\Wanadoo\ComComp.exe
I:\PROGRA~1\Wanadoo\Toaster.exe
I:\PROGRA~1\Wanadoo\Inactivity.exe
I:\PROGRA~1\Wanadoo\PollingModule.exe
I:\WINNT\System32\ALERTM~1\ALERTM~1.EXE
I:\Program Files\Wanadoo\Watch.exe
E:\firefox\firefox.exe
E:\mozilla\thunderbird.exe
E:\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - I:\PROGRA~1\WANADOO\SEARCH~1.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - I:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {74F664DE-257B-8940-AA52-DCEA51BB786D} - I:\DOCUME~1\felin\APPLIC~1\BOOBBO~1\Clock Funk.exe
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - I:\WINNT\System32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [CAP3ON] I:\WINNT\System32\spool\drivers\w32x86\3\CAP3ONN.EXE
O4 - HKLM\..\Run: [QuickTime Task] "E:\quicktime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [CnxDslTaskBar] "I:\Program Files\ZTE Corporation\ZXDSL852\CnxDslTb.exe" "ZTE Corporation\ZXDSL852"
O4 - HKLM\..\Run: [WOOWATCH] I:\PROGRA~1\WANADOO\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] I:\PROGRA~1\WANADOO\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [AVAUTODELETE] "I:\Documents and Settings\All Users.WINNT\Application Data\AntiVir PersonalEdition classic\UPGRADE\upgrade.exe"
O4 - HKLM\..\Run: [avgnt] "E:\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [Zone Labs Client] E:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKCU\..\Run: [WOOKIT] I:\PROGRA~1\WANADOO\GestMaj.exe EspaceWanadoo.exe
O4 - HKCU\..\Run: [Lies Love] I:\DOCUME~1\felin\APPLIC~1\SHOWOP~1\Live Idle 01.exe
O4 - HKCU\..\Run: [Ref balm bolt pure] I:\Documents and Settings\All Users.WINNT\Application Data\Support info ref balm\Memo Time.exe
O4 - Global Startup: Microsoft Office.lnk = E:\Office\Office\OSA9.EXE
O4 - Global Startup: Canon LASER SHOT LBP-1120 ª¬ºAµøµ¡.LNK = I:\WINNT\system32\spool\drivers\w32x86\3\CAP3LAK.EXE
O4 - Global Startup: Fenêtre d'état de Canon LASER SHOT LBP-1120.LNK = I:\WINNT\system32\spool\drivers\w32x86\3\CAP3LAK.EXE
O4 - Global Startup: InterVideo WinCinema Manager.lnk = E:\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = I:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - I:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - I:\WINNT\web\related.htm
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{95F735D0-253E-4594-A711-6699A0C8CD49}: NameServer = 80.10.246.1 80.10.246.132
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - E:\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - E:\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - VERITAS Software Corp. - I:\WINNT\System32\dmadmin.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - I:\WINNT\System32\FTRTSVC.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - I:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - I:\WINNT\system32\ZONELABS\vsmon.exe
A voir également:
- Interprétation log Hijackthis
- Hijackthis - Télécharger - Antivirus & Antimalwares
- Vpn no log - Guide
- Log freebox - Forum Freebox
- View rescue log traduction - Guide
- Log crash windows - Guide