Interprétation log Hijackthis
Bonjour
j'ai utilisé hijackthis pour tester mon micro, je ne comprend pas les interprétations du fichier log joint
Merci de m'aider.
Logfile of HijackThis v1.99.1
Scan saved at 15:16:25, on 24/06/2006
Platform: Windows 2000 SP2 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
I:\WINNT\Explorer.EXE
E:\quicktime\qttask.exe
I:\Program Files\ZTE Corporation\ZXDSL852\CnxDslTb.exe
E:\AntiVir PersonalEdition Classic\avgnt.exe
I:\PROGRA~1\WANADOO\TaskBarIcon.exe
E:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
i:\progra~1\intern~1\iexplore.exe
I:\WINNT\system32\spool\drivers\w32x86\3\CAP3LAK.EXE
E:\Common\Bin\WinCinemaMgr.exe
I:\Program Files\Internet Explorer\iexplore.exe
I:\Program Files\Wanadoo\EspaceWanadoo.exe
I:\Program Files\Wanadoo\ComComp.exe
I:\PROGRA~1\Wanadoo\Toaster.exe
I:\PROGRA~1\Wanadoo\Inactivity.exe
I:\PROGRA~1\Wanadoo\PollingModule.exe
I:\WINNT\System32\ALERTM~1\ALERTM~1.EXE
I:\Program Files\Wanadoo\Watch.exe
E:\firefox\firefox.exe
E:\mozilla\thunderbird.exe
E:\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - I:\PROGRA~1\WANADOO\SEARCH~1.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - I:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {74F664DE-257B-8940-AA52-DCEA51BB786D} - I:\DOCUME~1\felin\APPLIC~1\BOOBBO~1\Clock Funk.exe
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - I:\WINNT\System32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [CAP3ON] I:\WINNT\System32\spool\drivers\w32x86\3\CAP3ONN.EXE
O4 - HKLM\..\Run: [QuickTime Task] "E:\quicktime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [CnxDslTaskBar] "I:\Program Files\ZTE Corporation\ZXDSL852\CnxDslTb.exe" "ZTE Corporation\ZXDSL852"
O4 - HKLM\..\Run: [WOOWATCH] I:\PROGRA~1\WANADOO\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] I:\PROGRA~1\WANADOO\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [AVAUTODELETE] "I:\Documents and Settings\All Users.WINNT\Application Data\AntiVir PersonalEdition classic\UPGRADE\upgrade.exe"
O4 - HKLM\..\Run: [avgnt] "E:\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [Zone Labs Client] E:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKCU\..\Run: [WOOKIT] I:\PROGRA~1\WANADOO\GestMaj.exe EspaceWanadoo.exe
O4 - HKCU\..\Run: [Lies Love] I:\DOCUME~1\felin\APPLIC~1\SHOWOP~1\Live Idle 01.exe
O4 - HKCU\..\Run: [Ref balm bolt pure] I:\Documents and Settings\All Users.WINNT\Application Data\Support info ref balm\Memo Time.exe
O4 - Global Startup: Microsoft Office.lnk = E:\Office\Office\OSA9.EXE
O4 - Global Startup: Canon LASER SHOT LBP-1120 ª¬ºAµøµ¡.LNK = I:\WINNT\system32\spool\drivers\w32x86\3\CAP3LAK.EXE
O4 - Global Startup: Fenêtre d'état de Canon LASER SHOT LBP-1120.LNK = I:\WINNT\system32\spool\drivers\w32x86\3\CAP3LAK.EXE
O4 - Global Startup: InterVideo WinCinema Manager.lnk = E:\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = I:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - I:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - I:\WINNT\web\related.htm
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{95F735D0-253E-4594-A711-6699A0C8CD49}: NameServer = 80.10.246.1 80.10.246.132
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - E:\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - E:\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - VERITAS Software Corp. - I:\WINNT\System32\dmadmin.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - I:\WINNT\System32\FTRTSVC.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - I:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - I:\WINNT\system32\ZONELABS\vsmon.exe
j'ai utilisé hijackthis pour tester mon micro, je ne comprend pas les interprétations du fichier log joint
Merci de m'aider.
Logfile of HijackThis v1.99.1
Scan saved at 15:16:25, on 24/06/2006
Platform: Windows 2000 SP2 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Running processes:
I:\WINNT\Explorer.EXE
E:\quicktime\qttask.exe
I:\Program Files\ZTE Corporation\ZXDSL852\CnxDslTb.exe
E:\AntiVir PersonalEdition Classic\avgnt.exe
I:\PROGRA~1\WANADOO\TaskBarIcon.exe
E:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
i:\progra~1\intern~1\iexplore.exe
I:\WINNT\system32\spool\drivers\w32x86\3\CAP3LAK.EXE
E:\Common\Bin\WinCinemaMgr.exe
I:\Program Files\Internet Explorer\iexplore.exe
I:\Program Files\Wanadoo\EspaceWanadoo.exe
I:\Program Files\Wanadoo\ComComp.exe
I:\PROGRA~1\Wanadoo\Toaster.exe
I:\PROGRA~1\Wanadoo\Inactivity.exe
I:\PROGRA~1\Wanadoo\PollingModule.exe
I:\WINNT\System32\ALERTM~1\ALERTM~1.EXE
I:\Program Files\Wanadoo\Watch.exe
E:\firefox\firefox.exe
E:\mozilla\thunderbird.exe
E:\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - I:\PROGRA~1\WANADOO\SEARCH~1.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - I:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {74F664DE-257B-8940-AA52-DCEA51BB786D} - I:\DOCUME~1\felin\APPLIC~1\BOOBBO~1\Clock Funk.exe
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - I:\WINNT\System32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [CAP3ON] I:\WINNT\System32\spool\drivers\w32x86\3\CAP3ONN.EXE
O4 - HKLM\..\Run: [QuickTime Task] "E:\quicktime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [CnxDslTaskBar] "I:\Program Files\ZTE Corporation\ZXDSL852\CnxDslTb.exe" "ZTE Corporation\ZXDSL852"
O4 - HKLM\..\Run: [WOOWATCH] I:\PROGRA~1\WANADOO\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] I:\PROGRA~1\WANADOO\GestMaj.exe TaskBarIcon.exe
O4 - HKLM\..\Run: [AVAUTODELETE] "I:\Documents and Settings\All Users.WINNT\Application Data\AntiVir PersonalEdition classic\UPGRADE\upgrade.exe"
O4 - HKLM\..\Run: [avgnt] "E:\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [Zone Labs Client] E:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKCU\..\Run: [WOOKIT] I:\PROGRA~1\WANADOO\GestMaj.exe EspaceWanadoo.exe
O4 - HKCU\..\Run: [Lies Love] I:\DOCUME~1\felin\APPLIC~1\SHOWOP~1\Live Idle 01.exe
O4 - HKCU\..\Run: [Ref balm bolt pure] I:\Documents and Settings\All Users.WINNT\Application Data\Support info ref balm\Memo Time.exe
O4 - Global Startup: Microsoft Office.lnk = E:\Office\Office\OSA9.EXE
O4 - Global Startup: Canon LASER SHOT LBP-1120 ª¬ºAµøµ¡.LNK = I:\WINNT\system32\spool\drivers\w32x86\3\CAP3LAK.EXE
O4 - Global Startup: Fenêtre d'état de Canon LASER SHOT LBP-1120.LNK = I:\WINNT\system32\spool\drivers\w32x86\3\CAP3LAK.EXE
O4 - Global Startup: InterVideo WinCinema Manager.lnk = E:\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = I:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - I:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - I:\WINNT\web\related.htm
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{95F735D0-253E-4594-A711-6699A0C8CD49}: NameServer = 80.10.246.1 80.10.246.132
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - E:\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - E:\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - VERITAS Software Corp. - I:\WINNT\System32\dmadmin.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - I:\WINNT\System32\FTRTSVC.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - I:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - I:\WINNT\system32\ZONELABS\vsmon.exe
