VIRUS - rapport HIJACKTHIS - merci
Anne
-
incognito02 Messages postés 3487 Statut Contributeur -
incognito02 Messages postés 3487 Statut Contributeur -
Bonjour,
Mon PC est très lent .. Je pense qu'il est infesté.
Pourriez-vous analyser mon rapport HIJACKTHIS s'il vous plait ?
Anne
Logfile of HijackThis v1.99.1
Scan saved at 10:23:13, on 23/09/2006
Platform: Windows 2000 (WinNT 5.00.2195)
MSIE: Internet Explorer v5.00 (5.00.2920.0000)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\System32\nvsvc32.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\Explorer.exe
C:\WINNT\System32\internat.exe
C:\WINNT\System32\RUNDLL32.EXE
C:\Documents and Settings\Paul\Bureau\ccsetup133.exe
C:\DOCUME~1\Paul\LOCALS~1\Temp\ytb2.exe
C:\DOCUME~1\Paul\LOCALS~1\Temp\GLB1D.tmp
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Paul\Bureau\hijack\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.fr.msn.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O3 - Toolbar: @msdxmLC.dll,-1@1036,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKCU\..\Run: [internat.exe] internat.exe
O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINNT\System32\NVMCTRAY.DLL,NvTaskbarInit
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O14 - IERESET.INF: START_PAGE_URL=http://www.fr.msn.com
O14 - IERESET.INF: MS_START_PAGE_URL=http://www.fr.msn.com
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINNT\System32\nvsvc32.exe
Mon PC est très lent .. Je pense qu'il est infesté.
Pourriez-vous analyser mon rapport HIJACKTHIS s'il vous plait ?
Anne
Logfile of HijackThis v1.99.1
Scan saved at 10:23:13, on 23/09/2006
Platform: Windows 2000 (WinNT 5.00.2195)
MSIE: Internet Explorer v5.00 (5.00.2920.0000)
Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\System32\nvsvc32.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\Explorer.exe
C:\WINNT\System32\internat.exe
C:\WINNT\System32\RUNDLL32.EXE
C:\Documents and Settings\Paul\Bureau\ccsetup133.exe
C:\DOCUME~1\Paul\LOCALS~1\Temp\ytb2.exe
C:\DOCUME~1\Paul\LOCALS~1\Temp\GLB1D.tmp
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Paul\Bureau\hijack\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.fr.msn.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O3 - Toolbar: @msdxmLC.dll,-1@1036,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O4 - HKLM\..\Run: [Synchronization Manager] mobsync.exe /logon
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINNT\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKCU\..\Run: [internat.exe] internat.exe
O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINNT\System32\NVMCTRAY.DLL,NvTaskbarInit
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O14 - IERESET.INF: START_PAGE_URL=http://www.fr.msn.com
O14 - IERESET.INF: MS_START_PAGE_URL=http://www.fr.msn.com
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINNT\System32\nvsvc32.exe
A voir également:
- VIRUS - rapport HIJACKTHIS - merci
- Hijackthis - Télécharger - Antivirus & Antimalwares
- Virus mcafee - Accueil - Piratage
- Plan rapport de stage - Guide
- Virus informatique - Guide
- Message virus iphone ✓ - Forum Virus
3 réponses
Bonjour,
2 ou 3 choses pour commencer : ton windows 2000 n'est pas à jour, je ne vois pas d'antivirus ni de firewall, tu aimes vivre dangeureusement ! lol
Pour le service Pack 4 de windows 2000 :
https://www.microsoft.com/fr-fr/windows/?v=5
Pour anti virus et firewall :
Un seul antivirus actif : (plusieurs antivirus cree de gros conflits)
http://www.inoculer.com/gratuits.php3
Note: je te conseillerais Avast ou Antivir
- Un antivirus bien paramétré et mis à jour régulièrement et un scan complet régulier.
+ De temps en temps un scan en ligne (une fois/mois).
Liste scans AV en ligne ici:
https://assiste.com/404_La_page_demandee_n_existe_pas.php
- Un firewall
http://www.inoculer.com/firewall5.php3
http://www.firewall-net.com/
firewall
Note: Je te conseillerais Zone Alarm
Quand tu aura fait ceci, reposte un log hijackthis stp.
Si tu as des doutes ou besoin de conseils, n'hésites pas.
Bon courage.
A+
2 ou 3 choses pour commencer : ton windows 2000 n'est pas à jour, je ne vois pas d'antivirus ni de firewall, tu aimes vivre dangeureusement ! lol
Pour le service Pack 4 de windows 2000 :
https://www.microsoft.com/fr-fr/windows/?v=5
Pour anti virus et firewall :
Un seul antivirus actif : (plusieurs antivirus cree de gros conflits)
http://www.inoculer.com/gratuits.php3
Note: je te conseillerais Avast ou Antivir
- Un antivirus bien paramétré et mis à jour régulièrement et un scan complet régulier.
+ De temps en temps un scan en ligne (une fois/mois).
Liste scans AV en ligne ici:
https://assiste.com/404_La_page_demandee_n_existe_pas.php
- Un firewall
http://www.inoculer.com/firewall5.php3
http://www.firewall-net.com/
firewall
Note: Je te conseillerais Zone Alarm
Quand tu aura fait ceci, reposte un log hijackthis stp.
Si tu as des doutes ou besoin de conseils, n'hésites pas.
Bon courage.
A+
Bonjour,
en fait, quand j'essaye d'installer AVAST , j'ai un message d'erreur m'indiquant que :"erreur lors du processus d'installation"
23.09.2006 11:44:15 general: Started: 23.09.2006, 11:44:15
23.09.2006 11:44:15 general: Running setup_av_pro-367 (871)
23.09.2006 11:44:15 system: Operating system: Windows2000 ver 5.0, build 2195, sp 0.0
23.09.2006 11:44:15 system: Computer WinName: PAUL-U0PCNRC98F
23.09.2006 11:44:15 system: Windows Net User: PAUL-U0PCNRC98F\Paul
23.09.2006 11:44:15 general: Cmdline:
23.09.2006 11:44:15 general: Old version: ffffffff (-1)
23.09.2006 11:44:15 general: Install check: SetupVersion does NOT exist
23.09.2006 11:44:15 general: SGW32P::CheckIfInstalled set m_bAlreadyInstalled to 0
23.09.2006 11:44:15 general: DldSrc set to inet
23.09.2006 11:44:15 system: Computer DnsName: paul-u0pcnrc98f
23.09.2006 11:44:15 system: Computer Ip Addr: 82.231.240.251
23.09.2006 11:44:15 registry: Get registry: Software\Microsoft\Internet Explorer\Version=5.00.2920.0000
23.09.2006 11:44:15 general: Operation set to INST_OP_INSTALL
23.09.2006 11:44:15 general: GUID: 1fb4ae21-4166-4f6d-b2af-7df588fcafd8
23.09.2006 11:44:15 general: Default server pseudo definition loaded as ''.
23.09.2006 11:44:15 general: SelectCurrent: selected server 'FailSafeServer' from 'main'
23.09.2006 11:44:15 package: GetPackages - set proxy for inet
23.09.2006 11:44:15 internet: SYNCER: Type: use IE settings
23.09.2006 11:44:15 internet: SYNCER: Auth: another authentication, use WinInet
23.09.2006 11:44:15 general: Entered SetupProcessPro::Do( INST_OP_INSTALL )
23.09.2006 11:44:15 general: Entered SetupProcessWin32Avast::Do( INST_OP_INSTALL )
23.09.2006 11:44:15 general: Entered SetupProcessWin32::Do( INST_OP_INSTALL )
23.09.2006 11:44:15 general: Entered SetupProcess::Do( INST_OP_INSTALL )
23.09.2006 11:44:36 internet: SYNCER: Type: use IE settings
23.09.2006 11:44:36 internet: SYNCER: Auth: another authentication, use WinInet
23.09.2006 11:44:38 general: progress thread start
23.09.2006 11:44:38 general: progress start - 1
23.09.2006 11:44:38 general: compatCopyFile( \servers.def.vpu, C:\DOCUME~1\Paul\LOCALS~1\Temp\_av_proI.tm~a00700\onefile ) failed with error 0x00000002
23.09.2006 11:44:38 general: InvalidateCurrent: invalidated server 'FailSafeServer' from 'main'
23.09.2006 11:44:38 general: SelectCurrent: unable to find any suitable server in 'main'
23.09.2006 11:44:38 internet: while trying to get file 'servers.def.vpu', error 0x00000002 has occured, try 1
23.09.2006 11:44:38 internet: tried 1 servers to get file 'servers.def.vpu', but failed (0x00000002)
23.09.2006 11:44:38 file: GetNewerStampedFile:GetFileWithRetry failed: C:\DOCUME~1\Paul\LOCALS~1\Temp\_av_proI.tm~a00700\onefile, servers.def.vpu, error: 0x00000002
23.09.2006 11:44:38 package: Download servers.def, servers.def.vpu failed with error 0x20000011.
23.09.2006 11:44:38 general: compatCopyFile( \servers.def, C:\DOCUME~1\Paul\LOCALS~1\Temp\_av_proI.tm~a00700\onefile ) failed with error 0x00000002
23.09.2006 11:44:38 general: InvalidateCurrent: invalidated server 'FailSafeServer' from 'main'
23.09.2006 11:44:38 general: SelectCurrent: unable to find any suitable server in 'main'
23.09.2006 11:44:38 internet: while trying to get file 'servers.def', error 0x00000002 has occured, try 1
23.09.2006 11:44:38 internet: tried 1 servers to get file 'servers.def', but failed (0x00000002)
23.09.2006 11:44:38 file: GetNewerStampedFile:GetFileWithRetry failed: C:\DOCUME~1\Paul\LOCALS~1\Temp\_av_proI.tm~a00700\onefile, servers.def, error: 0x00000002
23.09.2006 11:44:38 package: Tried to download servers.def but failed with error 0x00000002.
23.09.2006 11:44:38 general: progress end - 0
23.09.2006 11:44:38 general: progress thread end
23.09.2006 11:44:38 general: InvalidateCurrent: invalidated server 'FailSafeServer' from 'main'
23.09.2006 11:44:38 general: SelectCurrent: unable to find any suitable server in 'main'
23.09.2006 11:44:38 internet: SYNCER: Type: Invalid
23.09.2006 11:44:38 internet: SYNCER: Auth: no authentication
23.09.2006 11:44:38 general: SelectCurrent: unable to find any suitable server in 'main'
23.09.2006 11:44:38 general: progress end - forced
23.09.2006 11:44:38 general: progress thread end
en fait, quand j'essaye d'installer AVAST , j'ai un message d'erreur m'indiquant que :"erreur lors du processus d'installation"
23.09.2006 11:44:15 general: Started: 23.09.2006, 11:44:15
23.09.2006 11:44:15 general: Running setup_av_pro-367 (871)
23.09.2006 11:44:15 system: Operating system: Windows2000 ver 5.0, build 2195, sp 0.0
23.09.2006 11:44:15 system: Computer WinName: PAUL-U0PCNRC98F
23.09.2006 11:44:15 system: Windows Net User: PAUL-U0PCNRC98F\Paul
23.09.2006 11:44:15 general: Cmdline:
23.09.2006 11:44:15 general: Old version: ffffffff (-1)
23.09.2006 11:44:15 general: Install check: SetupVersion does NOT exist
23.09.2006 11:44:15 general: SGW32P::CheckIfInstalled set m_bAlreadyInstalled to 0
23.09.2006 11:44:15 general: DldSrc set to inet
23.09.2006 11:44:15 system: Computer DnsName: paul-u0pcnrc98f
23.09.2006 11:44:15 system: Computer Ip Addr: 82.231.240.251
23.09.2006 11:44:15 registry: Get registry: Software\Microsoft\Internet Explorer\Version=5.00.2920.0000
23.09.2006 11:44:15 general: Operation set to INST_OP_INSTALL
23.09.2006 11:44:15 general: GUID: 1fb4ae21-4166-4f6d-b2af-7df588fcafd8
23.09.2006 11:44:15 general: Default server pseudo definition loaded as ''.
23.09.2006 11:44:15 general: SelectCurrent: selected server 'FailSafeServer' from 'main'
23.09.2006 11:44:15 package: GetPackages - set proxy for inet
23.09.2006 11:44:15 internet: SYNCER: Type: use IE settings
23.09.2006 11:44:15 internet: SYNCER: Auth: another authentication, use WinInet
23.09.2006 11:44:15 general: Entered SetupProcessPro::Do( INST_OP_INSTALL )
23.09.2006 11:44:15 general: Entered SetupProcessWin32Avast::Do( INST_OP_INSTALL )
23.09.2006 11:44:15 general: Entered SetupProcessWin32::Do( INST_OP_INSTALL )
23.09.2006 11:44:15 general: Entered SetupProcess::Do( INST_OP_INSTALL )
23.09.2006 11:44:36 internet: SYNCER: Type: use IE settings
23.09.2006 11:44:36 internet: SYNCER: Auth: another authentication, use WinInet
23.09.2006 11:44:38 general: progress thread start
23.09.2006 11:44:38 general: progress start - 1
23.09.2006 11:44:38 general: compatCopyFile( \servers.def.vpu, C:\DOCUME~1\Paul\LOCALS~1\Temp\_av_proI.tm~a00700\onefile ) failed with error 0x00000002
23.09.2006 11:44:38 general: InvalidateCurrent: invalidated server 'FailSafeServer' from 'main'
23.09.2006 11:44:38 general: SelectCurrent: unable to find any suitable server in 'main'
23.09.2006 11:44:38 internet: while trying to get file 'servers.def.vpu', error 0x00000002 has occured, try 1
23.09.2006 11:44:38 internet: tried 1 servers to get file 'servers.def.vpu', but failed (0x00000002)
23.09.2006 11:44:38 file: GetNewerStampedFile:GetFileWithRetry failed: C:\DOCUME~1\Paul\LOCALS~1\Temp\_av_proI.tm~a00700\onefile, servers.def.vpu, error: 0x00000002
23.09.2006 11:44:38 package: Download servers.def, servers.def.vpu failed with error 0x20000011.
23.09.2006 11:44:38 general: compatCopyFile( \servers.def, C:\DOCUME~1\Paul\LOCALS~1\Temp\_av_proI.tm~a00700\onefile ) failed with error 0x00000002
23.09.2006 11:44:38 general: InvalidateCurrent: invalidated server 'FailSafeServer' from 'main'
23.09.2006 11:44:38 general: SelectCurrent: unable to find any suitable server in 'main'
23.09.2006 11:44:38 internet: while trying to get file 'servers.def', error 0x00000002 has occured, try 1
23.09.2006 11:44:38 internet: tried 1 servers to get file 'servers.def', but failed (0x00000002)
23.09.2006 11:44:38 file: GetNewerStampedFile:GetFileWithRetry failed: C:\DOCUME~1\Paul\LOCALS~1\Temp\_av_proI.tm~a00700\onefile, servers.def, error: 0x00000002
23.09.2006 11:44:38 package: Tried to download servers.def but failed with error 0x00000002.
23.09.2006 11:44:38 general: progress end - 0
23.09.2006 11:44:38 general: progress thread end
23.09.2006 11:44:38 general: InvalidateCurrent: invalidated server 'FailSafeServer' from 'main'
23.09.2006 11:44:38 general: SelectCurrent: unable to find any suitable server in 'main'
23.09.2006 11:44:38 internet: SYNCER: Type: Invalid
23.09.2006 11:44:38 internet: SYNCER: Auth: no authentication
23.09.2006 11:44:38 general: SelectCurrent: unable to find any suitable server in 'main'
23.09.2006 11:44:38 general: progress end - forced
23.09.2006 11:44:38 general: progress thread end
