Navigateur internet panne
l informatiquepourtous
Messages postés
1134
Statut
Membre
-
l informatiquepourtous Messages postés 1134 Statut Membre -
l informatiquepourtous Messages postés 1134 Statut Membre -
Bonjour a tous ! j'ai besoin de votre aide pour resoudre un probleme d'explorateur internet j:
Donc sur mon premier navigateur (internet exploreur )j'ai eu des page de pub qui saffichait en plein ecran pour me faire acheter de faux logiciel types :drive cleaner,ErrorSafe et plein d'autre jusque la sa me derangeais pas trop puisse que je navigais avec Mozilla firefox mais le pire c'est que même mozilla a été contaminé donc sa me fait le même probleme !
Donc j'ai passé un coup de Spybot - Search & Destroy et de avg anti-spyware (version gratuite) il me trouve les spyware des pub les enleve mais il revient automatiquement donc si vous pouvez me dire comment me debaraser de ces page intempestive et qu'il ne revient plus !
(j'ai entendu parler de Hijackthis mais je nause pas trop afficher le rapport car j'ai pas envie que tout le monde sache ce que j'ai sur mon ordi si sa peut se faire dans la discrétion merci...)
MERCI bien a tous pour vos reponses !!!
Donc sur mon premier navigateur (internet exploreur )j'ai eu des page de pub qui saffichait en plein ecran pour me faire acheter de faux logiciel types :drive cleaner,ErrorSafe et plein d'autre jusque la sa me derangeais pas trop puisse que je navigais avec Mozilla firefox mais le pire c'est que même mozilla a été contaminé donc sa me fait le même probleme !
Donc j'ai passé un coup de Spybot - Search & Destroy et de avg anti-spyware (version gratuite) il me trouve les spyware des pub les enleve mais il revient automatiquement donc si vous pouvez me dire comment me debaraser de ces page intempestive et qu'il ne revient plus !
(j'ai entendu parler de Hijackthis mais je nause pas trop afficher le rapport car j'ai pas envie que tout le monde sache ce que j'ai sur mon ordi si sa peut se faire dans la discrétion merci...)
MERCI bien a tous pour vos reponses !!!
A voir également:
- Navigateur internet panne
- Navigateur internet - Guide
- Navigateur privé - Guide
- Gps sans internet - Guide
- Quel service d'internet permet à son navigateur de trouver l’adresse ip qui correspond à bipm.org ? ✓ - Forum Réseaux sociaux
- Formate pour taxer connexion internet ✓ - Forum Matériel & Système
8 réponses
Merci bien mais je fais quoi avec l'évaluation du log ? (jai mis le rapport et je les evaluer mais aprés ???)
Encore merci
Encore merci
et bien une fois que tu as l'evaluation de ton log et le resultat de ton scn sur ton hijackthis tu compare et coche les cases que tu veut fixer et ensuite fixe tout ca mais fait gaffe a ce que tu supprime lit bien le rapport sur le site
Merci mais comme je ne veut pas faire de gaffe :
Logfile of HijackThis v1.99.1
Votre version semble être actuelle.
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Votre version semble être actuelle.
C:\WINDOWS\System32\smss.exe
Very safe
This entry was classified from our visitors as good.
C:\WINDOWS\system32\winlogon.exe
Very safe
This entry was classified from our visitors as good.
C:\WINDOWS\system32\services.exe
Safe
This entry was classified from our visitors as good.
C:\WINDOWS\system32\lsass.exe
Very safe
This entry was classified from our visitors as good.
C:\WINDOWS\system32\svchost.exe
Safe
This entry was classified from our visitors as good.
C:\WINDOWS\System32\svchost.exe
Very safe
This entry was classified from our visitors as good.
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
Very safe
This entry was classified from our visitors as good.
C:\WINDOWS\system32\spoolsv.exe
Safe
This entry was classified from our visitors as good.
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
Very safe
This entry was classified from our visitors as good.
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
Very safe
This entry was classified from our visitors as good.
C:\WINDOWS\ATKKBService.exe
Safe
Asus Keyboard Service
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
Safe
C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
Neutral
C:\WINDOWS\system32\inetsrv\inetinfo.exe
Safe
Used by MS Internet Information Server (IIS).
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
Neutral
Machine Debug Manager. Used by developers.
C:\WINDOWS\Explorer.EXE
Very safe
This entry was classified from our visitors as good.
C:\WINDOWS\system32\ctfmon.exe
Very safe
This entry was classified from our visitors as good.
C:\WINDOWS\system32\nvsvc32.exe
Very safe
Non dangereux, mais tout de même superflu.
This entry was classified from our visitors as good.
C:\Program Files\UltraVNC\repeater.exe
UltraVNC Remote Access
C:\WINDOWS\System32\tcpsvcs.exe
Safe
TCP/IP Services
C:\WINDOWS\System32\snmp.exe
Safe
C:\WINDOWS\System32\svchost.exe
Very safe
This entry was classified from our visitors as good.
C:\WINDOWS\system32\MsPMSPSv.exe
Neutral
Helper service installed by Windows Media Player 7.
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
Very safe
BitDefender
C:\Program Files\Analog Devices\Core\smax4pnp.exe
Very safe
This entry was classified from our visitors as good.
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
Very safe
Soundkartentreiber
C:\Program Files\Lexmark 2300 Series\lxcgmon.exe
Very safe
This entry was classified from our visitors as good.
C:\Program Files\Lexmark 2300 Series\ezprint.exe
Very safe
Lexmark Printer related
C:\WINDOWS\system32\rundll32.exe
Neutral
RUNDLL32 is the Microsoft Windows program that loads DLLs into memory so that they can be used by specific programs or by Windows.
C:\Program Files\D-Tools\daemon.exe
Very safe
Creates Virtual Drives
C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
Safe
Java Runtime
C:\WINDOWS\system32\RunDLL32.exe
Very safe
RUNDLL32 is the Microsoft Windows program that loads DLLs into memory so that they can be used by specific programs or by Windows.
C:\WINDOWS\System32\svchost.exe
Very safe
This entry was classified from our visitors as good.
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
Neutral
Checks for updates for RealPlayer
C:\WINDOWS\system32\lxcgcoms.exe
Safe
This entry was classified from our visitors as good.
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
Very safe
This entry was classified from our visitors as good.
C:\Program Files\Winamp2\winampa.exe
C:\KMaestro\Key_f.EXE
Tâche inconnue.
C:\Program Files\MSN Messenger\MsnMsgr.Exe
Safe
This entry was classified from our visitors as good.
C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
Very safe
Eventuellement méchant! Selon notre base de données, ce processus s’exécute normalement dans c:\programme\stardock\objectdock\! Vérifiez si vous connaissez ce processus et arrangez un contrôle antivirus si nécessaire. This entry was classified from our visitors as good.
C:\Program Files\MSN Messenger\usnsvc.exe
Very safe
This entry was classified from our visitors as good.
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
Very safe
BitDefender
c:\progra~1\softwin\bitdef~1\bdmcon.exe
BitDefender
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
Safe
Part of AntiVir
C:\PROGRA~1\Netscape\Netscape\Netscp.exe
C:\Program Files\Satsuki Decoder Pack\mpc\mplayerc.exe
Safe
Eventuellement méchant! Selon notre base de données, ce processus s’exécute normalement dans c:\programme\media player classic\! Vérifiez si vous connaissez ce processus et arrangez un contrôle antivirus si nécessaire. Media Player Classic
C:\Program Files\Hijackthis Version Française\hijackthis vf.exe
Very safe
Tâche inconnue.
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
Very safe
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
Very safe
Ce site a été identifié comme étant non dangereux
N3 - Netscape 7: user_pref("browser.startup.homepage", "https://www.google.fr/?client=firefox-a&rls=org.mozilla:fr:official&gws_rd=ssl"); (C:\Documents and Settings\Inconu\Application Data\Mozilla\Profiles\default\y487v6xc.slt\prefs.js)
Ne pas effacer si vous connaissez ce site ! Normalement bon Il vaut mieux effacer les pages inconnues et les inscriptions provenant de Lop.Com.
N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CNetscap e_France.src"); (C:\Documents and Settings\Inconu\Application Data\Mozilla\Profiles\default\y487v6xc.slt\prefs.js)
Ne pas effacer si vous connaissez ce site ! Normalement bon Il vaut mieux effacer les pages inconnues et les inscriptions provenant de Lop.Com.
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
Very safe
This entry was classified from our visitors as good.
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
Safe
This entry was classified from our visitors as good.
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
Neutral
SUN Java
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
Neutral
Programme inconnu.
Inscription superflue (car sans effet) qui peut donc être effacée !
O4 - HKLM\..\Run: [JMB36X Configure] C:\WINDOWS\System32\JMRaidTool.exe boot
Safe
Gigabyte related
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
Safe
Programme inconnu. This entry was classified from our visitors as good.
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
Safe
This entry was classified from our visitors as good.
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
Safe
This entry was classified from our visitors as good.
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
Safe
This entry was classified from our visitors as good.
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
Neutral
SoundMax integrated sound. Required if you have custom settings for your sound, such as effects and environments
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
Very safe
System Tray icon for SoundMax integrated sound. Sound properties can be accessed through the Start Menu or Control Panel
O4 - HKLM\..\Run: [LXCGCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll,_RunDLLEntry@16
Safe
Programme inconnu. This entry was classified from our visitors as good.
O4 - HKLM\..\Run: [lxcgmon.exe] "C:\Program Files\Lexmark 2300 Series\lxcgmon.exe"
Safe
This entry was classified from our visitors as good.
O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark 2300 Series\ezprint.exe"
Lexmark printer related
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
Lexmark Fax Solutions
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
Safe
This entry was classified from our visitors as good.
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
Safe
This entry was classified from our visitors as good.
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
Neutral
Java von Sun
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
Very safe
This entry was classified from our visitors as good.
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
Neutral
Part of RealPlayer
O4 - HKLM\..\Run: [BootSkin Startup Jobs] "C:\PROGRA~1\Stardock\WINCUS~1\BootSkin\BootSkin.exe" /StartupJobs
WinCustomize BootSkin
O4 - HKLM\..\Run: [BDMCon] C:\PROGRA~1\Softwin\BITDEF~1\bdmcon.exe
Very safe
Either BitDefender or BullGuard antivirus
O4 - HKLM\..\Run: [BDNewsAgent] C:\Program Files\Softwin\BitDefender Free Edition\bdnagent.exe
BitDefender antivirus - updater
O4 - HKLM\..\Run: [KeyMaestro] C:\KMaestro\KMaestro.exe
Very safe
Multimedia keyboard manager. Required if you use the multimedia keys
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
Very safe
This entry was classified from our visitors as good.
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp2\winampa.exe
Loads the System Tray icon for the WinAmp media player. Can be used to mantain file associations so programs like QuickTime and RealPlayer don t take over as default player for various media types. Available via Start -> Programs
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
Neutral
Non dangereux, mais tout de même superflu.
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
Safe
Non dangereux, mais tout de même superflu. This entry was classified from our visitors as good.
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
Safe
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
Very safe
Non dangereux, mais tout de même superflu. Part of Microsoft's Input Message Editor (IME) for translating Japanese/Chinese text in IE
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
Safe
Non dangereux, mais tout de même superflu. Part of Microsoft's Input Message Editor (IME) for translating Japanese/Chinese text in IE
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
Very safe
Microsoft s MSN Messenger 6
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
Neutral
Office related
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
Safe
BitTorrent Startup
O4 - HKCU\..\Run: [Mozilla Quick Launch] "C:\Program Files\Netscape\Netscape\Netscp.exe" -turbo
Mozilla Quick Launch for Netscape
O4 - Startup: Stardock ObjectDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
Neutral
StarDock s Object Dock
O8 - Extra context menu item: Add to AMV Converter... - C:\Program Files\MP3 Player Utilities 4.04\AMVConverter\grab.html
Cette inscription Add to AMV Converter... a été identifiée comme étant non dangereuse.
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
Cette inscription E&xporter vers Microsoft Excel a été identifiée comme étant non dangereuse.
O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 4.04\MediaManager\grab.html
Cette inscription MediaManager tool grab multimedia file a été identifiée comme étant non dangereuse.
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
Safe
Cette inscription a été identifiée comme étant non dangereuse.
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
Cette inscription Console Java a été identifiée comme étant non dangereuse.
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
Cette inscription Recherche a été identifiée comme étant non dangereuse.
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
Very safe
Cette inscription Messenger a été identifiée comme étant non dangereuse.
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
Safe
Cette inscription Windows Messenger a été identifiée comme étant non dangereuse.
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
Neutral
Cette inscription a été identifiée comme étant non dangereuse.
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://venermesamis.spaces.live.com//PhotoUpload/MsnPUpld.cab
Cette inscription a été identifiée comme étant non dangereuse.
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab47946.cab
Neutral
Cette inscription a été identifiée comme étant non dangereuse.
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
Cette inscription a été identifiée comme étant non dangereuse.
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll
Cette inscription a été identifiée comme étant non dangereuse.
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
Cette inscription a été identifiée comme étant non dangereuse.
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
Cette inscription a été identifiée comme étant non dangereuse.
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
Very safe
Ce service (sched.exe) a été identifié comme étant légitime.
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
Safe
Ce service (avguard.exe) a été identifié comme étant légitime.
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
Very safe
Ce service (ATKKBService.exe) a été identifié comme étant légitime.
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
Very safe
Ce service (guard.exe) a été identifié comme étant légitime.
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
Very safe
Ce service (bdss.exe) a été identifié comme étant légitime. This entry was classified from our visitors as good.
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
Neutral
Ce service (CDAC11BA.EXE) a été identifié comme étant légitime.
O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
Neutral
Ce service (CDANTSRV.EXE) a été identifié comme étant légitime.
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
Safe
Ce service (GoogleUpdaterService.exe) a été identifié comme étant légitime.
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
Safe
Ce service (IDriverT.exe) a été identifié comme étant légitime. This entry was classified from our visitors as good.
O23 - Service: lxcg_device - Unknown owner - C:\WINDOWS\system32\lxcgcoms.exe
Very safe
Ce service (lxcgcoms.exe) a été identifié comme étant légitime. This entry was classified from our visitors as good.
O23 - Service: SQL Server (SQLEXPRESS) (MSSQL$SQLEXPRESS) - Unknown owner - c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS (file missing)
Safe
Ce service (sqlservr.exe) a été identifié comme étant légitime.
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
Very safe
Ce service (nvsvc32.exe) a été identifié comme étant légitime. This entry was classified from our visitors as good.
O23 - Service: repeater_service - Unknown owner - C:\Program Files\UltraVNC\repeater.exe" -service (file missing)
Ce service (repeater.exe) a été identifié comme étant légitime.
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
Neutral
Ce service (ServiceLayer.exe) a été identifié comme étant légitime.
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
Very safe
Ce service (vsmon.exe) a été identifié comme étant légitime. This entry was classified from our visitors as good.
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)
Very safe
Ce service (xcommsvr.exe) a été identifié comme étant légitime. This entry was classified from our visitors as good.
Merci bien si vous pouvez maider a faire le tri..
Logfile of HijackThis v1.99.1
Votre version semble être actuelle.
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Votre version semble être actuelle.
C:\WINDOWS\System32\smss.exe
Very safe
This entry was classified from our visitors as good.
C:\WINDOWS\system32\winlogon.exe
Very safe
This entry was classified from our visitors as good.
C:\WINDOWS\system32\services.exe
Safe
This entry was classified from our visitors as good.
C:\WINDOWS\system32\lsass.exe
Very safe
This entry was classified from our visitors as good.
C:\WINDOWS\system32\svchost.exe
Safe
This entry was classified from our visitors as good.
C:\WINDOWS\System32\svchost.exe
Very safe
This entry was classified from our visitors as good.
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
Very safe
This entry was classified from our visitors as good.
C:\WINDOWS\system32\spoolsv.exe
Safe
This entry was classified from our visitors as good.
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
Very safe
This entry was classified from our visitors as good.
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
Very safe
This entry was classified from our visitors as good.
C:\WINDOWS\ATKKBService.exe
Safe
Asus Keyboard Service
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
Safe
C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
Neutral
C:\WINDOWS\system32\inetsrv\inetinfo.exe
Safe
Used by MS Internet Information Server (IIS).
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
Neutral
Machine Debug Manager. Used by developers.
C:\WINDOWS\Explorer.EXE
Very safe
This entry was classified from our visitors as good.
C:\WINDOWS\system32\ctfmon.exe
Very safe
This entry was classified from our visitors as good.
C:\WINDOWS\system32\nvsvc32.exe
Very safe
Non dangereux, mais tout de même superflu.
This entry was classified from our visitors as good.
C:\Program Files\UltraVNC\repeater.exe
UltraVNC Remote Access
C:\WINDOWS\System32\tcpsvcs.exe
Safe
TCP/IP Services
C:\WINDOWS\System32\snmp.exe
Safe
C:\WINDOWS\System32\svchost.exe
Very safe
This entry was classified from our visitors as good.
C:\WINDOWS\system32\MsPMSPSv.exe
Neutral
Helper service installed by Windows Media Player 7.
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
Very safe
BitDefender
C:\Program Files\Analog Devices\Core\smax4pnp.exe
Very safe
This entry was classified from our visitors as good.
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
Very safe
Soundkartentreiber
C:\Program Files\Lexmark 2300 Series\lxcgmon.exe
Very safe
This entry was classified from our visitors as good.
C:\Program Files\Lexmark 2300 Series\ezprint.exe
Very safe
Lexmark Printer related
C:\WINDOWS\system32\rundll32.exe
Neutral
RUNDLL32 is the Microsoft Windows program that loads DLLs into memory so that they can be used by specific programs or by Windows.
C:\Program Files\D-Tools\daemon.exe
Very safe
Creates Virtual Drives
C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
Safe
Java Runtime
C:\WINDOWS\system32\RunDLL32.exe
Very safe
RUNDLL32 is the Microsoft Windows program that loads DLLs into memory so that they can be used by specific programs or by Windows.
C:\WINDOWS\System32\svchost.exe
Very safe
This entry was classified from our visitors as good.
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
Neutral
Checks for updates for RealPlayer
C:\WINDOWS\system32\lxcgcoms.exe
Safe
This entry was classified from our visitors as good.
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
Very safe
This entry was classified from our visitors as good.
C:\Program Files\Winamp2\winampa.exe
C:\KMaestro\Key_f.EXE
Tâche inconnue.
C:\Program Files\MSN Messenger\MsnMsgr.Exe
Safe
This entry was classified from our visitors as good.
C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
Very safe
Eventuellement méchant! Selon notre base de données, ce processus s’exécute normalement dans c:\programme\stardock\objectdock\! Vérifiez si vous connaissez ce processus et arrangez un contrôle antivirus si nécessaire. This entry was classified from our visitors as good.
C:\Program Files\MSN Messenger\usnsvc.exe
Very safe
This entry was classified from our visitors as good.
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
Very safe
BitDefender
c:\progra~1\softwin\bitdef~1\bdmcon.exe
BitDefender
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
Safe
Part of AntiVir
C:\PROGRA~1\Netscape\Netscape\Netscp.exe
C:\Program Files\Satsuki Decoder Pack\mpc\mplayerc.exe
Safe
Eventuellement méchant! Selon notre base de données, ce processus s’exécute normalement dans c:\programme\media player classic\! Vérifiez si vous connaissez ce processus et arrangez un contrôle antivirus si nécessaire. Media Player Classic
C:\Program Files\Hijackthis Version Française\hijackthis vf.exe
Very safe
Tâche inconnue.
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
Very safe
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
Very safe
Ce site a été identifié comme étant non dangereux
N3 - Netscape 7: user_pref("browser.startup.homepage", "https://www.google.fr/?client=firefox-a&rls=org.mozilla:fr:official&gws_rd=ssl"); (C:\Documents and Settings\Inconu\Application Data\Mozilla\Profiles\default\y487v6xc.slt\prefs.js)
Ne pas effacer si vous connaissez ce site ! Normalement bon Il vaut mieux effacer les pages inconnues et les inscriptions provenant de Lop.Com.
N3 - Netscape 7: user_pref("browser.search.defaultengine", "engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CNetscap e_France.src"); (C:\Documents and Settings\Inconu\Application Data\Mozilla\Profiles\default\y487v6xc.slt\prefs.js)
Ne pas effacer si vous connaissez ce site ! Normalement bon Il vaut mieux effacer les pages inconnues et les inscriptions provenant de Lop.Com.
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
Very safe
This entry was classified from our visitors as good.
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
Safe
This entry was classified from our visitors as good.
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
Neutral
SUN Java
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
Neutral
Programme inconnu.
Inscription superflue (car sans effet) qui peut donc être effacée !
O4 - HKLM\..\Run: [JMB36X Configure] C:\WINDOWS\System32\JMRaidTool.exe boot
Safe
Gigabyte related
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
Safe
Programme inconnu. This entry was classified from our visitors as good.
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
Safe
This entry was classified from our visitors as good.
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
Safe
This entry was classified from our visitors as good.
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
Safe
This entry was classified from our visitors as good.
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
Neutral
SoundMax integrated sound. Required if you have custom settings for your sound, such as effects and environments
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
Very safe
System Tray icon for SoundMax integrated sound. Sound properties can be accessed through the Start Menu or Control Panel
O4 - HKLM\..\Run: [LXCGCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll,_RunDLLEntry@16
Safe
Programme inconnu. This entry was classified from our visitors as good.
O4 - HKLM\..\Run: [lxcgmon.exe] "C:\Program Files\Lexmark 2300 Series\lxcgmon.exe"
Safe
This entry was classified from our visitors as good.
O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark 2300 Series\ezprint.exe"
Lexmark printer related
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
Lexmark Fax Solutions
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
Safe
This entry was classified from our visitors as good.
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
Safe
This entry was classified from our visitors as good.
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
Neutral
Java von Sun
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
Very safe
This entry was classified from our visitors as good.
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
Neutral
Part of RealPlayer
O4 - HKLM\..\Run: [BootSkin Startup Jobs] "C:\PROGRA~1\Stardock\WINCUS~1\BootSkin\BootSkin.exe" /StartupJobs
WinCustomize BootSkin
O4 - HKLM\..\Run: [BDMCon] C:\PROGRA~1\Softwin\BITDEF~1\bdmcon.exe
Very safe
Either BitDefender or BullGuard antivirus
O4 - HKLM\..\Run: [BDNewsAgent] C:\Program Files\Softwin\BitDefender Free Edition\bdnagent.exe
BitDefender antivirus - updater
O4 - HKLM\..\Run: [KeyMaestro] C:\KMaestro\KMaestro.exe
Very safe
Multimedia keyboard manager. Required if you use the multimedia keys
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
Very safe
This entry was classified from our visitors as good.
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp2\winampa.exe
Loads the System Tray icon for the WinAmp media player. Can be used to mantain file associations so programs like QuickTime and RealPlayer don t take over as default player for various media types. Available via Start -> Programs
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
Neutral
Non dangereux, mais tout de même superflu.
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
Safe
Non dangereux, mais tout de même superflu. This entry was classified from our visitors as good.
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
Safe
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
Very safe
Non dangereux, mais tout de même superflu. Part of Microsoft's Input Message Editor (IME) for translating Japanese/Chinese text in IE
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
Safe
Non dangereux, mais tout de même superflu. Part of Microsoft's Input Message Editor (IME) for translating Japanese/Chinese text in IE
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
Very safe
Microsoft s MSN Messenger 6
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
Neutral
Office related
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
Safe
BitTorrent Startup
O4 - HKCU\..\Run: [Mozilla Quick Launch] "C:\Program Files\Netscape\Netscape\Netscp.exe" -turbo
Mozilla Quick Launch for Netscape
O4 - Startup: Stardock ObjectDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
Neutral
StarDock s Object Dock
O8 - Extra context menu item: Add to AMV Converter... - C:\Program Files\MP3 Player Utilities 4.04\AMVConverter\grab.html
Cette inscription Add to AMV Converter... a été identifiée comme étant non dangereuse.
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
Cette inscription E&xporter vers Microsoft Excel a été identifiée comme étant non dangereuse.
O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 4.04\MediaManager\grab.html
Cette inscription MediaManager tool grab multimedia file a été identifiée comme étant non dangereuse.
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
Safe
Cette inscription a été identifiée comme étant non dangereuse.
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
Cette inscription Console Java a été identifiée comme étant non dangereuse.
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
Cette inscription Recherche a été identifiée comme étant non dangereuse.
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
Very safe
Cette inscription Messenger a été identifiée comme étant non dangereuse.
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
Safe
Cette inscription Windows Messenger a été identifiée comme étant non dangereuse.
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
Neutral
Cette inscription a été identifiée comme étant non dangereuse.
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://venermesamis.spaces.live.com//PhotoUpload/MsnPUpld.cab
Cette inscription a été identifiée comme étant non dangereuse.
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab47946.cab
Neutral
Cette inscription a été identifiée comme étant non dangereuse.
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
Cette inscription a été identifiée comme étant non dangereuse.
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll
Cette inscription a été identifiée comme étant non dangereuse.
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
Cette inscription a été identifiée comme étant non dangereuse.
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
Cette inscription a été identifiée comme étant non dangereuse.
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
Very safe
Ce service (sched.exe) a été identifié comme étant légitime.
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
Safe
Ce service (avguard.exe) a été identifié comme étant légitime.
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
Very safe
Ce service (ATKKBService.exe) a été identifié comme étant légitime.
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
Very safe
Ce service (guard.exe) a été identifié comme étant légitime.
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
Very safe
Ce service (bdss.exe) a été identifié comme étant légitime. This entry was classified from our visitors as good.
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
Neutral
Ce service (CDAC11BA.EXE) a été identifié comme étant légitime.
O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
Neutral
Ce service (CDANTSRV.EXE) a été identifié comme étant légitime.
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
Safe
Ce service (GoogleUpdaterService.exe) a été identifié comme étant légitime.
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
Safe
Ce service (IDriverT.exe) a été identifié comme étant légitime. This entry was classified from our visitors as good.
O23 - Service: lxcg_device - Unknown owner - C:\WINDOWS\system32\lxcgcoms.exe
Very safe
Ce service (lxcgcoms.exe) a été identifié comme étant légitime. This entry was classified from our visitors as good.
O23 - Service: SQL Server (SQLEXPRESS) (MSSQL$SQLEXPRESS) - Unknown owner - c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS (file missing)
Safe
Ce service (sqlservr.exe) a été identifié comme étant légitime.
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
Very safe
Ce service (nvsvc32.exe) a été identifié comme étant légitime. This entry was classified from our visitors as good.
O23 - Service: repeater_service - Unknown owner - C:\Program Files\UltraVNC\repeater.exe" -service (file missing)
Ce service (repeater.exe) a été identifié comme étant légitime.
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
Neutral
Ce service (ServiceLayer.exe) a été identifié comme étant légitime.
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
Very safe
Ce service (vsmon.exe) a été identifié comme étant légitime. This entry was classified from our visitors as good.
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)
Very safe
Ce service (xcommsvr.exe) a été identifié comme étant légitime. This entry was classified from our visitors as good.
Merci bien si vous pouvez maider a faire le tri..
Vous n’avez pas trouvé la réponse que vous recherchez ?
Posez votre question
Personne peut m'aider a enlever ces fentre intenpestive ?et surtout quel ne reviennt plus !
MERCI !!!!!!!
MERCI !!!!!!!
excuse je vient d'arriver bon ba a premiere vue tu n'as rien de mechant mais eventuellement colle plutot le log qu'hijackthis t'as créé je regarderait ca des que possible mais sinon tu as combien d'antivirus en fonctionement sur ton pc????? j'ai vu un bitdefender et un antivir
et eventuellement passe un bon coup de ccleaner pour virer tes fichiers internet temporaires cookies et autres trucs du genre
Pardon pour le retard mais j'ai changer quelque truc et passer un coup de ccleanr voila le R. hijackthis
et oui javais 2 antivirus plus qu'un maintenant ...
This v1.99.1
Scan saved at 12:21:47, on 08/04/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\ATKKBService.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PSIService.exe
C:\Program Files\UltraVNC\repeater.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\Program Files\Lexmark 2300 Series\lxcgmon.exe
C:\Program Files\Lexmark 2300 Series\ezprint.exe
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\BlocPub\BlocPub.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
C:\KMaestro\Key_f.EXE
C:\WINDOWS\system32\lxcgcoms.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Java\jre1.5.0_10\bin\jucheck.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Winamp\winamp.exe
C:\WINDOWS\system32\RDSHOST.exe
C:\WINDOWS\system32\sessmgr.exe
C:\Program Files\Hijackthis Version Française\hijackthis vf.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [JMB36X Configure] C:\WINDOWS\System32\JMRaidTool.exe boot
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [LXCGCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [lxcgmon.exe] "C:\Program Files\Lexmark 2300 Series\lxcgmon.exe"
O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark 2300 Series\ezprint.exe"
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [BootSkin Startup Jobs] "C:\PROGRA~1\Stardock\WINCUS~1\BootSkin\BootSkin.exe" /StartupJobs
O4 - HKLM\..\Run: [KeyMaestro] C:\KMaestro\KMaestro.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [BlocPub] C:\Program Files\BlocPub\BlocPub.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - Startup: Stardock ObjectDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
O8 - Extra context menu item: Add to AMV Converter... - C:\Program Files\MP3 Player Utilities 4.04\AMVConverter\grab.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 4.04\MediaManager\grab.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://venermesamis.spaces.live.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab47946.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: lxcg_device - Unknown owner - C:\WINDOWS\system32\lxcgcoms.exe
O23 - Service: SQL Server (SQLEXPRESS) (MSSQL$SQLEXPRESS) - Unknown owner - c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: repeater_service - Unknown owner - C:\Program Files\UltraVNC\repeater.exe" -service (file missing)
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
et oui javais 2 antivirus plus qu'un maintenant ...
This v1.99.1
Scan saved at 12:21:47, on 08/04/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\ATKKBService.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\PSIService.exe
C:\Program Files\UltraVNC\repeater.exe
C:\WINDOWS\System32\tcpsvcs.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\Program Files\Lexmark 2300 Series\lxcgmon.exe
C:\Program Files\Lexmark 2300 Series\ezprint.exe
C:\Program Files\D-Tools\daemon.exe
C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\BlocPub\BlocPub.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
C:\KMaestro\Key_f.EXE
C:\WINDOWS\system32\lxcgcoms.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Java\jre1.5.0_10\bin\jucheck.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Winamp\winamp.exe
C:\WINDOWS\system32\RDSHOST.exe
C:\WINDOWS\system32\sessmgr.exe
C:\Program Files\Hijackthis Version Française\hijackthis vf.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [JMB36X Configure] C:\WINDOWS\System32\JMRaidTool.exe boot
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [LXCGCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCGtime.dll,_RunDLLEntry@16
O4 - HKLM\..\Run: [lxcgmon.exe] "C:\Program Files\Lexmark 2300 Series\lxcgmon.exe"
O4 - HKLM\..\Run: [EzPrint] "C:\Program Files\Lexmark 2300 Series\ezprint.exe"
O4 - HKLM\..\Run: [FaxCenterServer] "C:\Program Files\Lexmark Fax Solutions\fm3032.exe" /s
O4 - HKLM\..\Run: [DAEMON Tools-1033] "C:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [BootSkin Startup Jobs] "C:\PROGRA~1\Stardock\WINCUS~1\BootSkin\BootSkin.exe" /StartupJobs
O4 - HKLM\..\Run: [KeyMaestro] C:\KMaestro\KMaestro.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [BlocPub] C:\Program Files\BlocPub\BlocPub.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BitTorrent] "C:\Program Files\BitTorrent\bittorrent.exe" --force_start_minimized
O4 - Startup: Stardock ObjectDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
O8 - Extra context menu item: Add to AMV Converter... - C:\Program Files\MP3 Player Utilities 4.04\AMVConverter\grab.html
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 4.04\MediaManager\grab.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://venermesamis.spaces.live.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab47946.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: C-DillaSrv - C-Dilla Ltd - C:\WINDOWS\system32\DRIVERS\CDANTSRV.EXE
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: lxcg_device - Unknown owner - C:\WINDOWS\system32\lxcgcoms.exe
O23 - Service: SQL Server (SQLEXPRESS) (MSSQL$SQLEXPRESS) - Unknown owner - c:\Program Files\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe" -sSQLEXPRESS (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: ProtexisLicensing - Unknown owner - C:\WINDOWS\system32\PSIService.exe
O23 - Service: repeater_service - Unknown owner - C:\Program Files\UltraVNC\repeater.exe" -service (file missing)
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
