interpreter scan hijackthis

Question

bonjour
je crois que j'ai chopé quelque chose ;j'ai utilisé hijackthis mais je ne sais pas du tout l'interpreter;si quelqu'un veut bien m'aider merci


Logfile of HijackThis v1.99.1
Scan saved at 10:18:09, on 04/07/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16473)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\CA\SharedComponents\CA_LIC\lic98rmt.exe
C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
C:\Program Files\CA\eTrust Antivirus\InoRT.exe
C:\Program Files\CA\eTrust Antivirus\InoTask.exe
C:\Program Files\CA\SharedComponents\CA_LIC\LogWatNT.exe
C:\Program Files\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\sqlservr.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Pinnacle\Shared Files\Programs\MediaServer\PMSHost.exe
C:\Documents and Settings\ joelle\Mes documents\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://actus.sfr.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.ca/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://actus.sfr.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://home.sweetim.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = 
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [Realtime Monitor] C:\PROGRA~1\CA\ETRUST~1\realmon.exe -s
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\Program Files\IncrediMail\bin\resources\WebMenuImg.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/7/1540/52/20061205/qtinstall.info.apple.com/qtactivex/qtplugin.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {5C051655-FCD5-4969-9182-770EA5AA5565} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/SolitaireShowdown.cab56986.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {6E5E167B-1566-4316-B27F-0DDAB3484CF7} (Image Uploader Control) - http://www.extrafilm.fr/NET/Import/ImageUploader4.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {C45B1500-7B63-47C2-AB25-C28CB46AFDEE} (MediaBar) - http://sib1.od2.com/common/musicmanager/installation/MusicManagerPlugin.CAB
O16 - DPF: {CE3409C4-9E26-4F8E-83E4-778498F9E7B4} (PB_Uploader Class) - https://www.photobox.fr/?channel=1005
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~3\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~3\MSGRAP~1.DLL
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: CA License Client (CA_LIC_CLNT) - Computer Associates International Inc. - C:\Program Files\CA\SharedComponents\CA_LIC\lic98rmt.exe
O23 - Service: CA License Server (CA_LIC_SRVR) - Computer Associates International Inc. - C:\Program Files\CA\SharedComponents\CA_LIC\lic98rmtd.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Serveur Admin eTrust Antivirus (InoNmSrv) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoNmSrv.exe
O23 - Service: Serveur RPC eTrust Antivirus (InoRPC) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRpc.exe
O23 - Service: Serveur eTrust Antivirus Temps réel (InoRT) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoRT.exe
O23 - Service: Serveur de jobs eTrust Antivirus (InoTask) - Computer Associates International, Inc. - C:\Program Files\CA\eTrust Antivirus\InoTask.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Event Log Watch (LogWatch) - Computer Associates - C:\Program Files\CA\SharedComponents\CA_LIC\LogWatNT.exe
O23 - Service: Pinnacle Systems Media Service (PinnacleSys.MediaServer) - Pinnacle Systems - C:\Program Files\Pinnacle\Shared Files\Programs\MediaServer\PMSHost.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - %ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini (file missing)
O23 - Service: SmartLinkService (SLService) -   - C:\WINDOWS\SYSTEM32\slserv.exe

slydjins · Answer

slt 
avant de poser un rapport hijackthis 
pourai tu expliquer plus en detail quel est ton probleme 
est donne dabord des information comme logiciel de securiter utiliser et on t-il detecter quel que chose
est dans ce cas on peut voire pour faire quelque chose
...

goliotte · Answer

salut
disons que  je trouve qu'internet es plus lent et lorsque j'utilise ad aware j'ai souvent des objet critique pas importamt mais bon d'ordinaire j'ai rien c'est peut etre avec en reinstallant messenger?si tu peux donner ton avis!merci


Ad-Aware SE Build 1.06r1
Logfile Created on:jeudi 5 juillet 2007 11:45:30
Created with Ad-Aware SE Personal, free for private use.
Using definitions file:SE1R178 29.06.2007
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

References detected during the scan:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
MRU List(TAC index:0):17 total references
Tracking Cookie(TAC index:3):6 total references
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Ad-Aware SE Settings
===========================
Set : Search for negligible risk entries
Set : Safe mode (always request confirmation)
Set : Scan active processes
Set : Scan registry
Set : Deep-scan registry
Set : Scan my IE Favorites for banned URLs
Set : Scan my Hosts file

Extended Ad-Aware SE Settings
===========================
Set : Unload recognized processes & modules during scan
Set : Scan registry for all users instead of current user only
Set : Always try to unload modules before deletion
Set : During removal, unload Explorer and IE if necessary
Set : Let Windows remove files in use at next reboot
Set : Delete quarantined objects after restoring
Set : Include basic Ad-Aware settings in log file
Set : Include additional Ad-Aware settings in log file
Set : Include reference summary in log file
Set : Include alternate data stream details in log file
Set : Play sound at scan completion if scan locates critical objects


05-07-2007 11:45:30 - Scan started. (Smart mode)

Listing running processes
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

#:1 [smss.exe]
    FilePath           : \SystemRoot\System32\
    ProcessID          : 616
    ThreadCreationTime : 05-07-2007 08:04:41
    BasePriority       : Normal


#:2 [csrss.exe]
    FilePath           : \??\C:\WINDOWS\system32\
    ProcessID          : 692
    ThreadCreationTime : 05-07-2007 08:04:45
    BasePriority       : Normal


#:3 [winlogon.exe]
    FilePath           : \??\C:\WINDOWS\system32\
    ProcessID          : 716
    ThreadCreationTime : 05-07-2007 08:04:46
    BasePriority       : High


#:4 [services.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 760
    ThreadCreationTime : 05-07-2007 08:04:46
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Système d'exploitation Microsoft® Windows®
    CompanyName        : Microsoft Corporation
    FileDescription    : Applications Services et Contrôleur
    InternalName       : services.exe
    LegalCopyright     : © Microsoft Corporation. Tous droits réservés.
    OriginalFilename   : services.exe

#:5 [lsass.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 772
    ThreadCreationTime : 05-07-2007 08:04:46
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : LSA Shell (Export Version)
    InternalName       : lsass.exe
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : lsass.exe

#:6 [ati2evxx.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 944
    ThreadCreationTime : 05-07-2007 08:04:47
    BasePriority       : Normal
    FileVersion        : 6.14.10.4110
    ProductVersion     : 6.14.10.4110.03
    ProductName        : ATI External Event Utility for WindowsNT and Windows9X
    CompanyName        : ATI Technologies Inc.
    FileDescription    : ATI External Event Utility EXE Module
    InternalName       : ATI2EVXX.EXE
    LegalCopyright     : Copyright © 1999-2004 ATI Technologies Inc.
    OriginalFilename   : ATI2EVXX.EXE

#:7 [svchost.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 956
    ThreadCreationTime : 05-07-2007 08:04:47
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : Generic Host Process for Win32 Services
    InternalName       : svchost.exe
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : svchost.exe

#:8 [svchost.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 1028
    ThreadCreationTime : 05-07-2007 08:04:47
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : Generic Host Process for Win32 Services
    InternalName       : svchost.exe
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : svchost.exe

#:9 [svchost.exe]
    FilePath           : C:\WINDOWS\System32\
    ProcessID          : 1120
    ThreadCreationTime : 05-07-2007 08:04:47
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : Generic Host Process for Win32 Services
    InternalName       : svchost.exe
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : svchost.exe

#:10 [svchost.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 1172
    ThreadCreationTime : 05-07-2007 08:04:47
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : Generic Host Process for Win32 Services
    InternalName       : svchost.exe
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : svchost.exe

#:11 [svchost.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 1236
    ThreadCreationTime : 05-07-2007 08:04:47
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : Generic Host Process for Win32 Services
    InternalName       : svchost.exe
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : svchost.exe

#:12 [spoolsv.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 1492
    ThreadCreationTime : 05-07-2007 08:04:48
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519)
    ProductVersion     : 5.1.2600.2696
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : Spooler SubSystem App
    InternalName       : spoolsv.exe
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : spoolsv.exe

#:13 [lic98rmt.exe]
    FilePath           : C:\Program Files\CA\SharedComponents\CA_LIC\
    ProcessID          : 1680
    ThreadCreationTime : 05-07-2007 08:05:10
    BasePriority       : Normal
    FileVersion        : 0, 1, 0, 19
    ProductName        : Lic98
    CompanyName        : Computer Associates International Inc.
    FileDescription    : CA License Management Agent
    InternalName       : lic98rmt
    LegalCopyright     : Copyright © 2003
    OriginalFilename   : lic98rmt.exe

#:14 [inorpc.exe]
    FilePath           : C:\Program Files\CA\eTrust Antivirus\
    ProcessID          : 1804
    ThreadCreationTime : 05-07-2007 08:05:10
    BasePriority       : Normal
    FileVersion        : 7.1.194.0
    ProductVersion     : 7.1.194.0
    ProductName        : eTrust Antivirus
    CompanyName        : Computer Associates International, Inc.
    InternalName       : InoRpc.exe
    LegalCopyright     : Copyright 2004 Computer Associates International, Inc.
    LegalTrademarks    : eTrust (TM) is a trademark of Computer Associates Int'l, Inc.
    OriginalFilename   : InoRpc.exe
    Comments           : eTrust Antivirus English Version

#:15 [inort.exe]
    FilePath           : C:\Program Files\CA\eTrust Antivirus\
    ProcessID          : 1820
    ThreadCreationTime : 05-07-2007 08:05:10
    BasePriority       : Normal
    FileVersion        : 7.1.194.0
    ProductVersion     : 7.1.194.0
    ProductName        : eTrust Antivirus
    CompanyName        : Computer Associates International, Inc.
    InternalName       : InoRT.dll
    LegalCopyright     : Copyright 2004 Computer Associates International, Inc.
    LegalTrademarks    : eTrust (TM) is a trademark of Computer Associates Int'l, Inc.
    OriginalFilename   : InoRT.dll
    Comments           : eTrust Antivirus English Version

#:16 [inotask.exe]
    FilePath           : C:\Program Files\CA\eTrust Antivirus\
    ProcessID          : 1860
    ThreadCreationTime : 05-07-2007 08:05:10
    BasePriority       : Normal
    FileVersion        : 7.1.194.0
    ProductVersion     : 7.1.194.0
    ProductName        : eTrust Antivirus
    CompanyName        : Computer Associates International, Inc.
    InternalName       : InoTask.exe
    LegalCopyright     : Copyright 2004 Computer Associates International, Inc.
    LegalTrademarks    : eTrust (TM) is a trademark of Computer Associates Int'l, Inc.
    OriginalFilename   : InoTask.exe
    Comments           : eTrust Antivirus English Version

#:17 [logwatnt.exe]
    FilePath           : C:\Program Files\CA\SharedComponents\CA_LIC\
    ProcessID          : 2028
    ThreadCreationTime : 05-07-2007 08:05:10
    BasePriority       : Normal
    FileVersion        : 1.52
    ProductVersion     : 1, 0, 0, 1
    ProductName        : Computer Associates LogWatNT
    CompanyName        : Computer Associates
    FileDescription    : LogWatNT
    InternalName       : LogWatNT
    LegalCopyright     : Copyright © 2002
    OriginalFilename   : LogWatNT.exe

#:18 [sqlservr.exe]
    FilePath           : C:\Program Files\Microsoft SQL Server\MSSQL$PINNACLESYS\Binn\
    ProcessID          : 180
    ThreadCreationTime : 05-07-2007 08:05:11
    BasePriority       : Normal
    FileVersion        : 2000.080.0760.00
    ProductVersion     : 8.00.760
    ProductName        : Microsoft SQL Server
    CompanyName        : Microsoft Corporation
    FileDescription    : SQL Server Windows NT
    InternalName       : SQLSERVR
    LegalCopyright     : © 1988-2003 Microsoft Corp. All rights reserved.
    LegalTrademarks    : Microsoft® is a registered trademark of Microsoft Corporation. Windows(TM) is a trademark of Microsoft Corporation
    OriginalFilename   : SQLSERVR.EXE
    Comments           : NT INTEL X86

#:19 [svchost.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 316
    ThreadCreationTime : 05-07-2007 08:05:14
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : Generic Host Process for Win32 Services
    InternalName       : svchost.exe
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : svchost.exe

#:20 [pmshost.exe]
    FilePath           : C:\Program Files\Pinnacle\Shared Files\Programs\MediaServer\
    ProcessID          : 852
    ThreadCreationTime : 05-07-2007 08:05:15
    BasePriority       : Normal


#:21 [alg.exe]
    FilePath           : C:\WINDOWS\System32\
    ProcessID          : 1584
    ThreadCreationTime : 05-07-2007 08:05:18
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : Application Layer Gateway Service
    InternalName       : ALG.exe
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : ALG.exe

#:22 [ati2evxx.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 1952
    ThreadCreationTime : 05-07-2007 08:05:31
    BasePriority       : Normal
    FileVersion        : 6.14.10.4110
    ProductVersion     : 6.14.10.4110.03
    ProductName        : ATI External Event Utility for WindowsNT and Windows9X
    CompanyName        : ATI Technologies Inc.
    FileDescription    : ATI External Event Utility EXE Module
    InternalName       : ATI2EVXX.EXE
    LegalCopyright     : Copyright © 1999-2004 ATI Technologies Inc.
    OriginalFilename   : ATI2EVXX.EXE

#:23 [explorer.exe]
    FilePath           : C:\WINDOWS\
    ProcessID          : 2108
    ThreadCreationTime : 05-07-2007 08:05:31
    BasePriority       : Normal
    FileVersion        : 6.00.2900.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 6.00.2900.2180
    ProductName        : Système d'exploitation Microsoft® Windows®
    CompanyName        : Microsoft Corporation
    FileDescription    : Explorateur Windows
    InternalName       : explorer
    LegalCopyright     : © Microsoft Corporation. Tous droits réservés.
    OriginalFilename   : EXPLORER.EXE

#:24 [realmon.exe]
    FilePath           : C:\PROGRA~1\CA\ETRUST~1\
    ProcessID          : 2440
    ThreadCreationTime : 05-07-2007 08:05:34
    BasePriority       : Normal
    FileVersion        : 7.1.194.0
    ProductVersion     : 7.1.194.0
    ProductName        : eTrust Antivirus
    CompanyName        : Computer Associates International, Inc.
    InternalName       : Realmon.exe
    LegalCopyright     : Copyright 2004 Computer Associates International, Inc.
    LegalTrademarks    : eTrust (TM) is a trademark of Computer Associates Int'l, Inc.
    OriginalFilename   : Realmon.exe
    Comments           : eTrust Antivirus English Version

#:25 [lvcomsx.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 2448
    ThreadCreationTime : 05-07-2007 08:05:34
    BasePriority       : Normal
    FileVersion        : 8.4.7.1036
    ProductVersion     : 8.4.7.1036
    ProductName        : Logitech QuickCam
    CompanyName        : Logitech Inc.
    FileDescription    : LVCom Server
    InternalName       : LVComS.exe
    LegalCopyright     : (c) 1996-2005 Logitech.  All rights reserved.
    OriginalFilename   : LVComS.exe

#:26 [ctfmon.exe]
    FilePath           : C:\WINDOWS\system32\
    ProcessID          : 2508
    ThreadCreationTime : 05-07-2007 08:05:34
    BasePriority       : Normal
    FileVersion        : 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158)
    ProductVersion     : 5.1.2600.2180
    ProductName        : Microsoft® Windows® Operating System
    CompanyName        : Microsoft Corporation
    FileDescription    : CTF Loader
    InternalName       : CTFMON
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : CTFMON.EXE

#:27 [googletoolbarnotifier.exe]
    FilePath           : C:\Program Files\Google\GoogleToolbarNotifier\
    ProcessID          : 2528
    ThreadCreationTime : 05-07-2007 08:05:35
    BasePriority       : Normal
    FileVersion        : 2, 0, 301, 1654
    ProductVersion     : 2, 0, 301, 1654
    ProductName        : GoogleToolbarNotifier
    CompanyName        : Google Inc.
    FileDescription    : GoogleToolbarNotifier
    LegalCopyright     : Copyright © 2005-2007
    OriginalFilename   : GoogleToolbarNotifier.exe

#:28 [usnsvc.exe]
    FilePath           : C:\Program Files\MSN Messenger\
    ProcessID          : 3040
    ThreadCreationTime : 05-07-2007 08:40:11
    BasePriority       : Normal
    FileVersion        : 8.1.0178.00
    ProductVersion     : 8.1.0178
    ProductName        : Messenger
    CompanyName        : Microsoft Corporation
    FileDescription    : Messenger Sharing USN Journal Reader Service
    InternalName       : usnsvc.exe
    LegalCopyright     : Copyright (c) Microsoft Corporation.  All rights reserved.
    OriginalFilename   : usnsvc.exe

#:29 [msnmsgr.exe]
    FilePath           : C:\Program Files\MSN Messenger\
    ProcessID          : 4056
    ThreadCreationTime : 05-07-2007 09:26:18
    BasePriority       : Normal
    FileVersion        : 8.1.0178.00
    ProductVersion     : 8.1.0178
    ProductName        : Messenger
    CompanyName        : Microsoft Corporation
    FileDescription    : Messenger
    InternalName       : msnmsgr.exe
    LegalCopyright     : Copyright (c) Microsoft Corporation.  All rights reserved.
    OriginalFilename   : msnmsgr.exe

#:30 [iexplore.exe]
    FilePath           : C:\Program Files\Internet Explorer\
    ProcessID          : 2064
    ThreadCreationTime : 05-07-2007 09:36:28
    BasePriority       : Normal
    FileVersion        : 7.00.6000.16473 (vista_gdr.070420-1500)
    ProductVersion     : 7.00.6000.16473
    ProductName        : Windows® Internet Explorer
    CompanyName        : Microsoft Corporation
    FileDescription    : Internet Explorer
    InternalName       : iexplore
    LegalCopyright     : © Microsoft Corporation. All rights reserved.
    OriginalFilename   : IEXPLORE.EXE

#:31 [ad-aware.exe]
    FilePath           : C:\Program Files\Lavasoft\Ad-Aware SE Personal\
    ProcessID          : 576
    ThreadCreationTime : 05-07-2007 09:45:22
    BasePriority       : Normal
    FileVersion        : 6.2.0.236
    ProductVersion     : SE 106
    ProductName        : Lavasoft Ad-Aware SE
    CompanyName        : Lavasoft Sweden
    FileDescription    : Ad-Aware SE Core application
    InternalName       : Ad-Aware.exe
    LegalCopyright     : Copyright © Lavasoft AB Sweden
    OriginalFilename   : Ad-Aware.exe
    Comments           : All Rights Reserved

Memory scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 0


Started registry scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Registry Scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 0


Started deep registry scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Deep registry scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 0


Started Tracking Cookie scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»


 Tracking Cookie Object Recognized!
    Type               : IECache Entry
    Data               : joelle@overture[1].txt
    TAC Rating         : 3
    Category           : Data Miner
    Comment            : Hits:1
    Value              : Cookie: joelle@overture.com/
    Expires            : 02-07-2017 09:16:16
    LastSync           : Hits:1
    UseCount           : 0
    Hits               : 1

 Tracking Cookie Object Recognized!
    Type               : IECache Entry
    Data               : joelle@estat[1].txt
    TAC Rating         : 3
    Category           : Data Miner
    Comment            : Hits:2
    Value              : Cookie: joelle@estat.com/
    Expires            : 02-07-2017 09:08:42
    LastSync           : Hits:2
    UseCount           : 0
    Hits               : 2

 Tracking Cookie Object Recognized!
    Type               : IECache Entry
    Data               : _joelle@weborama[2].txt
    TAC Rating         : 3
    Category           : Data Miner
    Comment            : Hits:3
    Value              : Cookie joelle@weborama.fr/
    Expires            : 04-07-2009 09:14:58
    LastSync           : Hits:3
    UseCount           : 0
    Hits               : 3

 Tracking Cookie Object Recognized!
    Type               : IECache Entry
    Data               : joelle@247realmedia[1].txt
    TAC Rating         : 3
    Category           : Data Miner
    Comment            : Hits:3
    Value              : Cookie:a joelle@247realmedia.com/
    Expires            : 01-01-2021 02:00:00
    LastSync           : Hits:3
    UseCount           : 0
    Hits               : 3

 Tracking Cookie Object Recognized!
    Type               : IECache Entry
    Data               : joelle@msnportal.112.2o7[1].txt
    TAC Rating         : 3
    Category           : Data Miner
    Comment            : Hits:1
    Value              : Cookiejoelle@msnportal.112.2o7.net/
    Expires            : 03-07-2012 11:31:34
    LastSync           : Hits:1
    UseCount           : 0
    Hits               : 1

 Tracking Cookie Object Recognized!
    Type               : IECache Entry
    Data               : joelle@www.smartadserver[1].txt
    TAC Rating         : 3
    Category           : Data Miner
    Comment            : Hits:9
    Value              : Cookie:joelle@www.smartadserver.com/
    Expires            : 30-06-2027 11:33:16
    LastSync           : Hits:9
    UseCount           : 0
    Hits               : 9

Tracking cookie scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 6
Objects found so far: 6



Deep scanning and examining files...
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Disk Scan Result for C:\WINDOWS
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 6

Disk Scan Result for C:\WINDOWS\system32
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 6

Disk Scan Result for C:\DOCUME~1\AUTINJ~1\LOCALS~1\Temp\
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 6


Scanning Hosts file......
Hosts file location:"C:\WINDOWS\system32\drivers\etc\hosts".
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Hosts file scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
1 entries scanned.
New critical objects:0
Objects found so far: 6



 MRU List Object Recognized!
    Location:          : C:\Documents and Settings\autin joelleecent
    Description        : list of recently opened documents


 MRU List Object Recognized!
    Location:          : software\microsoft\direct3d\mostrecentapplication
    Description        : most recent application to use microsoft direct3d


 MRU List Object Recognized!
    Location:          : software\microsoft\direct3d\mostrecentapplication
    Description        : most recent application to use microsoft direct X


 MRU List Object Recognized!
    Location:          : software\microsoft\directdraw\mostrecentapplication
    Description        : most recent application to use microsoft directdraw


 MRU List Object Recognized!
    Location:          : S-1-5-21-1644491937-1960408961-839522115-1005\software\microsoft\internet explorer
    Description        : last download directory used in microsoft internet explorer


 MRU List Object Recognized!
    Location:          : S-1-5-21-1644491937-1960408961-839522115-1008\software\microsoft\internet explorer
    Description        : last download directory used in microsoft internet explorer


 MRU List Object Recognized!
    Location:          : S-1-5-21-1644491937-1960408961-839522115-1005\software\microsoft\internet explorer	ypedurls
    Description        : list of recently entered addresses in microsoft internet explorer


 MRU List Object Recognized!
    Location:          : S-1-5-21-1644491937-1960408961-839522115-1005\software\microsoft\mediaplayer\playerecentfilelist
    Description        : list of recently used files in microsoft windows media player


 MRU List Object Recognized!
    Location:          : S-1-5-21-1644491937-1960408961-839522115-1008\software\microsoft\mediaplayer\playerecentfilelist
    Description        : list of recently used files in microsoft windows media player


 MRU List Object Recognized!
    Location:          : S-1-5-21-1644491937-1960408961-839522115-1005\software\microsoft\windows\currentversion\explorer\comdlg32\lastvisitedmru
    Description        : list of recent programs opened


 MRU List Object Recognized!
    Location:          : S-1-5-21-1644491937-1960408961-839522115-1008\software\microsoft\windows\currentversion\explorer\comdlg32\lastvisitedmru
    Description        : list of recent programs opened


 MRU List Object Recognized!
    Location:          : S-1-5-21-1644491937-1960408961-839522115-1005\software\microsoft\windows\currentversion\explorer\comdlg32\opensavemru
    Description        : list of recently saved files, stored according to file extension


 MRU List Object Recognized!
    Location:          : S-1-5-21-1644491937-1960408961-839522115-1008\software\microsoft\windows\currentversion\explorer\comdlg32\opensavemru
    Description        : list of recently saved files, stored according to file extension


 MRU List Object Recognized!
    Location:          : S-1-5-21-1644491937-1960408961-839522115-1005\software\microsoft\windows\currentversion\explorerecentdocs
    Description        : list of recent documents opened


 MRU List Object Recognized!
    Location:          : S-1-5-21-1644491937-1960408961-839522115-1008\software\microsoft\windows\currentversion\explorerecentdocs
    Description        : list of recent documents opened


 MRU List Object Recognized!
    Location:          : S-1-5-21-1644491937-1960408961-839522115-1005\software\microsoft\windows media\wmsdk\general
    Description        : windows media sdk 


 MRU List Object Recognized!
    Location:          : S-1-5-21-1644491937-1960408961-839522115-1008\software\microsoft\windows media\wmsdk\general
    Description        : windows media sdk 



Performing conditional scans...
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»

Conditional scan result:
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
New critical objects: 0
Objects found so far: 23

11:47:12 Scan Complete

Summary Of This Scan
»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»»
Total scanning time:00:01:42.203
Objects scanned:119752
Objects identified:6
Objects ignored:0
New critical objects:6

slydjins · Answer

re

deja avec hijackthis il faudrait que tu fix les lignes suivantes



O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)  
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing) 
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - http://a1540.g.akamai.net/

ensuite utilise ccleaner pour donner un bon coup de nettoyage 

*Télécharge et installe CCleaner (n'installe pas la barre d'outil Yahoo) 
---> http://www.infos-du-net.com/telecharger/CCleaner,0301-1039.html 

- Dans la colonne de gauche clic sur "erreurs" coches toutes les cases, puis clic en bas sur "chercher des erreurs" une fois terminé, clic sur "reparer les erreurs" et tu auras un message pour sauvegarder ta base de registre tu clic "oui" puis tu recommences jusqu'a ce qu'il te trouve plus d'erreurs. 
Les sauvegardes que tu aura faites, tu pourras les supprimer si ton ordinateur n'a plus de problémes. 

- Relance Ccleaner, vas dans l'onglet "nettoyeur" présent sur la gauche, decoches la derniere case (Avancé si elle est cochée) puis clic sur "lancer le nettoyage" 

Si tu as besoin d'aide avec Ccleaner, regarde ce tutoriel : 
http://redir.fr/gmll 

et reposte un rapport hijackthis ici
j'attend ta reponse 
...

Interpreter scan hijackthis

3 réponses

Discussions similaires

Newsletters