rapport HIJACK Fermé

Question

Bonjour à toutes et à tous,
Ci-joint un rapport HIJACK,marci de le décrypter et de m'informer s'il-y-a lieu des manips à executer.
Par avance merci
Cordialement


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:36:07, on 04/09/2007
Platform: Windows Vista  (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)
Boot mode: Normal

Running processes:
C:\Windows\system32	askeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\ASUS\ATK Media\DMedia.exe
C:\Windows\ASScrPro.exe
C:\Program Files\OrangeHSS\Systray\SystrayApp.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\Common Files\Real\Update_OBealsched.exe
C:\Program Files\Goto Software\Vade Retro\Vaderetro_Oe.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Windows\System32undll32.exe
C:\Windows\ehome\ehmsas.exe
C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\AlertModule\10\AlertModule.exe
C:\Windows\system32	askeng.exe
C:\Program Files\ASUS\ASUS Live Update\ALU.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://us.rd.yahoo.com/clientapps/AutoSearch/SearchUrl/YSetSearch/*https://fr.yahoo.com/?p=us
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\OrangeHSS\SearchURLHook\SearchPageURL.dll
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32
vsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMEDIA.EXE
O4 - HKLM\..\Run: [ASUS Screen Saver Protector] C:\Windows\ASScrPro.exe
O4 - HKLM\..\Run: [PowerForPhone] C:\Program Files\PowerForPhone\PowerForPhone.exe
O4 - HKLM\..\Run: [SystrayORAHSS] "C:\Program Files\OrangeHSS\Systray\SystrayApp.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OBealsched.exe"  -osboot
O4 - HKLM\..\Run: [VadeRetro Outlook] "C:\PROGRA~1\GOTOSO~1\VADERE~1\VrMoRegister.exe -s"
O4 - HKLM\..\Run: [VadeRetro Outlook Express & Windows Mail] "C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_Oe.exe"
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe (User 'Default user')
O4 - Startup: CD-MENU.LNK = E:\AutoMenu.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Readereader_sl.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Lancement rapide de Microsoft Office OneNote 2003.lnk = C:\Program Files\Microsoft Office\OFFICE11\ONENOTEM.EXE
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O13 - Gopher Prefix: 
O16 - DPF: {04CB5B64-5915-4629-B869-8945CEBADD21} (Module de délivrance de certificat MINEFI) - https://static.impots.gouv.fr/abos/static/securite/certdgi1.cab
O16 - DPF: {3E82BB3F-ABE4-458D-9281-0187286A4E51} (VoxsyncCtrl Class) - https://login.orange.fr/captcha?return_url=https%3A%2F%2Fmescontacts.orange.fr
O16 - DPF: {AB86CE53-AC9F-449F-9399-D8ABCA09EC09} (Get_ActiveX Control) - https://h17000.www1.hp.com/ewfrf-JAVA/Secure/HPGetDownloadManager.ocx
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: ASLDR Service (ASLDRService) - Unknown owner - C:\Program Files\ATK Hotkey\ASLDRSrv.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\3\FTRTSVC.exe
O23 - Service: spmgr - Unknown owner - C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe
O23 - Service: Syntek AVStream USB2.0 WebCam Service (StkSSrv) - Syntek America Inc. - C:\Windows\System32\StkCSrv.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

NOEL34 · Answer

Bonjour,

J'ai passé un coup de CWSHREDDER voila le résultat,quequ'un peût-il me dire si c'est OK?

Merci

 **** Run Keys ****

RUN: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide 
RUN: [NvSvc] RUNDLL32.EXE C:\Windows\system32
vsvc.dll,nvsvcStart 
RUN: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup 
RUN: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit 
RUN: [RtHDVCpl] RtHDVCpl.exe 
RUN: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe 
RUN: [ATKMEDIA] C:\Program Files\ASUS\ATK Media\DMEDIA.EXE 
RUN: [ASUS Screen Saver Protector] C:\Windows\ASScrPro.exe 
RUN: [PowerForPhone] C:\Program Files\PowerForPhone\PowerForPhone.exe 
RUN: [SystrayORAHSS] "C:\Program Files\OrangeHSS\Systray\SystrayApp.exe" 
RUN: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe 
RUN: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe 
RUN: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" 
RUN: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OBealsched.exe"  -osboot 
RUN: [VadeRetro Outlook] "C:\PROGRA~1\GOTOSO~1\VADERE~1\VrMoRegister.exe -s" 
RUN: [VadeRetro Outlook Express & Windows Mail] "C:\PROGRA~1\GOTOSO~1\VADERE~1\Vaderetro_Oe.exe" 
RUN: [ehTray.exe] C:\Windows\ehome\ehTray.exe 
RUN: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background 


 **** Browser Helper Objects ****

BHO: [AcroIEHlprObj Class] C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll 
BHO: [SSVHelper Class] C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll 


 **** IE Toolbars ****



 **** IE Extensions ****

IEExt: []  
IEExt: [Recherche]  


 **** Hosts File Entries ****

HOSTS: 127.0.0.1       localhost 
HOSTS: ::1             localhost 
HOSTS: ::1             localhost 


 **** IE Settings ****

Default Page: https://www.asus.com/fr/ 
Default Search: https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF 
Local Page: C:\Windows\system32\blank.htm 
Search Bar: http://www.google.com/toolbar/ie8/sidebar.html 
Search Page: https://www.google.com/?gws_rd=ssl 


 **** IE Context Menu (Right click) ****



 **** Layered Service Providers ****

LSP: MSAFD Tcpip [TCP/IP] 
LSP: MSAFD Tcpip [UDP/IP] 
LSP: MSAFD Tcpip [TCP/IPv6] 
LSP: MSAFD Tcpip [UDP/IPv6] 
LSP: Fournisseur de services RSVP TCPv6 
LSP: Fournisseur de services RSVP TCP 
LSP: Fournisseur de services RSVP UDPv6 
LSP: Fournisseur de services RSVP UDP 
LSP: MSAFD RfComm [Bluetooth] 
LSP: MSAFD Irda [IrDA] 
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{B2F02DF1-7AF0-4448-A530-37CCF5F6FE40}] SEQPACKET 0 
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{B2F02DF1-7AF0-4448-A530-37CCF5F6FE40}] DATAGRAM 0 
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{C27F4D54-F4C4-4066-A43C-0C720F6B70DD}] SEQPACKET 6 
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip_{C27F4D54-F4C4-4066-A43C-0C720F6B70DD}] DATAGRAM 6 
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{B2F02DF1-7AF0-4448-A530-37CCF5F6FE40}] SEQPACKET 1 
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{B2F02DF1-7AF0-4448-A530-37CCF5F6FE40}] DATAGRAM 1 
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{C27F4D54-F4C4-4066-A43C-0C720F6B70DD}] SEQPACKET 7 
LSP: MSAFD NetBIOS [\Device\NetBT_Tcpip6_{C27F4D54-F4C4-4066-A43C-0C720F6B70DD}] DATAGRAM 7 


 **** Blocked Control Panel Items ****



 **** Downloaded Program Files ****

{04CB5B64-5915-4629-B869-8945CEBADD21} https://static.impots.gouv.fr/abos/static/securite/certdgi1.cab C:\Windows\Downloaded Program Files\CERTDGI1.dll 
{3E82BB3F-ABE4-458D-9281-0187286A4E51} https://login.orange.fr/captcha?return_url=https%3A%2F%2Fmescontacts.orange.fr C:\Windows\Downloaded Program Files\VoxsyncX.dll 
{8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab 
{AB86CE53-AC9F-449F-9399-D8ABCA09EC09} https://h17000.www1.hp.com/ewfrf-JAVA/Secure/HPGetDownloadManager.ocx 
{CAFEEFAC-0016-0000-0001-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_01-windows-i586.cab 
{CAFEEFAC-0016-0000-0002-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab 
{CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_02-windows-i586.cab 
{D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab 


 **** Windows Services ****

[aawservice] "C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe" 
[AeLookupSvc] %systemroot%\system32\svchost.exe -k netsvcs 
[ALG] %SystemRoot%\System32\alg.exe 
[Appinfo] %SystemRoot%\system32\svchost.exe -k netsvcs 
[ASLDRService] C:\Program Files\ATK Hotkey\ASLDRSrv.exe 
[aswUpdSv] "C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe" 
[AudioEndpointBuilder] %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted 
[Audiosrv] %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted 
[avast! Antivirus] "C:\Program Files\Alwil Software\Avast4\ashServ.exe" 
[avast! Mail Scanner] "C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service 
[avast! Web Scanner] "C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service 
[BFE] %systemroot%\system32\svchost.exe -k LocalServiceNoNetwork 
[BITS] %SystemRoot%\System32\svchost.exe -k netsvcs 
[Browser] %SystemRoot%\System32\svchost.exe -k netsvcs 
[BthServ] %SystemRoot%\system32\svchost.exe -k bthsvcs 
[CertPropSvc] %SystemRoot%\system32\svchost.exe -k netsvcs 
[clr_optimization_v2.0.50727_32] %systemroot%\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe 
[CLTNetCnService] "C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon 
[COMSysApp] %SystemRoot%\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235} 
[CryptSvc] %SystemRoot%\system32\svchost.exe -k NetworkService 
[DcomLaunch] %SystemRoot%\system32\svchost.exe -k DcomLaunch 
[DFSR] %SystemRoot%\system32\DFSR.exe 
[Dhcp] %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted 
[Dnscache] %SystemRoot%\system32\svchost.exe -k NetworkService 
[dot3svc] %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted 
[DPS] %SystemRoot%\System32\svchost.exe -k LocalServiceNoNetwork 
[EapHost] %SystemRoot%\System32\svchost.exe -k netsvcs 
[ehRecvr] %systemroot%\ehome\ehRecvr.exe 
[ehSched] %systemroot%\ehome\ehsched.exe 
[ehstart] %windir%\system32\svchost.exe -k LocalServiceNoNetwork 
[EMDMgmt] %systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted 
[Eventlog] %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted 
[EventSystem] %SystemRoot%\system32\svchost.exe -k LocalService 
[fdPHost] %SystemRoot%\system32\svchost.exe -k LocalService 
[FDResPub] %SystemRoot%\system32\svchost.exe -k LocalService 
[FontCache3.0.0.0] %systemroot%\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe 
[FTRTSVC] "C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\3\FTRTSVC.exe" 
[gpsvc] %systemroot%\system32\svchost.exe -k netsvcs 
[hidserv] %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted 
[hkmsvc] %SystemRoot%\System32\svchost.exe -k netsvcs 
[hpqcxs08] %SystemRoot%\system32\svchost.exe -k hpdevmgmt 
[hpqddsvc] %SystemRoot%\system32\svchost.exe -k hpdevmgmt 
[idsvc] "%systemroot%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe" 
[IKEEXT] %systemroot%\system32\svchost.exe -k netsvcs 
[IPBusEnum] %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted 
[iphlpsvc] %SystemRoot%\System32\svchost.exe -k NetSvcs 
[Irmon] %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted 
[KeyIso] %SystemRoot%\system32\lsass.exe 
[KtmRm] %SystemRoot%\System32\svchost.exe -k NetworkService 
[LanmanServer] %SystemRoot%\system32\svchost.exe -k netsvcs 
[LanmanWorkstation] %SystemRoot%\System32\svchost.exe -k LocalService 
[lltdsvc] %SystemRoot%\System32\svchost.exe -k LocalService 
[lmhosts] %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted 
[Mcx2Svc] %SystemRoot%\system32\svchost.exe -k LocalService 
[MMCSS] %SystemRoot%\system32\svchost.exe -k netsvcs 
[MpsSvc] %SystemRoot%\system32\svchost.exe -k LocalServiceNoNetwork 
[MSDTC] %SystemRoot%\System32\msdtc.exe 
[MSiSCSI] %systemroot%\system32\svchost.exe -k netsvcs 
[msiserver] %systemroot%\system32\msiexec /V 
[napagent] %SystemRoot%\System32\svchost.exe -k NetworkService 
[Net Driver HPZ12] %SystemRoot%\System32\svchost.exe -k HPZ12 
[Netlogon] %systemroot%\system32\lsass.exe 
[Netman] %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted 
[netprofm] %SystemRoot%\System32\svchost.exe -k LocalService 
[NetTcpPortSharing] "%systemroot%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe" 
[NlaSvc] %SystemRoot%\System32\svchost.exe -k NetworkService 
[nsi] %systemroot%\system32\svchost.exe -k LocalService 
[ose] "C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE" 
[p2pimsvc] %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted 
[p2psvc] %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted 
[PcaSvc] %systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted 
[pla] %SystemRoot%\System32\svchost.exe -k LocalServiceNoNetwork 
[PlugPlay] %SystemRoot%\system32\svchost.exe -k DcomLaunch 
[Pml Driver HPZ12] %SystemRoot%\System32\svchost.exe -k HPZ12 
[PNRPAutoReg] %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted 
[PNRPsvc] %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted 
[PolicyAgent] %SystemRoot%\system32\svchost.exe -k NetworkServiceNetworkRestricted 
[ProfSvc] %systemroot%\system32\svchost.exe -k netsvcs 
[ProtectedStorage] %SystemRoot%\system32\lsass.exe 
[QWAVE] %windir%\system32\svchost.exe -k LocalService 
[RasAuto] %SystemRoot%\system32\svchost.exe -k netsvcs 
[RasMan] %SystemRoot%\system32\svchost.exe -k netsvcs 
[RemoteAccess] %SystemRoot%\system32\svchost.exe -k netsvcs 
[RemoteRegistry] %SystemRoot%\system32\svchost.exe -k regsvc 
[RpcLocator] %SystemRoot%\system32\locator.exe 
[RpcSs] %SystemRoot%\system32\svchost.exe -k rpcss 
[SamSs] %SystemRoot%\system32\lsass.exe 
[SCardSvr] %SystemRoot%\system32\svchost.exe -k LocalService 
[Schedule] %systemroot%\system32\svchost.exe -k netsvcs 
[SCPolicySvc] %SystemRoot%\system32\svchost.exe -k netsvcs 
[SDRSVC] %SystemRoot%\system32\svchost.exe -k SDRSVC 
[seclogon] %windir%\system32\svchost.exe -k netsvcs 
[SENS] %SystemRoot%\system32\svchost.exe -k netsvcs 
[SessionEnv] %SystemRoot%\System32\svchost.exe -k netsvcs 
[SharedAccess] %SystemRoot%\System32\svchost.exe -k netsvcs 
[ShellHWDetection] %SystemRoot%\System32\svchost.exe -k netsvcs 
[slsvc] %SystemRoot%\system32\SLsvc.exe 
[SLUINotify] %SystemRoot%\system32\svchost.exe -k LocalService 
[SNMPTRAP] %SystemRoot%\System32\snmptrap.exe 
[spmgr] C:\Program Files\ASUS\NB Probe\SPM\spmgr.exe 
[Spooler] %SystemRoot%\System32\spoolsv.exe 
[SSDPSRV] %SystemRoot%\system32\svchost.exe -k LocalService 
[stisvc] %SystemRoot%\system32\svchost.exe -k imgsvc 
[StkSSrv] %SystemRoot%\System32\StkCSrv.exe 
[swprv] %SystemRoot%\System32\svchost.exe -k swprv 
[SysMain] %systemroot%\system32\svchost.exe -k LocalSystemNetworkRestricted 
[TabletInputService] %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted 
[TapiSrv] %SystemRoot%\System32\svchost.exe -k NetworkService 
[TBS] %SystemRoot%\System32\svchost.exe -k LocalService 
[TermService] %SystemRoot%\System32\svchost.exe -k NetworkService 
[Themes] %SystemRoot%\System32\svchost.exe -k netsvcs 
[THREADORDER] %SystemRoot%\system32\svchost.exe -k LocalService 
[TrkWks] %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted 
[TrustedInstaller] %SystemRoot%\servicing\TrustedInstaller.exe 
[UI0Detect] %SystemRoot%\system32\UI0Detect.exe 
[upnphost] %SystemRoot%\system32\svchost.exe -k LocalService 
[UxSms] %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted 
[vds] %SystemRoot%\System32\vds.exe 
[VSS] %systemroot%\system32\vssvc.exe 
[W32Time] %SystemRoot%\system32\svchost.exe -k LocalService 
[wcncsvc] %SystemRoot%\System32\svchost.exe -k LocalService 
[WcsPlugInService] %SystemRoot%\system32\svchost.exe -k wcssvc 
[WdiServiceHost] %SystemRoot%\System32\svchost.exe -k wdisvc 
[WdiSystemHost] %SystemRoot%\System32\svchost.exe -k LocalSystemNetworkRestricted 
[WebClient] %SystemRoot%\system32\svchost.exe -k LocalService 
[Wecsvc] %SystemRoot%\system32\svchost.exe -k NetworkService 
[wercplsupport] %SystemRoot%\System32\svchost.exe -k netsvcs 
[WerSvc] %SystemRoot%\System32\svchost.exe -k WerSvcGroup 
[WinDefend] %SystemRoot%\System32\svchost.exe -k secsvcs 
[WinHttpAutoProxySvc] %SystemRoot%\system32\svchost.exe -k LocalService 
[Winmgmt] %systemroot%\system32\svchost.exe -k netsvcs 
[WinRM] %SystemRoot%\System32\svchost.exe -k NetworkService 
[Wlansvc] %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted 
[wmiApSrv] %systemroot%\system32\wbem\WmiApSrv.exe 
[WMPNetworkSvc] "%ProgramFiles%\Windows Media Player\wmpnetwk.exe" 
[WPCSvc] %SystemRoot%\system32\svchost.exe -k LocalServiceNetworkRestricted 
[WPDBusEnum] %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted 
[wscsvc] %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted 
[WSearch] %systemroot%\system32\SearchIndexer.exe /Embedding 
[wuauserv] %systemroot%\system32\svchost.exe -k netsvcs 
[wudfsvc] %SystemRoot%\system32\svchost.exe -k LocalSystemNetworkRestricted 
[XAudioService] %SystemRoot%\system32\DRIVERS\xaudio.exe 


 **** Custom IE Search Items ****

SEARCH: [SearchAssistant] http://www.google.com/toolbar/ie8/sidebar.html 


 **** Complete IE Options ****

IEOPT: [Disable Script Debugger] yes 
IEOPT: [Anchor Underline] yes 
IEOPT: [Cache_Update_Frequency] Once_Per_Session 
IEOPT: [Display Inline Images] yes 
IEOPT: [Do404Search]  
IEOPT: [Local Page] C:\Windows\system32\blank.htm 
IEOPT: [Save_Session_History_On_Exit] no 
IEOPT: [Show_FullURL] no 
IEOPT: [Show_StatusBar] yes 
IEOPT: [Show_ToolBar] yes 
IEOPT: [Show_URLinStatusBar] yes 
IEOPT: [Show_URLToolBar] yes 
IEOPT: [Use_DlgBox_Colors] yes 
IEOPT: [Search Page] https://www.google.com/?gws_rd=ssl 
IEOPT: [XMLHTTP]  
IEOPT: [NoUpdateCheck]  
IEOPT: [UseClearType] no 
IEOPT: [Enable Browser Extensions] yes 
IEOPT: [Play_Background_Sounds] yes 
IEOPT: [Play_Animations] yes 
IEOPT: [SearchMigrated]  
IEOPT: [Start Page] https://www.google.fr/?gws_rd=ssl 
IEOPT: [CompatibilityFlags]  
IEOPT: [StartPageCache]  
IEOPT: [RunOnceHasShown]  
IEOPT: [RunOnceComplete]  
IEOPT: [FullScreen] no 
IEOPT: [Window_Placement] , 
IEOPT: [Move System Caret] no 
IEOPT: [Expand Alt Text] no 
IEOPT: [Print_Background] no 
IEOPT: [Show image placeholders]  
IEOPT: [Enable AutoImageResize] yes 
IEOPT: [FavIntelliMenus] no 
IEOPT: [UseThemes]  
IEOPT: [Friendly http errors] yes 
IEOPT: [Error Dlg Displayed On Every Error] no 
IEOPT: [Page_Transitions]  
IEOPT: [NotifyDownloadComplete] yes 
IEOPT: [DisableScriptDebuggerIE] yes 
IEOPT: [NscSingleExpand]  
IEOPT: [Force Offscreen Composition]  
IEOPT: [EnableSearchPane]  
IEOPT: [AllowWindowReuse]  
IEOPT: [SmoothScroll]  
IEOPT: [AutoSearch]  
IEOPT: [Use FormSuggest] yes 
IEOPT: [Use Search Asst] no 
IEOPT: [Search Bar] http://www.google.com/toolbar/ie8/sidebar.html 
IEOPT: [AutoHide] yes 
IEOPT: [AlwaysShowMenus]  
IEOPT: [StatusBarWeb]  
IEOPT: [Use Custom Search URL]  
IEOPT: [HistoryViewType]  
IEOPT: [ShowedCheckBrowser] Yes 
IEOPT: [Check_Associations] no 
IEOPT: [Start Page] https://www.msn.com/fr-fr/?ocid=iehp 
IEOPT: [AutoHide] yes 
IEOPT: [Default_Secondary_Page_URL]  
IEOPT: [Default_Search_URL] https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF 
IEOPT: [Search Page] https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF 
IEOPT: [Extensions Off Page] about:NoAdd-ons 
IEOPT: [Security Risk Page] about:SecurityRisk 
IEOPT: [Enable_Disk_Cache] yes 
IEOPT: [Cache_Percent_of_Disk]  
IEOPT: [Delete_Temp_Files_On_Exit] yes 
IEOPT: [Local Page] %SystemRoot%\system32\blank.htm 
IEOPT: [Anchor_Visitation_Horizon]  
IEOPT: [Use_Async_DNS] yes 
IEOPT: [Placeholder_Width]  
IEOPT: [Placeholder_Height]  
IEOPT: [Default_Page_URL] https://www.asus.com/fr/ 
IEOPT: [Search Bar] http://us.rd.yahoo.com/clientapps/AutoSearch/SearchBarLM/YSetSearch/*http://www.yahoo.com/ext/search/search.html

NOEL34 · Answer

Bonjour, une réponse SVP.
Actuellement j'ai un conflit lorsque j'ouvre en même temps FIREFOX et le navigateur ORANGE pour consulter ma messagerie, une fenêtre couvre: NUMEROTEUR D'ACCES A DISTANCE A CESSE DE FONCTIONNER, Windows recherche un solution au problème.
Et je suis obliger de tout fermer et redémarrer l'ordinateur pour pouvoir naviguer sur FIREFOX.
Sinon il me faut toujours veiller de fermer une application avant d'ouvrir l'autre.
Quelqu'un peut il m'aider?
Cordialement

NOEL34 · Answer

re bonjour,

Je vois que personne n'est en mesure d'apporter une solution à mon problème.

Merci pour cette aide


Bonjour,

je constate que personne ne peut résoudre mon probléme?

Merci quand même

Cordialement

Rapport HIJACK

3 réponses

Discussions similaires