pc neuf raport hitjackthis Résolu/Fermé

Question

Bonjour,
bonjour a tous mon pc a une semaine et il plante pouquoi je sait pas j ai fait un raport ::: peut etre y comprendrez vous quelque chose et pourrez m aidez::::::::::::::::::::::::::::::::Logfile of HijackThis v1.99.1
Scan saved at 00:10:23, on 20/04/2008
Platform: Unknown Windows (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16643)

Running processes:
C:\Windows\Explorer.EXE
C:\Users\mir\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = 
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = 
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = 
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\Orange\SearchURLHook\SearchPageURL.dll
O1 - Hosts: ::1 localhost
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32
vsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
O4 - HKLM\..\Run: [IAAnotif] "C:\Program Files\Intel\Intel Matrix Storage Manager\Iaanotif.exe"
O4 - HKLM\..\Run: [ORAHSSSessionManager] C:\Program Files\Orange\SessionManager\SessionManager.exe
O4 - HKLM\..\Run: [BitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2008\IEShow.exe"
O4 - HKLM\..\RunOnce: [Spybot - Search & Destroy] "C:\Program Files\Spybot - Search & Destroy\SpybotSD.exe" /autocheck
O4 - HKLM\..\RunOnce: [SpybotDeletingA1998] command /c del "C:\Program Files\MessengerSkinner\download\defaultPack.cab"
O4 - HKLM\..\RunOnce: [SpybotDeletingC8999] cmd /c del "C:\Program Files\MessengerSkinner\download\defaultPack.cab"
O4 - HKLM\..\RunOnce: [SpybotDeletingA2957] command /c del "C:\Program Files\MessengerSkinneresources\appconfig.xml"
O4 - HKLM\..\RunOnce: [SpybotDeletingC1726] cmd /c del "C:\Program Files\MessengerSkinneresources\appconfig.xml"
O4 - HKLM\..\RunOnce: [SpybotDeletingA1810] command /c del "C:\Program Files\MessengerSkinneresources\btn.rgn"
O4 - HKLM\..\RunOnce: [SpybotDeletingC3300] cmd /c del "C:\Program Files\MessengerSkinneresources\btn.rgn"
O4 - HKLM\..\RunOnce: [SpybotDeletingA9414] command /c del "C:\Program Files\MessengerSkinneresources\btnBnr.rgn"
O4 - HKLM\..\RunOnce: [SpybotDeletingC9697] cmd /c del "C:\Program Files\MessengerSkinneresources\btnBnr.rgn"
O4 - HKLM\..\RunOnce: [SpybotDeletingA5283] command /c del "C:\Program Files\MessengerSkinneresources\btnIn.rgn"
O4 - HKLM\..\RunOnce: [SpybotDeletingC1856] cmd /c del "C:\Program Files\MessengerSkinneresources\btnIn.rgn"
O4 - HKLM\..\RunOnce: [SpybotDeletingA1727] command /c del "C:\Program Files\MessengerSkinneresources\btnInNormal.bmp"
O4 - HKLM\..\RunOnce: [SpybotDeletingC5597] cmd /c del "C:\Program Files\MessengerSkinneresources\btnInNormal.bmp"
O4 - HKLM\..\RunOnce: [SpybotDeletingA9619] command /c del "C:\Program Files\MessengerSkinneresources\btnInOver.bmp"
O4 - HKLM\..\RunOnce: [SpybotDeletingC4700] cmd /c del "C:\Program Files\MessengerSkinneresources\btnInOver.bmp"
O4 - HKLM\..\RunOnce: [SpybotDeletingA743] command /c del "C:\Program Files\MessengerSkinneresources\btnNormal.bmp"
O4 - HKLM\..\RunOnce: [SpybotDeletingC3813] cmd /c del "C:\Program Files\MessengerSkinneresources\btnNormal.bmp"
O4 - HKLM\..\RunOnce: [SpybotDeletingA3346] command /c del "C:\Program Files\MessengerSkinneresources\btnNormal.gif"
O4 - HKLM\..\RunOnce: [SpybotDeletingC6473] cmd /c del "C:\Program Files\MessengerSkinneresources\btnNormal.gif"
O4 - HKLM\..\RunOnce: [SpybotDeletingA3132] command /c del "C:\Program Files\MessengerSkinneresources\btnNormalBnr.bmp"
O4 - HKLM\..\RunOnce: [SpybotDeletingC3344] cmd /c del "C:\Program Files\MessengerSkinneresources\btnNormalBnr.bmp"
O4 - HKLM\..\RunOnce: [SpybotDeletingA8210] command /c del "C:\Program Files\MessengerSkinneresources\btnNormalBnr.gif"
O4 - HKLM\..\RunOnce: [SpybotDeletingC8985] cmd /c del "C:\Program Files\MessengerSkinneresources\btnNormalBnr.gif"
O4 - HKLM\..\RunOnce: [SpybotDeletingA4669] command /c del "C:\Program Files\MessengerSkinneresources\btnOver.bmp"
O4 - HKLM\..\RunOnce: [SpybotDeletingC6159] cmd /c del "C:\Program Files\MessengerSkinneresources\btnOver.bmp"
O4 - HKLM\..\RunOnce: [SpybotDeletingA9563] command /c del "C:\Program Files\MessengerSkinneresources\btnOver.gif"
O4 - HKLM\..\RunOnce: [SpybotDeletingC3731] cmd /c del "C:\Program Files\MessengerSkinneresources\btnOver.gif"
O4 - HKLM\..\RunOnce: [SpybotDeletingA6695] command /c del "C:\Program Files\MessengerSkinneresources\btnOverBnr.bmp"
O4 - HKLM\..\RunOnce: [SpybotDeletingC4501] cmd /c del "C:\Program Files\MessengerSkinneresources\btnOverBnr.bmp"
O4 - HKLM\..\RunOnce: [SpybotDeletingA9422] command /c del "C:\Program Files\MessengerSkinneresources\btnOverBnr.gif"
O4 - HKLM\..\RunOnce: [SpybotDeletingC5032] cmd /c del "C:\Program Files\MessengerSkinneresources\btnOverBnr.gif"
O4 - HKLM\..\RunOnce: [SpybotDeletingA5215] command /c del "C:\Program Files\MessengerSkinneresources\languages_v2.xml"
O4 - HKLM\..\RunOnce: [SpybotDeletingC3559] cmd /c del "C:\Program Files\MessengerSkinneresources\languages_v2.xml"
O4 - HKCU\..\Run: [SmpcSys] C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
O4 - HKCU\..\RunOnce: [SpybotDeletingB2483] command /c del "C:\Program Files\MessengerSkinner\download\defaultPack.cab"
O4 - HKCU\..\RunOnce: [SpybotDeletingD2430] cmd /c del "C:\Program Files\MessengerSkinner\download\defaultPack.cab"
O4 - HKCU\..\RunOnce: [SpybotDeletingB6762] command /c del "C:\Program Files\MessengerSkinneresources\appconfig.xml"
O4 - HKCU\..\RunOnce: [SpybotDeletingD2338] cmd /c del "C:\Program Files\MessengerSkinneresources\appconfig.xml"
O4 - HKCU\..\RunOnce: [SpybotDeletingB4263] command /c del "C:\Program Files\MessengerSkinneresources\btn.rgn"
O4 - HKCU\..\RunOnce: [SpybotDeletingD2432] cmd /c del "C:\Program Files\MessengerSkinneresources\btn.rgn"
O4 - HKCU\..\RunOnce: [SpybotDeletingB1678] command /c del "C:\Program Files\MessengerSkinneresources\btnBnr.rgn"
O4 - HKCU\..\RunOnce: [SpybotDeletingD7759] cmd /c del "C:\Program Files\MessengerSkinneresources\btnBnr.rgn"
O4 - HKCU\..\RunOnce: [SpybotDeletingB5635] command /c del "C:\Program Files\MessengerSkinneresources\btnIn.rgn"
O4 - HKCU\..\RunOnce: [SpybotDeletingD9535] cmd /c del "C:\Program Files\MessengerSkinneresources\btnIn.rgn"
O4 - HKCU\..\RunOnce: [SpybotDeletingB3405] command /c del "C:\Program Files\MessengerSkinneresources\btnInNormal.bmp"
O4 - HKCU\..\RunOnce: [SpybotDeletingD8387] cmd /c del "C:\Program Files\MessengerSkinneresources\btnInNormal.bmp"
O4 - HKCU\..\RunOnce: [SpybotDeletingB2940] command /c del "C:\Program Files\MessengerSkinneresources\btnInOver.bmp"
O4 - HKCU\..\RunOnce: [SpybotDeletingD3782] cmd /c del "C:\Program Files\MessengerSkinneresources\btnInOver.bmp"
O4 - HKCU\..\RunOnce: [SpybotDeletingB1137] command /c del "C:\Program Files\MessengerSkinneresources\btnNormal.bmp"
O4 - HKCU\..\RunOnce: [SpybotDeletingD6270] cmd /c del "C:\Program Files\MessengerSkinneresources\btnNormal.bmp"
O4 - HKCU\..\RunOnce: [SpybotDeletingB1460] command /c del "C:\Program Files\MessengerSkinneresources\btnNormal.gif"
O4 - HKCU\..\RunOnce: [SpybotDeletingD9711] cmd /c del "C:\Program Files\MessengerSkinneresources\btnNormal.gif"
O4 - HKCU\..\RunOnce: [SpybotDeletingB5482] command /c del "C:\Program Files\MessengerSkinneresources\btnNormalBnr.bmp"
O4 - HKCU\..\RunOnce: [SpybotDeletingD4369] cmd /c del "C:\Program Files\MessengerSkinneresources\btnNormalBnr.bmp"
O4 - HKCU\..\RunOnce: [SpybotDeletingB5054] command /c del "C:\Program Files\MessengerSkinneresources\btnNormalBnr.gif"
O4 - HKCU\..\RunOnce: [SpybotDeletingD8475] cmd /c del "C:\Program Files\MessengerSkinneresources\btnNormalBnr.gif"
O4 - HKCU\..\RunOnce: [SpybotDeletingB4294] command /c del "C:\Program Files\MessengerSkinneresources\btnOver.bmp"
O4 - HKCU\..\RunOnce: [SpybotDeletingD2921] cmd /c del "C:\Program Files\MessengerSkinneresources\btnOver.bmp"
O4 - HKCU\..\RunOnce: [SpybotDeletingB6235] command /c del "C:\Program Files\MessengerSkinneresources\btnOver.gif"
O4 - HKCU\..\RunOnce: [SpybotDeletingD7624] cmd /c del "C:\Program Files\MessengerSkinneresources\btnOver.gif"
O4 - HKCU\..\RunOnce: [SpybotDeletingB1747] command /c del "C:\Program Files\MessengerSkinneresources\btnOverBnr.bmp"
O4 - HKCU\..\RunOnce: [SpybotDeletingD9760] cmd /c del "C:\Program Files\MessengerSkinneresources\btnOverBnr.bmp"
O4 - HKCU\..\RunOnce: [SpybotDeletingB8552] command /c del "C:\Program Files\MessengerSkinneresources\btnOverBnr.gif"
O4 - HKCU\..\RunOnce: [SpybotDeletingD728] cmd /c del "C:\Program Files\MessengerSkinneresources\btnOverBnr.gif"
O4 - HKCU\..\RunOnce: [SpybotDeletingB9890] command /c del "C:\Program Files\MessengerSkinneresources\languages_v2.xml"
O4 - HKCU\..\RunOnce: [SpybotDeletingD5032] cmd /c del "C:\Program Files\MessengerSkinneresources\languages_v2.xml"
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32
laapi.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32
apinsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\bonjour\mdnsnsp.dll
O11 - Options group: [INTERNATIONAL] International*
O13 - Gopher Prefix: 
O16 - DPF: {2250C29C-C5E9-4F55-BE4E-01E45A40FCF1} (CMediaMix Object) - http://musicmix.messenger.msn.com/Medialogic.CAB
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O16 - DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} (GoPetsWeb Control) - https://secure.gopetslive.com/dev/GoPetsWeb.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~3\GOEC62~1.DLL
O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon (file missing)
O23 - Service: @%SystemRoot%\ehome\ehstart.dll,-101 (ehstart) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktopManager.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\Iaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe" /service (file missing)
O23 - Service: lxcz_device -   - C:\Windows\system32\lxczcoms.exe
O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: SBSD Security Center Service (SBSDWSCService) - Safer Networking Ltd. - C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe" /service (file missing)
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - %ProgramFiles%\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Common Files\BitDefender\BitDefender Communicator\xcommsvr.exe" /service (file missing)

Utilisateur anonyme · Answer

bonsoir baaziz80
bon d'apres le post hijacthis spybot bloc un de tes programe messenger skinner mon conseille il est simple suprime le voila une adresse sur ce site qui te donnera la solution.
http://www.commentcamarche.net/forum/affich 2825681 comment supprimer messenger skinner
esseye avec sa une fois suprimer, suprime spybot aussi afin qu'il n'y est plus rien des deux si tu a c.clener passe un coup pour nettoyer tout sa pour qu'il ne reste aucune clefs invaide dans la base de registre ,enuite nettoie tout tes fichier temporaire sur firefox.
une fois tout fait telecharge antivir personal edition avec cette configue: http://speedweb1.free.fr/frames2.php?page=tuto5
il te faut savoir que les infection les plus mechante vienne de msn messenger afin que tu est une protection suplementaire installe le scaner de msn qui te protegera sur des transferre de fichier 
avec le doute je te conseille de faire un scan en ligne f.secure est bon pour vista tu scan en mode perso tu fait tout tes disc dur ainsi que tout tes fichier sa c'est pour etre sur de n'avoir rien attraper.
Si le scan et positif fait la desinfection proposer est repasse une couche 
une fois finis tu devrais avoir ton pc normal ,mais on ne va pas s'arreter la par mesure de precaution tu va ,si bien sur tu a eter infecter, faire un autre scan en ligne et tu prend bit defender et meme procedure
pour la fin tu va dans C /clic droit/proprieter /outils /coche les deux cases redemarre ton pc et laisse travailler 
j'esperre que tu a fait tes disc bootable avant la mise en route sur internet si tu ne la pas fait atted d'etre sur et tu va dans le systeme de ton ordi "marque" qui te propose la ceation de disc de sauvegarde et de ceation de disc bootable
 bon courage et n'hesite pas a demander

baaziz80 · Answer

apres avoir suivi tout tes conseils mon probleme a ete resolu merci a toi

Pc neuf raport hitjackthis

2 réponses