Hacked by 8bits

hv -  
henri280161 Messages postés 58 Statut Membre -
Bonjour,
Lorsque j'ouvre IE7,
WINDOWS INTERNET EXPLORER - HACKED BY 8 BITS fini l'ouverture de ma page, en allant sur secunia c'est le plus souvant dans le système java et macromedia que les soucis ont étaient détectés ainsi que real player et quiktime.
J'ai désinstallé quiktime real player ainsi que quelques dll suite au scan sur sécunia .
J'ai nod32, avast et ccleaner un parfeu windows mais malgrès ça bin je crois que je suis infecté.
je navigue normalement pas de soucis pour l'ouverture de page ou d'internet je lis les dvd et cd musicaux j'arrive aussi à graver à imprimer, mais je ne sais pas si hacked by 8 bits et un virus ou pas.
Si vous auriez une solution pour enlever ce hacked d'internet explorer.
Merci pour vos futures réponses.
henri....
windows xp sp2
IE7
AMD ATHLON 2600
ATI RADION9500
Configuration: Windows XP
Internet Explorer 7.0

7 réponses

  1. InfernO.vir
     
    Bonsoir,

    -Telecharge hijackthis--> Lien ici!

    -Clique sur le .exe ensuite clique sur "Do a system scan and save a logfile"

    -Poste moi le rapport a la fin du scan!
    0
    1. hv
       
      Scan saved at 13:29:55, on 30/08/2008
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16705)
      Boot mode: Normal

      Running processes:
      G:\WINDOWS\System32\smss.exe
      G:\WINDOWS\system32\winlogon.exe
      G:\WINDOWS\system32\services.exe
      G:\WINDOWS\system32\lsass.exe
      G:\WINDOWS\system32\Ati2evxx.exe
      G:\WINDOWS\system32\svchost.exe
      G:\WINDOWS\System32\svchost.exe
      G:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      G:\Program Files\Alwil Software\Avast4\ashServ.exe
      G:\WINDOWS\system32\spoolsv.exe
      G:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
      G:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe
      G:\WINDOWS\System32\svchost.exe
      G:\Program Files\Nero\Nero8\InCD\InCDsrv.exe
      G:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
      G:\Program Files\Fichiers communs\AOL\Loader\aolload.exe
      G:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
      G:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
      G:\Program Files\Eset\nod32krn.exe
      G:\WINDOWS\System32\svchost.exe
      G:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
      G:\WINDOWS\wanmpsvc.exe
      G:\WINDOWS\system32\SearchIndexer.exe
      G:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      G:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      G:\WINDOWS\system32\Ati2evxx.exe
      G:\WINDOWS\Explorer.EXE
      G:\WINDOWS\system32\wuauclt.exe
      G:\Program Files\Fichiers communs\AOL\1172785673\ee\AOLSoftware.exe
      G:\WINDOWS\Mixer.exe
      G:\Program Files\Microsoft IntelliType Pro\itype.exe
      G:\Program Files\Microsoft IntelliPoint\ipoint.exe
      G:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
      C:\iTunesHelper.exe
      G:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      G:\Program Files\Eset\nod32kui.exe
      G:\Program Files\Nero\Nero8\InCD\NBHGui.exe
      G:\Program Files\Nero\Nero8\InCD\InCD.exe
      G:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe
      G:\Program Files\ATI Technologies\ATI.ACE\cli.exe
      G:\Program Files\TomTom HOME 2\HOMERunner.exe
      G:\WINDOWS\system32\ctfmon.exe
      G:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      G:\Program Files\AOL 9.0\aoltray.exe
      G:\Program Files\AOL Compagnon\companion.exe
      G:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      G:\Program Files\Windows Desktop Search\WindowsSearch.exe
      G:\Program Files\Microsoft Office\Office12\GROOVE.EXE
      G:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe
      G:\Program Files\iPod\bin\iPodService.exe
      G:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
      G:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
      G:\WINDOWS\system32\SearchProtocolHost.exe
      g:\program files\fichiers communs\aol\1172785673\ee\services\antiSpywareApp\ver2_0_28_1\AOLSP Scheduler.exe
      G:\Program Files\ATI Technologies\ATI.ACE\cli.exe
      G:\Program Files\ATI Technologies\ATI.ACE\cli.exe
      G:\Program Files\AOL 9.0\waol.exe
      G:\Program Files\AOL 9.0\shellmon.exe
      G:\Program Files\Fichiers communs\Aol\aoltpspd.exe
      G:\Documents and Settings\Propriétaire\Local Settings\Temporary Internet Files\Content.IE5\7N1QZ13O\HiJackThis[1].exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://actus.sfr.fr
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://actus.sfr.fr
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://actus.sfr.fr
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://actus.sfr.fr
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Hacked by 8BITS
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: &Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
      O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - G:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
      O2 - BHO: Download Manager Browser Helper Object - {19C8E43B-07B3-49CB-BFFC-6777B593E6F8} - G:\PROGRA~1\FICHIE~1\fluxDVD\DOWNLO~1\XEBDLH~1.DLL
      O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - G:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - G:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - G:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - g:\program files\google\googletoolbar1.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - G:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
      O2 - BHO: MegaIEMn - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - G:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - g:\program files\google\googletoolbar1.dll
      O4 - HKLM\..\Run: [HostManager] G:\Program Files\Fichiers communs\AOL\1172785673\ee\AOLSoftware.exe
      O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
      O4 - HKLM\..\Run: [itype] "G:\Program Files\Microsoft IntelliType Pro\itype.exe"
      O4 - HKLM\..\Run: [IntelliPoint] "G:\Program Files\Microsoft IntelliPoint\ipoint.exe"
      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "G:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
      O4 - HKLM\..\Run: [TomTomHOME.exe] "G:\Program Files\TomTom HOME 2\HOMERunner.exe" -s
      O4 - HKLM\..\Run: [GrooveMonitor] "G:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
      O4 - HKLM\..\Run: [iTunesHelper] "C:\iTunesHelper.exe"
      O4 - HKLM\..\Run: [avast!] G:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKLM\..\Run: [nod32kui] "G:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
      O4 - HKLM\..\Run: [NeroFilterCheck] G:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe
      O4 - HKLM\..\Run: [NBKeyScan] "G:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
      O4 - HKLM\..\Run: [SecurDisc] G:\Program Files\Nero\Nero8\InCD\NBHGui.exe
      O4 - HKLM\..\Run: [InCD] G:\Program Files\Nero\Nero8\InCD\InCD.exe
      O4 - HKLM\..\Run: [AOLSAV] G:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe
      O4 - HKLM\..\Run: [AOLDialer] G:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe
      O4 - HKLM\..\Run: [UVS11 Preload] G:\Program Files\Ulead Systems\Ulead VideoStudio 11\uvPL.exe
      O4 - HKLM\..\Run: [ATICCC] "G:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
      O4 - HKCU\..\Run: [TomTomHOME.exe] "G:\Program Files\TomTom HOME 2\HOMERunner.exe"
      O4 - HKCU\..\Run: [ctfmon.exe] G:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [swg] G:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      O4 - HKCU\..\Run: [Tunebite] E:\Tunebite\Tunebite.exe -tray
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] G:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] G:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] G:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] G:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
      O4 - Startup: Microsoft Office Groove.lnk = G:\Program Files\Microsoft Office\Office12\GROOVE.EXE
      O4 - Startup: Outil de détection de support Picture Motion Browser.lnk = G:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe
      O4 - Global Startup: AOL 9.0 Icône AOL.lnk = G:\Program Files\AOL 9.0\aoltray.exe
      O4 - Global Startup: AOL Compagnon.lnk = G:\Program Files\AOL Compagnon\companion.exe
      O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = G:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
      O4 - Global Startup: HP Digital Imaging Monitor.lnk = G:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      O4 - Global Startup: Windows Desktop Search.lnk = G:\Program Files\Windows Desktop Search\WindowsSearch.exe
      O8 - Extra context menu item: &Recherche AOL Toolbar - res://G:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://G:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - G:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - G:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
      O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - G:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
      O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - G:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - G:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
      O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - G:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - G:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - G:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - G:\Program Files\Messenger\msmsgs.exe
      O15 - Trusted Zone: http://www.msi.com.tw
      O15 - Trusted Zone: *.canalplay.com (HKLM)
      O15 - Trusted Zone: *.canalplusactive.com (HKLM)
      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
      O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
      O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab
      O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/02496f09fa563d837d22/netzip/RdxIE601_fr.cab
      O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase9602.cab
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
      O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/...
      O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
      O16 - DPF: {8167C273-DF59-4416-B647-C8BB2C7EE83E} (WebSDev Control) - http://tw.msi.com.tw/autobios/LOnline/install.cab
      O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
      O16 - DPF: {87AF076E-D86D-4E87-ADDD-F05804E1F150} - https://www.virginmega.fr/DownloadManager/Release/Prod/DownMan.cab
      O16 - DPF: {BD08A9D5-0E5C-4F42-99A3-C0CB5E860557} (CSolidBrowserObj Object) - http://cdn1.acclaimdownloads.com/solidstateion.cab
      O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
      O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
      O17 - HKLM\System\CCS\Services\Tcpip\..\{83E01FC3-2E97-4F11-92B0-41B5203391AC}: NameServer = 205.188.146.145
      O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - G:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
      O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - G:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - G:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - G:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: ATI Smart - Unknown owner - G:\WINDOWS\system32\ati2sgag.exe
      O23 - Service: avast! Antivirus - ALWIL Software - G:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - ALWIL Software - G:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      O23 - Service: avast! Web Scanner - ALWIL Software - G:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      O23 - Service: Capture Device Service - InterVideo Inc. - G:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe
      O23 - Service: Google Updater Service (gusvc) - Google - G:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - G:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: InCD Helper (InCDsrv) - Nero AG - G:\Program Files\Nero\Nero8\InCD\InCDsrv.exe
      O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - G:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - G:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
      O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - G:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
      O23 - Service: NMIndexingService - Nero AG - G:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
      O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - G:\Program Files\Eset\nod32krn.exe
      O23 - Service: Pml Driver HPZ12 - HP - G:\WINDOWS\System32\HPZipm12.exe
      O23 - Service: SF FrontLine Drivers Auto Removal (v1) (sfrem01) - Protection Technology (StarForce) - G:\WINDOWS\system32\sfrem01.exe
      O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - G:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
      O23 - Service: UPnPService - Magix AG - G:\Program Files\Fichiers communs\MAGIX Shared\UPnPService\UPnPService.exe
      O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - G:\WINDOWS\wanmpsvc.exe
      0
  2. InfernO.vir
     
    Re,

    -Relance hijackthis et coche la case devant ces lignes:

    O15 - Trusted Zone: http://www.msi.com.tw
    O15 - Trusted Zone: *.canalplay.com (HKLM)
    O15 - Trusted Zone: *.canalplusactive.com (HKLM)

    Clique sur fix checked

    -Telecharge MBAM--> http://www.malwarebytes.org/mbam/program/mbam-setup.exe

    -Suis ce tuto--> https://www.malekal.com/tutoriel-malwarebyte-anti-malware/

    -Fait un scan complet en mode sans echec.

    -Poste moi le rapport.
    0
    1. henri280161 Messages postés 58 Statut Membre 5
       
      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 17:30:45, on 31/08/2008
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16705)
      Boot mode: Normal

      Running processes:
      G:\WINDOWS\System32\smss.exe
      G:\WINDOWS\system32\winlogon.exe
      G:\WINDOWS\system32\services.exe
      G:\WINDOWS\system32\lsass.exe
      G:\WINDOWS\system32\Ati2evxx.exe
      G:\WINDOWS\system32\svchost.exe
      G:\WINDOWS\System32\svchost.exe
      G:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      G:\Program Files\Alwil Software\Avast4\ashServ.exe
      G:\WINDOWS\system32\spoolsv.exe
      G:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
      G:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe
      G:\WINDOWS\System32\svchost.exe
      G:\Program Files\Nero\Nero8\InCD\InCDsrv.exe
      G:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
      G:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
      G:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
      G:\Program Files\Eset\nod32krn.exe
      G:\WINDOWS\System32\svchost.exe
      G:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
      G:\WINDOWS\wanmpsvc.exe
      G:\WINDOWS\system32\SearchIndexer.exe
      G:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      G:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      G:\WINDOWS\system32\Ati2evxx.exe
      G:\WINDOWS\Explorer.EXE
      G:\WINDOWS\system32\wuauclt.exe
      G:\Program Files\Fichiers communs\AOL\1172785673\ee\AOLSoftware.exe
      G:\WINDOWS\Mixer.exe
      G:\Program Files\Microsoft IntelliType Pro\itype.exe
      G:\Program Files\Microsoft IntelliPoint\ipoint.exe
      G:\Program Files\TomTom HOME 2\HOMERunner.exe
      G:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
      C:\iTunesHelper.exe
      G:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      G:\Program Files\Eset\nod32kui.exe
      G:\Program Files\Nero\Nero8\InCD\NBHGui.exe
      G:\Program Files\Nero\Nero8\InCD\InCD.exe
      G:\Program Files\iPod\bin\iPodService.exe
      G:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe
      G:\Program Files\ATI Technologies\ATI.ACE\cli.exe
      G:\WINDOWS\system32\ctfmon.exe
      G:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      G:\Program Files\AOL 9.0\aoltray.exe
      G:\Program Files\AOL Compagnon\companion.exe
      G:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      G:\Program Files\Windows Desktop Search\WindowsSearch.exe
      G:\Program Files\Microsoft Office\Office12\GROOVE.EXE
      G:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe
      G:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
      g:\program files\fichiers communs\aol\1172785673\ee\services\antiSpywareApp\ver2_0_28_1\AOLSP Scheduler.exe
      G:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
      G:\Program Files\ATI Technologies\ATI.ACE\cli.exe
      G:\Program Files\ATI Technologies\ATI.ACE\cli.exe
      G:\Program Files\AOL 9.0\waol.exe
      G:\Program Files\AOL 9.0\shellmon.exe
      G:\Program Files\Fichiers communs\Aol\aoltpspd.exe
      G:\Program Files\QuickTime\qttask.exe
      g:\program files\fichiers communs\aol\1172785673\ee\aolsoftware.exe
      G:\Program Files\Trend Micro\HijackThis\HijackThis.exe
      G:\WINDOWS\system32\SearchProtocolHost.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://actus.sfr.fr
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://actus.sfr.fr
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://actus.sfr.fr
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://actus.sfr.fr
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: &Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
      O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - G:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
      O2 - BHO: Download Manager Browser Helper Object - {19C8E43B-07B3-49CB-BFFC-6777B593E6F8} - G:\PROGRA~1\FICHIE~1\fluxDVD\DOWNLO~1\XEBDLH~1.DLL
      O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - G:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - G:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - G:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - g:\program files\google\googletoolbar1.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - G:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
      O2 - BHO: MegaIEMn - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - G:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - g:\program files\google\googletoolbar1.dll
      O4 - HKLM\..\Run: [HostManager] G:\Program Files\Fichiers communs\AOL\1172785673\ee\AOLSoftware.exe
      O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
      O4 - HKLM\..\Run: [itype] "G:\Program Files\Microsoft IntelliType Pro\itype.exe"
      O4 - HKLM\..\Run: [IntelliPoint] "G:\Program Files\Microsoft IntelliPoint\ipoint.exe"
      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "G:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
      O4 - HKLM\..\Run: [TomTomHOME.exe] "G:\Program Files\TomTom HOME 2\HOMERunner.exe" -s
      O4 - HKLM\..\Run: [GrooveMonitor] "G:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
      O4 - HKLM\..\Run: [iTunesHelper] "C:\iTunesHelper.exe"
      O4 - HKLM\..\Run: [avast!] G:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKLM\..\Run: [nod32kui] "G:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
      O4 - HKLM\..\Run: [NeroFilterCheck] G:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe
      O4 - HKLM\..\Run: [NBKeyScan] "G:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
      O4 - HKLM\..\Run: [SecurDisc] G:\Program Files\Nero\Nero8\InCD\NBHGui.exe
      O4 - HKLM\..\Run: [InCD] G:\Program Files\Nero\Nero8\InCD\InCD.exe
      O4 - HKLM\..\Run: [AOLSAV] G:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe
      O4 - HKLM\..\Run: [AOLDialer] G:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe
      O4 - HKLM\..\Run: [UVS11 Preload] G:\Program Files\Ulead Systems\Ulead VideoStudio 11\uvPL.exe
      O4 - HKLM\..\Run: [ATICCC] "G:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
      O4 - HKLM\..\Run: [QuickTime Task] "G:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKCU\..\Run: [TomTomHOME.exe] "G:\Program Files\TomTom HOME 2\HOMERunner.exe"
      O4 - HKCU\..\Run: [ctfmon.exe] G:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [swg] G:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      O4 - HKCU\..\Run: [Tunebite] E:\Tunebite\Tunebite.exe -tray
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] G:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] G:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] G:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] G:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
      O4 - Startup: Microsoft Office Groove.lnk = G:\Program Files\Microsoft Office\Office12\GROOVE.EXE
      O4 - Startup: Outil de détection de support Picture Motion Browser.lnk = G:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe
      O4 - Global Startup: AOL 9.0 Icône AOL.lnk = G:\Program Files\AOL 9.0\aoltray.exe
      O4 - Global Startup: AOL Compagnon.lnk = G:\Program Files\AOL Compagnon\companion.exe
      O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = G:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
      O4 - Global Startup: HP Digital Imaging Monitor.lnk = G:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      O4 - Global Startup: Windows Desktop Search.lnk = G:\Program Files\Windows Desktop Search\WindowsSearch.exe
      O8 - Extra context menu item: &Recherche AOL Toolbar - res://G:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://G:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - G:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - G:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
      O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - G:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
      O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - G:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - G:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
      O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - G:\WINDOWS\system32\Shdocvw.dll
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - G:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - G:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - G:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - G:\Program Files\Messenger\msmsgs.exe
      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
      O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
      O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab
      O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/02496f09fa563d837d22/netzip/RdxIE601_fr.cab
      O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase9602.cab
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
      O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/...
      O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
      O16 - DPF: {8167C273-DF59-4416-B647-C8BB2C7EE83E} (WebSDev Control) - http://tw.msi.com.tw/autobios/LOnline/install.cab
      O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
      O16 - DPF: {87AF076E-D86D-4E87-ADDD-F05804E1F150} - https://www.virginmega.fr/DownloadManager/Release/Prod/DownMan.cab
      O16 - DPF: {BD08A9D5-0E5C-4F42-99A3-C0CB5E860557} (CSolidBrowserObj Object) - http://cdn1.acclaimdownloads.com/solidstateion.cab
      O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
      O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
      O17 - HKLM\System\CCS\Services\Tcpip\..\{83E01FC3-2E97-4F11-92B0-41B5203391AC}: NameServer = 205.188.146.145
      O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - G:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
      O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - G:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - G:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - G:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: ATI Smart - Unknown owner - G:\WINDOWS\system32\ati2sgag.exe
      O23 - Service: avast! Antivirus - ALWIL Software - G:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - ALWIL Software - G:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      O23 - Service: avast! Web Scanner - ALWIL Software - G:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      O23 - Service: Capture Device Service - InterVideo Inc. - G:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe
      O23 - Service: Google Updater Service (gusvc) - Google - G:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - G:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: InCD Helper (InCDsrv) - Nero AG - G:\Program Files\Nero\Nero8\InCD\InCDsrv.exe
      O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - G:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - G:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
      O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - G:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
      O23 - Service: NMIndexingService - Nero AG - G:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
      O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - G:\Program Files\Eset\nod32krn.exe
      O23 - Service: Pml Driver HPZ12 - HP - G:\WINDOWS\System32\HPZipm12.exe
      O23 - Service: SF FrontLine Drivers Auto Removal (v1) (sfrem01) - Protection Technology (StarForce) - G:\WINDOWS\system32\sfrem01.exe
      O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - G:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
      O23 - Service: UPnPService - Magix AG - G:\Program Files\Fichiers communs\MAGIX Shared\UPnPService\UPnPService.exe
      O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - G:\WINDOWS\wanmpsvc.exe
      0
    2. henri280161 Messages postés 58 Statut Membre 5
       
      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 17:30:45, on 31/08/2008
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.16705)
      Boot mode: Normal

      Running processes:
      G:\WINDOWS\System32\smss.exe
      G:\WINDOWS\system32\winlogon.exe
      G:\WINDOWS\system32\services.exe
      G:\WINDOWS\system32\lsass.exe
      G:\WINDOWS\system32\Ati2evxx.exe
      G:\WINDOWS\system32\svchost.exe
      G:\WINDOWS\System32\svchost.exe
      G:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      G:\Program Files\Alwil Software\Avast4\ashServ.exe
      G:\WINDOWS\system32\spoolsv.exe
      G:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
      G:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe
      G:\WINDOWS\System32\svchost.exe
      G:\Program Files\Nero\Nero8\InCD\InCDsrv.exe
      G:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
      G:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
      G:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
      G:\Program Files\Eset\nod32krn.exe
      G:\WINDOWS\System32\svchost.exe
      G:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
      G:\WINDOWS\wanmpsvc.exe
      G:\WINDOWS\system32\SearchIndexer.exe
      G:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      G:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      G:\WINDOWS\system32\Ati2evxx.exe
      G:\WINDOWS\Explorer.EXE
      G:\WINDOWS\system32\wuauclt.exe
      G:\Program Files\Fichiers communs\AOL\1172785673\ee\AOLSoftware.exe
      G:\WINDOWS\Mixer.exe
      G:\Program Files\Microsoft IntelliType Pro\itype.exe
      G:\Program Files\Microsoft IntelliPoint\ipoint.exe
      G:\Program Files\TomTom HOME 2\HOMERunner.exe
      G:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
      C:\iTunesHelper.exe
      G:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      G:\Program Files\Eset\nod32kui.exe
      G:\Program Files\Nero\Nero8\InCD\NBHGui.exe
      G:\Program Files\Nero\Nero8\InCD\InCD.exe
      G:\Program Files\iPod\bin\iPodService.exe
      G:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe
      G:\Program Files\ATI Technologies\ATI.ACE\cli.exe
      G:\WINDOWS\system32\ctfmon.exe
      G:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      G:\Program Files\AOL 9.0\aoltray.exe
      G:\Program Files\AOL Compagnon\companion.exe
      G:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      G:\Program Files\Windows Desktop Search\WindowsSearch.exe
      G:\Program Files\Microsoft Office\Office12\GROOVE.EXE
      G:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe
      G:\Program Files\HP\Digital Imaging\bin\hpqimzone.exe
      g:\program files\fichiers communs\aol\1172785673\ee\services\antiSpywareApp\ver2_0_28_1\AOLSP Scheduler.exe
      G:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
      G:\Program Files\ATI Technologies\ATI.ACE\cli.exe
      G:\Program Files\ATI Technologies\ATI.ACE\cli.exe
      G:\Program Files\AOL 9.0\waol.exe
      G:\Program Files\AOL 9.0\shellmon.exe
      G:\Program Files\Fichiers communs\Aol\aoltpspd.exe
      G:\Program Files\QuickTime\qttask.exe
      g:\program files\fichiers communs\aol\1172785673\ee\aolsoftware.exe
      G:\Program Files\Trend Micro\HijackThis\HijackThis.exe
      G:\WINDOWS\system32\SearchProtocolHost.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = https://actus.sfr.fr
      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://actus.sfr.fr
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://fr.yahoo.com/
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://actus.sfr.fr
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
      R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = https://actus.sfr.fr
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
      R3 - URLSearchHook: &Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
      O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - G:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
      O2 - BHO: Download Manager Browser Helper Object - {19C8E43B-07B3-49CB-BFFC-6777B593E6F8} - G:\PROGRA~1\FICHIE~1\fluxDVD\DOWNLO~1\XEBDLH~1.DLL
      O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - G:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
      O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - G:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
      O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - G:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - g:\program files\google\googletoolbar1.dll
      O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - G:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
      O2 - BHO: MegaIEMn - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - G:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll
      O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - g:\program files\google\googletoolbar1.dll
      O4 - HKLM\..\Run: [HostManager] G:\Program Files\Fichiers communs\AOL\1172785673\ee\AOLSoftware.exe
      O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
      O4 - HKLM\..\Run: [itype] "G:\Program Files\Microsoft IntelliType Pro\itype.exe"
      O4 - HKLM\..\Run: [IntelliPoint] "G:\Program Files\Microsoft IntelliPoint\ipoint.exe"
      O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "G:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
      O4 - HKLM\..\Run: [TomTomHOME.exe] "G:\Program Files\TomTom HOME 2\HOMERunner.exe" -s
      O4 - HKLM\..\Run: [GrooveMonitor] "G:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
      O4 - HKLM\..\Run: [iTunesHelper] "C:\iTunesHelper.exe"
      O4 - HKLM\..\Run: [avast!] G:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
      O4 - HKLM\..\Run: [nod32kui] "G:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
      O4 - HKLM\..\Run: [NeroFilterCheck] G:\Program Files\Fichiers communs\Nero\Lib\NeroCheck.exe
      O4 - HKLM\..\Run: [NBKeyScan] "G:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
      O4 - HKLM\..\Run: [SecurDisc] G:\Program Files\Nero\Nero8\InCD\NBHGui.exe
      O4 - HKLM\..\Run: [InCD] G:\Program Files\Nero\Nero8\InCD\InCD.exe
      O4 - HKLM\..\Run: [AOLSAV] G:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe
      O4 - HKLM\..\Run: [AOLDialer] G:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe
      O4 - HKLM\..\Run: [UVS11 Preload] G:\Program Files\Ulead Systems\Ulead VideoStudio 11\uvPL.exe
      O4 - HKLM\..\Run: [ATICCC] "G:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
      O4 - HKLM\..\Run: [QuickTime Task] "G:\Program Files\QuickTime\qttask.exe" -atboottime
      O4 - HKCU\..\Run: [TomTomHOME.exe] "G:\Program Files\TomTom HOME 2\HOMERunner.exe"
      O4 - HKCU\..\Run: [ctfmon.exe] G:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [swg] G:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
      O4 - HKCU\..\Run: [Tunebite] E:\Tunebite\Tunebite.exe -tray
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] G:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] G:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] G:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] G:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
      O4 - Startup: Microsoft Office Groove.lnk = G:\Program Files\Microsoft Office\Office12\GROOVE.EXE
      O4 - Startup: Outil de détection de support Picture Motion Browser.lnk = G:\Program Files\Sony\Sony Picture Utility\PMBCore\SPUVolumeWatcher.exe
      O4 - Global Startup: AOL 9.0 Icône AOL.lnk = G:\Program Files\AOL 9.0\aoltray.exe
      O4 - Global Startup: AOL Compagnon.lnk = G:\Program Files\AOL Compagnon\companion.exe
      O4 - Global Startup: Démarrage rapide de HP Photosmart Premier.lnk = G:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
      O4 - Global Startup: HP Digital Imaging Monitor.lnk = G:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
      O4 - Global Startup: Windows Desktop Search.lnk = G:\Program Files\Windows Desktop Search\WindowsSearch.exe
      O8 - Extra context menu item: &Recherche AOL Toolbar - res://G:\Program Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
      O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://G:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
      O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - G:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
      O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - G:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
      O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - G:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
      O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - G:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - G:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
      O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - G:\WINDOWS\system32\Shdocvw.dll
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - G:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - G:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - G:\Program Files\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - G:\Program Files\Messenger\msmsgs.exe
      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
      O16 - DPF: {215B8138-A3CF-44C5-803F-8226143CFC0A} (Trend Micro ActiveX Scan Agent 6.6) - http://housecall65.trendmicro.com/housecall/applet/html/native/x86/win32/activex/hcImpl.cab
      O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab
      O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} (RdxIE Class) - http://software-dl.real.com/02496f09fa563d837d22/netzip/RdxIE601_fr.cab
      O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase9602.cab
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/...
      O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/...
      O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - https://www.trendmicro.com/en_us/forHome/products/housecall.html
      O16 - DPF: {8167C273-DF59-4416-B647-C8BB2C7EE83E} (WebSDev Control) - http://tw.msi.com.tw/autobios/LOnline/install.cab
      O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - https://www.touslesdrivers.com/index.php?v_page=29
      O16 - DPF: {87AF076E-D86D-4E87-ADDD-F05804E1F150} - https://www.virginmega.fr/DownloadManager/Release/Prod/DownMan.cab
      O16 - DPF: {BD08A9D5-0E5C-4F42-99A3-C0CB5E860557} (CSolidBrowserObj Object) - http://cdn1.acclaimdownloads.com/solidstateion.cab
      O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
      O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/flashplayer/current/swflash.cab
      O17 - HKLM\System\CCS\Services\Tcpip\..\{83E01FC3-2E97-4F11-92B0-41B5203391AC}: NameServer = 205.188.146.145
      O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - G:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
      O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - G:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
      O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - G:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
      O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - G:\WINDOWS\system32\Ati2evxx.exe
      O23 - Service: ATI Smart - Unknown owner - G:\WINDOWS\system32\ati2sgag.exe
      O23 - Service: avast! Antivirus - ALWIL Software - G:\Program Files\Alwil Software\Avast4\ashServ.exe
      O23 - Service: avast! Mail Scanner - ALWIL Software - G:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
      O23 - Service: avast! Web Scanner - ALWIL Software - G:\Program Files\Alwil Software\Avast4\ashWebSv.exe
      O23 - Service: Capture Device Service - InterVideo Inc. - G:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe
      O23 - Service: Google Updater Service (gusvc) - Google - G:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - G:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: InCD Helper (InCDsrv) - Nero AG - G:\Program Files\Nero\Nero8\InCD\InCDsrv.exe
      O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - G:\Program Files\iPod\bin\iPodService.exe
      O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - G:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe
      O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - G:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
      O23 - Service: NMIndexingService - Nero AG - G:\Program Files\Fichiers communs\Nero\Lib\NMIndexingService.exe
      O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - G:\Program Files\Eset\nod32krn.exe
      O23 - Service: Pml Driver HPZ12 - HP - G:\WINDOWS\System32\HPZipm12.exe
      O23 - Service: SF FrontLine Drivers Auto Removal (v1) (sfrem01) - Protection Technology (StarForce) - G:\WINDOWS\system32\sfrem01.exe
      O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - G:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
      O23 - Service: UPnPService - Magix AG - G:\Program Files\Fichiers communs\MAGIX Shared\UPnPService\UPnPService.exe
      O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - G:\WINDOWS\wanmpsvc.exe
      0
  3. Utilisateur anonyme
     
    Salut ,
    Pour suivre l'évolution

    ++
    0
  4. InfernO.vir
     
    Slt avec plaisir =)

    L'aide est la bienvenue si je suis a sec ^^
    0

  5. Vous n’avez pas trouvé la réponse que vous recherchez ?

    Posez votre question
  6. InfernO.vir
     
    Bonjour,

    Et le rapport de MBAM ?
    0
    1. henri280161 Messages postés 58 Statut Membre 5
       
      C'est clean de ce côté là analyse faites avec malwarebytes et en mode sans échec.
      Est ce normal d'avoir windows internet explorer à la plaçe de hacked by 8bits en fin de page.
      Merci à tous pour votre et vos aides précieuses....
      Henri
      0
  7. InfernO.vir
     
    Re,

    Comment ca? precise ta question je ne vois pas trop ce que tu veux dire ?
    0
    1. henri280161 Messages postés 58 Statut Membre 5
       
      Bonjour
      Lorsque j'ouvre IE avec la page d'aol, le titre de la page qui ce trouve tout en haut finit par windows internet explorer
      ex:" https://fr.yahoo.com/ windows internet explorer" est ce que ceci est normal de finir par ce windows internet explorer
      0
  8. InfernO.vir
     
    Bonjour,

    "Le titre tout haut" <-- tu parle dans la barre bleue vraiment tout en haut ou la barre d'adresse parce que si c'est la barre bleue c'est normal!
    0
    1. henri280161 Messages postés 58 Statut Membre 5
       
      Bonjour ,
      Oui c'est ça la barre bleue, donc si c'est normal c'est tout bon,
      Autre question: Que représente les chiffres et lettres devant les phrases lorsque l'on fait un scan avec hijackthis, que ce passerait-il si on supprimerait toutes ces phrases?
      Merci....
      0

Discussions similaires

To Be Filled By O.E.M...
xav|865 -
Bus!ll!s -

3 réponses
By Click Downloader ne fonctionne plus
Fan0uu -
fafidu69 -

10 réponses
ads by images+
Fildyr -
bazfile -

5 réponses
by click downloader
Danablain -
fafidu69 -

6 réponses
Logiciel bloqué
jeanclode -
luckydu43 -

1 réponse