Bonjour, Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 20:58:40, on 08/09/2008 Platform: Windows Vista SP1 (WinNT 6.00.1905) MSIE: Internet Explorer v7.00 (7.00.6001.18000) Boot mode: Normal Running processes: C:\Windows\system32\Dwm.exe C:\Windows\system32\taskeng.exe C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe C:\Program Files\Dell Support Center\bin\sprtcmd.exe C:\Program Files\DellTPad\Apoint.exe C:\Program Files\Sigmatel\C-Major Audio\WDM\sttray.exe C:\Windows\System32\rundll32.exe C:\Windows\System32\rundll32.exe C:\Windows\System32\rundll32.exe C:\Windows\System32\YUR30B5.exe C:\Windows\System32\YUR31DD.exe C:\Windows\System32\YUR3557.exe C:\Windows\System32\YUR3882.exe C:\Program Files\Unlocker\UnlockerAssistant.exe C:\Windows\ehome\ehtray.exe C:\Windows\ehome\ehmsas.exe C:\Program Files\Windows Live\Messenger\msnmsgr.exe C:\Program Files\DellTPad\HidFind.exe C:\Program Files\DellTPad\Apntex.exe C:\Windows\system32\wbem\unsecapp.exe C:\Program Files\Windows Media Player\wmpnscfg.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Windows\System32\rundll32.exe C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe C:\Program Files\Digital Line Detect\DLG.exe C:\Program Files\Dell\QuickSet\quickset.exe C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe c:\Program Files\WIDCOMM\Bluetooth Software\BtStackServer.exe c:\users\alphonse\appdata\local\sgauy.exe C:\Windows\system32\rundll32.exe C:\Windows\system32\Taskmgr.exe C:\Windows\explorer.exe C:\Program Files\Internet Explorer\ieuser.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe C:\Program Files\Internet Explorer\iexplore.exe C:\Windows\system32\Macromed\Flash\FlashUtil9f.exe C:\Users\alphonse\AppData\Local\Temp\Temp1_HiJackThis.zip\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/webhp?gws_rd=ssl R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.google.fr R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ww17.ads.eorezo.com/cgi-bin/advert/getads.cgi?x_format=redirect&x_dp_id=9 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Internet Explorer fourni par Dell R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\Program Files\Orange\SearchURLHook\SearchPageURL.dll R3 - URLSearchHook: SweetIM ToolbarURLSearchHook Class - {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll R3 - URLSearchHook: (no name) - {0579B4B6-0293-4d73-B02D-5EBB0BA0F0A2} - C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL O1 - Hosts: ::1 localhost O3 - Toolbar: SweetIM Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll O3 - Toolbar: Ask Toolbar - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe" O4 - HKLM\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter O4 - HKLM\..\Run: [Apoint] C:\Program Files\DellTPad\Apoint.exe O4 - HKLM\..\Run: [SigmatelSysTrayApp] %ProgramFiles%\SigmaTel\C-Major Audio\WDM\sttray.exe O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [NVHotkey] rundll32.exe C:\Windows\system32\nvHotkey.dll,Start O4 - HKLM\..\Run: [\YUR30B5.exe] C:\Windows\system32\YUR30B5.exe O4 - HKLM\..\Run: [\YUR31DD.exe] C:\Windows\system32\YUR31DD.exe O4 - HKLM\..\Run: [\YUR3557.exe] C:\Windows\system32\YUR3557.exe O4 - HKLM\..\Run: [\YUR3882.exe] C:\Windows\system32\YUR3882.exe O4 - HKLM\..\Run: [ANTIVIRUS] C:\Program Files\MSA\MSA.exe O4 - HKLM\..\Run: [\YURB81D.exe] C:\Windows\system32\YURB81D.exe O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe" O4 - HKCU\..\Run: [DellSupportCenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe O4 - HKCU\..\Run: [ahvkesds] C:\ProgramData\ahvkesds\qlwpeboz.exe O4 - HKCU\..\Run: [Windows update loader] C:\Windows\xpupdate.exe O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [\YUR30B5.exe] C:\Windows\system32\YUR30B5.exe O4 - HKCU\..\Run: [\YUR31DD.exe] C:\Windows\system32\YUR31DD.exe O4 - HKCU\..\Run: [\YUR3557.exe] C:\Windows\system32\YUR3557.exe O4 - HKCU\..\Run: [\YUR3882.exe] C:\Windows\system32\YUR3882.exe O4 - HKCU\..\Run: [ANTIVIRUS] C:\Program Files\MSA\MSA.exe O4 - HKCU\..\Run: [MSServer] rundll32.exe C:\Users\alphonse\AppData\Local\Temp\ssqOGvwt.dll,#1 O4 - HKCU\..\Run: [\YURB81D.exe] C:\Windows\system32\YURB81D.exe O4 - HKCU\..\Run: [\YURC679.exe] C:\Windows\system32\YURC679.exe O4 - HKCU\..\Run: [\YURC908.exe] C:\Windows\system32\YURC908.exe O4 - HKCU\..\Run: [\YURC8F9.exe] C:\Windows\system32\YURC8F9.exe O4 - HKCU\..\Run: [\YURD113.exe] C:\Windows\system32\YURD113.exe O4 - HKCU\..\Run: [\YUR4AF4.exe] C:\Windows\system32\YUR4AF4.exe O4 - HKCU\..\Run: [\YURDB50.exe] C:\Windows\system32\YURDB50.exe O4 - HKCU\..\Run: [\YURDBAE.exe] C:\Windows\system32\YURDBAE.exe O4 - HKCU\..\Run: [\YURDC1B.exe] C:\Windows\system32\YURDC1B.exe O4 - HKCU\..\Run: [\YURDF85.exe] C:\Windows\system32\YURDF85.exe O4 - HKCU\..\Run: [\YUR5D5B.exe] C:\Windows\system32\YUR5D5B.exe O4 - HKCU\..\Run: [\YUR1DBC.exe] C:\Windows\system32\YUR1DBC.exe O4 - HKCU\..\Run: [\YUR495E.exe] C:\Windows\system32\YUR495E.exe O4 - HKCU\..\Run: [\YUR52B1.exe] C:\Windows\system32\YUR52B1.exe O4 - HKCU\..\Run: [\YUR5EE1.exe] C:\Windows\system32\YUR5EE1.exe O4 - HKCU\..\Run: [\YURDA57.exe] C:\Windows\system32\YURDA57.exe O4 - HKCU\..\Run: [\YUREA00.exe] C:\Windows\system32\YUREA00.exe O4 - HKCU\..\Run: [\YURF249.exe] C:\Windows\system32\YURF249.exe O4 - HKCU\..\Run: [\YURF630.exe] C:\Windows\system32\YURF630.exe O4 - HKCU\..\Run: [\YURF9F7.exe] C:\Windows\system32\YURF9F7.exe O4 - HKCU\..\Run: [\YURC754.exe] C:\Windows\system32\YURC754.exe O4 - HKCU\..\Run: [\YURC753.exe] C:\Windows\system32\YURC753.exe O4 - HKCU\..\Run: [\YURCABD.exe] C:\Windows\system32\YURCABD.exe O4 - HKCU\..\Run: [\YURD49C.exe] C:\Windows\system32\YURD49C.exe O4 - HKCU\..\Run: [\YURDDA1.exe] C:\Windows\system32\YURDDA1.exe O4 - HKCU\..\Run: [\YUR533D.exe] C:\Windows\system32\YUR533D.exe O4 - HKCU\..\Run: [cmds] rundll32.exe C:\Users\alphonse\AppData\Local\Temp\yayaYrsp.dll,c O4 - HKCU\..\Run: [\YUR111F.exe] C:\Windows\system32\YUR111F.exe O4 - HKCU\..\Run: [\YUR112F.exe] C:\Windows\system32\YUR112F.exe O4 - HKCU\..\Run: [\YUR14A8.exe] C:\Windows\system32\YUR14A8.exe O4 - HKCU\..\Run: [\YUR15E0.exe] C:\Windows\system32\YUR15E0.exe O4 - HKCU\..\Run: [\YURFAC4.exe] C:\Windows\system32\YURFAC4.exe O4 - HKCU\..\Run: [\YURFAE3.exe] C:\Windows\system32\YURFAE3.exe O4 - HKCU\..\Run: [\YURFB50.exe] C:\Windows\system32\YURFB50.exe O4 - HKCU\..\Run: [\YUR24B0.exe] C:\Windows\system32\YUR24B0.exe O4 - HKCU\..\Run: [\YUR1F.exe] C:\Windows\system32\YUR1F.exe O4 - HKCU\..\Run: [\YUR9EE.exe] C:\Windows\system32\YUR9EE.exe O4 - HKCU\..\Run: [\YUR9CF.exe] C:\Windows\system32\YUR9CF.exe O4 - HKCU\..\Run: [\YUR18AE.exe] C:\Windows\system32\YUR18AE.exe O4 - HKCU\..\Run: [\YUR1AD0.exe] C:\Windows\system32\YUR1AD0.exe O4 - HKCU\..\Run: [\YUR1E78.exe] C:\Windows\system32\YUR1E78.exe O4 - HKCU\..\Run: [\YUR1E1A.exe] C:\Windows\system32\YUR1E1A.exe O4 - HKCU\..\Run: [\YUR2E02.exe] C:\Windows\system32\YUR2E02.exe O4 - HKCU\..\Run: [sgauy] "c:\users\alphonse\appdata\local\sgauy.exe" sgauy O4 - HKCU\..\Run: [d283fbe3] rundll32.exe "C:\Users\alphonse\AppData\Local\Temp\nlpbetmb.dll",b O4 - Startup: OneNote 2007 - Capture d'écran et lancement.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE O4 - Global Startup: BTTray.lnk = ? O4 - Global Startup: Digital Line Detect.lnk = C:\Program Files\Digital Line Detect\DLG.exe O4 - Global Startup: QuickSet.lnk = ? O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000 O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O8 - Extra context menu item: Envoyer l'&image au périphérique Bluetooth... - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - c:\Program Files\Java\jre1.6.0\bin\npjpi160.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - c:\Program Files\Java\jre1.6.0\bin\npjpi160.dll O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll O9 - Extra button: @C:\Windows\WindowsMobile\INetRepl.dll,-222 - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll O9 - Extra 'Tools' menuitem: @C:\Windows\WindowsMobile\INetRepl.dll,-223 - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\Windows\WindowsMobile\INetRepl.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm O13 - Gopher Prefix: O15 - Trusted Zone: https://www.orange.fr/portail O16 - DPF: {04CB5B64-5915-4629-B869-8945CEBADD21} (Module de délivrance de certificat MINEFI) - https://static.impots.gouv.fr/abos/static/securite/certdgi1.cab O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Windows\system32\aestsrv.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom SA - C:\PROGRA~1\COMMON~1\France Telecom\Shared Modules\FTRTSVC\0\FTRTSVC.exe O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Roxio\Roxio MyDVD DE\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe O23 - Service: SupportSoft Sprocket Service (dellsupportcenter) (sprtsvc_dellsupportcenter) - SupportSoft, Inc. - C:\Program Files\Dell Support Center\bin\sprtsvc.exe O23 - Service: SigmaTel Audio Service (STacSV) - IDT, Inc. - C:\Windows\system32\STacSV.exe O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

Demande d'info sur rapport hijjackthis - Page 2

Réponse 21 / 21

geoffrey5 Messages postés 14008 Statut Contributeur sécurité 10

Salut alf !!

comment se fait il que tu n arrive pas à télécharger combofix ??

Télécharger sur le bureau malwarebytes à cette adresse :

https://www.androidworld.fr/

Voici un tuto pour bien l installer et bien l utiliser :

https://www.androidworld.fr/

aide toi bien du tuto pour supprimer correctement ce qu il aura trouvé

Après l analyse, redémarrer le pc et poste le rapport !!

Et refais un nouveau rapport hijackthis stp

Discussions similaires

sms du 38028

Impossible d'afficher le rapport de tableau croisé dynamique sur un rapport

sms reçu d'Intrum justitia

J'ai reçu un sms louche du 38028

Logiciel équivalent à Crystal Disk Info pour Mac.

Discussions similaires

Newsletters