Commentcamarche HijackThis

Résolu
-CJ- -  
Bonjour,
jai telecharger le logiciel HijackThis et il ya 6 option mai je comprend pas ce logiciel sa sert a koi informer moi svp et quel option analyse les trojan, et les problème, car cè ecrit en englais -_-" et si vous comprenez je vous ecrit le rappot ( oui ou non ) merci infiniment :-)
Configuration: Windows trust
Firefox 3.0.4

3 réponses

  • Votes
  • Date
  • Date décroissante
  1. Utilisateur anonyme
    Bonjjour

    Voici de la lecture
    https://www.zebulon.fr/dossiers/securite/43-hijackthis.html

    J'ai pas compris le reste de ta question ..
    1. -CJ- Auteur
      Logfile of Trend Micro HijackThis v2.0.2
      Scan saved at 17:52:44, on 11/12/2008
      Platform: Windows XP SP2 (WinNT 5.01.2600)
      MSIE: Internet Explorer v7.00 (7.00.6000.20661)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      D:\PCTOOL~1\LANGFI~1\avgwdsvc.exe
      C:\Program Files\Java\jre6\bin\jqs.exe
      C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\mdm.exe
      C:\WINDOWS\system32\PnkBstrA.exe
      C:\WINDOWS\system32\PnkBstrB.exe
      D:\PCTOOL~1\LANGFI~1\avgrsx.exe
      C:\WINDOWS\Explorer.EXE
      C:\Program Files\Java\jre6\bin\jusched.exe
      D:\PCTOOL~1\LANGFI~1\avgtray.exe
      C:\WINDOWS\system32\ctfmon.exe
      D:\PC Tools Firewall Plus\LangFiles\Ares\Ares.exe
      D:\PC Tools Firewall Plus\LangFiles\HSDPA USB MODEM\USB Modem.exe
      D:\PC Tools Firewall Plus\LangFiles\firefox.exe
      C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
      D:\PC Tools Firewall Plus\LangFiles\HijackThis.exe
      C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
      C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
      C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
      C:\Program Files\Windows Live\Messenger\msnmsgr.exe
      C:\Program Files\Windows Live\Contacts\wlcomm.exe
      C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://D:\PC Tools Firewall Plus\LangFiles\Copernic Agent\CopernicAgentExt.rdl/INTEGRATION_BAND_SEARCHBAR_HTML
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com/?SearchSource=10&ctid=CT2004604
      R3 - URLSearchHook: (no name) - {BE89472C-B803-4D1D-9A9A-0A63660E0FE3} - D:\PCTOOL~1\LANGFI~1\COPERN~1\COPERN~1.DLL
      O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - D:\PC Tools Firewall Plus\LangFiles\avgssie.dll
      O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
      O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
      O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - D:\PCTOOL~1\LANGFI~1\AVGTOO~1.DLL
      O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
      O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - D:\PCTOOL~1\LANGFI~1\AVGTOO~1.DLL
      O3 - Toolbar: Copernic Agent - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - D:\PC Tools Firewall Plus\LangFiles\Copernic Agent\CopernicAgentExt.dll
      O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
      O4 - HKLM\..\Run: [AVG8_TRAY] D:\PCTOOL~1\LANGFI~1\avgtray.exe
      O4 - HKCU\..\Run: [TransBar] C:\Program Files\TransBar\TransBar.exe /s
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKCU\..\Run: [ares] "D:\PC Tools Firewall Plus\LangFiles\Ares\Ares.exe" -h
      O8 - Extra context menu item: Chercher avec Copernic Agent - res://D:\PC Tools Firewall Plus\LangFiles\Copernic Agent\CopernicAgentExt.rdl/INTEGRATION_MENU_SEARCHEXT
      O9 - Extra button: (no name) - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - D:\PCTOOL~1\LANGFI~1\COPERN~1\COPERN~1.EXE
      O9 - Extra 'Tools' menuitem: Démarrer Copernic Agent - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - D:\PCTOOL~1\LANGFI~1\COPERN~1\COPERN~1.EXE
      O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
      O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
      O9 - Extra button: Copernic Agent - {688DC797-DC11-46A7-9F1B-445F4F58CE6E} - D:\PCTOOL~1\LANGFI~1\COPERN~1\COPERN~1.EXE
      O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
      O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
      O17 - HKLM\System\CCS\Services\Tcpip\..\{917D897F-DD7D-4497-91D1-059AC0EACBD4}: NameServer = 213.140.34.65 213.140.34.139
      O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
      O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - D:\PC Tools Firewall Plus\LangFiles\avgpp.dll
      O20 - AppInit_DLLs: avgrsstx.dll
      O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - D:\PCTOOL~1\LANGFI~1\avgwdsvc.exe
      O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Unknown owner - C:\Program Files\Bonjour\mDNSResponder.exe (file missing)
      O23 - Service: Boonty Games - Unknown owner - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe (file missing)
      O23 - Service: FLEXnet Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (file missing)
      O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
      O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
      O23 - Service: Windows Live OneCare Health Monitor (OcHealthMon) - Unknown owner - C:\Program Files\Microsoft Windows OneCare Live\OcHealthMon.exe (file missing)
      O23 - Service: OneCare AntiSpyware and AntiVirus (OneCareMP) - Unknown owner - C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MsMpEng.exe (file missing)
      O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
      O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
      O23 - Service: Windows Live OneCare (winss) - Unknown owner - C:\Program Files\Microsoft Windows OneCare Live\winss.exe (file missing)
  2. -CJ- Auteur
    il mont dit que meme si je réussi à le lancer HijackThis ill faut etre expert pour lire le contenu du rapport et choisire et suprimer les menace et les viruse
    1. Utilisateur anonyme
      Expert est un bien grand mot ..
      Si tu as un doute d'infection colle ton rapport ici on regardera ce qu'il s'y passe.
      1. -CJ- Auteur
        c normal ?
      2. -CJ- Auteur
        Logfile of Trend Micro HijackThis v2.0.2
        Scan saved at 18:00:42, on 11/12/2008
        Platform: Windows XP SP2 (WinNT 5.01.2600)
        MSIE: Internet Explorer v7.00 (7.00.6000.20661)
        Boot mode: Normal

        Running processes:
        C:\WINDOWS\System32\smss.exe
        C:\WINDOWS\system32\winlogon.exe
        C:\WINDOWS\system32\services.exe
        C:\WINDOWS\system32\lsass.exe
        C:\WINDOWS\system32\svchost.exe
        C:\WINDOWS\System32\svchost.exe
        D:\PCTOOL~1\LANGFI~1\avgwdsvc.exe
        C:\Program Files\Java\jre6\bin\jqs.exe
        C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\mdm.exe
        C:\WINDOWS\system32\PnkBstrA.exe
        C:\WINDOWS\system32\PnkBstrB.exe
        D:\PCTOOL~1\LANGFI~1\avgrsx.exe
        C:\WINDOWS\Explorer.EXE
        C:\Program Files\Java\jre6\bin\jusched.exe
        D:\PCTOOL~1\LANGFI~1\avgtray.exe
        C:\WINDOWS\system32\ctfmon.exe
        D:\PC Tools Firewall Plus\LangFiles\Ares\Ares.exe
        D:\PC Tools Firewall Plus\LangFiles\HSDPA USB MODEM\USB Modem.exe
        D:\PC Tools Firewall Plus\LangFiles\firefox.exe
        C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
        D:\PC Tools Firewall Plus\LangFiles\HijackThis.exe
        C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
        C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
        C:\Documents and Settings\Administrateur\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
        C:\Program Files\Windows Live\Messenger\msnmsgr.exe
        C:\Program Files\Windows Live\Contacts\wlcomm.exe
        C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

        R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://D:\PC Tools Firewall Plus\LangFiles\Copernic Agent\CopernicAgentExt.rdl/INTEGRATION_BAND_SEARCHBAR_HTML
        R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com/?SearchSource=10&ctid=CT2004604
        R3 - URLSearchHook: (no name) - {BE89472C-B803-4D1D-9A9A-0A63660E0FE3} - D:\PCTOOL~1\LANGFI~1\COPERN~1\COPERN~1.DLL
        O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - D:\PC Tools Firewall Plus\LangFiles\avgssie.dll
        O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
        O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
        O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
        O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - D:\PCTOOL~1\LANGFI~1\AVGTOO~1.DLL
        O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
        O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - D:\PCTOOL~1\LANGFI~1\AVGTOO~1.DLL
        O3 - Toolbar: Copernic Agent - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - D:\PC Tools Firewall Plus\LangFiles\Copernic Agent\CopernicAgentExt.dll
        O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
        O4 - HKLM\..\Run: [AVG8_TRAY] D:\PCTOOL~1\LANGFI~1\avgtray.exe
        O4 - HKCU\..\Run: [TransBar] C:\Program Files\TransBar\TransBar.exe /s
        O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
        O4 - HKCU\..\Run: [ares] "D:\PC Tools Firewall Plus\LangFiles\Ares\Ares.exe" -h
        O8 - Extra context menu item: Chercher avec Copernic Agent - res://D:\PC Tools Firewall Plus\LangFiles\Copernic Agent\CopernicAgentExt.rdl/INTEGRATION_MENU_SEARCHEXT
        O9 - Extra button: (no name) - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - D:\PCTOOL~1\LANGFI~1\COPERN~1\COPERN~1.EXE
        O9 - Extra 'Tools' menuitem: Démarrer Copernic Agent - {193B17B0-7C9F-4D5B-AEAB-8D3605EFC084} - D:\PCTOOL~1\LANGFI~1\COPERN~1\COPERN~1.EXE
        O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
        O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
        O9 - Extra button: Copernic Agent - {688DC797-DC11-46A7-9F1B-445F4F58CE6E} - D:\PCTOOL~1\LANGFI~1\COPERN~1\COPERN~1.EXE
        O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
        O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
        O17 - HKLM\System\CCS\Services\Tcpip\..\{917D897F-DD7D-4497-91D1-059AC0EACBD4}: NameServer = 213.140.34.65 213.140.34.139
        O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
        O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - D:\PC Tools Firewall Plus\LangFiles\avgpp.dll
        O20 - AppInit_DLLs: avgrsstx.dll
        O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - D:\PCTOOL~1\LANGFI~1\avgwdsvc.exe
        O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Unknown owner - C:\Program Files\Bonjour\mDNSResponder.exe (file missing)
        O23 - Service: Boonty Games - Unknown owner - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe (file missing)
        O23 - Service: FLEXnet Licensing Service - Unknown owner - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (file missing)
        O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
        O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
        O23 - Service: Windows Live OneCare Health Monitor (OcHealthMon) - Unknown owner - C:\Program Files\Microsoft Windows OneCare Live\OcHealthMon.exe (file missing)
        O23 - Service: OneCare AntiSpyware and AntiVirus (OneCareMP) - Unknown owner - C:\Program Files\Microsoft Windows OneCare Live\Antivirus\MsMpEng.exe (file missing)
        O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
        O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
        O23 - Service: Windows Live OneCare (winss) - Unknown owner - C:\Program Files\Microsoft Windows OneCare Live\winss.exe (file missing)

    Discussions similaires

    recours collectif HP dv 9000
    éric

    1229 réponses