[Virus] Interpretation de hijackthis
Scan saved at 05:53:45, on 01/01/2002
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
D:\Programmes\Panda antivirus\TPSrv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
D:\Programmes\Panda antivirus\FIREWALL\PNMSRV.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\explorer.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
D:\Programmes\hp\HP Software Update\HPWuSchd.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
D:\Programmes\daemon tool\daemon.exe
D:\Programmes\Panda antivirus\APVXDWIN.EXE
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
D:\Programmes\MouseWare\system\em_exec.exe
D:\Programmes\hp\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\MicroStar\WLANUtility\WlanUtility.exe
C:\WINDOWS\system32\niSvcLoc.exe
D:\Programmes\Panda antivirus\PavFnSvr.exe
C:\Program Files\Fichiers communs\Panda Software\PavShld\pavprsrv.exe
D:\Programmes\Panda antivirus\pavsrv51.exe
D:\Programmes\Panda antivirus\AVENGINE.EXE
D:\Programmes\Panda antivirus\PsImSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
D:\Programmes\Panda antivirus\WebProxy.exe
C:\Program Files\MicroStar\WLANUtility\WLAN_Service.exe
C:\WINDOWS\System32\alg.exe
D:\Programmes\Mozilla\firefox.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
D:\Programmes\hijackthis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.fr/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.fr/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.fr/keyword/%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {9B0E64CF-D5FF-3C2B-8D6D-52DDC852B832} - Preliminary.dll (file missing)
F2 - REG:system.ini: Shell=explorer.exe "C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\ibm00001.exe"
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\Programmes\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [HP Software Update] "D:\Programmes\hp\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [DXDllRegExe] dxdllreg.exe
O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [DAEMON Tools-1033] "D:\Programmes\daemon tool\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [APVXDWIN] "D:\Programmes\Panda antivirus\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [mmtask] "C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
O4 - HKLM\..\Run: [Preliminary] NsCplTray.exe
O4 - HKLM\..\Run: [scanSYS] XTermInit.exe
O4 - HKCU\..\Run: [LDM] D:\Programmes\\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [Shell] "C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\ibm00001.exe"
O4 - HKCU\..\Run: [PayTime] C:\WINDOWS\system32\paytime.exe
O4 - HKCU\..\Run: [desktop] C:\WINDOWS\system32\idemlog.exe
O4 - HKCU\..\Run: [ozim] C:\PROGRA~1\FICHIE~1\ozim\ozimm.exe
O4 - HKCU\..\Run: [keybdll] MSTCPDLL.exe
O4 - HKCU\..\Run: [runload32] barint.exe
O4 - HKCU\..\Run: [MON76234] install2.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = D:\Programmes\hp\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = ?
O4 - Global Startup: WlanUtility.lnk = C:\Program Files\MicroStar\WLANUtility\WlanUtility.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://D:\PROGRA~1\OFFICE~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\OFFICE~1\OFFICE11\REFIEBAR.DLL
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1009942306390
O17 - HKLM\System\CCS\Services\Tcpip\..\{10324CD0-3FDF-4C5D-BEAD-1B146E5CD826}: NameServer = 85.255.115.234,85.255.112.212
O17 - HKLM\System\CCS\Services\Tcpip\..\{579DB7E4-7660-4BF2-88B3-C62787D41D65}: NameServer = 85.255.115.234,85.255.112.212
O17 - HKLM\System\CCS\Services\Tcpip\..\{585252E7-12D8-40D5-95C2-54E05A2BB879}: NameServer = 85.255.115.234,85.255.112.212
O17 - HKLM\System\CCS\Services\Tcpip\..\{B8ABABEF-0CE2-40C6-A616-CF727E1014BA}: NameServer = 85.255.115.234,85.255.112.212
O17 - HKLM\System\CCS\Services\Tcpip\..\{B8DC7FD1-7326-4A31-9A69-CA8B70784549}: NameServer = 85.255.115.234,85.255.112.212
O17 - HKLM\System\CS1\Services\Tcpip\..\{10324CD0-3FDF-4C5D-BEAD-1B146E5CD826}: NameServer = 85.255.115.234,85.255.112.212
O18 - Protocol: bw+0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - D:\Programmes\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: offline-8876480 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: avldr - C:\WINDOWS\SYSTEM32\avldr.dll
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: MSI_WLAN_Service - Unknown owner - C:\Program Files\MicroStar\WLANUtility\WLAN_Service.exe
O23 - Service: NILM License manager - Macrovision Corporation - D:\Programmes\Labview\Shared\License Manager\Bin\lmgrd.exe
O23 - Service: NI Service Locator (niSvcLoc) - National Instruments - C:\WINDOWS\system32\niSvcLoc.exe
O23 - Service: Panda Function Service (PAVFNSVR) - Panda Software - D:\Programmes\Panda antivirus\PavFnSvr.exe
O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Software - C:\Program Files\Fichiers communs\Panda Software\PavShld\pavprsrv.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software - D:\Programmes\Panda antivirus\pavsrv51.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Panda Network Manager (PNMSRV) - Panda Software - D:\Programmes\Panda antivirus\FIREWALL\PNMSRV.EXE
O23 - Service: Panda IManager Service (PSIMSVC) - Panda Software Internacional - D:\Programmes\Panda antivirus\PsImSvc.exe
O23 - Service: Panda TPSrv (TPSrv) - Panda Software - D:\Programmes\Panda antivirus\TPSrv.exe
25 réponses
Une personne signale une infection par Spy Sheriff et demande quelles entrées de HijackThis il faut corriger après un scan, afin de nettoyer son système Windows XP. Le journal affiche de multiples processus et services, dont Panda Antivirus et Daemon Tools, mais aussi des entrées au démarrage suspectes, des barres MSN et plusieurs BHO. On relève notamment une référence dans system.ini pointant vers ibm00001.exe, des paramètres IE modifiés vers google.fr, des DNS inhabituels et une abondance de protocoles ou DLL suspects (BWPlug, GAPlug, etc.). D'autres entrées montrent des éléments inclassables (Fichiers communs, modules Real, pavshld, etc.) qui renforcent le risque de malware et suggèrent un nettoyage en profondeur ou une réinstallation complète recommandée selon le contexte.
-
De rien
Bonne continuation
A+ -
mais soucis sont réglés merci beaucoup pour ton aide , bonne continuation
-
re,
ou en sont tes soucis?
a+ -
Re,
redemarre ton pc et remet un hijack this
a+
--
Chouchou-Chouchou, alias Mister Chouchou² (copyright © Bansheestyle)-
Re , j ai redemmarer le PC voila le scan hijackthis que tu m a demander :
Logfile of HijackThis v1.99.1
Scan saved at 11:39:55, on 05/01/2002
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
D:\Programmes\Panda antivirus\TPSrv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
D:\Programmes\Panda antivirus\FIREWALL\PNMSRV.EXE
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
D:\Programmes\hp\HP Software Update\HPWuSchd.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
D:\Programmes\daemon tool\daemon.exe
D:\Programmes\Panda antivirus\APVXDWIN.EXE
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
D:\Programmes\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
D:\Programmes\MouseWare\system\em_exec.exe
D:\Programmes\hp\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\MicroStar\WLANUtility\WlanUtility.exe
C:\WINDOWS\system32\niSvcLoc.exe
D:\Programmes\Panda antivirus\PavFnSvr.exe
C:\Program Files\Fichiers communs\Panda Software\PavShld\pavprsrv.exe
D:\Programmes\Panda antivirus\pavsrv51.exe
D:\Programmes\Panda antivirus\AVENGINE.EXE
D:\Programmes\Panda antivirus\PsImSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
D:\Programmes\Panda antivirus\WebProxy.exe
C:\Program Files\MicroStar\WLANUtility\WLAN_Service.exe
C:\WINDOWS\System32\alg.exe
D:\Programmes\Panda antivirus\psimreal.exe
D:\Programmes\Panda antivirus\avciman.exe
D:\Programmes\hijackthis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.fr/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.fr/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.fr/keyword/%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1.4\SPYBOT~1\SDHelper.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [HP Software Update] "D:\Programmes\hp\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [DXDllRegExe] dxdllreg.exe
O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [DAEMON Tools-1033] "D:\Programmes\daemon tool\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [APVXDWIN] "D:\Programmes\Panda antivirus\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [mmtask] "C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
O4 - HKCU\..\Run: [LDM] D:\Programmes\\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [ozim] C:\PROGRA~1\FICHIE~1\ozim\ozimm.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = D:\Programmes\hp\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = ?
O4 - Global Startup: WlanUtility.lnk = C:\Program Files\MicroStar\WLANUtility\WlanUtility.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://D:\PROGRA~1\OFFICE~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\OFFICE~1\OFFICE11\REFIEBAR.DLL
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1009942306390
O18 - Protocol: bw+0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - D:\Programmes\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: offline-8876480 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: MSI_WLAN_Service - Unknown owner - C:\Program Files\MicroStar\WLANUtility\WLAN_Service.exe
O23 - Service: NILM License manager - Macrovision Corporation - D:\Programmes\Labview\Shared\License Manager\Bin\lmgrd.exe
O23 - Service: NI Service Locator (niSvcLoc) - National Instruments - C:\WINDOWS\system32\niSvcLoc.exe
O23 - Service: Panda Function Service (PAVFNSVR) - Panda Software - D:\Programmes\Panda antivirus\PavFnSvr.exe
O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Software - C:\Program Files\Fichiers communs\Panda Software\PavShld\pavprsrv.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software - D:\Programmes\Panda antivirus\pavsrv51.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Panda Network Manager (PNMSRV) - Panda Software - D:\Programmes\Panda antivirus\FIREWALL\PNMSRV.EXE
O23 - Service: Panda IManager Service (PSIMSVC) - Panda Software Internacional - D:\Programmes\Panda antivirus\PsImSvc.exe
O23 - Service: Panda TPSrv (TPSrv) - Panda Software - D:\Programmes\Panda antivirus\TPSrv.exe
a+
-
-
Salut.
j ai fixé O4 - HKLM\..\Run: [dmslo.exe] C:\WINDOWS\system32\dmslo.exe
mais je n ai pas trouvé C:\WINDOWS\system32\dmslo.exe meme en recherchant manuellement .
a+ -
Re
fixe ceci
O4 - HKLM\..\Run: [dmslo.exe] C:\WINDOWS\system32\dmslo.exe
et supprime
C:\WINDOWS\system32\dmslo.exe
a+
-
Salut
T en fais pas pour les 018 et pour winlogon, n y touche pas, il est necessaire a ton systeme et n est pas lié a spysheriff
Rend toi sur ce site :
http://www.virustotal.com/xhtml/virustotal_en.html
Clik sur parcourir
Recherche ceci :
C:\WINDOWS\system32\dmslo.exe
Clik send et colle le rapport stp
A+
-
bonjour ,
j ai toujours un processus lié a spy sheriff je pense , c est winlogon , il me met l UC a 50% tt le temps et lorsque j essai de terminer ce processus , un message d erreur me disant que "ceci est un processus systeme critique" apparait et m empeche de le supprimer . Comment pourais je le supprimer ?
Merci d avance -
Bonsoir.
J ai suprime ibm00001.exe par la metode de ben13010. j ai refais un scan avec hijackthis au cas ou il y ait encore des probleme et je voulais savoir si il etait normal que j ai autant de ligne O18-protocol (je n en voyais jamais sur les autres scan hijackthis sur le forum) . Voici le scan hijackthis:
Logfile of HijackThis v1.99.1
Scan saved at 12:50:30, on 02/01/2002
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
D:\Programmes\Panda antivirus\TPSrv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
D:\Programmes\Panda antivirus\FIREWALL\PNMSRV.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\niSvcLoc.exe
D:\Programmes\Panda antivirus\PavFnSvr.exe
C:\Program Files\Fichiers communs\Panda Software\PavShld\pavprsrv.exe
D:\Programmes\Panda antivirus\pavsrv51.exe
D:\Programmes\Panda antivirus\AVENGINE.EXE
D:\Programmes\Panda antivirus\PsImSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wuauclt.exe
D:\Programmes\Panda antivirus\apvxdwin.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
D:\Programmes\Panda antivirus\WebProxy.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
D:\Programmes\hp\HP Software Update\HPWuSchd.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
D:\Programmes\daemon tool\daemon.exe
C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
D:\Programmes\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
D:\Programmes\MouseWare\system\em_exec.exe
D:\Programmes\Panda antivirus\avciman.exe
D:\Programmes\Panda antivirus\psimreal.exe
D:\Programmes\hp\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\MicroStar\WLANUtility\WlanUtility.exe
C:\Program Files\MicroStar\WLANUtility\WLAN_Service.exe
D:\Programmes\hijackthis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.fr/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.fr/ie
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.fr/keyword/%s
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\Programmes\Spybot V1.4\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: ST - {9394EDE7-C8B5-483E-8773-474BF36AF6E4} - C:\Program Files\MSN Apps\ST\01.03.0000.1005\en-xu\stmain.dll
O2 - BHO: MSNToolBandBHO - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll
O3 - Toolbar: MSN - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\MSN Apps\MSN Toolbar\01.02.4000.1001\fr\msntb.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [HP Software Update] "D:\Programmes\hp\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [DXDllRegExe] dxdllreg.exe
O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [DAEMON Tools-1033] "D:\Programmes\daemon tool\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [APVXDWIN] "D:\Programmes\Panda antivirus\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [mmtask] "C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
O4 - HKLM\..\Run: [dmslo.exe] C:\WINDOWS\system32\dmslo.exe
O4 - HKCU\..\Run: [LDM] D:\Programmes\\Desktop Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [ozim] C:\PROGRA~1\FICHIE~1\ozim\ozimm.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = D:\Programmes\hp\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk = ?
O4 - Global Startup: WlanUtility.lnk = C:\Program Files\MicroStar\WLANUtility\WlanUtility.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://D:\PROGRA~1\OFFICE~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\OFFICE~1\OFFICE11\REFIEBAR.DLL
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1009942306390
O18 - Protocol: bw+0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - D:\Programmes\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O18 - Protocol: offline-8876480 - {4EEBA811-3312-49BA-9913-49B3A33F2859} - D:\Programmes\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O20 - Winlogon Notify: avldr - C:\WINDOWS\SYSTEM32\avldr.dll
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: MSI_WLAN_Service - Unknown owner - C:\Program Files\MicroStar\WLANUtility\WLAN_Service.exe
O23 - Service: NILM License manager - Macrovision Corporation - D:\Programmes\Labview\Shared\License Manager\Bin\lmgrd.exe
O23 - Service: NI Service Locator (niSvcLoc) - National Instruments - C:\WINDOWS\system32\niSvcLoc.exe
O23 - Service: Panda Function Service (PAVFNSVR) - Panda Software - D:\Programmes\Panda antivirus\PavFnSvr.exe
O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Software - C:\Program Files\Fichiers communs\Panda Software\PavShld\pavprsrv.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software - D:\Programmes\Panda antivirus\pavsrv51.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Panda Network Manager (PNMSRV) - Panda Software - D:\Programmes\Panda antivirus\FIREWALL\PNMSRV.EXE
O23 - Service: Panda IManager Service (PSIMSVC) - Panda Software Internacional - D:\Programmes\Panda antivirus\PsImSvc.exe
O23 - Service: Panda TPSrv (TPSrv) - Panda Software - D:\Programmes\Panda antivirus\TPSrv.exe
Encore merci pour votre aide . -
Tu vas me demander a chaque fois la meme question
LAULHEU !!! -
Tu vas me demander a chaque fois la meme question?
Ben si elle fait pas l effort de chercher comme dirait RF, t en pire pour elle ! -
AVATOA !!!
Regarde comme nous sommes traités ici ::
http://www.commentcamarche.net/forum/affich-2041105-Impossible-d-installer-msn-sur-mon-pc#0
Bisous
-
Soit tu fais la solution donné, soit tu remet un hijack this
a+ -
ok merci beaucoup je vais essayer de suprimer ce qui se trouve apre la valeur shell en mode sans echec (il y a un message d erreur en mode normal) et je crois que mon ordi ram encore parceque panda antivirus 2006 est constament entraint de faire une "analyse du courrier"
-
Re,
ouvre le bloc note et copie et colle ceci à l'interieur: (met regedit4 sur la 1ere ligne du bloc note)
REGEDIT4
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins]
"olsmd"=-
Puis enregistrer sous et dans:
Nom du fichier, met fix.reg
Type de fichier: selectionne "tous les fichiers"
clic sur enregistrer
ensuite double clic sur fix.reg et accepte de fusionner
**
Double clic sur killbox.exe (Pocket Killbox)
- coche: delete on reboot
- Dans "Full Path of File to Delete"
copie et colle:
C:\WINDOWS\System32\dmslo.exe
- clique sur la croix rouge
- une fenêtre va apparaître pour confirmation clique sur YES
- une seconde fenêtre te demande si tu veux redémarrer clique sur YES
Si ce message s’affiche ignore le :
http://tinypic.com/jsj7kl.jpg
Laisse le pc redémarrer.
et dis moi si tes soucis sont resolus
A+
-
salut
J ai fais ce que tu m as dit , j ai l impression que ces nettement mieux mais je ram un peu par rapport a la normal et lorsque je redemarre , j ai toujours un message d erreur me disant que C:\Program Files\Fichiers communs\Microsoft Shared\Web Folders\ibm00001.exe
est introuvable (je ne sais pas si ca a un rapport) ;
Merci beaucoup pour ton aide et pour ton efficacite
a+ -
Contributeursalut
Bonjour. Pour supprimer le message d'erreur au démarrage de Windows, concernant l'absence du fichier ibm00001.exe, il faut se rendre dans le Registre (Démarrer>Exécuter puis entrer le mot "regedit"). Dans la clé HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon, faire un double-click sur la valeur "Shell" et supprimer tout ce qui se trouve après "explorer.exe", c'est-à-dire tous les espaces ainsi que le mot "ibm00001.exe".
bye -
ContributeurBonjour,
Tu peux aussi utiliser un nettoyeur de registre qui te nettoiera ton registre automatiquement :
Tu as Advanced System Optimizer qui ne se contente pas qu'au nettoyage du registre : http://www.01net.com/telecharger/windows/Utilitaire/optimiseurs_et_tests/fiches/31235.html
Ou bien, RegSupreme qui nettoie seulement le registre : http://www.01net.com/telecharger/windows/Utilitaire/registre/fiches/27119.html
++
-
-
re,
ouvre le bloc note et copie et colle ceci à l'interieur:
**
REGEDIT4
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins]
"ppcmd"=-
**
Puis enregistrer sous et dans:
Nom du fichier, met fix.reg
Type de fichier: selectionne "tous les fichiers"
clic sur enregistrer
ensuite double clic sur fix.reg et accepte de fusionner
recherche et supprime ceci
C:\WINDOWS\system32\filesafer23.exe
C:\WINDOWS\System32\cshda.exe
C:\WINDOWS\System32\dmcpp.exe
redemarre et remet le prog
a+-
Salut ,
J ai copié ce qu il fallait dans le bloc note et je l ai ensuite enregistré.
J ai cherche ces fichiers
C:\WINDOWS\system32\filesafer23.exe
C:\WINDOWS\System32\cshda.exe
C:\WINDOWS\System32\dmcpp.exe
mais je n ai que trouvé et supprimé celui ci :
C:\WINDOWS\system32\filesafer23.exe
voici le rapport :
Rapport fait à 3:23:34,71 le 02/01/2002
Executé à partir de C:\Documents and Settings\Admin\Bureau\Hcsrch
OS: Microsoft Windows XP [version 5.1.2600]
*********************************************
Vérification HKLM\...\...\...\...\ruins
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins]
"olsmd"=hex:12,22,00,00,e3,e2,20,d3,34,fd,b2,47,a2,11,00,00,00
*********************************************
Fichiers détectés :
*********************************************
Recherche des processus aleatoires
d'après les modèles : cs***.exe, dm***.exe, ya***.exe
C:\WINDOWS\System32
dmslo.exe
*********************************************
Recherche presence C:\WINDOWS\System32\idemlog.exe...
non trouvé...
a+
-
-
j ai reussi a installer spybot 1.4 en mode sans echec (je crois avoir mal mis le mode sans echec pour ce qu il fallait faire precedement) j ai fais une analyse et aucun mouchard n a ete trouve .
Voici le rapport :
Rapport fait à 11:12:43,29 le 01/01/2002
Executé à partir de C:\Documents and Settings\Admin\Bureau\Hcsrch
OS: Microsoft Windows XP [version 5.1.2600]
*********************************************
Vérification HKLM\...\...\...\...\ruins
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins]
"ppcmd"=hex:8f,4e,00,00,66,61,57,52,4a,00,31,ca,21,11,00,00,00
*********************************************
Fichiers détectés :
C:\WINDOWS\system32\filesafer23.exe Présent !
*********************************************
Recherche des processus aleatoires
d'après les modèles : cs***.exe, dm***.exe, ya***.exe
C:\WINDOWS\System32
cshda.exe
dmcpp.exe
*********************************************
Recherche presence C:\WINDOWS\System32\idemlog.exe...
non trouvé...
a+ -
Re,
essai de le desinstaller en mode sans echec
**
celui qui commence par ceci
voici le rapport de Hcsrch :
Rapport fait à 8:34:33,70 le 01/01/2002
Executé à partir de C:\Documents and Settings\Admin\Bureau\Hcsrch
OS: Microsoft Windows XP [version 5.1.2600]
a+ -
lorsque j essai de desinstaller spybot1.3 un message d erreur apparait : impossible de créer un fichier temporaire. abandon de l installation. erreur 5 : accès refusés
Et losrsque tu me demande de te remettre le programme de quel programme parles tu stp ? -
Call of duty et PES5, tres bon jeu ;-)
Desinstalle Spybot - Search & Destroy 1.3
et installe la nouvelle version:
Spybot S&D 1.4 <<nouvelle version.
http://www.safer-networking.org/fr/index.htm
Démo d’utilisation (merci à Balltrap34 pour cette réalisation).
http://pageperso.aol.fr/Balltrap34/demo%20spybot.htm
Puis;
ouvre le bloc note et copie et colle ceci à l'interieur:
REGEDIT4
[-HKEY_LOCAL_MACHINE\SOFTWARE\CLASSES\HCLEAN32.EXE]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Software\Microsoft\Windows\CurrentVersion\ruins]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion]
"Disabled"=-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ruins]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WareOut]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Urls]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon]
"System"=-
"System"=""
[-HKEY_LOCAL_MACHINE\SOFTWARE\WareOut]
Puis enregistrer sous et dans:
Nom du fichier, met fix.reg
Type de fichier: selectionne "tous les fichiers"
clic sur enregistrer
ensuite double clic sur fix.reg et accepte de fusionner
-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_
et remet moi le programme stp
a+
- 1
- 2