[hijackthis] mon hijackthis est-il normal?Fermé

Question

Voici mon hijackthis je voulai savoir si il était clean ou si il y a des probléme car mon PC rame un peu.Merci à tous pour votre aide!vincentLogfile of HijackThis v1.99.1Scan saved at 20:51:20, on 15/03/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:D:\WINDOWS\System32\smss.exeD:\WINDOWS\system32\winlogon.exeD:\WINDOWS\system32\services.exeD:\WINDOWS\system32\lsass.exeD:\WINDOWS\System32\Ati2evxx.exeD:\WINDOWS\system32\svchost.exeD:\WINDOWS\System32\svchost.exeD:\WINDOWS\system32\spoolsv.exeD:\WINDOWS\system32\Ati2evxx.exeD:\WINDOWS\Explorer.EXED:\WINDOWS\System32\DRIVERS\CDANTSRV.EXED:\Program Files\Analog Devices\SoundMAX\SMAgent.exeD:\WINDOWS\System32\svchost.exeD:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeD:\WINDOWS\system32undll32.exeD:\Program Files\Fichiers communs\Real\Update_OBealsched.exeD:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXED:\WINDOWS\system32\wscntfy.exeD:\Program Files\Yahoo!2\Messenger\YPager.exeD:\Program Files\Internet Explorer\iexplore.exeD:\PROGRA~1\MOZILL~1\FIREFOX.EXED:\Program Files\WinRAR\WinRAR.exeD:\DOCUME~1\vince\LOCALS~1\Temp\Rar$EX03.547\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://216.130.185.122/sidesearch.htmlR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://216.130.185.122/sidesearch.htmlR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://216.130.185.122/sidesearch.htmlR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://216.130.185.122/sidesearch.htmlR0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://216.130.185.122/sidesearch.htmlR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet ExplorerR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensR3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - D:\Program Files\MyWebSearch\SrchAstt\2.bin\MWSSRCAS.DLLO1 - Hosts: 213.44.251.244 L2testauthd.lineage2.comO2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - D:\Program Files\MyWebSearch\SrchAstt\2.bin\MWSSRCAS.DLLO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dllO2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - D:\Program Files\MyWebSearch\bar\2.bin\MWSBAR.DLLO2 - BHO: RsyncHlpr Class - {16B238D5-80DE-47CE-8F17-B3ECE2C2248D} - D:\WINDOWS\System32syncmon.dllO2 - BHO: ohb - {4D568F0F-8AC9-40AB-88B7-415134C78777} - D:\WINDOWS\System32\winb2s32.dll (file missing)O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dllO3 - Toolbar: Begin2Search.com Bar - {52FE5233-367C-4EFB-BDD7-0BE4D212C107} - D:\WINDOWS\System32\winb2s32.dll (file missing)O3 - Toolbar: DAP Bar - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - F:	homas\DAP\dl accelerator\DAPIEBar.dllO4 - HKLM\..\Run: [ATIPTA] D:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeO4 - HKLM\..\Run: [AdslTaskBar] rundll32.exe stmctrl.dll,TaskBarO4 - HKLM\..\Run: [OfficeGuard RegChecker] "D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\ogrc.exe"O4 - HKLM\..\Run: [AVPCC] "D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe" /waitO4 - HKLM\..\Run: [TkBellExe] "D:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osbootO4 - HKLM\..\Run: [EPSON Stylus CX6400] D:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE /P19 "EPSON Stylus CX6400" /O6 "USB001" /M "Stylus CX6400"O8 - Extra context menu item: &Download with &DAP - F:	homas\DAP\DLACCE~1\dapextie.htmO8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZNO8 - Extra context menu item: Download &all with DAP - F:	homas\DAP\DLACCE~1\dapextie2.htmO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\j2re1.4.2_06\bin
pjpi142_06.dllO9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\j2re1.4.2_06\bin
pjpi142_06.dllO9 - Extra button: Run DAP - {669695BC-A811-4A9D-8CDF-BA8C795F261C} - F:	homas\DAP\DLACCE~1\DAP.EXEO9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - D:\PROGRA~1\Yahoo!2\MESSEN~1\YPager.exeO9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - D:\PROGRA~1\Yahoo!2\MESSEN~1\YPager.exeO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exeO16 - DPF: {0CB429C3-099E-4EF8-9C8C-357CDB273DEF} (VisioWebControl) - http://www.ipvision.fr/luz/VisioWeb.cabO16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cabO16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cabO16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cabO16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cabO17 - HKLM\System\CCS\Services\Tcpip\..\{BCD04B17-DFBA-4B80-9B68-420695CBCA45}: NameServer = 212.151.136.254 130.244.127.161O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - D:\WINDOWS\System32\Ati2evxx.exeO23 - Service: ATI Smart - Unknown owner - D:\WINDOWS\system32\ati2sgag.exeO23 - Service: AVP Control Centre Service (AVPCC) - Unknown owner - D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe" /service (file missing)O23 - Service: C-DillaSrv - C-Dilla Ltd - D:\WINDOWS\System32\DRIVERS\CDANTSRV.EXEO23 - Service: KAV Monitor Service (KAVMonitorService) - Unknown owner - D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpm.exe" /service (file missing)O23 - Service: Panda Firewall Service (PAVFIRES) - Unknown owner - D:\Program Files\Panda Software\Panda Antivirus Platinum\Firewall\PavFires.exe (file missing)O23 - Service: Panda anti-virus service (PAVSRV) - Unknown owner - D:\Program Files\Panda Software\Panda Antivirus Platinum\pavsrv51.exe (file missing)O23 - Service: RadClock - Unknown owner - D:\Program Files\RadLinker\RadClock.exeO23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - D:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

bernie61 · Answer

salutcommence par désinstaller MyWebSearch Searchet beginSearchavec Démarrer/PanneauConfig/ajoutSuppressionProgrammespuis refais un hijackthis pour terminer le nettoyagea+

vincent · Answer

voila avec  my web search de supprimer par contre je ne trouve pas beginSearch même pas avec regcleaner. Y a t-il des traces suspectes ou tout va bien?merci de ton aide.vincentLogfile of HijackThis v1.99.1Scan saved at 21:43:00, on 15/03/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:D:\WINDOWS\System32\smss.exeD:\WINDOWS\system32\winlogon.exeD:\WINDOWS\system32\services.exeD:\WINDOWS\system32\lsass.exeD:\WINDOWS\System32\Ati2evxx.exeD:\WINDOWS\system32\svchost.exeD:\WINDOWS\System32\svchost.exeD:\WINDOWS\system32\spoolsv.exeD:\WINDOWS\system32\Ati2evxx.exeD:\WINDOWS\Explorer.EXED:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exeD:\WINDOWS\System32\DRIVERS\CDANTSRV.EXED:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpm.exeD:\Program Files\Analog Devices\SoundMAX\SMAgent.exeD:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeD:\WINDOWS\system32undll32.exeD:\WINDOWS\System32\svchost.exeD:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exeD:\Program Files\Fichiers communs\Real\Update_OBealsched.exeD:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXED:\Program Files\Yahoo!2\Messenger\YPager.exeD:\WINDOWS\system32\wscntfy.exeD:\WINDOWS\system32\wuauclt.exeD:\Program Files\Teamspeak2_RC2\TeamSpeak.exeD:\Program Files\Internet Explorer\iexplore.exeD:\Program Files\WinRAR\WinRAR.exeD:\DOCUME~1\vince\LOCALS~1\Temp\Rar$EX00.594\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://216.130.185.122/sidesearch.htmlR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://216.130.185.122/sidesearch.htmlR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://216.130.185.122/sidesearch.htmlR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://216.130.185.122/sidesearch.htmlR0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://216.130.185.122/sidesearch.htmlR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet ExplorerR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO1 - Hosts: 213.44.251.244 L2testauthd.lineage2.comO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dllO2 - BHO: RsyncHlpr Class - {16B238D5-80DE-47CE-8F17-B3ECE2C2248D} - D:\WINDOWS\System32syncmon.dllO2 - BHO: ohb - {4D568F0F-8AC9-40AB-88B7-415134C78777} - (no file)O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dllO3 - Toolbar: (no name) - {52FE5233-367C-4EFB-BDD7-0BE4D212C107} - (no file)O3 - Toolbar: DAP Bar - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - F:	homas\DAP\dl accelerator\DAPIEBar.dllO4 - HKLM\..\Run: [ATIPTA] D:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeO4 - HKLM\..\Run: [AdslTaskBar] rundll32.exe stmctrl.dll,TaskBarO4 - HKLM\..\Run: [OfficeGuard RegChecker] "D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\ogrc.exe"O4 - HKLM\..\Run: [AVPCC] "D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe" /waitO4 - HKLM\..\Run: [TkBellExe] "D:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osbootO4 - HKLM\..\Run: [EPSON Stylus CX6400] D:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE /P19 "EPSON Stylus CX6400" /O6 "USB001" /M "Stylus CX6400"O8 - Extra context menu item: &Download with &DAP - F:	homas\DAP\DLACCE~1\dapextie.htmO8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZNO8 - Extra context menu item: Download &all with DAP - F:	homas\DAP\DLACCE~1\dapextie2.htmO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\j2re1.4.2_06\bin
pjpi142_06.dllO9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\j2re1.4.2_06\bin
pjpi142_06.dllO9 - Extra button: Run DAP - {669695BC-A811-4A9D-8CDF-BA8C795F261C} - F:	homas\DAP\DLACCE~1\DAP.EXEO9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - D:\PROGRA~1\Yahoo!2\MESSEN~1\YPager.exeO9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - D:\PROGRA~1\Yahoo!2\MESSEN~1\YPager.exeO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exeO16 - DPF: {0CB429C3-099E-4EF8-9C8C-357CDB273DEF} (VisioWebControl) - http://www.ipvision.fr/luz/VisioWeb.cabO16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cabO16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cabO16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cabO16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cabO17 - HKLM\System\CCS\Services\Tcpip\..\{BCD04B17-DFBA-4B80-9B68-420695CBCA45}: NameServer = 212.151.136.242 130.244.127.169O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - D:\WINDOWS\System32\Ati2evxx.exeO23 - Service: ATI Smart - Unknown owner - D:\WINDOWS\system32\ati2sgag.exeO23 - Service: AVP Control Centre Service (AVPCC) - Unknown owner - D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe" /service (file missing)O23 - Service: C-DillaSrv - C-Dilla Ltd - D:\WINDOWS\System32\DRIVERS\CDANTSRV.EXEO23 - Service: KAV Monitor Service (KAVMonitorService) - Unknown owner - D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpm.exe" /service (file missing)O23 - Service: Panda Firewall Service (PAVFIRES) - Unknown owner - D:\Program Files\Panda Software\Panda Antivirus Platinum\Firewall\PavFires.exe (file missing)O23 - Service: Panda anti-virus service (PAVSRV) - Unknown owner - D:\Program Files\Panda Software\Panda Antivirus Platinum\pavsrv51.exe (file missing)O23 - Service: RadClock - Unknown owner - D:\Program Files\RadLinker\RadClock.exeO23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - D:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

bernie61 · Answer

salut
En fait tu as Panda et Kaspery il y a sans doute conflit
Garde kaspery mais as-tu firewall ? sinon prend genre Kerio ou ZoneAlarm, et vire panda sinon tu effaces tout kaspery pour ne garder que Panda
Ici ma suggestion c’est virer panda

A vérifier (propriétés par cliq droit de souris) si tu connais (si tu n’es pas sûre compresse le fichier en ZIP et effaces le .EXE)
D:\WINDOWS\System32\rsyncmon.dll >> ??
F:\thomas\DAP\DLACCE~1\DAP.EXE >> ??

Relances HijackThis et cocher toutes ces lignes, puis FIX :
O1 - Hosts: 213.44.251.244 L2testauthd.lineage2.com
O2 - BHO: RsyncHlpr Class - {16B238D5-80DE-47CE-8F17-B3ECE2C2248D} - D:\WINDOWS\System32\rsyncmon.dll > si inconnu
O2 - BHO: ohb - {4D568F0F-8AC9-40AB-88B7-415134C78777} - (no file)
O3 - Toolbar: (no name) - {52FE5233-367C-4EFB-BDD7-0BE4D212C107} - (no file)
O8 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusearch.html?p=ZN
O9 - Extra button: Run DAP - {669695BC-A811-4A9D-8CDF-BA8C795F261C} - F:\thomas\DAP\DLACCE~1\DAP.EXE >> si inconnu
O23 - Service: Panda Firewall Service (PAVFIRES) - Unknown owner - D:\Program Files\Panda Software\Panda Antivirus Platinum\Firewall\PavFires.exe (file missing)
O23 - Service: Panda anti-virus service (PAVSRV) - Unknown owner - D:\Program Files\Panda Software\Panda Antivirus Platinum\pavsrv51.exe (file missing)
Effacer ce pgm
D:\Program Files\Panda Software\Panda Antivirus Platinum\Firewall\ tout repertoires PANDA comme tu as Kaspery
O23 - Service: Panda anti-virus service (PAVSRV) - Unknown owner - D:\Program Files\Panda Software\Panda Antivirus Platinum\pavsrv51.exe (file missing)
a+

vincet · Answer

pour le firewell j'ai celui de xpfaut-il le remplacer?

vincent · Answer

voila ce que sa donne:panda ne veut pas s'effacer et le rsyncmon.dll non plus pour ce dernier j'ai modifier l'extention.que faut-il que je fasse d'autre?merci de ton aide!Logfile of HijackThis v1.99.1Scan saved at 22:39:09, on 15/03/2005Platform: Windows XP SP2 (WinNT 5.01.2600)MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)Running processes:D:\WINDOWS\System32\smss.exeD:\WINDOWS\system32\winlogon.exeD:\WINDOWS\system32\services.exeD:\WINDOWS\system32\lsass.exeD:\WINDOWS\System32\Ati2evxx.exeD:\WINDOWS\system32\svchost.exeD:\WINDOWS\System32\svchost.exeD:\WINDOWS\system32\spoolsv.exeD:\WINDOWS\system32\Ati2evxx.exeD:\WINDOWS\Explorer.EXED:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exeD:\WINDOWS\System32\DRIVERS\CDANTSRV.EXED:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpm.exeD:\Program Files\Analog Devices\SoundMAX\SMAgent.exeD:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeD:\WINDOWS\system32undll32.exeD:\WINDOWS\System32\svchost.exeD:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exeD:\Program Files\Fichiers communs\Real\Update_OBealsched.exeD:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXED:\Program Files\Yahoo!2\Messenger\YPager.exeD:\WINDOWS\system32\wscntfy.exeD:\Program Files\Internet Explorer\iexplore.exeD:\PROGRA~1\MOZILL~1\FIREFOX.EXED:\Program Files\RegCleaner\RegCleanr.exeD:\DOCUME~1\vince\LOCALS~1\Temp\Rar$EX00.469\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer,SearchURL = http://216.130.185.122/sidesearch.htmlR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://216.130.185.122/sidesearch.htmlR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://216.130.185.122/sidesearch.htmlR0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://216.130.185.122/sidesearch.htmlR0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://216.130.185.122/sidesearch.htmlR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet ExplorerR0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = LiensO2 - BHO: RsyncHlpr Class - {16B238D5-80DE-47CE-8F17-B3ECE2C2248D} - D:\WINDOWS\System32syncmon.dll (file missing)O2 - BHO: ohb - {4D568F0F-8AC9-40AB-88B7-415134C78777} - (no file)O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dllO3 - Toolbar: DAP Bar - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - F:	homas\DAP\dl accelerator\DAPIEBar.dllO4 - HKLM\..\Run: [ATIPTA] D:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exeO4 - HKLM\..\Run: [AdslTaskBar] rundll32.exe stmctrl.dll,TaskBarO4 - HKLM\..\Run: [OfficeGuard RegChecker] "D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\ogrc.exe"O4 - HKLM\..\Run: [AVPCC] "D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe" /waitO4 - HKLM\..\Run: [TkBellExe] "D:\Program Files\Fichiers communs\Real\Update_OBealsched.exe"  -osbootO4 - HKLM\..\Run: [EPSON Stylus CX6400] D:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S10IC2.EXE /P19 "EPSON Stylus CX6400" /O6 "USB001" /M "Stylus CX6400"O8 - Extra context menu item: &Download with &DAP - F:	homas\DAP\DLACCE~1\dapextie.htmO8 - Extra context menu item: Download &all with DAP - F:	homas\DAP\DLACCE~1\dapextie2.htmO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\j2re1.4.2_06\bin
pjpi142_06.dllO9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files\Java\j2re1.4.2_06\bin
pjpi142_06.dllO9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - D:\PROGRA~1\Yahoo!2\MESSEN~1\YPager.exeO9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - D:\PROGRA~1\Yahoo!2\MESSEN~1\YPager.exeO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exeO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exeO16 - DPF: {0CB429C3-099E-4EF8-9C8C-357CDB273DEF} (VisioWebControl) - http://www.ipvision.fr/luz/VisioWeb.cabO16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cabO16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - http://a840.g.akamai.net/7/840/537/2004061001/housecall.trendmicro.com/housecall/xscan53.cabO16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cabO16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cabO17 - HKLM\System\CCS\Services\Tcpip\..\{BCD04B17-DFBA-4B80-9B68-420695CBCA45}: NameServer = 212.151.136.242 130.244.127.169O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - D:\WINDOWS\System32\Ati2evxx.exeO23 - Service: ATI Smart - Unknown owner - D:\WINDOWS\system32\ati2sgag.exeO23 - Service: AVP Control Centre Service (AVPCC) - Unknown owner - D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe" /service (file missing)O23 - Service: C-DillaSrv - C-Dilla Ltd - D:\WINDOWS\System32\DRIVERS\CDANTSRV.EXEO23 - Service: KAV Monitor Service (KAVMonitorService) - Unknown owner - D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpm.exe" /service (file missing)O23 - Service: Panda Firewall Service (PAVFIRES) - Unknown owner - D:\Program Files\Panda Software\Panda Antivirus Platinum\Firewall\PavFires.exe (file missing)O23 - Service: Panda anti-virus service (PAVSRV) - Unknown owner - D:\Program Files\Panda Software\Panda Antivirus Platinum\pavsrv51.exe (file missing)O23 - Service: RadClock - Unknown owner - D:\Program Files\RadLinker\RadClock.exeO23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - D:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

[hijackthis] mon hijackthis est-il normal?

5 réponses

Discussions similaires

Newsletters