Task manager s'execute auttomatiquement [Résolu]

Réponse 1 / 9

Yoan Messages postés 11795 Date d'inscription mardi 1 février 2005 Statut Modérateur Dernière intervention 10 décembre 2023 2 327
25 janv. 2006 à 19:31

Salut,
Créé un log hijackthis et cole-le ici.
http://www.infos-du-net.com/telecharger/HijackThis.html

tony
26 janv. 2006 à 21:03

merci pour ton aide mai je narive pa a coller comment faire merci de maider

Réponse 2 / 9

tony
26 janv. 2006 à 21:14

Scan saved at 20:55:27, on 26/01/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Inventel\Gateway\wlancfg.exe
C:\Program Files\LimeWire\LimeWire.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\RADI\Local Settings\Temporary Internet Files\Content.IE5\0P2RGHUV\HijackThis[1].exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://side.search.ke.voila.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.files-ftp.com/~unicorni/phpBB2/index.php
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://side.search.ke.voila.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - <default> - (no file)
O2 - BHO: CExtension Object - {0019C3E2-DD48-4A6D-ABCD-8D32436323D9} - C:\WINDOWS\bxxs5.dll
O2 - BHO: SuperBar - {136A9D1D-1F4B-43D4-8359-6F2382449255} - C:\Program Files\SUPERBAR\SUPERBAR.dll
O2 - BHO: URLLink - {4A2AACF3-ADF6-11D5-98A9-00E018981B9E} - C:\Program Files\NewDotNet\newdotnet7_14.dll
O2 - BHO: Miniclip - {4E7BD74F-2B8D-469E-89B3-BE29F5D3E32D} - C:\PROGRA~1\MINICL~1\MINICL~1.DLL
O2 - BHO: Toolbar Wanadoo - {4E7BD74F-2B8D-469E-8FB0-B921F5DBF922} - C:\PROGRA~1\WANADO~1\WANADO~2.DLL
O2 - BHO: RXResultTracker Class - {59879FA4-4790-461c-A1CC-4EC4DE4CA483} - C:\PROGRA~1\RXTOOL~1\sfcont.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [AudioDeck] C:\Program Files\VIAudioi\SBADeck\ADeck.exe 1
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [MMTray] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mm_tray.exe"
O4 - HKLM\..\Run: [mmtask] "C:\Program Files\Musicmatch\Musicmatch Jukebox\mmtask.exe"
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [winupdates] C:\Program Files\winupdates\winupdates.exe /auto
O4 - HKLM\..\Run: [Windows Media Connect 2] "C:\Program Files\Windows Media Connect 2\WMCCFG.exe" /StartQuiet
O4 - HKLM\..\Run: [New.net Startup] rundll32 C:\PROGRA~1\NEWDOT~1\NEWDOT~1.DLL,ClientStartup -s
O4 - HKLM\..\Run: [WinPatrol] C:\PROGRA~1\BILLPS~1\WINPAT~1\winpatrol.exe
O4 - HKLM\..\Run: [OptionAxisEachTime] C:\Documents and Settings\All Users\Application Data\about road option axis\BiasOwns.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [Antivirus 32 Manager] C:\WINDOWS\system32\WinOCX.exe
O4 - HKLM\..\Run: [Windows Validation Client] C:\WINDOWS\system32\DBExecCom.exe
O4 - HKLM\..\Run: [Admin Manager Update] C:\WINDOWS\system32\SysExec.exe
O4 - HKLM\..\Run: [Firewall Socket Device] C:\WINDOWS\system32\WinOCX32.exe
O4 - HKLM\..\Run: [Registry Client Manager] C:\WINDOWS\system32\MSExecCfg.exe
O4 - HKLM\..\Run: [System Client Manager] C:\WINDOWS\system32\MSExecCom.exe
O4 - HKLM\..\Run: [Current Manager Validation] C:\WINDOWS\system32\SysDllServ.exe
O4 - HKLM\..\Run: [System Verification Application] C:\WINDOWS\system32\MSExecCom.exe
O4 - HKLM\..\Run: [Remote Update Client] C:\WINDOWS\system32\DBDllCom.exe
O4 - HKLM\..\Run: [Secure Server 32] C:\WINDOWS\system32\OSOCX32.exe
O4 - HKLM\..\Run: [MS Manager Socket] C:\WINDOWS\system32\OSAV32.exe
O4 - HKLM\..\Run: [System Verification Manager] C:\WINDOWS\system32\MSExecCom.exe
O4 - HKLM\..\Run: [Remote Update Verification] C:\WINDOWS\system32\DBDllServ.exe
O4 - HKLM\..\Run: [XP Manager Socket] C:\WINDOWS\system32\OSAVCfg.exe
O4 - HKLM\..\Run: [Driver Device Service] C:\WINDOWS\system32\SysExec.exe
O4 - HKLM\..\Run: [Microsoft 32 Manager] C:\WINDOWS\system32\WinExec.exe
O4 - HKLM\..\Run: [Microsoft Device Service] C:\WINDOWS\system32\WinExec.exe
O4 - HKLM\..\Run: [NT Application Server] C:\WINDOWS\system32\MSAVCfg.exe
O4 - HKLM\..\Run: [Win Validation Client] C:\WINDOWS\system32\DBExecCom.exe
O4 - HKLM\..\Run: [Root Service Validation] C:\WINDOWS\system32\SysDllServ.exe
O4 - HKLM\..\Run: [Root Service Verification] C:\WINDOWS\system32\DBDllServ.exe
O4 - HKLM\..\Run: [Microsoft 32 Service] C:\WINDOWS\system32\WinExec.exe
O4 - HKLM\..\Run: [Secure Server Device] C:\WINDOWS\system32\WinOCX32.exe
O4 - HKLM\..\Run: [Registry Client Server] C:\WINDOWS\system32\MSAVCfg.exe
O4 - HKLM\..\Run: [Current Manager Update] C:\WINDOWS\system32\SysDllServ.exe
O4 - HKLM\..\Run: [bxxs5] RunDLL32.EXE C:\WINDOWS\bxxs5.dll,DllRun
O4 - HKLM\..\Run: [Win Verification Application] C:\WINDOWS\system32\DBExecCom.exe
O4 - HKLM\..\Run: [MS Server 32] C:\WINDOWS\system32\OSOCX32.exe
O4 - HKLM\..\Run: [Current Service Validation] C:\WINDOWS\system32\SysDllServ.exe
O4 - HKLM\..\Run: [MS Manager 32] C:\WINDOWS\system32\OSAV32.exe
O4 - HKLM\..\RunServices: [Antivirus 32 Manager] C:\WINDOWS\system32\WinOCX.exe
O4 - HKLM\..\RunServices: [Windows Validation Client] C:\WINDOWS\system32\DBExecCom.exe
O4 - HKLM\..\RunServices: [Admin Manager Update] C:\WINDOWS\system32\SysExec.exe
O4 - HKLM\..\RunServices: [Firewall Socket Device] C:\WINDOWS\system32\WinOCX32.exe
O4 - HKLM\..\RunServices: [Registry Client Manager] C:\WINDOWS\system32\MSExecCfg.exe
O4 - HKLM\..\RunServices: [System Client Manager] C:\WINDOWS\system32\MSExecCom.exe
O4 - HKLM\..\RunServices: [Current Manager Validation] C:\WINDOWS\system32\SysDllServ.exe
O4 - HKLM\..\RunServices: [System Verification Application] C:\WINDOWS\system32\MSExecCom.exe
O4 - HKLM\..\RunServices: [Remote Update Client] C:\WINDOWS\system32\DBDllCom.exe
O4 - HKLM\..\RunServices: [Secure Server 32] C:\WINDOWS\system32\OSOCX32.exe
O4 - HKLM\..\RunServices: [MS Manager Socket] C:\WINDOWS\system32\OSAV32.exe
O4 - HKLM\..\RunServices: [System Verification Manager] C:\WINDOWS\system32\MSExecCom.exe
O4 - HKLM\..\RunServices: [Remote Update Verification] C:\WINDOWS\system32\DBDllServ.exe
O4 - HKLM\..\RunServices: [XP Manager Socket] C:\WINDOWS\system32\OSAVCfg.exe
O4 - HKLM\..\RunServices: [Microsoft 32 Manager] C:\WINDOWS\system32\WinExec.exe
O4 - HKLM\..\RunServices: [Driver Device Service] C:\WINDOWS\system32\SysExec.exe
O4 - HKLM\..\RunServices: [Microsoft Device Service] C:\WINDOWS\system32\WinExec.exe
O4 - HKLM\..\RunServices: [NT Application Server] C:\WINDOWS\system32\MSAVCfg.exe
O4 - HKLM\..\RunServices: [Win Validation Client] C:\WINDOWS\system32\DBExecCom.exe
O4 - HKLM\..\RunServices: [Root Service Validation] C:\WINDOWS\system32\SysDllServ.exe
O4 - HKLM\..\RunServices: [Root Service Verification] C:\WINDOWS\system32\DBDllServ.exe
O4 - HKLM\..\RunServices: [Microsoft 32 Service] C:\WINDOWS\system32\WinExec.exe
O4 - HKLM\..\RunServices: [Secure Server Device] C:\WINDOWS\system32\WinOCX32.exe
O4 - HKLM\..\RunServices: [Registry Client Server] C:\WINDOWS\system32\MSAVCfg.exe
O4 - HKLM\..\RunServices: [Current Manager Update] C:\WINDOWS\system32\SysDllServ.exe
O4 - HKLM\..\RunServices: [Win Verification Application] C:\WINDOWS\system32\DBExecCom.exe
O4 - HKLM\..\RunServices: [MS Server 32] C:\WINDOWS\system32\OSOCX32.exe
O4 - HKLM\..\RunServices: [Current Service Validation] C:\WINDOWS\system32\SysDllServ.exe
O4 - HKLM\..\RunServices: [MS Manager 32] C:\WINDOWS\system32\OSAV32.exe
O4 - HKLM\..\RunOnce: [NT Application Server] C:\WINDOWS\system32\MSAVCfg.exe
O4 - HKLM\..\RunOnce: [Microsoft Device Service] C:\WINDOWS\system32\WinExec.exe
O4 - HKLM\..\RunOnce: [Admin Manager Update] C:\WINDOWS\system32\SysExec.exe
O4 - HKLM\..\RunOnce: [Win Validation Client] C:\WINDOWS\system32\DBExecCom.exe
O4 - HKLM\..\RunOnce: [Remote Update Verification] C:\WINDOWS\system32\DBDllServ.exe
O4 - HKLM\..\RunOnce: [MS Server 32] C:\WINDOWS\system32\OSOCX32.exe
O4 - HKLM\..\RunOnce: [Microsoft 32 Manager] C:\WINDOWS\system32\WinExec.exe
O4 - HKLM\..\RunOnce: [XP Manager Socket] C:\WINDOWS\system32\OSAVCfg.exe
O4 - HKLM\..\RunOnce: [Registry Client Manager] C:\WINDOWS\system32\MSExecCfg.exe
O4 - HKLM\..\RunOnce: [Remote Update Client] C:\WINDOWS\system32\DBDllCom.exe
O4 - HKLM\..\RunOnce: [Current Service Validation] C:\WINDOWS\system32\SysDllServ.exe
O4 - HKLM\..\RunOnce: [MS Manager 32] C:\WINDOWS\system32\OSAV32.exe
O4 - HKLM\..\RunOnce: [Root Service Validation] C:\WINDOWS\system32\SysDllServ.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [defy media] C:\DOCUME~1\RADI\APPLIC~1\MP3INS~1\Site Book Bin.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Antivirus 32 Manager] C:\WINDOWS\system32\WinOCX.exe
O4 - HKCU\..\Run: [Windows Validation Client] C:\WINDOWS\system32\DBExecCom.exe
O4 - HKCU\..\Run: [Admin Manager Update] C:\WINDOWS\system32\SysExec.exe
O4 - HKCU\..\Run: [Firewall Socket Device] C:\WINDOWS\system32\WinOCX32.exe
O4 - HKCU\..\Run: [Registry Client Manager] C:\WINDOWS\system32\MSExecCfg.exe
O4 - HKCU\..\Run: [System Client Manager] C:\WINDOWS\system32\MSExecCom.exe
O4 - HKCU\..\Run: [Current Manager Validation] C:\WINDOWS\system32\SysDllServ.exe
O4 - HKCU\..\Run: [System Verification Application] C:\WINDOWS\system32\MSExecCom.exe
O4 - HKCU\..\Run: [Remote Update Client] C:\WINDOWS\system32\DBDllCom.exe
O4 - HKCU\..\Run: [Secure Server 32] C:\WINDOWS\system32\OSOCX32.exe
O4 - HKCU\..\Run: [MS Manager Socket] C:\WINDOWS\system32\OSAV32.exe
O4 - HKCU\..\Run: [System Verification Manager] C:\WINDOWS\system32\MSExecCom.exe
O4 - HKCU\..\Run: [Remote Update Verification] C:\WINDOWS\system32\DBDllServ.exe
O4 - HKCU\..\Run: [XP Manager Socket] C:\WINDOWS\system32\OSAVCfg.exe
O4 - HKCU\..\Run: [Driver Device Service] C:\WINDOWS\system32\SysExec.exe
O4 - HKCU\..\Run: [Microsoft 32 Manager] C:\WINDOWS\system32\WinExec.exe
O4 - HKCU\..\Run: [Microsoft Device Service] C:\WINDOWS\system32\WinExec.exe
O4 - HKCU\..\Run: [NT Application Server] C:\WINDOWS\system32\MSAVCfg.exe
O4 - HKCU\..\Run: [Win Validation Client] C:\WINDOWS\system32\DBExecCom.exe
O4 - HKCU\..\Run: [Root Service Validation] C:\WINDOWS\system32\SysDllServ.exe
O4 - HKCU\..\Run: [Root Service Verification] C:\WINDOWS\system32\DBDllServ.exe
O4 - HKCU\..\Run: [Microsoft 32 Service] C:\WINDOWS\system32\WinExec.exe
O4 - HKCU\..\Run: [Secure Server Device] C:\WINDOWS\system32\WinOCX32.exe
O4 - HKCU\..\Run: [Registry Client Server] C:\WINDOWS\system32\MSAVCfg.exe
O4 - HKCU\..\Run: [Current Manager Update] C:\WINDOWS\system32\SysDllServ.exe
O4 - HKCU\..\Run: [Win Verification Application] C:\WINDOWS\system32\DBExecCom.exe
O4 - HKCU\..\Run: [MS Server 32] C:\WINDOWS\system32\OSOCX32.exe
O4 - HKCU\..\Run: [Current Service Validation] C:\WINDOWS\system32\SysDllServ.exe
O4 - HKCU\..\Run: [MS Manager 32] C:\WINDOWS\system32\OSAV32.exe
O4 - HKCU\..\RunServices: [Antivirus 32 Manager] C:\WINDOWS\system32\WinOCX.exe
O4 - HKCU\..\RunServices: [Windows Validation Client] C:\WINDOWS\system32\DBExecCom.exe
O4 - HKCU\..\RunServices: [Admin Manager Update] C:\WINDOWS\system32\SysExec.exe
O4 - HKCU\..\RunServices: [Firewall Socket Device] C:\WINDOWS\system32\WinOCX32.exe
O4 - HKCU\..\RunServices: [Registry Client Manager] C:\WINDOWS\system32\MSExecCfg.exe
O4 - HKCU\..\RunServices: [System Client Manager] C:\WINDOWS\system32\MSExecCom.exe
O4 - HKCU\..\RunServices: [Current Manager Validation] C:\WINDOWS\system32\SysDllServ.exe
O4 - HKCU\..\RunServices: [System Verification Application] C:\WINDOWS\system32\MSExecCom.exe
O4 - HKCU\..\RunServices: [Remote Update Client] C:\WINDOWS\system32\DBDllCom.exe
O4 - HKCU\..\RunServices: [Secure Server 32] C:\WINDOWS\system32\OSOCX32.exe
O4 - HKCU\..\RunServices: [MS Manager Socket] C:\WINDOWS\system32\OSAV32.exe
O4 - HKCU\..\RunServices: [System Verification Manager] C:\WINDOWS\system32\MSExecCom.exe
O4 - HKCU\..\RunServices: [Remote Update Verification] C:\WINDOWS\system32\DBDllServ.exe
O4 - HKCU\..\RunServices: [XP Manager Socket] C:\WINDOWS\system32\OSAVCfg.exe
O4 - HKCU\..\RunServices: [Microsoft 32 Manager] C:\WINDOWS\system32\WinExec.exe
O4 - HKCU\..\RunServices: [Driver Device Service] C:\WINDOWS\system32\SysExec.exe
O4 - HKCU\..\RunServices: [Microsoft Device Service] C:\WINDOWS\system32\WinExec.exe
O4 - HKCU\..\RunServices: [NT Application Server] C:\WINDOWS\system32\MSAVCfg.exe
O4 - HKCU\..\RunServices: [Win Validation Client] C:\WINDOWS\system32\DBExecCom.exe
O4 - HKCU\..\RunServices: [Root Service Validation] C:\WINDOWS\system32\SysDllServ.exe
O4 - HKCU\..\RunServices: [Root Service Verification] C:\WINDOWS\system32\DBDllServ.exe
O4 - HKCU\..\RunServices: [Microsoft 32 Service] C:\WINDOWS\system32\WinExec.exe
O4 - HKCU\..\RunServices: [Secure Server Device] C:\WINDOWS\system32\WinOCX32.exe
O4 - HKCU\..\RunServices: [Registry Client Server] C:\WINDOWS\system32\MSAVCfg.exe
O4 - HKCU\..\RunServices: [Current Manager Update] C:\WINDOWS\system32\SysDllServ.exe
O4 - HKCU\..\RunServices: [Win Verification Application] C:\WINDOWS\system32\DBExecCom.exe
O4 - HKCU\..\RunServices: [MS Server 32] C:\WINDOWS\system32\OSOCX32.exe
O4 - HKCU\..\RunServices: [Current Service Validation] C:\WINDOWS\system32\SysDllServ.exe
O4 - HKCU\..\RunServices: [MS Manager 32] C:\WINDOWS\system32\OSAV32.exe
O4 - HKCU\..\RunOnce: [MS Manager 32] C:\WINDOWS\system32\OSAV32.exe
O4 - HKCU\..\RunOnce: [Root Service Validation] C:\WINDOWS\system32\SysDllServ.exe
O4 - Global Startup: BTTray.lnk = ?
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Rechercher avec Voila - file://C:\Program Files\WANADOO_TOOLBAR\Cache\SelectedContextSearch.htm
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Hijacked Internet access by New.Net
O10 - Hijacked Internet access by New.Net
O10 - Hijacked Internet access by New.Net
O10 - Hijacked Internet access by New.Net
O10 - Hijacked Internet access by New.Net
O14 - IERESET.INF: START_PAGE_URL=http://www.files-ftp.com/~unicorni/phpBB2/index.php
O16 - DPF: {018B7EC3-EECA-11D3-8E71-0000E82C6C0D} - http://kit.carpediem.fr/11984/webcam.exe
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwebproducts/ei/SmileyCentralFWBInitialSetup1.0.0.15.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1135535043171
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://drivers1.free.fr/hardwaredetection.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/controls/msnchat45.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: WB - C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\fastload.dll
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Service de lancement de WlanCfg (Wlancfg) - Inventel - C:\Program Files\Inventel\Gateway\wlancfg.exe

Réponse 3 / 9

garagiste Messages postés 700 Date d'inscription lundi 10 janvier 2005 Statut Membre Dernière intervention 21 mai 2008 161
26 janv. 2006 à 21:27

houlala tu fais la collection des 04..!
tu utilises limewire et t'as pas d'antivirus?
envoie ton log sur le forum virus sécurité, y aura un grand nettoyage à faire.
a+

Réponse 4 / 9

TONY
26 janv. 2006 à 21:37

c koi les 04 merci de repondre et jai fai cke tu ma di jverai le resultat

Réponse 5 / 9

garagiste Messages postés 700 Date d'inscription lundi 10 janvier 2005 Statut Membre Dernière intervention 21 mai 2008 161
26 janv. 2006 à 21:53

salut,
les 04 c'est tous les programmes qui démarrent automatiquement avec windows. là t'en as beaucoup trop.
a+

Réponse 6 / 9

Yoan Messages postés 11795 Date d'inscription mardi 1 février 2005 Statut Modérateur Dernière intervention 10 décembre 2023 2 327
26 janv. 2006 à 22:05

Ou la la !
je n'analyse pas ça comme ça, c'est une horreur !

Nettoie avec Cleanup :
http://pageperso.aol.fr/Balltrap34/CleanUp40.exe

Puis seulement après, repose un log, un peu plus propre....

Réponse 7 / 9

tony
27 janv. 2006 à 17:03

Scan saved at 16:58:12, on 27/01/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\VTTimer.exe
C:\Program Files\VIAudioi\SBADeck\ADeck.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\Windows Media Connect 2\WMCCFG.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\MMTray2k.exe
C:\WINDOWS\system32\MMTrayLSI.exe
C:\WINDOWS\system32\qttask.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
c:\progra~1\intern~1\iexplore.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Inventel\Gateway\wlancfg.exe
C:\Program Files\LimeWire\LimeWire.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\RADI\Mes documents\Mes vidéos\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://side.search.ke.voila.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.files-ftp.com/~unicorni/phpBB2/index.php
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://side.search.ke.voila.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Miniclip - {4E7BD74F-2B8D-469E-89B3-BE29F5D3E32D} - C:\PROGRA~1\MINICL~1\MINICL~1.DLL
O2 - BHO: Toolbar Wanadoo - {4E7BD74F-2B8D-469E-8FB0-B921F5DBF922} - C:\PROGRA~1\WANADO~1\WANADO~2.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [AudioDeck] C:\Program Files\VIAudioi\SBADeck\ADeck.exe 1
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [Windows Media Connect 2] "C:\Program Files\Windows Media Connect 2\WMCCFG.exe" /StartQuiet
O4 - HKLM\..\Run: [WinPatrol] C:\PROGRA~1\BILLPS~1\WINPAT~1\winpatrol.exe
O4 - HKLM\..\Run: [OptionAxisEachTime] C:\Documents and Settings\All Users\Application Data\about road option axis\BiasOwns.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [Antivirus 32 Manager] C:\WINDOWS\system32\WinOCX.exe
O4 - HKLM\..\Run: [MMTray2K] MMTray2k.exe
O4 - HKLM\..\Run: [MMTrayLSI] MMTrayLSI.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\system32\qttask.exe" -atboottime
O4 - HKLM\..\Run: [XP Manager Socket] C:\WINDOWS\system32\OSAVCfg.exe
O4 - HKLM\..\Run: [Admin Manager Update] C:\WINDOWS\system32\SysExec.exe
O4 - HKLM\..\Run: [System Client Manager] C:\WINDOWS\system32\MSExecCom.exe
O4 - HKLM\..\RunServices: [XP Manager Socket] C:\WINDOWS\system32\OSAVCfg.exe
O4 - HKLM\..\RunServices: [Admin Manager Update] C:\WINDOWS\system32\SysExec.exe
O4 - HKLM\..\RunServices: [System Client Manager] C:\WINDOWS\system32\MSExecCom.exe
O4 - HKLM\..\RunOnce: [XP Manager Socket] C:\WINDOWS\system32\OSAVCfg.exe
O4 - HKLM\..\RunOnce: [Admin Manager Update] C:\WINDOWS\system32\SysExec.exe
O4 - HKLM\..\RunOnce: [System Client Manager] C:\WINDOWS\system32\MSExecCom.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [XP Manager Socket] C:\WINDOWS\system32\OSAVCfg.exe
O4 - HKCU\..\Run: [Admin Manager Update] C:\WINDOWS\system32\SysExec.exe
O4 - HKCU\..\Run: [System Client Manager] C:\WINDOWS\system32\MSExecCom.exe
O4 - HKCU\..\RunServices: [XP Manager Socket] C:\WINDOWS\system32\OSAVCfg.exe
O4 - HKCU\..\RunServices: [Admin Manager Update] C:\WINDOWS\system32\SysExec.exe
O4 - HKCU\..\RunServices: [System Client Manager] C:\WINDOWS\system32\MSExecCom.exe
O4 - HKCU\..\RunOnce: [System Client Manager] C:\WINDOWS\system32\MSExecCom.exe
O4 - Global Startup: BTTray.lnk = ?
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Rechercher avec Voila - file://C:\Program Files\WANADOO_TOOLBAR\Cache\SelectedContextSearch.htm
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.files-ftp.com/~unicorni/phpBB2/index.php
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab31267.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocache/funwebproducts/ei/SmileyCentralFWBInitialSetup1.0.0.15.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://spaces.msn.com//PhotoUpload/MsnPUpld.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1135535043171
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} (HardwareDetection Control) - http://drivers1.free.fr/hardwaredetection.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {F58E1CEF-A068-4C15-BA5E-587CAF3EE8C6} (MSN Chat Control 4.5) - http://chat.msn.com/controls/msnchat45.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: WB - C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\fastload.dll
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Service de lancement de WlanCfg (Wlancfg) - Inventel - C:\Program Files\Inventel\Gateway\wlancfg.exe

Réponse 8 / 9

tony
31 janv. 2006 à 07:02

voila jcroi ke tt est bon maintenant ?????? voila mon log

Scan saved at 07:00:09, on 31/01/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe
C:\WINDOWS\system32\VTTimer.exe
C:\Program Files\VIAudioi\SBADeck\ADeck.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\Windows Media Connect 2\WMCCFG.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\MMTray2k.exe
C:\WINDOWS\system32\MMTrayLSI.exe
c:\progra~1\intern~1\iexplore.exe
C:\WINDOWS\system32\qttask.exe
C:\Program Files\Softwin\BitDefender9\bdoesrv.exe
C:\progra~1\softwin\bitdef~1\bdnagent.exe
C:\progra~1\softwin\bitdef~1\bdswitch.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\LimeWire\LimeWire.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe
C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe
C:\Program Files\Softwin\BitDefender9\vsserv.exe
c:\progra~1\softwin\bitdef~1\bdmcon.exe
C:\Program Files\Inventel\Gateway\wlancfg.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\RADI\Mes documents\Mes vidéos\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.files-ftp.com/~unicorni/phpBB2/index.php
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Miniclip - {4E7BD74F-2B8D-469E-89B3-BE29F5D3E32D} - C:\PROGRA~1\MINICL~1\MINICL~1.DLL
O2 - BHO: Toolbar Wanadoo - {4E7BD74F-2B8D-469E-8FB0-B921F5DBF922} - C:\PROGRA~1\WANADO~1\WANADO~2.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [AudioDeck] C:\Program Files\VIAudioi\SBADeck\ADeck.exe 1
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [Windows Media Connect 2] "C:\Program Files\Windows Media Connect 2\WMCCFG.exe" /StartQuiet
O4 - HKLM\..\Run: [WinPatrol] C:\PROGRA~1\BILLPS~1\WINPAT~1\winpatrol.exe
O4 - HKLM\..\Run: [OptionAxisEachTime] C:\Documents and Settings\All Users\Application Data\about road option axis\BiasOwns.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [MMTray2K] MMTray2k.exe
O4 - HKLM\..\Run: [MMTrayLSI] MMTrayLSI.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\WINDOWS\system32\qttask.exe" -atboottime
O4 - HKLM\..\Run: [BDMCon] c:\PROGRA~1\softwin\BITDEF~1\bdmcon.exe
O4 - HKLM\..\Run: [BDOESRV] "C:\Program Files\Softwin\BitDefender9\bdoesrv.exe"
O4 - HKLM\..\Run: [BDNewsAgent] "c:\progra~1\softwin\bitdef~1\bdnagent.exe"
O4 - HKLM\..\Run: [BDSwitchAgent] "c:\progra~1\softwin\bitdef~1\bdswitch.exe"
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [defy media] C:\DOCUME~1\RADI\APPLIC~1\MP3INS~1\Site Book Bin.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: BTTray.lnk = ?
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Rechercher avec Voila - file://C:\Program Files\WANADOO_TOOLBAR\Cache\SelectedContextSearch.htm
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: WB - C:\PROGRA~1\Stardock\OBJECT~1\WINDOW~1\fastload.dll
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Update Service\livesrv.exe" /service (file missing)
O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\Softwin\BitDefender9\vsserv.exe" /service (file missing)
O23 - Service: Service de lancement de WlanCfg (Wlancfg) - Inventel - C:\Program Files\Inventel\Gateway\wlancfg.exe
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Program Files\Fichiers communs\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)

maintenant ??????????? voila mon log

Réponse 9 / 9

Yoan Messages postés 11795 Date d'inscription mardi 1 février 2005 Statut Modérateur Dernière intervention 10 décembre 2023 2 327
31 janv. 2006 à 18:21

Fixe encore :
O2 - BHO: Miniclip - {4E7BD74F-2B8D-469E-89B3-BE29F5D3E32D} - C:\PROGRA~1\MINICL~1\MINICL~1.DLL
(Miniclip >> Attention avec ça, hein !)

O4 - HKLM\..\Run: [OptionAxisEachTime] C:\Documents and Settings\All Users\Application Data\about road option axis\BiasOwns.exe
(sauf si l'application t'est connue)

Si inconnu, supprime :
O4 - HKCU\..\Run: [defy media] C:\DOCUME~1\RADI\APPLIC~1\MP3INS~1\Site Book Bin.exe

O8 - Extra context menu item: Rechercher avec Voila - file://C:\Program Files\WANADOO_TOOLBAR\Cache\SelectedContextSearch.htm

Task manager s'execute auttomatiquement

9 réponses

Discussions similaires

Newsletters