Bon voilà. Normalement en virus, etc ... je sais m"'en débarasser mais ici il y a mon ordinateur qui ralentit de + en +. J'ai fait un rapport Hijackthis mais apparement Monitor.exe (dont je ne sais pas ce que c'est) m'intrigue. Je poste le rapport, merci d'avance si vous pouvez m'aider pour que mon ordinteur retrouve sa rapidité d'origine.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:19:12, on 5/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSExplorer.EXE
C:WINDOWSsystem32spoolsv.exe
C:Program FilesFichiers communsLogiShrdLVMVFMLVPrcSrv.exe
C:WINDOWSRTHDCPL.EXE
C:Program FilesJavajre6injusched.exe
C:Program FilesKaspersky LabKaspersky Internet Security 2009avp.exe
C:Program FilesFichiers communsLogiShrdLComMgrCommunications_Helper.exe
C:WINDOWSPixArtPAC207Monitor.exe
C:WINDOWSsystem32igfxtray.exe
C:WINDOWSsystem32hkcmd.exe
C:WINDOWSsystem32igfxpers.exe
C:Program FilesiTunesiTunesHelper.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesWindows LiveMessengermsnmsgr.exe
C:WINDOWSsystem32igfxsrvc.exe
C:Program FilesVeoh NetworksVeohWebPlayerveohwebplayer.exe
C:Program FilesOpenOffice.org 2.4programsoffice.exe
C:Program FilesOpenOffice.org 2.4programsoffice.BIN
C:Program FilesFichiers communsAppleMobile Device SupportinAppleMobileDeviceService.exe
C:Program FilesKaspersky LabKaspersky Internet Security 2009avp.exe
C:Program FilesBonjourmDNSResponder.exe
C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
C:Program FilesJavajre6injqs.exe
C:Program FilesFichiers communsLogiShrdLVCOMSERLVComSer.exe
C:Program FilesNeroNero8Nero BackItUpNBService.exe
C:Program FilesSymantecLiveUpdateALUSchedulerSvc.exe
C:WINDOWSsystem32IoctlSvc.exe
C:WINDOWSsystem32svchost.exe
C:PROGRA~1BandooBandoo.exe
C:Program FilesFichiers communsLogiShrdLVCOMSERLVComSer.exe
C:Program FilesiPodiniPodService.exe
C:Program FilesWindows LiveContactswlcomm.exe
C:Program FilesTrend MicroHijackThisHijackThis.exe
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.google.be/intl/fr/
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = *.local
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:Program FilesFichiers communsAdobeAcrobatActiveXAcroIEHelperShim.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:Program FilesBitComet oolsBitCometBHO_1.2.8.7.dll
O2 - BHO: IEVkbdBHO Class - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:Program FilesKaspersky LabKaspersky Internet Security 2009ievkbd.dll
O2 - BHO: Click-to-Call BHO - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:Program FilesWindows LiveMessengerwlchtc.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program FilesJavajre6inssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:Program FilesFichiers communsMicrosoft SharedWindows LiveWindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:program filesgooglegoogletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:Program FilesGoogleGoogleToolbarNotifier4.1.805.4472swg.dll
O2 - BHO: IeMonitorBho Class - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - C:Program FilesMegauploadMega ManagerMegaIEMn.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:Program FilesJavajre6injp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:program filesgooglegoogletoolbar1.dll
O3 - Toolbar: Veoh Web Player Video Finder - {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - C:Program FilesVeoh NetworksVeohWebPlayerVeohIEToolbar.dll
O4 - HKLM..Run: [SkyTel] SkyTel.EXE
O4 - HKLM..Run: [NBKeyScan] "C:Program FilesNeroNero8Nero BackItUpNBKeyScan.exe"
O4 - HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM..Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM..Run: [SunJavaUpdateSched] "C:Program FilesJavajre6injusched.exe"
O4 - HKLM..Run: [Adobe Reader Speed Launcher] "C:Program FilesAdobeReader 9.0ReaderReader_sl.exe"
O4 - HKLM..Run: [AVP] "C:Program FilesKaspersky LabKaspersky Internet Security 2009avp.exe"
O4 - HKLM..Run: [LogitechCommunicationsManager] "C:Program FilesFichiers communsLogiShrdLComMgrCommunications_Helper.exe"
O4 - HKLM..Run: [TQ566808] "H:Setup.exe"
O4 - HKLM..Run: [Monitor] C:WINDOWSPixArtPAC207Monitor.exe
O4 - HKLM..Run: [IgfxTray] C:WINDOWSsystem32igfxtray.exe
O4 - HKLM..Run: [HotKeysCmds] C:WINDOWSsystem32hkcmd.exe
O4 - HKLM..Run: [Persistence] C:WINDOWSsystem32igfxpers.exe
O4 - HKLM..Run: [QuickTime Task] "C:Program FilesQuickTimeQTTask.exe" -atboottime
O4 - HKLM..Run: [iTunesHelper] "C:Program FilesiTunesiTunesHelper.exe"
O4 - HKCU..Run: [swg] C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe
O4 - HKCU..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe
O4 - HKCU..Run: [MsnMsgr] "C:Program FilesWindows LiveMessengermsnmsgr.exe" /background
O4 - HKCU..Run: [ccleaner] "C:Program FilesCCleanerCCleaner.exe" /AUTO
O4 - HKCU..Run: [VeohPlugin] "C:Program FilesVeoh NetworksVeohWebPlayerveohwebplayer.exe"
O4 - HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'SERVICE RESEAU')
O4 - HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'SYSTEM')
O4 - HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'Default user')
O4 - Startup: OpenOffice.org 2.4.lnk = C:Program FilesOpenOffice.org 2.4programquickstart.exe
O8 - Extra context menu item: &D&ownload &with BitComet - res://C:Program FilesBitCometBitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:Program FilesBitCometBitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://C:Program FilesBitCometBitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Ajouter à Kaspersky Anti-Bannière - C:Program FilesKaspersky LabKaspersky Internet Security 2009ie_banner_deny.htm
O8 - Extra context menu item: Liens de téléchargement avec Mega Manager... - C:Program FilesMegauploadMega Managermm_file.htm
O8 - Extra context menu item: Ouvrir le cadre dans une nouvelle fenêtre - C:WINDOWSwebOpenFrame.htm
O9 - Extra button: Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - C:WINDOWSsystem32shdocvw.dll
O9 - Extra 'Tools' menuitem: VisualRoute Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - C:WINDOWSsystem32shdocvw.dll
O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:Program FilesKaspersky LabKaspersky Internet Security 2009SCIEPlgn.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:WINDOWSdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:WINDOWSdoscandel.exe
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:Program FilesBitComet oolsBitCometBHO_1.2.8.7.dll/206 (file missing)
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:WINDOWSsystem32shdocvw.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:WINDOWSsystem32shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:Program FilesYahoo!Commonyinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w3/resources/MSNPUpld.cab
O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} (MUCatalogWebControl Class) - http://catalog.update.microsoft.com/v7/ ... 1027248156
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windows ... 0268620218
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O17 - HKLMSystemCCSServicesTcpip..{42B7EF4A-F626-452A-BF44-D63B06094802}: NameServer = 192.168.1.1
O18 - Protocol: bw+0 - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:Program FilesLogitechDesktop Messenger8876480ProgramGAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwm0s - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O18 - Protocol: offline-8876480 - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll
O20 - AppInit_DLLs: C:PROGRA~1KASPER~1KASPER~1mzvkbd.dll,C:PROGRA~1KASPER~1KASPER~1mzvkbd3.dll,C:PROGRA~1KASPER~1KASPER~1adialhk.dll,C:PROGRA~1KASPER~1KASPER~1kloehk.dll c:progra~1andoondhook.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:Program FilesFichiers communsAppleMobile Device SupportinAppleMobileDeviceService.exe
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:Program FilesKaspersky LabKaspersky Internet Security 2009avp.exe
O23 - Service: Bandoo Coordinator - Discordia Limited - C:PROGRA~1BandooBandoo.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:Program FilesBonjourmDNSResponder.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:Program FilesFichiers communsSymantec SharedccSvcHst.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:Program FilesiPodiniPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:Program FilesJavajre6injqs.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:PROGRA~1SymantecLIVEUP~1LUCOMS~1.EXE
O23 - Service: LVCOMSer - Logitech Inc. - C:Program FilesFichiers communsLogiShrdLVCOMSERLVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:Program FilesFichiers communsLogiShrdLVMVFMLVPrcSrv.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:Program FilesNeroNero8Nero BackItUpNBService.exe
O23 - Service: NMIndexingService - Nero AG - C:Program FilesFichiers communsNeroLibNMIndexingService.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:Program FilesSymantecLiveUpdateALUSchedulerSvc.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:WINDOWSsystem32IoctlSvc.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:Program FilesWindows LiveinstallerWLSetupSvc.exe (file missing)
--
End of file - 23846 bytes
Système d'exploitation : Windows XP 32 Bits, 2 Go RAM.
Il y a actuellement 293 visiteurs
Lundi 25 Novembre 2024
       |
Ordi ralentit de + en +.
Règles du forum
Pour afficher un rapport d'analyse ou un rapport d'infection (HijackThis, OTL, AdwCleaner etc...), veuillez utiliser le système de fichiers joints interne au forum. Seuls les formats les .txt et .log de moins de 1Mo sont acceptés. Pour obtenir de l'aide pour insérer vos fichiers joints, veuillez consulter ce tutoriel
Pour afficher un rapport d'analyse ou un rapport d'infection (HijackThis, OTL, AdwCleaner etc...), veuillez utiliser le système de fichiers joints interne au forum. Seuls les formats les .txt et .log de moins de 1Mo sont acceptés. Pour obtenir de l'aide pour insérer vos fichiers joints, veuillez consulter ce tutoriel
7 messages
• Page 1 sur 1
le 05 Déc 2008 21:03
Bonjour Danny386.
_ Tu peux déjà supprimer dans HiJackThis les lignes suivantes:
--- Les lignes commençant par O4 sont les logiciels lancés au démarrage de ta session, si tu veux les conserver, tu ne touches pas aux lignes.---
O4 - HKLM..Run: [QuickTime Task] "C:Program FilesQuickTimeQTTask.exe" -atboottime
O4 - HKLM..Run: [iTunesHelper] "C:Program FilesiTunesiTunesHelper.exe"
O4 - HKCU..Run: [MsnMsgr] "C:Program FilesWindows LiveMessengermsnmsgr.exe" /background
O4 - HKCU..Run: [ccleaner] "C:Program FilesCCleanerCCleaner.exe" /AUTO
O4 - Startup: OpenOffice.org 2.4.lnk = C:Program FilesOpenOffice.org 2.4programquickstart.exe
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:Program FilesBitComet oolsBitCometBHO_1.2.8.7.dll/206 (file missing)
Toute les lignes O18 comme O18 - Protocol: bw+0 - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:Program FilesFichiers communsSymantec SharedccSvcHst.exe (file missing)
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:Program FilesWindows LiveinstallerWLSetupSvc.exe (file missing)
_ La cotation est visiteurs est bonne pour Monitor.exe.
Pour t'en assurer, tu vas sur http://www.virustotal.com/fr/ puis tu cliques sur Parcourir.
Tu sélectionnes le fichier C:WINDOWSPixArtPAC207Monitor.exe et tu cliques sur Ouvrir.
Tu cliques ensuite sur Envoyer le fichier.
A la fin de l'analyse, tu cliques sur Formaté en haut à gauche puis, dans la nouvelle fenêtre, tu cliques sur le bouton
pour faire apparaître le rapport dans la fenêtre en question.
Tu sélectionnes ce rapport puis fais un copier-coller et tu le colles dans ton prochain message.
_ Tu connais l'application Bandoo.exe sur la ligne O23 - Service: Bandoo Coordinator - Discordia Limited - C:PROGRA~1BandooBandoo.exe? Sinon, même opération.
_ Tu as des restes Symantec, si tu n'as aucun produit installé Symantec (des restes de Norton antivirus préinstallé), tu vas sur ce fil pour récupérer le désinstallateur Norton que tu lances ensuite.
Tiens-nous au jus.
_ Tu peux déjà supprimer dans HiJackThis les lignes suivantes:
--- Les lignes commençant par O4 sont les logiciels lancés au démarrage de ta session, si tu veux les conserver, tu ne touches pas aux lignes.---
O4 - HKLM..Run: [QuickTime Task] "C:Program FilesQuickTimeQTTask.exe" -atboottime
O4 - HKLM..Run: [iTunesHelper] "C:Program FilesiTunesiTunesHelper.exe"
O4 - HKCU..Run: [MsnMsgr] "C:Program FilesWindows LiveMessengermsnmsgr.exe" /background
O4 - HKCU..Run: [ccleaner] "C:Program FilesCCleanerCCleaner.exe" /AUTO
O4 - Startup: OpenOffice.org 2.4.lnk = C:Program FilesOpenOffice.org 2.4programquickstart.exe
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:Program FilesBitComet oolsBitCometBHO_1.2.8.7.dll/206 (file missing)
Toute les lignes O18 comme O18 - Protocol: bw+0 - {C5AFF2C2-6CAA-40A2-8B35-C02F14FE5ABE} - C:Program FilesLogitechDesktop Messenger8876480ProgramBWPlugProtocol-8876480.dll O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - C:Program FilesFichiers communsSymantec SharedccSvcHst.exe (file missing)
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:Program FilesWindows LiveinstallerWLSetupSvc.exe (file missing)
_ La cotation est visiteurs est bonne pour Monitor.exe.
Pour t'en assurer, tu vas sur http://www.virustotal.com/fr/ puis tu cliques sur Parcourir.
Tu sélectionnes le fichier C:WINDOWSPixArtPAC207Monitor.exe et tu cliques sur Ouvrir.
Tu cliques ensuite sur Envoyer le fichier.
A la fin de l'analyse, tu cliques sur Formaté en haut à gauche puis, dans la nouvelle fenêtre, tu cliques sur le bouton
pour faire apparaître le rapport dans la fenêtre en question.
Tu sélectionnes ce rapport puis fais un copier-coller et tu le colles dans ton prochain message.
_ Tu connais l'application Bandoo.exe sur la ligne O23 - Service: Bandoo Coordinator - Discordia Limited - C:PROGRA~1BandooBandoo.exe? Sinon, même opération.
_ Tu as des restes Symantec, si tu n'as aucun produit installé Symantec (des restes de Norton antivirus préinstallé), tu vas sur ce fil pour récupérer le désinstallateur Norton que tu lances ensuite.
Tiens-nous au jus.
-
r@in | b0w - PC-Infopraticien
- Messages: 7714
- Inscription: 09 Déc 2007 12:37
- Localisation: Parrot Sec
le 05 Déc 2008 23:03
Fichier Monitor.exe reçu le 2008.08.15 03:27:48 (CET)
Antivirus Version Dernière mise à jour Résultat
AhnLab-V3 2008.8.15.0 2008.08.14 -
AntiVir 7.8.1.19 2008.08.14 -
Authentium 5.1.0.4 2008.08.14 -
Avast 4.8.1195.0 2008.08.14 -
AVG 8.0.0.161 2008.08.14 -
BitDefender 7.2 2008.08.15 -
CAT-QuickHeal 9.50 2008.08.14 -
ClamAV 0.93.1 2008.08.14 -
DrWeb 4.44.0.09170 2008.08.14 -
eSafe 7.0.17.0 2008.08.14 -
eTrust-Vet 31.6.6032 2008.08.14 -
Ewido 4.0 2008.08.14 -
F-Prot 4.4.4.56 2008.08.14 -
F-Secure 7.60.13501.0 2008.08.14 -
Fortinet 3.14.0.0 2008.08.14 -
GData 2.0.7306.1023 2008.08.15 -
Ikarus T3.1.1.34.0 2008.08.15 -
K7AntiVirus 7.10.415 2008.08.14 -
Kaspersky 7.0.0.125 2008.08.15 -
McAfee 5361 2008.08.14 -
Microsoft 1.3807 2008.08.15 -
NOD32v2 3357 2008.08.14 -
Norman 5.80.02 2008.08.14 -
Panda 9.0.0.4 2008.08.14 -
PCTools 4.4.2.0 2008.08.14 -
Prevx1 V2 2008.08.15 -
Rising 20.57.32.00 2008.08.14 -
Sophos 4.32.0 2008.08.15 -
Sunbelt 3.1.1542.1 2008.08.13 -
Symantec 10 2008.08.15 -
TheHacker 6.3.0.3.046 2008.08.13 -
TrendMicro 8.700.0.1004 2008.08.14 -
VBA32 3.12.8.3 2008.08.14 -
ViRobot 2008.8.14.1337 2008.08.14 -
VirusBuster 4.5.11.0 2008.08.14 -
Webwasher-Gateway 6.6.2 2008.08.14 -
Information additionnelle
File size: 319488 bytes
MD5...: 72334f906c2e2b002cdd2ff9022fd957
SHA1..: 4023029dbbcbea003ebeb6a350ee882473909de4
SHA256: 991f7c606e122bbd388ba37e56b37cc6d2dca304784e4ce06018d698c57f320f
SHA512: ae9652866c8799720759ad58e5a05b9aa4e81f8685910d71b5442409171e8535<br>91bfd5e98309384c6b0a48aec32ccf1f164fa44eafb8398184e76ed8ceaa8746
PEiD..: -
PEInfo: PE Structure information<br><br>( base data )<br>entrypointaddress.: 0x41e599<br>timedatestamp.....: 0x454ab0fa (Fri Nov 03 03:01:14 2006)<br>machinetype.......: 0x14c (I386)<br><br>( 4 sections )<br>name viradd virsiz rawdsiz ntrpy md5<br>.text 0x1000 0x31a34 0x32000 6.63 f8c5eda1be338fea99378c85456b3291<br>.rdata 0x33000 0xc518 0xd000 4.84 6b1caa6165f606ad09f8f85a76cb6207<br>.data 0x40000 0x64d4 0x3000 3.80 2437d28dc556f26df3d859b5546128f4<br>.rsrc 0x47000 0xa478 0xb000 2.63 b4c46c8497d1737eb04b7f0920a73922<br><br>( 11 imports ) <br>> KERNEL32.dll: FileTimeToSystemTime, GetTickCount, FileTimeToLocalFileTime, GetFileAttributesA, GetFileTime, HeapFree, HeapAlloc, VirtualProtect, VirtualAlloc, GetSystemInfo, VirtualQuery, HeapReAlloc, GetCommandLineA, GetProcessHeap, RtlUnwind, ExitProcess, ExitThread, CreateThread, RaiseException, HeapSize, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetACP, HeapDestroy, HeapCreate, SetErrorMode, GetStdHandle, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, SetHandleCount, GetFileType, QueryPerformanceCounter, GetSystemTimeAsFileTime, GetStringTypeA, GetStringTypeW, GetTimeZoneInformation, LCMapStringA, LCMapStringW, GetConsoleCP, GetConsoleMode, SetStdHandle, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, SetEnvironmentVariableA, GetOEMCP, GetCPInfo, CreateFileA, GetFullPathNameA, GetVolumeInformationA, FindFirstFileA, FindClose, GetCurrentProcess, DuplicateHandle, GetFileSize, SetEndOfFile, UnlockFile, LockFile, FlushFileBuffers, SetFilePointer, WriteFile, ReadFile, GetThreadLocale, InterlockedIncrement, TlsFree, LocalReAlloc, TlsSetValue, TlsAlloc, GlobalHandle, GlobalReAlloc, TlsGetValue, LocalAlloc, GlobalFlags, GlobalGetAtomNameA, GlobalFindAtomA, lstrcmpW, GetVersionExA, MulDiv, InterlockedDecrement, GetModuleFileNameW, GetCurrentProcessId, SetLastError, GlobalAddAtomA, SuspendThread, ResumeThread, SetThreadPriority, CreateEventA, GlobalUnlock, WritePrivateProfileStringA, FreeResource, GlobalFree, GetCurrentThread, GetCurrentThreadId, ConvertDefaultLocale, EnumResourceLanguagesA, GetLocaleInfoA, LoadLibraryA, FindResourceA, LoadResource, LockResource, SizeofResource, GlobalLock, lstrcmpA, GlobalAlloc, FreeLibrary, GlobalDeleteAtom, GetModuleHandleA, GetProcAddress, GetVersion, CompareStringA, InterlockedExchange, MultiByteToWideChar, CompareStringW, WideCharToMultiByte, lstrlenA, GetLastError, CreateMutexA, GetPrivateProfileStringA, GetModuleFileNameA, Sleep, CloseHandle, CreateProcessA, GetStartupInfoA, LocalFree, FormatMessageA, LeaveCriticalSection, EnterCriticalSection, DeleteCriticalSection, InitializeCriticalSection, SetEvent, VirtualFree, WaitForSingleObject<br>> USER32.dll: RegisterClipboardFormatA, PostThreadMessageA, IsRectEmpty, CopyAcceleratorTableA, CharNextA, ReleaseCapture, LoadCursorA, SetCapture, ShowWindow, MoveWindow, SetWindowTextA, IsDialogMessageA, RegisterWindowMessageA, SendDlgItemMessageA, WinHelpA, IsChild, GetCapture, GetClassLongA, GetClassNameA, SetPropA, GetPropA, RemovePropA, SetFocus, GetWindowTextA, GetForegroundWindow, GetTopWindow, GetMessageTime, GetMessagePos, MapWindowPoints, DestroyMenu, SetForegroundWindow, UpdateWindow, GetMenu, GetSubMenu, GetMenuItemID, GetMenuItemCount, CreateWindowExA, GetClassInfoExA, GetClassInfoA, RegisterClassA, AdjustWindowRectEx, EqualRect, CopyRect, PtInRect, GetDlgCtrlID, DefWindowProcA, CallWindowProcA, SetWindowLongA, OffsetRect, IntersectRect, SystemParametersInfoA, GetWindowPlacement, GetWindowRect, GetSysColor, EndPaint, BeginPaint, GetWindowDC, ReleaseDC, GetDC, ClientToScreen, GrayStringA, DrawTextExA, DrawTextA, TabbedTextOutA, PeekMessageA, TranslateMessage, DispatchMessageA, LoadIconA, PostMessageA, IsIconic, UnhookWindowsHookEx, GetWindowThreadProcessId, GetLastActivePopup, MessageBoxA, SetCursor, SetWindowsHookExA, CallNextHookEx, GetMessageA, IsWindowVisible, GetKeyState, GetCursorPos, UnregisterClassA, GetSysColorBrush, ValidateRect, SetMenuItemBitmaps, MessageBeep, GetNextDlgGroupItem, InvalidateRgn, InvalidateRect, SetRect, SendMessageA, GetSystemMetrics, GetClientRect, DrawIcon, EnableWindow, CharUpperA, PostQuitMessage, SetWindowPos, MapDialogRect, GetParent, SetWindowContextHelpId, GetWindow, EndDialog, GetNextDlgTabItem, IsWindowEnabled, GetDlgItem, GetWindowLongA, IsWindow, DestroyWindow, CreateDialogIndirectParamA, SetActiveWindow, GetActiveWindow, GetDesktopWindow, CheckMenuItem, EnableMenuItem, GetMenuState, ModifyMenuA, GetFocus, LoadBitmapA, GetMenuCheckMarkDimensions<br>> GDI32.dll: DeleteDC, GetStockObject, GetDeviceCaps, ExtSelectClipRgn, GetBkColor, GetTextColor, CreateRectRgnIndirect, GetRgnBox, GetMapMode, ScaleWindowExtEx, SetWindowExtEx, ScaleViewportExtEx, SetViewportExtEx, OffsetViewportOrgEx, SetViewportOrgEx, CreateBitmap, Escape, ExtTextOutA, TextOutA, RectVisible, PtVisible, GetWindowExtEx, GetViewportExtEx, GetObjectA, DeleteObject, GetClipBox, SetMapMode, SetTextColor, SetBkColor, RestoreDC, SaveDC, SelectObject<br>> comdlg32.dll: GetFileTitleA<br>> WINSPOOL.DRV: DocumentPropertiesA, OpenPrinterA, ClosePrinter<br>> ADVAPI32.dll: RegDeleteKeyA, RegQueryValueA, RegOpenKeyA, RegEnumKeyA, RegOpenKeyExA, RegSetValueExA, RegCreateKeyExA, RegCloseKey, RegQueryValueExA<br>> COMCTL32.dll: InitCommonControlsEx<br>> SHLWAPI.dll: PathFindFileNameA, PathStripToRootA, SHSetValueA, PathFindExtensionA, PathIsUNCA<br>> oledlg.dll: -<br>> ole32.dll: OleInitialize, CoFreeUnusedLibraries, OleUninitialize, CreateILockBytesOnHGlobal, StgCreateDocfileOnILockBytes, StgOpenStorageOnILockBytes, CoGetClassObject, CoRevokeClassObject, CoTaskMemFree, CLSIDFromString, CLSIDFromProgID, OleIsCurrentClipboard, OleFlushClipboard, CoRegisterMessageFilter, CoTaskMemAlloc<br>> OLEAUT32.dll: -, -, -, -, -, -, -, -, -, -, -, -, -<br><br>( 0 exports ) <br>
Antivirus Version Dernière mise à jour Résultat
AhnLab-V3 2008.8.15.0 2008.08.14 -
AntiVir 7.8.1.19 2008.08.14 -
Authentium 5.1.0.4 2008.08.14 -
Avast 4.8.1195.0 2008.08.14 -
AVG 8.0.0.161 2008.08.14 -
BitDefender 7.2 2008.08.15 -
CAT-QuickHeal 9.50 2008.08.14 -
ClamAV 0.93.1 2008.08.14 -
DrWeb 4.44.0.09170 2008.08.14 -
eSafe 7.0.17.0 2008.08.14 -
eTrust-Vet 31.6.6032 2008.08.14 -
Ewido 4.0 2008.08.14 -
F-Prot 4.4.4.56 2008.08.14 -
F-Secure 7.60.13501.0 2008.08.14 -
Fortinet 3.14.0.0 2008.08.14 -
GData 2.0.7306.1023 2008.08.15 -
Ikarus T3.1.1.34.0 2008.08.15 -
K7AntiVirus 7.10.415 2008.08.14 -
Kaspersky 7.0.0.125 2008.08.15 -
McAfee 5361 2008.08.14 -
Microsoft 1.3807 2008.08.15 -
NOD32v2 3357 2008.08.14 -
Norman 5.80.02 2008.08.14 -
Panda 9.0.0.4 2008.08.14 -
PCTools 4.4.2.0 2008.08.14 -
Prevx1 V2 2008.08.15 -
Rising 20.57.32.00 2008.08.14 -
Sophos 4.32.0 2008.08.15 -
Sunbelt 3.1.1542.1 2008.08.13 -
Symantec 10 2008.08.15 -
TheHacker 6.3.0.3.046 2008.08.13 -
TrendMicro 8.700.0.1004 2008.08.14 -
VBA32 3.12.8.3 2008.08.14 -
ViRobot 2008.8.14.1337 2008.08.14 -
VirusBuster 4.5.11.0 2008.08.14 -
Webwasher-Gateway 6.6.2 2008.08.14 -
Information additionnelle
File size: 319488 bytes
MD5...: 72334f906c2e2b002cdd2ff9022fd957
SHA1..: 4023029dbbcbea003ebeb6a350ee882473909de4
SHA256: 991f7c606e122bbd388ba37e56b37cc6d2dca304784e4ce06018d698c57f320f
SHA512: ae9652866c8799720759ad58e5a05b9aa4e81f8685910d71b5442409171e8535<br>91bfd5e98309384c6b0a48aec32ccf1f164fa44eafb8398184e76ed8ceaa8746
PEiD..: -
PEInfo: PE Structure information<br><br>( base data )<br>entrypointaddress.: 0x41e599<br>timedatestamp.....: 0x454ab0fa (Fri Nov 03 03:01:14 2006)<br>machinetype.......: 0x14c (I386)<br><br>( 4 sections )<br>name viradd virsiz rawdsiz ntrpy md5<br>.text 0x1000 0x31a34 0x32000 6.63 f8c5eda1be338fea99378c85456b3291<br>.rdata 0x33000 0xc518 0xd000 4.84 6b1caa6165f606ad09f8f85a76cb6207<br>.data 0x40000 0x64d4 0x3000 3.80 2437d28dc556f26df3d859b5546128f4<br>.rsrc 0x47000 0xa478 0xb000 2.63 b4c46c8497d1737eb04b7f0920a73922<br><br>( 11 imports ) <br>> KERNEL32.dll: FileTimeToSystemTime, GetTickCount, FileTimeToLocalFileTime, GetFileAttributesA, GetFileTime, HeapFree, HeapAlloc, VirtualProtect, VirtualAlloc, GetSystemInfo, VirtualQuery, HeapReAlloc, GetCommandLineA, GetProcessHeap, RtlUnwind, ExitProcess, ExitThread, CreateThread, RaiseException, HeapSize, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetACP, HeapDestroy, HeapCreate, SetErrorMode, GetStdHandle, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, SetHandleCount, GetFileType, QueryPerformanceCounter, GetSystemTimeAsFileTime, GetStringTypeA, GetStringTypeW, GetTimeZoneInformation, LCMapStringA, LCMapStringW, GetConsoleCP, GetConsoleMode, SetStdHandle, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, SetEnvironmentVariableA, GetOEMCP, GetCPInfo, CreateFileA, GetFullPathNameA, GetVolumeInformationA, FindFirstFileA, FindClose, GetCurrentProcess, DuplicateHandle, GetFileSize, SetEndOfFile, UnlockFile, LockFile, FlushFileBuffers, SetFilePointer, WriteFile, ReadFile, GetThreadLocale, InterlockedIncrement, TlsFree, LocalReAlloc, TlsSetValue, TlsAlloc, GlobalHandle, GlobalReAlloc, TlsGetValue, LocalAlloc, GlobalFlags, GlobalGetAtomNameA, GlobalFindAtomA, lstrcmpW, GetVersionExA, MulDiv, InterlockedDecrement, GetModuleFileNameW, GetCurrentProcessId, SetLastError, GlobalAddAtomA, SuspendThread, ResumeThread, SetThreadPriority, CreateEventA, GlobalUnlock, WritePrivateProfileStringA, FreeResource, GlobalFree, GetCurrentThread, GetCurrentThreadId, ConvertDefaultLocale, EnumResourceLanguagesA, GetLocaleInfoA, LoadLibraryA, FindResourceA, LoadResource, LockResource, SizeofResource, GlobalLock, lstrcmpA, GlobalAlloc, FreeLibrary, GlobalDeleteAtom, GetModuleHandleA, GetProcAddress, GetVersion, CompareStringA, InterlockedExchange, MultiByteToWideChar, CompareStringW, WideCharToMultiByte, lstrlenA, GetLastError, CreateMutexA, GetPrivateProfileStringA, GetModuleFileNameA, Sleep, CloseHandle, CreateProcessA, GetStartupInfoA, LocalFree, FormatMessageA, LeaveCriticalSection, EnterCriticalSection, DeleteCriticalSection, InitializeCriticalSection, SetEvent, VirtualFree, WaitForSingleObject<br>> USER32.dll: RegisterClipboardFormatA, PostThreadMessageA, IsRectEmpty, CopyAcceleratorTableA, CharNextA, ReleaseCapture, LoadCursorA, SetCapture, ShowWindow, MoveWindow, SetWindowTextA, IsDialogMessageA, RegisterWindowMessageA, SendDlgItemMessageA, WinHelpA, IsChild, GetCapture, GetClassLongA, GetClassNameA, SetPropA, GetPropA, RemovePropA, SetFocus, GetWindowTextA, GetForegroundWindow, GetTopWindow, GetMessageTime, GetMessagePos, MapWindowPoints, DestroyMenu, SetForegroundWindow, UpdateWindow, GetMenu, GetSubMenu, GetMenuItemID, GetMenuItemCount, CreateWindowExA, GetClassInfoExA, GetClassInfoA, RegisterClassA, AdjustWindowRectEx, EqualRect, CopyRect, PtInRect, GetDlgCtrlID, DefWindowProcA, CallWindowProcA, SetWindowLongA, OffsetRect, IntersectRect, SystemParametersInfoA, GetWindowPlacement, GetWindowRect, GetSysColor, EndPaint, BeginPaint, GetWindowDC, ReleaseDC, GetDC, ClientToScreen, GrayStringA, DrawTextExA, DrawTextA, TabbedTextOutA, PeekMessageA, TranslateMessage, DispatchMessageA, LoadIconA, PostMessageA, IsIconic, UnhookWindowsHookEx, GetWindowThreadProcessId, GetLastActivePopup, MessageBoxA, SetCursor, SetWindowsHookExA, CallNextHookEx, GetMessageA, IsWindowVisible, GetKeyState, GetCursorPos, UnregisterClassA, GetSysColorBrush, ValidateRect, SetMenuItemBitmaps, MessageBeep, GetNextDlgGroupItem, InvalidateRgn, InvalidateRect, SetRect, SendMessageA, GetSystemMetrics, GetClientRect, DrawIcon, EnableWindow, CharUpperA, PostQuitMessage, SetWindowPos, MapDialogRect, GetParent, SetWindowContextHelpId, GetWindow, EndDialog, GetNextDlgTabItem, IsWindowEnabled, GetDlgItem, GetWindowLongA, IsWindow, DestroyWindow, CreateDialogIndirectParamA, SetActiveWindow, GetActiveWindow, GetDesktopWindow, CheckMenuItem, EnableMenuItem, GetMenuState, ModifyMenuA, GetFocus, LoadBitmapA, GetMenuCheckMarkDimensions<br>> GDI32.dll: DeleteDC, GetStockObject, GetDeviceCaps, ExtSelectClipRgn, GetBkColor, GetTextColor, CreateRectRgnIndirect, GetRgnBox, GetMapMode, ScaleWindowExtEx, SetWindowExtEx, ScaleViewportExtEx, SetViewportExtEx, OffsetViewportOrgEx, SetViewportOrgEx, CreateBitmap, Escape, ExtTextOutA, TextOutA, RectVisible, PtVisible, GetWindowExtEx, GetViewportExtEx, GetObjectA, DeleteObject, GetClipBox, SetMapMode, SetTextColor, SetBkColor, RestoreDC, SaveDC, SelectObject<br>> comdlg32.dll: GetFileTitleA<br>> WINSPOOL.DRV: DocumentPropertiesA, OpenPrinterA, ClosePrinter<br>> ADVAPI32.dll: RegDeleteKeyA, RegQueryValueA, RegOpenKeyA, RegEnumKeyA, RegOpenKeyExA, RegSetValueExA, RegCreateKeyExA, RegCloseKey, RegQueryValueExA<br>> COMCTL32.dll: InitCommonControlsEx<br>> SHLWAPI.dll: PathFindFileNameA, PathStripToRootA, SHSetValueA, PathFindExtensionA, PathIsUNCA<br>> oledlg.dll: -<br>> ole32.dll: OleInitialize, CoFreeUnusedLibraries, OleUninitialize, CreateILockBytesOnHGlobal, StgCreateDocfileOnILockBytes, StgOpenStorageOnILockBytes, CoGetClassObject, CoRevokeClassObject, CoTaskMemFree, CLSIDFromString, CLSIDFromProgID, OleIsCurrentClipboard, OleFlushClipboard, CoRegisterMessageFilter, CoTaskMemAlloc<br>> OLEAUT32.dll: -, -, -, -, -, -, -, -, -, -, -, -, -<br><br>( 0 exports ) <br>
Pour orton, j'pensais déjà avoir passé un coup de Removal.
J'dois poster un autre rapport ?? Un new Hijackthis ??
Antivirus Version Dernière mise à jour Résultat
AhnLab-V3 2008.8.15.0 2008.08.14 -
AntiVir 7.8.1.19 2008.08.14 -
Authentium 5.1.0.4 2008.08.14 -
Avast 4.8.1195.0 2008.08.14 -
AVG 8.0.0.161 2008.08.14 -
BitDefender 7.2 2008.08.15 -
CAT-QuickHeal 9.50 2008.08.14 -
ClamAV 0.93.1 2008.08.14 -
DrWeb 4.44.0.09170 2008.08.14 -
eSafe 7.0.17.0 2008.08.14 -
eTrust-Vet 31.6.6032 2008.08.14 -
Ewido 4.0 2008.08.14 -
F-Prot 4.4.4.56 2008.08.14 -
F-Secure 7.60.13501.0 2008.08.14 -
Fortinet 3.14.0.0 2008.08.14 -
GData 2.0.7306.1023 2008.08.15 -
Ikarus T3.1.1.34.0 2008.08.15 -
K7AntiVirus 7.10.415 2008.08.14 -
Kaspersky 7.0.0.125 2008.08.15 -
McAfee 5361 2008.08.14 -
Microsoft 1.3807 2008.08.15 -
NOD32v2 3357 2008.08.14 -
Norman 5.80.02 2008.08.14 -
Panda 9.0.0.4 2008.08.14 -
PCTools 4.4.2.0 2008.08.14 -
Prevx1 V2 2008.08.15 -
Rising 20.57.32.00 2008.08.14 -
Sophos 4.32.0 2008.08.15 -
Sunbelt 3.1.1542.1 2008.08.13 -
Symantec 10 2008.08.15 -
TheHacker 6.3.0.3.046 2008.08.13 -
TrendMicro 8.700.0.1004 2008.08.14 -
VBA32 3.12.8.3 2008.08.14 -
ViRobot 2008.8.14.1337 2008.08.14 -
VirusBuster 4.5.11.0 2008.08.14 -
Webwasher-Gateway 6.6.2 2008.08.14 -
Information additionnelle
File size: 319488 bytes
MD5...: 72334f906c2e2b002cdd2ff9022fd957
SHA1..: 4023029dbbcbea003ebeb6a350ee882473909de4
SHA256: 991f7c606e122bbd388ba37e56b37cc6d2dca304784e4ce06018d698c57f320f
SHA512: ae9652866c8799720759ad58e5a05b9aa4e81f8685910d71b5442409171e8535<br>91bfd5e98309384c6b0a48aec32ccf1f164fa44eafb8398184e76ed8ceaa8746
PEiD..: -
PEInfo: PE Structure information<br><br>( base data )<br>entrypointaddress.: 0x41e599<br>timedatestamp.....: 0x454ab0fa (Fri Nov 03 03:01:14 2006)<br>machinetype.......: 0x14c (I386)<br><br>( 4 sections )<br>name viradd virsiz rawdsiz ntrpy md5<br>.text 0x1000 0x31a34 0x32000 6.63 f8c5eda1be338fea99378c85456b3291<br>.rdata 0x33000 0xc518 0xd000 4.84 6b1caa6165f606ad09f8f85a76cb6207<br>.data 0x40000 0x64d4 0x3000 3.80 2437d28dc556f26df3d859b5546128f4<br>.rsrc 0x47000 0xa478 0xb000 2.63 b4c46c8497d1737eb04b7f0920a73922<br><br>( 11 imports ) <br>> KERNEL32.dll: FileTimeToSystemTime, GetTickCount, FileTimeToLocalFileTime, GetFileAttributesA, GetFileTime, HeapFree, HeapAlloc, VirtualProtect, VirtualAlloc, GetSystemInfo, VirtualQuery, HeapReAlloc, GetCommandLineA, GetProcessHeap, RtlUnwind, ExitProcess, ExitThread, CreateThread, RaiseException, HeapSize, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetACP, HeapDestroy, HeapCreate, SetErrorMode, GetStdHandle, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, SetHandleCount, GetFileType, QueryPerformanceCounter, GetSystemTimeAsFileTime, GetStringTypeA, GetStringTypeW, GetTimeZoneInformation, LCMapStringA, LCMapStringW, GetConsoleCP, GetConsoleMode, SetStdHandle, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, SetEnvironmentVariableA, GetOEMCP, GetCPInfo, CreateFileA, GetFullPathNameA, GetVolumeInformationA, FindFirstFileA, FindClose, GetCurrentProcess, DuplicateHandle, GetFileSize, SetEndOfFile, UnlockFile, LockFile, FlushFileBuffers, SetFilePointer, WriteFile, ReadFile, GetThreadLocale, InterlockedIncrement, TlsFree, LocalReAlloc, TlsSetValue, TlsAlloc, GlobalHandle, GlobalReAlloc, TlsGetValue, LocalAlloc, GlobalFlags, GlobalGetAtomNameA, GlobalFindAtomA, lstrcmpW, GetVersionExA, MulDiv, InterlockedDecrement, GetModuleFileNameW, GetCurrentProcessId, SetLastError, GlobalAddAtomA, SuspendThread, ResumeThread, SetThreadPriority, CreateEventA, GlobalUnlock, WritePrivateProfileStringA, FreeResource, GlobalFree, GetCurrentThread, GetCurrentThreadId, ConvertDefaultLocale, EnumResourceLanguagesA, GetLocaleInfoA, LoadLibraryA, FindResourceA, LoadResource, LockResource, SizeofResource, GlobalLock, lstrcmpA, GlobalAlloc, FreeLibrary, GlobalDeleteAtom, GetModuleHandleA, GetProcAddress, GetVersion, CompareStringA, InterlockedExchange, MultiByteToWideChar, CompareStringW, WideCharToMultiByte, lstrlenA, GetLastError, CreateMutexA, GetPrivateProfileStringA, GetModuleFileNameA, Sleep, CloseHandle, CreateProcessA, GetStartupInfoA, LocalFree, FormatMessageA, LeaveCriticalSection, EnterCriticalSection, DeleteCriticalSection, InitializeCriticalSection, SetEvent, VirtualFree, WaitForSingleObject<br>> USER32.dll: RegisterClipboardFormatA, PostThreadMessageA, IsRectEmpty, CopyAcceleratorTableA, CharNextA, ReleaseCapture, LoadCursorA, SetCapture, ShowWindow, MoveWindow, SetWindowTextA, IsDialogMessageA, RegisterWindowMessageA, SendDlgItemMessageA, WinHelpA, IsChild, GetCapture, GetClassLongA, GetClassNameA, SetPropA, GetPropA, RemovePropA, SetFocus, GetWindowTextA, GetForegroundWindow, GetTopWindow, GetMessageTime, GetMessagePos, MapWindowPoints, DestroyMenu, SetForegroundWindow, UpdateWindow, GetMenu, GetSubMenu, GetMenuItemID, GetMenuItemCount, CreateWindowExA, GetClassInfoExA, GetClassInfoA, RegisterClassA, AdjustWindowRectEx, EqualRect, CopyRect, PtInRect, GetDlgCtrlID, DefWindowProcA, CallWindowProcA, SetWindowLongA, OffsetRect, IntersectRect, SystemParametersInfoA, GetWindowPlacement, GetWindowRect, GetSysColor, EndPaint, BeginPaint, GetWindowDC, ReleaseDC, GetDC, ClientToScreen, GrayStringA, DrawTextExA, DrawTextA, TabbedTextOutA, PeekMessageA, TranslateMessage, DispatchMessageA, LoadIconA, PostMessageA, IsIconic, UnhookWindowsHookEx, GetWindowThreadProcessId, GetLastActivePopup, MessageBoxA, SetCursor, SetWindowsHookExA, CallNextHookEx, GetMessageA, IsWindowVisible, GetKeyState, GetCursorPos, UnregisterClassA, GetSysColorBrush, ValidateRect, SetMenuItemBitmaps, MessageBeep, GetNextDlgGroupItem, InvalidateRgn, InvalidateRect, SetRect, SendMessageA, GetSystemMetrics, GetClientRect, DrawIcon, EnableWindow, CharUpperA, PostQuitMessage, SetWindowPos, MapDialogRect, GetParent, SetWindowContextHelpId, GetWindow, EndDialog, GetNextDlgTabItem, IsWindowEnabled, GetDlgItem, GetWindowLongA, IsWindow, DestroyWindow, CreateDialogIndirectParamA, SetActiveWindow, GetActiveWindow, GetDesktopWindow, CheckMenuItem, EnableMenuItem, GetMenuState, ModifyMenuA, GetFocus, LoadBitmapA, GetMenuCheckMarkDimensions<br>> GDI32.dll: DeleteDC, GetStockObject, GetDeviceCaps, ExtSelectClipRgn, GetBkColor, GetTextColor, CreateRectRgnIndirect, GetRgnBox, GetMapMode, ScaleWindowExtEx, SetWindowExtEx, ScaleViewportExtEx, SetViewportExtEx, OffsetViewportOrgEx, SetViewportOrgEx, CreateBitmap, Escape, ExtTextOutA, TextOutA, RectVisible, PtVisible, GetWindowExtEx, GetViewportExtEx, GetObjectA, DeleteObject, GetClipBox, SetMapMode, SetTextColor, SetBkColor, RestoreDC, SaveDC, SelectObject<br>> comdlg32.dll: GetFileTitleA<br>> WINSPOOL.DRV: DocumentPropertiesA, OpenPrinterA, ClosePrinter<br>> ADVAPI32.dll: RegDeleteKeyA, RegQueryValueA, RegOpenKeyA, RegEnumKeyA, RegOpenKeyExA, RegSetValueExA, RegCreateKeyExA, RegCloseKey, RegQueryValueExA<br>> COMCTL32.dll: InitCommonControlsEx<br>> SHLWAPI.dll: PathFindFileNameA, PathStripToRootA, SHSetValueA, PathFindExtensionA, PathIsUNCA<br>> oledlg.dll: -<br>> ole32.dll: OleInitialize, CoFreeUnusedLibraries, OleUninitialize, CreateILockBytesOnHGlobal, StgCreateDocfileOnILockBytes, StgOpenStorageOnILockBytes, CoGetClassObject, CoRevokeClassObject, CoTaskMemFree, CLSIDFromString, CLSIDFromProgID, OleIsCurrentClipboard, OleFlushClipboard, CoRegisterMessageFilter, CoTaskMemAlloc<br>> OLEAUT32.dll: -, -, -, -, -, -, -, -, -, -, -, -, -<br><br>( 0 exports ) <br>
Antivirus Version Dernière mise à jour Résultat
AhnLab-V3 2008.8.15.0 2008.08.14 -
AntiVir 7.8.1.19 2008.08.14 -
Authentium 5.1.0.4 2008.08.14 -
Avast 4.8.1195.0 2008.08.14 -
AVG 8.0.0.161 2008.08.14 -
BitDefender 7.2 2008.08.15 -
CAT-QuickHeal 9.50 2008.08.14 -
ClamAV 0.93.1 2008.08.14 -
DrWeb 4.44.0.09170 2008.08.14 -
eSafe 7.0.17.0 2008.08.14 -
eTrust-Vet 31.6.6032 2008.08.14 -
Ewido 4.0 2008.08.14 -
F-Prot 4.4.4.56 2008.08.14 -
F-Secure 7.60.13501.0 2008.08.14 -
Fortinet 3.14.0.0 2008.08.14 -
GData 2.0.7306.1023 2008.08.15 -
Ikarus T3.1.1.34.0 2008.08.15 -
K7AntiVirus 7.10.415 2008.08.14 -
Kaspersky 7.0.0.125 2008.08.15 -
McAfee 5361 2008.08.14 -
Microsoft 1.3807 2008.08.15 -
NOD32v2 3357 2008.08.14 -
Norman 5.80.02 2008.08.14 -
Panda 9.0.0.4 2008.08.14 -
PCTools 4.4.2.0 2008.08.14 -
Prevx1 V2 2008.08.15 -
Rising 20.57.32.00 2008.08.14 -
Sophos 4.32.0 2008.08.15 -
Sunbelt 3.1.1542.1 2008.08.13 -
Symantec 10 2008.08.15 -
TheHacker 6.3.0.3.046 2008.08.13 -
TrendMicro 8.700.0.1004 2008.08.14 -
VBA32 3.12.8.3 2008.08.14 -
ViRobot 2008.8.14.1337 2008.08.14 -
VirusBuster 4.5.11.0 2008.08.14 -
Webwasher-Gateway 6.6.2 2008.08.14 -
Information additionnelle
File size: 319488 bytes
MD5...: 72334f906c2e2b002cdd2ff9022fd957
SHA1..: 4023029dbbcbea003ebeb6a350ee882473909de4
SHA256: 991f7c606e122bbd388ba37e56b37cc6d2dca304784e4ce06018d698c57f320f
SHA512: ae9652866c8799720759ad58e5a05b9aa4e81f8685910d71b5442409171e8535<br>91bfd5e98309384c6b0a48aec32ccf1f164fa44eafb8398184e76ed8ceaa8746
PEiD..: -
PEInfo: PE Structure information<br><br>( base data )<br>entrypointaddress.: 0x41e599<br>timedatestamp.....: 0x454ab0fa (Fri Nov 03 03:01:14 2006)<br>machinetype.......: 0x14c (I386)<br><br>( 4 sections )<br>name viradd virsiz rawdsiz ntrpy md5<br>.text 0x1000 0x31a34 0x32000 6.63 f8c5eda1be338fea99378c85456b3291<br>.rdata 0x33000 0xc518 0xd000 4.84 6b1caa6165f606ad09f8f85a76cb6207<br>.data 0x40000 0x64d4 0x3000 3.80 2437d28dc556f26df3d859b5546128f4<br>.rsrc 0x47000 0xa478 0xb000 2.63 b4c46c8497d1737eb04b7f0920a73922<br><br>( 11 imports ) <br>> KERNEL32.dll: FileTimeToSystemTime, GetTickCount, FileTimeToLocalFileTime, GetFileAttributesA, GetFileTime, HeapFree, HeapAlloc, VirtualProtect, VirtualAlloc, GetSystemInfo, VirtualQuery, HeapReAlloc, GetCommandLineA, GetProcessHeap, RtlUnwind, ExitProcess, ExitThread, CreateThread, RaiseException, HeapSize, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetACP, HeapDestroy, HeapCreate, SetErrorMode, GetStdHandle, FreeEnvironmentStringsA, GetEnvironmentStrings, FreeEnvironmentStringsW, GetEnvironmentStringsW, SetHandleCount, GetFileType, QueryPerformanceCounter, GetSystemTimeAsFileTime, GetStringTypeA, GetStringTypeW, GetTimeZoneInformation, LCMapStringA, LCMapStringW, GetConsoleCP, GetConsoleMode, SetStdHandle, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, SetEnvironmentVariableA, GetOEMCP, GetCPInfo, CreateFileA, GetFullPathNameA, GetVolumeInformationA, FindFirstFileA, FindClose, GetCurrentProcess, DuplicateHandle, GetFileSize, SetEndOfFile, UnlockFile, LockFile, FlushFileBuffers, SetFilePointer, WriteFile, ReadFile, GetThreadLocale, InterlockedIncrement, TlsFree, LocalReAlloc, TlsSetValue, TlsAlloc, GlobalHandle, GlobalReAlloc, TlsGetValue, LocalAlloc, GlobalFlags, GlobalGetAtomNameA, GlobalFindAtomA, lstrcmpW, GetVersionExA, MulDiv, InterlockedDecrement, GetModuleFileNameW, GetCurrentProcessId, SetLastError, GlobalAddAtomA, SuspendThread, ResumeThread, SetThreadPriority, CreateEventA, GlobalUnlock, WritePrivateProfileStringA, FreeResource, GlobalFree, GetCurrentThread, GetCurrentThreadId, ConvertDefaultLocale, EnumResourceLanguagesA, GetLocaleInfoA, LoadLibraryA, FindResourceA, LoadResource, LockResource, SizeofResource, GlobalLock, lstrcmpA, GlobalAlloc, FreeLibrary, GlobalDeleteAtom, GetModuleHandleA, GetProcAddress, GetVersion, CompareStringA, InterlockedExchange, MultiByteToWideChar, CompareStringW, WideCharToMultiByte, lstrlenA, GetLastError, CreateMutexA, GetPrivateProfileStringA, GetModuleFileNameA, Sleep, CloseHandle, CreateProcessA, GetStartupInfoA, LocalFree, FormatMessageA, LeaveCriticalSection, EnterCriticalSection, DeleteCriticalSection, InitializeCriticalSection, SetEvent, VirtualFree, WaitForSingleObject<br>> USER32.dll: RegisterClipboardFormatA, PostThreadMessageA, IsRectEmpty, CopyAcceleratorTableA, CharNextA, ReleaseCapture, LoadCursorA, SetCapture, ShowWindow, MoveWindow, SetWindowTextA, IsDialogMessageA, RegisterWindowMessageA, SendDlgItemMessageA, WinHelpA, IsChild, GetCapture, GetClassLongA, GetClassNameA, SetPropA, GetPropA, RemovePropA, SetFocus, GetWindowTextA, GetForegroundWindow, GetTopWindow, GetMessageTime, GetMessagePos, MapWindowPoints, DestroyMenu, SetForegroundWindow, UpdateWindow, GetMenu, GetSubMenu, GetMenuItemID, GetMenuItemCount, CreateWindowExA, GetClassInfoExA, GetClassInfoA, RegisterClassA, AdjustWindowRectEx, EqualRect, CopyRect, PtInRect, GetDlgCtrlID, DefWindowProcA, CallWindowProcA, SetWindowLongA, OffsetRect, IntersectRect, SystemParametersInfoA, GetWindowPlacement, GetWindowRect, GetSysColor, EndPaint, BeginPaint, GetWindowDC, ReleaseDC, GetDC, ClientToScreen, GrayStringA, DrawTextExA, DrawTextA, TabbedTextOutA, PeekMessageA, TranslateMessage, DispatchMessageA, LoadIconA, PostMessageA, IsIconic, UnhookWindowsHookEx, GetWindowThreadProcessId, GetLastActivePopup, MessageBoxA, SetCursor, SetWindowsHookExA, CallNextHookEx, GetMessageA, IsWindowVisible, GetKeyState, GetCursorPos, UnregisterClassA, GetSysColorBrush, ValidateRect, SetMenuItemBitmaps, MessageBeep, GetNextDlgGroupItem, InvalidateRgn, InvalidateRect, SetRect, SendMessageA, GetSystemMetrics, GetClientRect, DrawIcon, EnableWindow, CharUpperA, PostQuitMessage, SetWindowPos, MapDialogRect, GetParent, SetWindowContextHelpId, GetWindow, EndDialog, GetNextDlgTabItem, IsWindowEnabled, GetDlgItem, GetWindowLongA, IsWindow, DestroyWindow, CreateDialogIndirectParamA, SetActiveWindow, GetActiveWindow, GetDesktopWindow, CheckMenuItem, EnableMenuItem, GetMenuState, ModifyMenuA, GetFocus, LoadBitmapA, GetMenuCheckMarkDimensions<br>> GDI32.dll: DeleteDC, GetStockObject, GetDeviceCaps, ExtSelectClipRgn, GetBkColor, GetTextColor, CreateRectRgnIndirect, GetRgnBox, GetMapMode, ScaleWindowExtEx, SetWindowExtEx, ScaleViewportExtEx, SetViewportExtEx, OffsetViewportOrgEx, SetViewportOrgEx, CreateBitmap, Escape, ExtTextOutA, TextOutA, RectVisible, PtVisible, GetWindowExtEx, GetViewportExtEx, GetObjectA, DeleteObject, GetClipBox, SetMapMode, SetTextColor, SetBkColor, RestoreDC, SaveDC, SelectObject<br>> comdlg32.dll: GetFileTitleA<br>> WINSPOOL.DRV: DocumentPropertiesA, OpenPrinterA, ClosePrinter<br>> ADVAPI32.dll: RegDeleteKeyA, RegQueryValueA, RegOpenKeyA, RegEnumKeyA, RegOpenKeyExA, RegSetValueExA, RegCreateKeyExA, RegCloseKey, RegQueryValueExA<br>> COMCTL32.dll: InitCommonControlsEx<br>> SHLWAPI.dll: PathFindFileNameA, PathStripToRootA, SHSetValueA, PathFindExtensionA, PathIsUNCA<br>> oledlg.dll: -<br>> ole32.dll: OleInitialize, CoFreeUnusedLibraries, OleUninitialize, CreateILockBytesOnHGlobal, StgCreateDocfileOnILockBytes, StgOpenStorageOnILockBytes, CoGetClassObject, CoRevokeClassObject, CoTaskMemFree, CLSIDFromString, CLSIDFromProgID, OleIsCurrentClipboard, OleFlushClipboard, CoRegisterMessageFilter, CoTaskMemAlloc<br>> OLEAUT32.dll: -, -, -, -, -, -, -, -, -, -, -, -, -<br><br>( 0 exports ) <br>
Pour orton, j'pensais déjà avoir passé un coup de Removal.
J'dois poster un autre rapport ?? Un new Hijackthis ??
- danny386
- Apprenti(e) Expert(e)
- Messages: 202
- Inscription: 25 Nov 2008 16:29
le 06 Déc 2008 02:53
_ Le rapport est clean, Monitor.exe est ok.
_ Tu as passé à nouveau le désinstallateur? Parce que oui, il restait des traces.
_ Tu connais l'application bandoo.exe?
Si tu as fait le nettoyage Symantec et que tu connasi Bandoo, tu refais un nouveau scan HiJackThis.
Ps: tu as bien effacé les lignes précédentes?
_ Tu as passé à nouveau le désinstallateur? Parce que oui, il restait des traces.
_ Tu connais l'application bandoo.exe?
Si tu as fait le nettoyage Symantec et que tu connasi Bandoo, tu refais un nouveau scan HiJackThis.
Ps: tu as bien effacé les lignes précédentes?
-
r@in | b0w - PC-Infopraticien
- Messages: 7714
- Inscription: 09 Déc 2007 12:37
- Localisation: Parrot Sec
le 06 Déc 2008 12:48
Non, bandoo.exe je connais pas. Je l'ai effacé. J'ai bien tout enlevé les traces de Norton, effacé les lignes d'Hijackthis...
Voilà un new rapport. (encore merci de ton aide).
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:46:23, on 6/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSExplorer.EXE
C:WINDOWSsystem32spoolsv.exe
C:Program FilesFichiers communsLogiShrdLVMVFMLVPrcSrv.exe
C:WINDOWSRTHDCPL.EXE
C:Program FilesJavajre6injusched.exe
C:Program FilesKaspersky LabKaspersky Internet Security 2009avp.exe
C:Program FilesFichiers communsLogiShrdLComMgrCommunications_Helper.exe
C:WINDOWSPixArtPAC207Monitor.exe
C:WINDOWSsystem32igfxtray.exe
C:WINDOWSsystem32hkcmd.exe
C:WINDOWSsystem32igfxpers.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesVeoh NetworksVeohWebPlayerveohwebplayer.exe
C:WINDOWSsystem32igfxsrvc.exe
C:Program FilesFichiers communsAppleMobile Device SupportinAppleMobileDeviceService.exe
C:Program FilesKaspersky LabKaspersky Internet Security 2009avp.exe
C:Program FilesBonjourmDNSResponder.exe
C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
C:Program FilesJavajre6injqs.exe
C:Program FilesFichiers communsLogiShrdLVCOMSERLVComSer.exe
C:Program FilesNeroNero8Nero BackItUpNBService.exe
C:WINDOWSsystem32IoctlSvc.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesFichiers communsLogiShrdLVCOMSERLVComSer.exe
C:Program FilesMozilla Firefoxfirefox.exe
C:Program FilesTrend MicroHijackThisHijackThis.exe
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.google.be/intl/fr/
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = *.local
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:Program FilesFichiers communsAdobeAcrobatActiveXAcroIEHelperShim.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:Program FilesBitComet oolsBitCometBHO_1.2.8.7.dll
O2 - BHO: IEVkbdBHO Class - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:Program FilesKaspersky LabKaspersky Internet Security 2009ievkbd.dll
O2 - BHO: Click-to-Call BHO - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:Program FilesWindows LiveMessengerwlchtc.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program FilesJavajre6inssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:Program FilesFichiers communsMicrosoft SharedWindows LiveWindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:program filesgooglegoogletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:Program FilesGoogleGoogleToolbarNotifier4.1.805.4472swg.dll
O2 - BHO: IeMonitorBho Class - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - C:Program FilesMegauploadMega ManagerMegaIEMn.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:Program FilesJavajre6injp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:program filesgooglegoogletoolbar1.dll
O3 - Toolbar: Veoh Web Player Video Finder - {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - C:Program FilesVeoh NetworksVeohWebPlayerVeohIEToolbar.dll
O4 - HKLM..Run: [SkyTel] SkyTel.EXE
O4 - HKLM..Run: [NBKeyScan] "C:Program FilesNeroNero8Nero BackItUpNBKeyScan.exe"
O4 - HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM..Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM..Run: [SunJavaUpdateSched] "C:Program FilesJavajre6injusched.exe"
O4 - HKLM..Run: [Adobe Reader Speed Launcher] "C:Program FilesAdobeReader 9.0ReaderReader_sl.exe"
O4 - HKLM..Run: [AVP] "C:Program FilesKaspersky LabKaspersky Internet Security 2009avp.exe"
O4 - HKLM..Run: [LogitechCommunicationsManager] "C:Program FilesFichiers communsLogiShrdLComMgrCommunications_Helper.exe"
O4 - HKLM..Run: [TQ566808] "H:Setup.exe"
O4 - HKLM..Run: [Monitor] C:WINDOWSPixArtPAC207Monitor.exe
O4 - HKLM..Run: [IgfxTray] C:WINDOWSsystem32igfxtray.exe
O4 - HKLM..Run: [HotKeysCmds] C:WINDOWSsystem32hkcmd.exe
O4 - HKLM..Run: [Persistence] C:WINDOWSsystem32igfxpers.exe
O4 - HKCU..Run: [swg] C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe
O4 - HKCU..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe
O4 - HKCU..Run: [VeohPlugin] "C:Program FilesVeoh NetworksVeohWebPlayerveohwebplayer.exe"
O4 - HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'SERVICE RESEAU')
O4 - HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'SYSTEM')
O4 - HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: &D&ownload &with BitComet - res://C:Program FilesBitCometBitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:Program FilesBitCometBitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://C:Program FilesBitCometBitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Ajouter à Kaspersky Anti-Bannière - C:Program FilesKaspersky LabKaspersky Internet Security 2009ie_banner_deny.htm
O8 - Extra context menu item: Liens de téléchargement avec Mega Manager... - C:Program FilesMegauploadMega Managermm_file.htm
O8 - Extra context menu item: Ouvrir le cadre dans une nouvelle fenêtre - C:WINDOWSwebOpenFrame.htm
O9 - Extra button: Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - C:WINDOWSsystem32shdocvw.dll
O9 - Extra 'Tools' menuitem: VisualRoute Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - C:WINDOWSsystem32shdocvw.dll
O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:Program FilesKaspersky LabKaspersky Internet Security 2009SCIEPlgn.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:WINDOWSdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:WINDOWSdoscandel.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:WINDOWSsystem32shdocvw.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:WINDOWSsystem32shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:Program FilesYahoo!Commonyinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w3/resources/MSNPUpld.cab
O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} (MUCatalogWebControl Class) - http://catalog.update.microsoft.com/v7/ ... 1027248156
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windows ... 0268620218
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O17 - HKLMSystemCCSServicesTcpip..{42B7EF4A-F626-452A-BF44-D63B06094802}: NameServer = 192.168.1.1
O20 - AppInit_DLLs: C:PROGRA~1KASPER~1KASPER~1mzvkbd.dll,C:PROGRA~1KASPER~1KASPER~1mzvkbd3.dll,C:PROGRA~1KASPER~1KASPER~1adialhk.dll,C:PROGRA~1KASPER~1KASPER~1kloehk.dll c:progra~1andoondhook.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:Program FilesFichiers communsAppleMobile Device SupportinAppleMobileDeviceService.exe
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:Program FilesKaspersky LabKaspersky Internet Security 2009avp.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:Program FilesBonjourmDNSResponder.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:Program FilesiPodiniPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:Program FilesJavajre6injqs.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:Program FilesFichiers communsLogiShrdLVCOMSERLVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:Program FilesFichiers communsLogiShrdLVMVFMLVPrcSrv.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:Program FilesNeroNero8Nero BackItUpNBService.exe
O23 - Service: NMIndexingService - Nero AG - C:Program FilesFichiers communsNeroLibNMIndexingService.exe
O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:Program FilesSymantecLiveUpdateALUSchedulerSvc.exe (file missing)
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:WINDOWSsystem32IoctlSvc.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:Program FilesWindows LiveinstallerWLSetupSvc.exe (file missing)
--
End of file - 10660 bytes
PS : Je me disais aussi que toutes les lignes 018 étaient trop nombreuses, j'attendais l'avis d'une autre personne pour les supprimer. Sinon, faut pas que je passe d'autre analyse (comme MBAM, ...). Pour MBAM, j'fais une analyse toutes les 2 semaines et rien de grave détecté pour l'instant.
Voilà un new rapport. (encore merci de ton aide).
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:46:23, on 6/12/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSExplorer.EXE
C:WINDOWSsystem32spoolsv.exe
C:Program FilesFichiers communsLogiShrdLVMVFMLVPrcSrv.exe
C:WINDOWSRTHDCPL.EXE
C:Program FilesJavajre6injusched.exe
C:Program FilesKaspersky LabKaspersky Internet Security 2009avp.exe
C:Program FilesFichiers communsLogiShrdLComMgrCommunications_Helper.exe
C:WINDOWSPixArtPAC207Monitor.exe
C:WINDOWSsystem32igfxtray.exe
C:WINDOWSsystem32hkcmd.exe
C:WINDOWSsystem32igfxpers.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesVeoh NetworksVeohWebPlayerveohwebplayer.exe
C:WINDOWSsystem32igfxsrvc.exe
C:Program FilesFichiers communsAppleMobile Device SupportinAppleMobileDeviceService.exe
C:Program FilesKaspersky LabKaspersky Internet Security 2009avp.exe
C:Program FilesBonjourmDNSResponder.exe
C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
C:Program FilesJavajre6injqs.exe
C:Program FilesFichiers communsLogiShrdLVCOMSERLVComSer.exe
C:Program FilesNeroNero8Nero BackItUpNBService.exe
C:WINDOWSsystem32IoctlSvc.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesFichiers communsLogiShrdLVCOMSERLVComSer.exe
C:Program FilesMozilla Firefoxfirefox.exe
C:Program FilesTrend MicroHijackThisHijackThis.exe
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.google.be/intl/fr/
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = *.local
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Liens
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:Program FilesFichiers communsAdobeAcrobatActiveXAcroIEHelperShim.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:Program FilesBitComet oolsBitCometBHO_1.2.8.7.dll
O2 - BHO: IEVkbdBHO Class - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:Program FilesKaspersky LabKaspersky Internet Security 2009ievkbd.dll
O2 - BHO: Click-to-Call BHO - {5C255C8A-E604-49b4-9D64-90988571CECB} - C:Program FilesWindows LiveMessengerwlchtc.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program FilesJavajre6inssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:Program FilesFichiers communsMicrosoft SharedWindows LiveWindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:program filesgooglegoogletoolbar1.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:Program FilesGoogleGoogleToolbarNotifier4.1.805.4472swg.dll
O2 - BHO: IeMonitorBho Class - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - C:Program FilesMegauploadMega ManagerMegaIEMn.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:Program FilesJavajre6injp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:program filesgooglegoogletoolbar1.dll
O3 - Toolbar: Veoh Web Player Video Finder - {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - C:Program FilesVeoh NetworksVeohWebPlayerVeohIEToolbar.dll
O4 - HKLM..Run: [SkyTel] SkyTel.EXE
O4 - HKLM..Run: [NBKeyScan] "C:Program FilesNeroNero8Nero BackItUpNBKeyScan.exe"
O4 - HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM..Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM..Run: [SunJavaUpdateSched] "C:Program FilesJavajre6injusched.exe"
O4 - HKLM..Run: [Adobe Reader Speed Launcher] "C:Program FilesAdobeReader 9.0ReaderReader_sl.exe"
O4 - HKLM..Run: [AVP] "C:Program FilesKaspersky LabKaspersky Internet Security 2009avp.exe"
O4 - HKLM..Run: [LogitechCommunicationsManager] "C:Program FilesFichiers communsLogiShrdLComMgrCommunications_Helper.exe"
O4 - HKLM..Run: [TQ566808] "H:Setup.exe"
O4 - HKLM..Run: [Monitor] C:WINDOWSPixArtPAC207Monitor.exe
O4 - HKLM..Run: [IgfxTray] C:WINDOWSsystem32igfxtray.exe
O4 - HKLM..Run: [HotKeysCmds] C:WINDOWSsystem32hkcmd.exe
O4 - HKLM..Run: [Persistence] C:WINDOWSsystem32igfxpers.exe
O4 - HKCU..Run: [swg] C:Program FilesGoogleGoogleToolbarNotifierGoogleToolbarNotifier.exe
O4 - HKCU..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe
O4 - HKCU..Run: [VeohPlugin] "C:Program FilesVeoh NetworksVeohWebPlayerveohwebplayer.exe"
O4 - HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'SERVICE RESEAU')
O4 - HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'SYSTEM')
O4 - HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: &D&ownload &with BitComet - res://C:Program FilesBitCometBitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:Program FilesBitCometBitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://C:Program FilesBitCometBitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Ajouter à Kaspersky Anti-Bannière - C:Program FilesKaspersky LabKaspersky Internet Security 2009ie_banner_deny.htm
O8 - Extra context menu item: Liens de téléchargement avec Mega Manager... - C:Program FilesMegauploadMega Managermm_file.htm
O8 - Extra context menu item: Ouvrir le cadre dans une nouvelle fenêtre - C:WINDOWSwebOpenFrame.htm
O9 - Extra button: Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - C:WINDOWSsystem32shdocvw.dll
O9 - Extra 'Tools' menuitem: VisualRoute Trace - {04849C74-016E-4a43-8AA5-1F01DE57F4A1} - C:WINDOWSsystem32shdocvw.dll
O9 - Extra button: Statistiques de la protection du trafic Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:Program FilesKaspersky LabKaspersky Internet Security 2009SCIEPlgn.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:WINDOWSdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:WINDOWSdoscandel.exe
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:WINDOWSsystem32shdocvw.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:WINDOWSsystem32shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:Program FilesYahoo!Commonyinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx2.hotmail.com/mail/w3/resources/MSNPUpld.cab
O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} (MUCatalogWebControl Class) - http://catalog.update.microsoft.com/v7/ ... 1027248156
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windows ... 0268620218
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/s ... wflash.cab
O17 - HKLMSystemCCSServicesTcpip..{42B7EF4A-F626-452A-BF44-D63B06094802}: NameServer = 192.168.1.1
O20 - AppInit_DLLs: C:PROGRA~1KASPER~1KASPER~1mzvkbd.dll,C:PROGRA~1KASPER~1KASPER~1mzvkbd3.dll,C:PROGRA~1KASPER~1KASPER~1adialhk.dll,C:PROGRA~1KASPER~1KASPER~1kloehk.dll c:progra~1andoondhook.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:Program FilesFichiers communsAppleMobile Device SupportinAppleMobileDeviceService.exe
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:Program FilesKaspersky LabKaspersky Internet Security 2009avp.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:Program FilesBonjourmDNSResponder.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:Program FilesiPodiniPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:Program FilesJavajre6injqs.exe
O23 - Service: LVCOMSer - Logitech Inc. - C:Program FilesFichiers communsLogiShrdLVCOMSERLVComSer.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:Program FilesFichiers communsLogiShrdLVMVFMLVPrcSrv.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:Program FilesNeroNero8Nero BackItUpNBService.exe
O23 - Service: NMIndexingService - Nero AG - C:Program FilesFichiers communsNeroLibNMIndexingService.exe
O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:Program FilesSymantecLiveUpdateALUSchedulerSvc.exe (file missing)
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:WINDOWSsystem32IoctlSvc.exe
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:Program FilesWindows LiveinstallerWLSetupSvc.exe (file missing)
--
End of file - 10660 bytes
PS : Je me disais aussi que toutes les lignes 018 étaient trop nombreuses, j'attendais l'avis d'une autre personne pour les supprimer. Sinon, faut pas que je passe d'autre analyse (comme MBAM, ...). Pour MBAM, j'fais une analyse toutes les 2 semaines et rien de grave détecté pour l'instant.
- danny386
- Apprenti(e) Expert(e)
- Messages: 202
- Inscription: 25 Nov 2008 16:29
le 06 Déc 2008 13:05
Bonjour.
_ Pour Mbam, s'il est à jour & que tu l'utilises souvent, pas de soucis.
_ Tu supprimes les lignes:
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:Program FilesSymantecLiveUpdateALUSchedulerSvc.exe (file missing)
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:Program FilesWindows LiveinstallerWLSetupSvc.exe (file missing)
_ Tu supprimes le dossier C:Program FilesSymantec.
Tout est bon
_ Pour Mbam, s'il est à jour & que tu l'utilises souvent, pas de soucis.
_ Tu supprimes les lignes:
R3 - URLSearchHook: Yahoo! Toolbar avec bloqueur de fenêtres pop-up - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O23 - Service: Planificateur LiveUpdate automatique - Unknown owner - C:Program FilesSymantecLiveUpdateALUSchedulerSvc.exe (file missing)
O23 - Service: Windows Live Setup Service (WLSetupSvc) - Unknown owner - C:Program FilesWindows LiveinstallerWLSetupSvc.exe (file missing)
_ Tu supprimes le dossier C:Program FilesSymantec.
Tout est bon
-
r@in | b0w - PC-Infopraticien
- Messages: 7714
- Inscription: 09 Déc 2007 12:37
- Localisation: Parrot Sec
7 messages
• Page 1 sur 1
Sujets similaires
Pourquoi mon ordi rame comme ça ?Peut-être y a un truc à faire pour booster un peu les performances, genre un réglage caché qu?on connaît pas tous, mais franchement j?suis pas sûr. On voit plein de trucs qui promettent d?accélérer les systèmes, mais est-ce que c?est pas juste du vent au final ? Vous avez déjà testé des méthodes un ...
Réponses: 2
Configuration ordi travailBonjour à tous,En 2009 j'ai monté ça : - Boîtier : Antec NSK4480B-II avec alimentation Earthwatt 380W - Carte mère : ASUS P5QL-E (C2D + DDR2 + PCI-E) - Processeur : INTEL Core2 Duo E8400 (3.0 DualCore LGA775) - Ventirad CPU : Cooler Master Hyper TX3 S775/1156 - Mémoire : 2x2 Go DDR2-800 PC6400 Corsa ...
Réponses: 19
Redmi 8 vers ordi portableBonjour,J'ai un téléphone REDMI 8, et je souhaite utiliser l'internet de celui-ci sur mon ordi portable (win10), et profiter d'un écran plus confortable.Mais ça ne fonctionne pas.Est-il possible d'utiliser un transmetteur "CHROMECAST" pour solutionner le problème ?Merci pour vos lumières. ...
Réponses: 1
[Réglé] Demande conseil ordi à la carte avec tour existanteMon projet :acheter un ordi de bureau d'occasion et changer si besoin des composants pour l'améliorer.Carte (Gigabyte ?) ATOMX2 18 200 500 GOProcess AMD A4-4000 APU avec Radeon HD graphicRAM 4 Go installéAnnée 2011Des questions générales :L'écran a une connexion VGA, si je mets une Carte Mère récent ...
Réponses: 12
[Réglé]Multiples Virus Sur ordi Hacktool,coinminerBonjour, j'espère que vous allez bien en ces temps difficiles.Je suis de nouveau venu chez mes parents pour les fêtes et l'ordinateur de mon père est de nouveau infectée par des cochonneries que je n'arrive pas enlever moi même, c'est pour cela que je requiert votre aide à nouveau.Je fournis les fic ...
Réponses: 26
Téléphone et ordi HSSalut à tous , je me permets de vous demander votre avis concernant des téléphone et pc portable. J'ai un lenovo n500 qui date depuis bien longtemps et acer dont je me rappel plus la réf exact ainsi qu'un vieux smartphone samsung.Je me demande si cela vaut le coup de les faire réparer par un pro au ...
Réponses: 3
SON de mon ordi bloqué au maxBonjour, ,je viens vers vous car depuis 3 jours , le son de mon ordi 5 Asus Windows 10) est bloqué au maximum , impossible de le diminuer , il s'augmente tout seule jusqu'au maximum. De plus l'icone son est bloqué et ne veut plus quitter mon ecran . Que faire svp?Merci
Réponses: 1
Qui est en ligne
Utilisateurs parcourant ce forum: Aucun utilisateur enregistré et 13 invités
|
.: Nous contacter :: Flux RSS :: Données personnelles :. |