hijackthis

[rouca]

Logfile of HijackThis v1.99.1

Scan saved at 19:43:59, on 15/11/2005

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\csrss.exe

C:\WINDOWS\SYSTEM32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\EZ Antivirus\ISafe.exe

C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe

C:\Program Files\Spyware Doctor\sdhelp.exe

C:\WINDOWS\SYSTEM32\Ati2evxx.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\EZ Antivirus\VetMsg.exe

C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe

C:\WINDOWS\System32\alg.exe

C:\Program Files\Kerio\Personal Firewall 4\kpf4gui.exe

C:\Program Files\Norton Password Manager\AcctMgr.exe

C:\Program Files\EZ Antivirus\CAVTray.exe

C:\Program Files\EZ Antivirus\CAVRID.exe

C:\WINDOWS\lclock.exe

C:\Program Files\System Mechanic Professional 6\PopupBlocker.exe

C:\Program Files\NoAdware4\NoAdware4.exe

C:\Program Files\System Mechanic Professional 6\SMSystemAnalyzer.exe

C:\Program Files\Spy Emergency 2005\SpyEmergency.exe

C:\PROGRA~1\SPYWAR~1\cwdoctor.exe

C:\Program Files\Camfrog\Camfrog Server 3.4\CamfrogServer.exe

C:\Program Files\Camfrog\Camfrog Video Chat 3.4\Camfrog Video Chat.exe

C:\WINDOWS\system32\wuauclt.exe

C:\Program Files\MRU-Blaster\scheduler.exe

C:\Program Files\MSN Messenger\msnmsgr.exe

C:\Program Files\eMule\emule.exe

C:\Program Files\Nero\Nero 7\Nero StartSmart\NeroStartSmart.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Nero\Nero 7\Nero Vision\NeroVision.exe

C:\Program Files\Hijackthis\VERSION TRADUITE ORIGINALE.EXE

 

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.fr/ie

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://lstard.stormcorp.net/

R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.google.fr/keyword/%s

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.winlsd.org/

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll

O2 - BHO: IE 4.x-6.x BHO for Internet Download Accelerator - {2A646672-9C3A-4C28-9A7A-1FB0F63F28B6} - C:\PROGRA~1\IDA\idaiehlp.dll

O2 - BHO: Bugnosis - {3A6514CD-A457-11D4-8AF3-000102686B79} - C:\Program Files\Bugnosis\WebBug.dll

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\Spybot - Search & Destroy\SDHelper.dll

O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~1\tools\iesdsg.dll

O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll

O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll

O3 - Toolbar: IDA Bar - {C70E30C7-140A-4166-A2E8-43557E62B41A} - C:\Program Files\IDA\idabar.dll

O3 - Toolbar: Bugnosis - {930E4DE1-973D-42D6-BF6E-6788E06BD003} - C:\Program Files\Bugnosis\WebBug.dll

O4 - HKLM\..\Run: [AcctMgr] C:\Program Files\Norton Password Manager\AcctMgr.exe /startup

O4 - HKLM\..\Run: [PC Adware-Spyware Removal] C:\Program Files\PC Adware-Spyware Removal\PCAdwareSpywareRemoval.exe

O4 - HKLM\..\Run: [PC Adware-Spware Removal] C:\Program Files\PC Adware-Spyware Removal\PCAdwareSpywareRemoval.exe /quick

O4 - HKLM\..\Run: [CaAvTray] "C:\Program Files\EZ Antivirus\CAVTray.exe"

O4 - HKLM\..\Run: [CAVRID] "C:\Program Files\EZ Antivirus\CAVRID.exe"

O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

O4 - HKCU\..\Run: [LClock] lclock.exe

O4 - HKCU\..\Run: [system Mechanic Popup Blocker] "C:\Program Files\System Mechanic Professional 6\PopupBlocker.exe"

O4 - HKCU\..\Run: [NoAdware4] "C:\Program Files\NoAdware4\NoAdware4.exe" :Scan:

O4 - HKCU\..\Run: [sMSystemAnalyzer] "C:\Program Files\System Mechanic Professional 6\SMSystemAnalyzer.exe"

O4 - HKCU\..\Run: [spyEmergency] "C:\Program Files\Spy Emergency 2005\SpyEmergency.exe"

O4 - HKCU\..\Run: [spyware Doctor] C:\PROGRA~1\SPYWAR~1\cwdoctor.exe /Q

O4 - HKCU\..\Run: [Camfrog] "C:\Program Files\Camfrog\Camfrog Video Chat 3.4\CamfrogNet.exe" 1 C:\Program Files\Camfrog\Camfrog Video Chat 3.4\Camfrog Video Chat.exe

O4 - HKCU\..\Run: [CamfrogServer] "C:\Program Files\Camfrog\Camfrog Server 3.4\CamfrogServer.exe"

O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background

O4 - Startup: MRU-Blaster Scheduler.lnk = C:\Program Files\MRU-Blaster\scheduler.exe

O4 - Startup: MRU-Blaster Silent Clean.lnk = C:\Program Files\MRU-Blaster\mrublaster.exe

O4 - Global Startup: Adobe Reader Speed Launch.lnk = ?

O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\IncrediMail\bin\resources\WebMenuImg.htm

O8 - Extra context menu item: Download ALL with IDA - C:\Program Files\IDA\idaieall.htm

O8 - Extra context menu item: Download with IDA - C:\Program Files\IDA\idaie.htm

O8 - Extra context menu item: Namo FlashCatcher - C:\Program Files\Fichiers communs\SourceTec\SWF Catcher\InternetExplorer.htm

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll

O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll

O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~1\tools\iesdpb.dll

O9 - Extra button: Internet Download Accelerator - {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} - C:\Program Files\IDA\ida.exe

O9 - Extra 'Tools' menuitem: &Internet Download Accelerator - {9819CC0E-9669-4D01-9CD7-2C66DA43AC6C} - C:\Program Files\IDA\ida.exe

O9 - Extra button: Namo FlashCatcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Fichiers communs\SourceTec\SWF Catcher\InternetExplorer.htm

O9 - Extra 'Tools' menuitem: Namo FlashCatcher - {E19ADC6E-3909-43E4-9A89-B7B676377EE3} - C:\Program Files\Fichiers communs\SourceTec\SWF Catcher\InternetExplorer.htm

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1132006290281

O17 - HKLM\System\CCS\Services\Tcpip\..\{1F4E024D-E77E-45D6-947E-E7B85AD5FEAF}: NameServer = 212.228.0.252,213.228.0.159

O17 - HKLM\System\CS1\Services\Tcpip\..\{1F4E024D-E77E-45D6-947E-E7B85AD5FEAF}: NameServer = 212.228.0.252,213.228.0.159

O17 - HKLM\System\CS2\Services\Tcpip\..\{1F4E024D-E77E-45D6-947E-E7B85AD5FEAF}: NameServer = 212.228.0.252,213.228.0.159

O20 - AppInit_DLLs: msgplusloader.dll

O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: CAISafe - Computer Associates International, Inc. - C:\Program Files\EZ Antivirus\ISafe.exe

O23 - Service: Kerio Personal Firewall 4 (KPF4) - Kerio Technologies - C:\Program Files\Kerio\Personal Firewall 4\kpf4ss.exe

O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools - C:\Program Files\Spyware Doctor\sdhelp.exe

O23 - Service: VET Message Service (VETMSGNT) - Computer Associates International, Inc. - C:\Program Files\EZ Antivirus\VetMsg.exe

[Jack_Burton]

Salut,

 

Dire "bonjour" c est trop demander?

Expliquer en quelques lignes ton probleme, ou ce que tu attends de l analyse est trop fatiguant?

 

Et merci? Non ca doit également etre de trop!

On est pas des machines!

[rouca]

Bonsoir,

 

désolé jack burton POUR MON MANK DE POLITESSE !!

 

Voilà, j'ai un soucie avec windows update en rapport avec mes paramètres reseau, je pige que dalle, merci de m'aidé et en même temp je file mon scan hidjack pour voir si il y a des erreur merci d'avance et encore mille excuse pour ma politesse. THANK