Logo GNT
Actualités Tests & Guides Bons Plans
Twitter iPhone pliant OnePlus 11 PS5 Disney+ Orange Livebox Windows 11
Entraide Sécurité Sécurité Sécurité Microsoft log hijackthis

log hijackthis

3 réponses
Avatar
berny
Bonjour,

J'au un pote qui a plant=E9 sa machine, on a r=E9ussi a rebooter
sur "derniere bonne configuration connue"
j'ai voulu faire un chkdsk qui a stopp=E9 a 70%, il a aussi une fenetre =
error safe.

Merci de votre aide.


Logfile of HijackThis v1.99.1
Scan saved at 13:14:32, on 11/04/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\System32\cisvc.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb09.exe
C:\Program Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe
C:\WINDOWS\System32\hphmon05.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe
C:\Program Files\Fichiers communs\AOL\ACS\AOLDial.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Hewlett-Packard\Digital Imaging\Unload\hpqcmon.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\System32\HPZipm12.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Logitech\Desktop =
Messenger\8876480\Program\LogitechDesktopMessenger.exe
C:\Program Files\Fichiers communs\AOL\1137061063\ee\AOLHostManager.exe
C:\Program Files\Fichiers communs\AOL\1137061063\ee\AOLServiceHost.exe
C:\Program Files\AOL Compagnon\companion.exe
c:\program files\fichiers =
communs\aol\1137061063\ee\services\antiSpywareApp\ver2_0_12\AOLSP =
Scheduler.exe
C:\Program Files\Fichiers communs\AOL\1137061063\ee\AOLServiceHost.exe
C:\Program Files\AOL 9.0e\waol.exe
C:\Program Files\AOL 9.0e\shellmon.exe
C:\Program Files\Fichiers communs\Aol\aoltpspd.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Documents and Settings\fran=E7ois\Bureau\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =3D =
http://www.msn.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =3D =
http://fr.rd.yahoo.com/customize/ie/defaults/sp/msgr7/*http://fr.search.y=
ahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =3D =
http://fr.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
=3D=20
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
=3D Liens
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} =
- C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - =
C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} =
- c:\program files\google\googletoolbar3.dll
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - =
C:\Program Files\AOL Toolbar\toolbar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - =
c:\program files\google\googletoolbar3.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - =
C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control =
Panel\atiptaxx.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] =
C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb09.exe
O4 - HKLM\..\Run: [HPHUPD05] C:\Program =
Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe=

O4 - HKLM\..\Run: [HP Component Manager] "C:\Program =
Files\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HP Software Update] "C:\Program =
Files\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\System32\hphmon05.exe
O4 - HKLM\..\Run: [AOLSAV] C:\PROGRA~1\TECHCI~1\AOLSAV\AOLAgent.exe
O4 - HKLM\..\Run: [AOLDialer] C:\Program Files\Fichiers =
communs\AOL\ACS\AOLDial.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program =
Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [CamMonitor] C:\Program Files\Hewlett-Packard\Digital =
Imaging\\Unload\hpqcmon.exe
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program =
Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone =
Labs\ZoneAlarm\zlclient.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program =
Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [ImInstaller_IncrediMail] =
C:\DOCUME~1\FRANOI~1\LOCALS~1\Temp\ImInstaller\IncrediMail\incredimail_in=
stall[1].exe -startup -product IncrediMail
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [HostManager] C:\Program Files\Fichiers =
communs\AOL\1137061063\ee\AOLHostManager.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop =
Messenger\8876480\Program\LogitechDesktopMessenger.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" =
/nosplash /minimized
O4 - Startup: Metacafe.lnk =3D C:\Program =
Files\Metacafe\MetacafeAgent.exe
O4 - Global Startup: AOL 9.0 Ic=F4ne AOL.lnk =3D C:\Program Files\AOL =
9.0e\aoltray.exe
O4 - Global Startup: AOL Compagnon.lnk =3D C:\Program Files\AOL =
Compagnon\companion.exe
O4 - Global Startup: Logitech Desktop Messenger.lnk =3D C:\Program =
Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: MetaCafe.lnk =3D C:\Program =
Files\Metacafe\MetacafeAgent.exe
O4 - Global Startup: Microsoft Office.lnk =3D C:\Program Files\Microsoft =
Office\Office10\OSA.EXE
O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:\Program =
Files\AOL Toolbar\toolbar.dll/SEARCH.HTML
O8 - Extra context menu item: &Traduire a partir de l'anglais - =
res://c:\program files\google\GoogleToolbar3.dll/cmwordtrans.html
O8 - Extra context menu item: Pages li=E9es - res://c:\program =
files\google\GoogleToolbar3.dll/cmbacklinks.html
O8 - Extra context menu item: Pages similaires - res://c:\program =
files\google\GoogleToolbar3.dll/cmsimilar.html
O8 - Extra context menu item: Recherche &Google - res://c:\program =
files\google\GoogleToolbar3.dll/cmsearch.html
O8 - Extra context menu item: Version de la page actuelle disponible =
dans le cache Google - res://c:\program =
files\google\GoogleToolbar3.dll/cmcache.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - =
C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - =
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program =
Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} =
- C:\Program Files\AOL Toolbar\toolbar.dll
O9 - Extra 'Tools' menuitem: AOL Toolbar - =
{4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:\Program Files\AOL =
Toolbar\toolbar.dll
O9 - Extra button: ShopperReports - Compare product prices - =
{946B3E9E-E21A-49c8-9F63-900533FAFE15} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - =
C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - =
{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program =
Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine =
Advantage Validation Tool) - =
http://go.microsoft.com/fwlink/?linkid=3D39204
O16 - DPF: {26FCCDF9-A7E1-452A-A73D-7BF7B4D0BA6C} (AOL Pictures Uploader =
Class) - =
http://pictures.aolcdn.com/ap/Resources/1.1.0.31/cab/aolpPlugins.10.1.0.0=
.cab
O16 - DPF: {4A3CF76B-EC7A-405D-A67D-8DC6B52AB35B} (QDiagAOLCCUpdateObj =
Class) - http://aolcc.aol.fr/computercheckup/qdiagcc.cab
O16 - DPF: {6E5A37BF-FD42-463A-877C-4EB7002E68AE} (Housecall ActiveX =
6.5) - =
http://housecall65.trendmicro.com/housecall/applet/html/native/x86/win32/=
activex/hcImpl.cab
O16 - DPF: {74D05D43-3236-11D4-BDCD-00C04F9A3B61} (HouseCall Control) - =
http://a840.g.akamai.net/7/840/537/2005111401/housecall.trendmicro.com/ho=
usecall/xscan53.cab
O16 - DPF: {82FC4503-8459-4239-9B85-0617BEAA950A} - =
http://scripts.dlv4.com/binaries/egaccess4/egaccess4_1061_XP.cab
O17 - =
HKLM\System\CCS\Services\Tcpip\..\{D882038C-0BD6-4CF4-BBC4-8CE165834CCC}:=
NameServer =3D 205.188.146.145
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. =
- C:\PROGRA~1\FICHIE~1\AOL\ACS\AOLacsd.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - =
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - Unknown owner - =
C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - =
C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil =
Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program =
Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program =
Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\System32\HPZipm12.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - =
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
Signaler un problème avec ce contenu

3 réponses

Supprimer
Cette action est irreversible, confirmez la suppression du commentaire ?
Signaler le commentaire

Veuillez sélectionner un problème

Nudité
Violence
Harcèlement
Fraude
Vente illégale
Discours haineux
Terrorisme
Autre
Avatar
Sweety
Dans le message news:443bbb18$0$29208$,
berny écrivait :
Bonjour,

J'au un pote qui a planté sa machine, on a réussi a rebooter
sur "derniere bonne configuration connue"
j'ai voulu faire un chkdsk qui a stoppé a 70%, il a aussi une fenetre
error safe.

Merci de votre aide.




Tu peux faire un copier-coller de ce log directement sur leur site pour
obtenir l'analyse :
http://www.hijackthis.de/

--

Michel H. (Sweety) [Microsoft MVP] - Windows Shell/User
Toutes les réponses a vos questions sur le Portail de Sweety :
http://sweety.mvps.org/

Avatar
NyC
hello berny you wrote

Bonjour,

J'au un pote qui a planté sa machine, on a réussi a rebooter
sur "derniere bonne configuration connue"
j'ai voulu faire un chkdsk qui a stoppé a 70%, il a aussi une fenetre
error safe.
Salut,


beaucoup de Toolbars et activix,

http://www.hijackthis.de/logfiles/9d83b12c1c72ab1327f4b1197ce087f2.html


Cdllmt
--
NyC

return adress valid.
adresse retour ok !

Avatar
berny
NyC <coldstuff> wrote:

Salut,


"soir,

beaucoup de Toolbars et activix,


Merci, j'avais déja testé la réponse du site "robot"
je voulais quand même vos avis.

Bonne soirée vous tous.

--
beuuuuuhaaaaaaa.