Analyse d'un Hijack

Analyse d'un Hijack - Sécurité - Windows & Software

Marsh Posté le 28-02-2005 à 13:33:09    

Logfile of HIjackThis V13.99.1
Scan Saved at 21:28:08,  on 28/01/2004 (j'ai recule ma pendule)
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer V6.00 SP2 (6.00.2900.2180)
 
Running Processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\System32\Winlogon.exe
C:\WINDOWS\System32\Services.exe
C:\WINDOWS\System32\lsass.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\System32\taskmngr.exe
...
 
R0 - HKCU\Software\Microsoft\Internet Explorer\Main, Start Page = Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main, Default_Page_URL = http://www.google.fr/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar, LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {00A6FAF6 - 072E-44cf-8957-5838F569A31D} - C:\Program Files\MywebSearch\srchAstt\1.bin\MWSSRCAS.DLL
02 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MywebSearch\srchAstt\1.bin\MWSSRCAS.DLL
02 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb9B51-7695ECA05670] C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
02 - BHO:AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3 } - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
02 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA } - C:\Program Files\MywebSearch\srchAstt\1.bin\MWSBAR.DLL
02 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
02 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\program files\googltoolbar2.dll
03 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\program files\google\googletoolbar2.dll
03 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
04 - HKLM\..\Runn: [MSConfig] C:\Windows\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
08 - Extra context menu item: &Google Search - res://c:\program files\googleToolbar2.dll/cmsearch.htm
08 - Extra context menu item: &Search - http://bar.mywebsearch.com/menusea [...] xdm414YYFR
08 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGR~1\Office10\EXCEL.EXE/3000
08 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html
08 - Extra context menu item: Pages Similaires - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html
08 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html
010 - Broken Internet access because of LSP provider 'xfire_lsp_10650.dll' missing
014 - IERESET.INF: START_PAGE_URL=http://www.google.fr
016 - DPF: {1D4D87D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.imgfarm.com/images/nocac [...] .0.8-2.cab
016 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/ [...] loader.cab
023 - Service Antivir Update (AVWUpSrv) - H+BEDV Datechnik GmbH, Germany - C:\Program Files\AVPersonal\AVWUPSRV.EXE
023 - Service kavsvc - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe

Reply

Marsh Posté le 28-02-2005 à 13:33:09   

Reply

Marsh Posté le 02-03-2005 à 09:48:07    

analysé...


---------------
du vide, j'en ai plein !
Reply

Sujets relatifs:

Leave a Replay

Make sure you enter the(*)required information where indicate.HTML code is not allowed