[denisq59]

Salut à tous !

Après une ré install, j'y ai droit moi aussi, je ne l'avais jamais rencontré...

J'ai essayé d'interpréter mon "hijack" mais je pige que dalle !!!

Je copie ici le scan. Merci de m'apporter une soluce please, ça évitera qu'un voisin qui promène son chien prenne un PC sur la tronche !!!...

Logfile of HijackThis v1.99.1
Scan saved at 02:04:52, on 06/10/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSExplorer.EXE
C:WINDOWSsystem32spoolsv.exe
C:PROGRA~1FICHIE~1AOLACSAOLacsd.exe
D:-_PROG~1AVGANT~1avgamsvr.exe
D:-_PROG~1AVGANT~1avgupsvc.exe
C:WINDOWSSystem32nvsvc32.exe
C:WINDOWSDit.exe
C:WINDOWSSOUNDMAN.EXE
C:WINDOWSSystem32svchost.exe
C:Program FilesLexmark 6200 Serieslxbumon.exe
C:Program FilesLexmark 6200 Seriesezprint.exe
D:-_PROG~1AVGANT~1avgcc.exe
C:WINDOWSDitExp.exe
D:-_PROG~1AVGANT~1avgemc.exe
C:PROGRA~1TECHCI~1AOLSAVAOLAgent.exe
C:Program FilesFichiers communsAOLACSAOLDial.exe
C:WINDOWSSystem32lxbucoms.exe
C:WINDOWSSystem32wuauclt.exe
C:Documents and Settingsmarjo&denisLocal SettingsTempRépertoire temporaire 2 pour hijackthis.zipHijackThis.exe
C:WINDOWSSystem32wpabaln.exe

R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.google.fr/
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Window Title = NC NUMERICABLE
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Liens
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:WINDOWSSystem32msdxm.ocx
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:Program FilesAOL Toolbartoolbar.dll
O4 - HKLM..Run: [Dit] Dit.exe
O4 - HKLM..Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM..Run: [nwiz] nwiz.exe /install
O4 - HKLM..Run: [LXBUCATS] rundll32 C:WINDOWSSystem32spoolDRIVERSW32X863LXBUtime.dll,_RunDLLEntry@16
O4 - HKLM..Run: [lxbumon.exe] "C:Program FilesLexmark 6200 Serieslxbumon.exe"
O4 - HKLM..Run: [FaxCenterServer] "C:Program FilesLexmark Fax Solutionsfm3032.exe" /s
O4 - HKLM..Run: [EzPrint] "C:Program FilesLexmark 6200 Seriesezprint.exe"
O4 - HKLM..Run: [microsft Updates] msupdate32.exe
O4 - HKLM..Run: [AVG7_CC] D:-_PROG~1AVGANT~1avgcc.exe /STARTUP
O4 - HKLM..Run: [AVG7_EMC] D:-_PROG~1AVGANT~1avgemc.exe
O4 - HKLM..Run: [AOLSAV] C:PROGRA~1TECHCI~1AOLSAVAOLAgent.exe
O4 - HKLM..Run: [AOLDialer] C:Program FilesFichiers communsAOLACSAOLDial.exe
O4 - HKLM..RunServices: [microsft Updates] msupdate32.exe
O4 - Global Startup: AOL 9.0 Icône AOL.lnk = D:-=PROGRAMMES INSTALLES=-AOL 9.0aoltray.exe
O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:Program FilesAOL Toolbartoolbar.dll/SEARCH.HTML
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:Program FilesAOL Toolbartoolbar.dll
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:Program FilesAOL Toolbartoolbar.dll
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:WINDOWSwebrelated.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:WINDOWSwebrelated.htm
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:WINDOWSSystem32Shdocvw.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.micros...b?1128553378203
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:PROGRA~1FICHIE~1AOLACSAOLacsd.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - D:-_PROG~1AVGANT~1avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - D:-_PROG~1AVGANT~1avgupsvc.exe
O23 - Service: lxbu_device - Lexmark International, Inc. - C:WINDOWSSystem32lxbucoms.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:WINDOWSSystem32nvsvc32.exe
O23 - Service: Performance Logs (Perfhmon) - Unknown owner - C:WINDOWSSystem32Perfhmon.exe
O23 - Service: Windows 32 Bit (Windows 32 Bit Drivers) - Unknown owner - C:WINDOWSWinVid32.exe

[denisq59]

Personne ? :cry:

[denisq59]

Je veins de refaire un autre Hijack, dont voici le log.

Merci à toute personne pouvant m'aider....

Logfile of HijackThis v1.99.1
Scan saved at 04:00:22, on 07/10/2005
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSExplorer.EXE
C:WINDOWSsystem32spoolsv.exe
C:PROGRA~1FICHIE~1AOLACSAOLacsd.exe
D:-_PROG~1AVGANT~1avgamsvr.exe
C:WINDOWSDit.exe
C:WINDOWSSOUNDMAN.EXE
C:Program FilesLexmark 6200 Serieslxbumon.exe
D:-_PROG~1AVGANT~1avgupsvc.exe
C:Program FilesLexmark 6200 Seriesezprint.exe
C:WINDOWSSystem32nvsvc32.exe
C:WINDOWSSystem32svchost.exe
D:-_PROG~1AVGANT~1avgcc.exe
C:WINDOWSDitExp.exe
D:-_PROG~1AVGANT~1avgemc.exe
C:PROGRA~1TECHCI~1AOLSAVAOLAgent.exe
C:Program FilesFichiers communsAOLACSAOLDial.exe
C:WINDOWSSystem32ms32.pif
C:WINDOWSSystem32LVCOMSX.EXE
D:-=PROGRAMMES INSTALLES=-LogiTray.exe
C:WINDOWSSystem32lxbucoms.exe
D:-=PROGRAMMES INSTALLES=-FxSvr2.exe
C:WINDOWSSystem32wpabaln.exe
C:Documents and Settingsmarjo&denisLocal SettingsTempRépertoire temporaire 2 pour hijackthis.zipHijackThis.exe

R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.google.fr/
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Window Title = NC NUMERICABLE
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:-=PROGRAMMES INSTALLES=-Spybot - Search & DestroySDHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:WINDOWSSystem32msdxm.ocx
O3 - Toolbar: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:Program FilesAOL Toolbartoolbar.dll
O4 - HKLM..Run: [Dit] Dit.exe
O4 - HKLM..Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM..Run: [LXBUCATS] rundll32 C:WINDOWSSystem32spoolDRIVERSW32X863LXBUtime.dll,_RunDLLEntry@16
O4 - HKLM..Run: [lxbumon.exe] "C:Program FilesLexmark 6200 Serieslxbumon.exe"
O4 - HKLM..Run: [FaxCenterServer] "C:Program FilesLexmark Fax Solutionsfm3032.exe" /s
O4 - HKLM..Run: [EzPrint] "C:Program FilesLexmark 6200 Seriesezprint.exe"
O4 - HKLM..Run: [AVG7_CC] D:-_PROG~1AVGANT~1avgcc.exe /STARTUP
O4 - HKLM..Run: [AVG7_EMC] D:-_PROG~1AVGANT~1avgemc.exe
O4 - HKLM..Run: [AOLSAV] C:PROGRA~1TECHCI~1AOLSAVAOLAgent.exe
O4 - HKLM..Run: [AOLDialer] C:Program FilesFichiers communsAOLACSAOLDial.exe
O4 - HKLM..Run: [Windows Security] ms32.pif
O4 - HKLM..Run: [LVCOMSX] C:WINDOWSSystem32LVCOMSX.EXE
O4 - HKLM..Run: [LogitechVideoRepair] D:-=PROGRAMMES INSTALLES=-ISStart.exe
O4 - HKLM..Run: [LogitechVideoTray] D:-=PROGRAMMES INSTALLES=-LogiTray.exe
O4 - HKLM..RunServices: [microsft Updates] msupdate32.exe
O4 - HKLM..RunServices: [Windows Security] ms32.pif
O4 - HKCU..Run: [Windows Security] ms32.pif
O4 - HKCU..Run: [LogitechSoftwareUpdate] "D:-=PROGRAMMES INSTALLES=-ManifestEngine.exe" boot
O4 - HKCU..RunServices: [Windows Security] ms32.pif
O4 - Global Startup: AOL 9.0 Icône AOL.lnk = D:-=PROGRAMMES INSTALLES=-AOL 9.0aoltray.exe
O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:Program FilesAOL Toolbartoolbar.dll/SEARCH.HTML
O9 - Extra button: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:Program FilesAOL Toolbartoolbar.dll
O9 - Extra 'Tools' menuitem: AOL Toolbar - {4982D40A-C53B-4615-B15B-B5B5E98D167C} - C:Program FilesAOL Toolbartoolbar.dll
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:WINDOWSSystem32Shdocvw.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.micros...b?1128553378203
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.micros...b?1128631998515
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoft...free/asinst.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:PROGRA~1MSNMES~1msgrapp.dll" (file missing)
O23 - Service: AOL Connectivity Service (AOL ACS) - America Online, Inc. - C:PROGRA~1FICHIE~1AOLACSAOLacsd.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - D:-_PROG~1AVGANT~1avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - D:-_PROG~1AVGANT~1avgupsvc.exe
O23 - Service: lxbu_device - Lexmark International, Inc. - C:WINDOWSSystem32lxbucoms.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:WINDOWSSystem32nvsvc32.exe
O23 - Service: Performance Logs (Perfhmon) - Unknown owner - C:WINDOWSSystem32Perfhmon.exe (file missing)
O23 - Service: Windows 32 Bit (Windows 32 Bit Drivers) - Unknown owner - C:WINDOWSWinVid32.exe

[gchris]

Démarrer->exécuter-> tape services.msc
Double-clique : Performance Logs -> arrêter
Mets-le sur "Désactivé".

recommence avec : Windows 32 Bit
---

HijackThis -> Do a system scan only -> coche ces lignes :

O4 - HKLM..Run: [Windows Security] ms32.pif
O4 - HKLM..RunServices: [microsft Updates] msupdate32.exe
O4 - HKLM..RunServices: [Windows Security] ms32.pif
O4 - HKCU..Run: [Windows Security] ms32.pif
O4 - HKCU..RunServices: [Windows Security] ms32.pif
O8 - Extra context menu item: &Recherche AOL Toolbar - res://C:Program FilesAOL Toolbartoolbar.dll/SEARCH.HTML
O23 - Service: Performance Logs (Perfhmon) - Unknown owner - C:WINDOWSSystem32Perfhmon.exe (file missing)
O23 - Service: Windows 32 Bit (Windows 32 Bit Drivers) - Unknown owner - C:WINDOWSWinVid32.exe

Ferme les programmes en cours, connexion incluse et fais Fix Checked.
---

-Redémarre en mode sans échec, (en tapotant F8 au démarrage). Si tu ne comprend pas, >>regarde ici<<.

-Assures-toi que tu as accès aux fichiers cachés.
-Explorateur windows->outils->options des dossiers->affichage
"Afficher les fichiers cachés"->coché
"Masquer les extensions.."->décoché
"Masquer les fichiers protégers du système"->décoché

-Supprimes manuellement les fichiers suivants: (en gras)

C:WINDOWSSystem32Perfhmon.exe <-fichier
C:WINDOWSWinVid32.exe <-fichier

Vide ta corbeille.
---

Redémarre ton pc.

[TheMoutch]

Bonsoir, j'ai le même Generic.gm dont je n'arrive pas à me débarasser. Si quelqu'un pouvait m'aider ce serait super cool.

Voici mon rapport HiJackThis.

Merci beaucoup

TheMoutch

Logfile of HijackThis v1.99.1
Scan saved at 01:55:40, on 29/10/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000)

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32savedump.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSSystem32Ati2evxx.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSsystem32Ati2evxx.exe
C:WINDOWSExplorer.EXE
C:PROGRA~1GrisoftAVGFRE~1avgamsvr.exe
C:PROGRA~1GrisoftAVGFRE~1avgupsvc.exe
C:PROGRA~1GrisoftAVGFRE~1avgemc.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSSystem32svchostt.exe
C:WINDOWSSOUNDMAN.EXE
C:Program FilesATI TechnologiesATI.ACEcli.exe
C:Program FilesVIARAIDraid_tool.exe
C:Program FilesScanSoftOmniPageSEopware32.exe
C:Program FilesJavajre1.5.0_05binjusched.exe
C:Program FilesFichiers communsRealUpdate_OBrealsched.exe
C:Program FilesiTunesiTunesHelper.exe
C:Program FilesQuickTimeqttask.exe
C:PROGRA~1GrisoftAVGFRE~1avgcc.exe
C:WINDOWSSystem32ctfmon.exe
C:Program FilesMessengermsmsgs.exe
C:Program FilesiPodbiniPodService.exe
C:Program FilesSkypePhoneSkype.exe
C:Program FilesATI TechnologiesATI.ACECLI.exe
C:Mes téléchargementsHijackThis.exe

R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Liens
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:WINDOWSSystem32msdxm.ocx
O4 - HKLM..Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM..Run: [ATIPTA] C:Program FilesATI TechnologiesATI Control Panelatiptaxx.exe
O4 - HKLM..Run: [ATICCC] "C:Program FilesATI TechnologiesATI.ACEcli.exe" runtime
O4 - HKLM..Run: [RaidTool] C:Program FilesVIARAIDraid_tool.exe
O4 - HKLM..Run: [Omnipage] C:Program FilesScanSoftOmniPageSEopware32.exe
O4 - HKLM..Run: [SunJavaUpdateSched] C:Program FilesJavajre1.5.0_05binjusched.exe
O4 - HKLM..Run: [MS Sys Security] mswin.pif
O4 - HKLM..Run: [TkBellExe] "C:Program FilesFichiers communsRealUpdate_OBrealsched.exe" -osboot
O4 - HKLM..Run: [iTunesHelper] "C:Program FilesiTunesiTunesHelper.exe"
O4 - HKLM..Run: [QuickTime Task] "C:Program FilesQuickTimeqttask.exe" -atboottime
O4 - HKLM..Run: [HTML Help System] hhs.pif
O4 - HKLM..Run: [usbdrv] svchostt.exe
O4 - HKLM..Run: [AVG7_CC] C:PROGRA~1GrisoftAVGFRE~1avgcc.exe /STARTUP
O4 - HKLM..RunServices: [Microsoft Intrenet Explorer] drsb.pif
O4 - HKLM..RunServices: [MS Sys Security] mswin.pif
O4 - HKLM..RunServices: [Win Security] msw32.pif
O4 - HKLM..RunServices: [HTML Help System] hhs.pif
O4 - HKLM..RunServices: [usbdrv] svchostt.exe
O4 - HKLM..RunOnce: [usbdrv] svchostt.exe
O4 - HKCU..Run: [CTFMON.EXE] C:WINDOWSSystem32ctfmon.exe
O4 - HKCU..Run: [MSMSGS] "C:Program FilesMessengermsmsgs.exe" /background
O4 - HKCU..Run: [Skype] "C:Program FilesSkypePhoneSkype.exe" /nosplash /minimized
O4 - HKCU..Run: [Win Security] msw32.pif
O4 - HKCU..Run: [usbdrv] svchostt.exe
O4 - HKCU..RunServices: [MS Sys Security] mswin.pif
O4 - HKCU..RunServices: [Win Security] msw32.pif
O4 - HKCU..RunOnce: [usbdrv] svchostt.exe
O4 - Global Startup: ATI CATALYST System Tray.lnk = C:Program FilesATI TechnologiesATI.ACECLI.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:PROGRA~1MICROS~2OFFICE11EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.5.0_05binnpjpi150_05.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:Program FilesJavajre1.5.0_05binnpjpi150_05.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:PROGRA~1MICROS~2OFFICE11REFIEBAR.DLL
O16 - DPF: {56336BCB-3D8A-11D6-A00B-0050DA18DE71} - http://software-dl.r...RdxIE601_fr.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn...pDownloader.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:PROGRA~1MSNMES~1msgrapp.dll" (file missing)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:WINDOWSSystem32Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:WINDOWSsystem32ati2sgag.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:PROGRA~1GrisoftAVGFRE~1avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:PROGRA~1GrisoftAVGFRE~1avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:PROGRA~1GrisoftAVGFRE~1avgemc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:Program FilesFichiers communsInstallShieldDriver11Intel 32IDriverT.exe
O23 - Service: iPodService - Apple Computer, Inc. - C:Program FilesiPodbiniPodService.exe
O23 - Service: sdktemp - Unknown owner - C:WINDOWSNVUPDT32.exe
O23 - Service: Windows Spooler (winspool32) - Unknown owner - C:WINDOWSspool.exe (file missing)

[gchris]

bonjour TheMoutch, pour plus de clareté, le mieux serait que tu te crées ton propre sujet.