<https://forum.zebulon.fr/topic/98664-log-hijackthis-%C3%A9norme/#comment-771576>
<http://schema.org/text>
"bon ben c'est fait, voici le rapport hijackthis, apres le scan.... \nah, aussi, je vais être là seulement 2 jours, apres, je reviens vers le 29 juillet, alors je ne serai pas très présent si mon ordinateur n'est pas encore désinfecté apres 2 jours \n  \n  \nLogfile of HijackThis v1.99.1 \nScan saved at 17:23:15, on 2006-07-05 \nPlatform: Windows XP SP2 (WinNT 5.01.2600) \nMSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) \n  \nRunning processes: \nC:\\WINDOWS\\System32\\smss.exe \nC:\\WINDOWS\\system32\\winlogon.exe \nC:\\WINDOWS\\system32\\services.exe \nC:\\WINDOWS\\system32\\lsass.exe \nC:\\WINDOWS\\system32\\svchost.exe \nC:\\WINDOWS\\System32\\svchost.exe \nC:\\WINDOWS\\system32\\LEXBCES.EXE \nC:\\WINDOWS\\system32\\spoolsv.exe \nC:\\WINDOWS\\system32\\LEXPPS.EXE \nC:\\WINDOWS\\Explorer.EXE \nC:\\Program Files\\QuickTime\\qttask.exe \nC:\\PROGRA~1\\Grisoft\\AVGFRE~1\\avgcc.exe \nC:\\Program Files\\Java\\jre1.5.0_06\\bin\\jusched.exe \nC:\\Program Files\\AntiVir PersonalEdition Classic\\avgnt.exe \nC:\\Program Files\\MSN Messenger\\MsnMsgr.Exe \nC:\\Program Files\\YourWare Solutions\\FreeRAM XP Pro\\FreeRAM XP Pro.exe \nC:\\Program Files\\AntiVir PersonalEdition Classic\\sched.exe \nC:\\Program Files\\AntiVir PersonalEdition Classic\\avguard.exe \nC:\\PROGRA~1\\Grisoft\\AVGFRE~1\\avgamsvr.exe \nC:\\PROGRA~1\\Grisoft\\AVGFRE~1\\avgupsvc.exe \nC:\\PROGRA~1\\Grisoft\\AVGFRE~1\\avgemc.exe \nC:\\WINDOWS\\system32\\drivers\\CDAC11BA.EXE \nC:\\PROGRA~1\\SYMANT~1\\SYMANT~1\\DefWatch.exe \nC:\\Program Files\\Xfire\\Xfire.exe \nC:\\WINDOWS\\System32\\gearsec.exe \nC:\\PROGRA~1\\SYMANT~1\\SYMANT~1\\Rtvscan.exe \nC:\\WINDOWS\\system32\\nvsvc32.exe \nC:\\Program Files\\CheckPoint\\SecuRemote\\bin\\SR_WatchDog.exe \nC:\\WINDOWS\\System32\\svchost.exe \nC:\\Program Files\\CheckPoint\\SecuRemote\\bin\\SR_GUI.exe \nC:\\WINDOWS\\system32\\msiexec.exe \nC:\\Program Files\\CheckPoint\\SecuRemote\\bin\\SR_Service.exe \nC:\\WINDOWS\\System32\\wbem\\wmiapsrv.exe \nC:\\WINDOWS\\System32\\svchost.exe \nC:\\WINDOWS\\system32\\wuauclt.exe \nC:\\Program Files\\VentriloMIX\\Ventrilo 2.3.0.exe \nC:\\Program Files\\Mozilla Firefox\\firefox.exe \nC:\\Program Files\\HIjackthis\\HijackThis.exe \n  \nR1 - HKCU\\Software\\Microsoft\\Internet Explorer\\Main,Start Page_bak = about:blank \nR0 - HKCU\\Software\\Microsoft\\Internet Explorer\\Toolbar,LinksFolderName = Liens \nR3 - URLSearchHook: (no name) - _{00D6A7E7-4A97-456f-848A-3B75BF7554D7} - (no file) \nF2 - REG:system.ini: UserInit=C:\\WINDOWS\\system32\\Userinit.exe \nN3 - Netscape 7: user_pref(\"browser.search.defaultengine\", \"engine://C%3A%5CProgram%20Files%5CNetscape%5CNetscape%5Csearchplugins%5CNetscape_France.src\"); (C:\\Documents and Settings\\Alexis\\Application Data\\Mozilla\\Profiles\\default\\xucp7z0o.slt\\prefs.js) \nO1 - Hosts: 209.190.22.74 l2authd.lineage2.com \nO2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\\Program Files\\Yahoo!\\Companion\\Installs\\cpn\\yt.dll \nO2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\\Program Files\\Adobe\\Acrobat 7.0\\ActiveX\\AcroIEHelper.dll \nO2 - BHO: (no name) - {40D20724-5D3A-43C8-9FF5-2B6F209DBD27} - C:\\WINDOWS\\system32\\bhrw.dll (file missing) \nO2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\\PROGRA~1\\SPYBOT~1\\SDHelper.dll \nO2 - BHO: CInterfaceObj Object - {58F07DD3-924D-4141-BC74-299F523A95F1} - C:\\WINDOWS\\pxwma.dll \nO2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\\Program Files\\Java\\jre1.5.0_06\\bin\\ssv.dll \nO3 - Toolbar: DAP Bar - {62999427-33FC-4baf-9C9C-BCE6BD127F08} - C:\\Program Files\\DAP\\DAPIEBar.dll (file missing) \nO3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\\Program Files\\Yahoo!\\Companion\\Installs\\cpn\\yt.dll \nO4 - HKLM\\..\\Run: [NvCplDaemon] RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup \nO4 - HKLM\\..\\Run: [QuickTime Task] \"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime \nO4 - HKLM\\..\\Run: [AVG7_CC] C:\\PROGRA~1\\Grisoft\\AVGFRE~1\\avgcc.exe /STARTUP \nO4 - HKLM\\..\\Run: [sunJavaUpdateSched] C:\\Program Files\\Java\\jre1.5.0_06\\bin\\jusched.exe \nO4 - HKLM\\..\\Run: [avgnt] \"C:\\Program Files\\AntiVir PersonalEdition Classic\\avgnt.exe\" /min \nO4 - HKLM\\..\\RunOnce: [VS98_Setup_Wizard] \"C:\\Documents and Settings\\Alexis\\Mes documents\\Visual Basic 6.0 Enterprise Edition\\Visual Basic 6.0 Enterprise Edition\\SETUP.EXE\" /runonce /reboot /location:C:\\Documents and Settings\\Alexis\\Mes documents\\Visual Basic 6.0 Enterprise Edition\\Visual Basic 6.0 Enterprise Edition \nO4 - HKCU\\..\\Run: [MsnMsgr] \"C:\\Program Files\\MSN Messenger\\MsnMsgr.Exe\" /background \nO4 - HKCU\\..\\Run: [FreeRAM XP] \"C:\\Program Files\\YourWare Solutions\\FreeRAM XP Pro\\FreeRAM XP Pro.exe\" -win \nO4 - HKCU\\..\\Run: [updateMgr] \"C:\\Program Files\\Adobe\\Acrobat 7.0\\Reader\\AdobeUpdateManager.exe\" AcRdB7_0_8 \nO4 - Startup: Adobe Gamma.lnk = C:\\Program Files\\Fichiers communs\\Adobe\\Calibration\\Adobe Gamma Loader.exe \nO4 - Startup: Xfire.lnk = C:\\Program Files\\Xfire\\Xfire.exe \nO4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\\Program Files\\Adobe\\Acrobat 7.0\\Reader\\reader_sl.exe \nO8 - Extra context menu item: &amp;Download with &amp;DAP - C:\\PROGRA~1\\DAP\\dapextie.htm \nO8 - Extra context menu item: &amp;Search - http://bar.mywebsearch.com/menusearch.html?p=ZNfox000 \nO8 - Extra context menu item: Download &amp;all with DAP - C:\\PROGRA~1\\DAP\\dapextie2.htm \nO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\\Program Files\\Java\\jre1.5.0_06\\bin\\ssv.dll \nO9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\\Program Files\\Java\\jre1.5.0_06\\bin\\ssv.dll \nO9 - Extra button: Run WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\\Program Files\\WinHTTrack\\WinHTTrackIEBar.dll \nO9 - Extra 'Tools' menuitem: Launch WinHTTrack - {36ECAF82-3300-8F84-092E-AFF36D6C7040} - C:\\Program Files\\WinHTTrack\\WinHTTrackIEBar.dll \nO9 - Extra button: Run DAP - {669695BC-A811-4A9D-8CDF-BA8C795F261C} - C:\\PROGRA~1\\DAP\\DAP.EXE (file missing) \nO9 - Extra button: Movies Extractor Scout LITE - {70B54459-F851-48EE-857F-EE5AF5AF03AA} - C:\\Program Files\\Movies Extractor Scout LITE\\flashextract.exe \nO9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\\Program Files\\Messenger\\msmsgs.exe \nO9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\\Program Files\\Messenger\\msmsgs.exe \nO16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab \nO16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineS...er.cab31267.cab \nO16 - DPF: {683DFF0F-331F-44D2-B69B-46D7BFB58F32} (VacPro.canada_ver3) - http://ocx1.advnt01.com/dialer/canada_ver3.CAB \nO16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab \nO16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} (Solitaire Showdown Class) - http://messenger.zone.msn.com/binary/Solit...wn.cab31267.cab \nO18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - \"C:\\PROGRA~1\\MSNMES~1\\msgrapp.dll\" (file missing) \nO20 - Winlogon Notify: ckpNotify - C:\\WINDOWS\\SYSTEM32\\ckpNotify.dll \nO20 - Winlogon Notify: NavLogon - C:\\WINDOWS\\System32\\NavLogon.dll \nO23 - Service: Adobe LM Service - Adobe Systems - C:\\Program Files\\Fichiers communs\\Adobe Systems Shared\\Service\\Adobelmsvc.exe \nO23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\\Program Files\\AntiVir PersonalEdition Classic\\sched.exe \nO23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - AVIRA GmbH - C:\\Program Files\\AntiVir PersonalEdition Classic\\avguard.exe \nO23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\\PROGRA~1\\Grisoft\\AVGFRE~1\\avgamsvr.exe \nO23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\\PROGRA~1\\Grisoft\\AVGFRE~1\\avgupsvc.exe \nO23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\\PROGRA~1\\Grisoft\\AVGFRE~1\\avgemc.exe \nO23 - Service: Boonty Games - BOONTY - C:\\Program Files\\Fichiers communs\\BOONTY Shared\\Service\\Boonty.exe \nO23 - Service: C-DillaCdaC11BA - Macrovision - C:\\WINDOWS\\system32\\drivers\\CDAC11BA.EXE \nO23 - Service: DefWatch - Symantec Corporation - C:\\PROGRA~1\\SYMANT~1\\SYMANT~1\\DefWatch.exe \nO23 - Service: Service de sécurité matérielle (GEARSecurity) - GEAR Software - C:\\WINDOWS\\System32\\gearsec.exe \nO23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - C:\\Program Files\\iPod\\bin\\iPodService.exe \nO23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\\WINDOWS\\system32\\LEXBCES.EXE \nO23 - Service: Macromedia Licensing Service - Unknown owner - C:\\Program Files\\Fichiers communs\\Macromedia Shared\\Service\\Macromedia Licensing.exe \nO23 - Service: Symantec AntiVirus Client (Norton AntiVirus Server) - Symantec Corporation - C:\\PROGRA~1\\SYMANT~1\\SYMANT~1\\Rtvscan.exe \nO23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\\WINDOWS\\system32\\nvsvc32.exe \nO23 - Service: Check Point SecuRemote Service (SR_Service) - Check Point Software Technologies - C:\\Program Files\\CheckPoint\\SecuRemote\\bin\\SR_Service.exe \nO23 - Service: Check Point SecuRemote WatchDog (SR_WatchDog) - Check Point Software Technologies - C:\\Program Files\\CheckPoint\\SecuRemote\\bin\\SR_WatchDog.exe \nO23 - Service: Visual Studio Analyzer RPC bridge - Unknown owner - C:\\Program Files\\Microsoft Visual Studio\\Common\\Tools\\VS-Ent98\\Vanalyzr\\varpc.exe (file missing) \n"
<https://forum.zebulon.fr/topic/98664-log-hijackthis-%C3%A9norme/>