<https://forum.zebulon.fr/topic/100992-mon-rapport-hi-jack/>
<http://schema.org/text>
"Je dois enlever quoi ??? \nMerci \n  \n  \n  \n  \nLogfile of HijackThis v1.99.1 \nScan saved at 13:41:25, on 06/08/2006 \nPlatform: Windows XP SP2 (WinNT 5.01.2600) \nMSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) \n  \nRunning processes: \nC:\\WINDOWS\\System32\\smss.exe \nC:\\WINDOWS\\system32\\csrss.exe \nC:\\WINDOWS\\system32\\winlogon.exe \nC:\\WINDOWS\\system32\\services.exe \nC:\\WINDOWS\\system32\\lsass.exe \nC:\\WINDOWS\\system32\\svchost.exe \nC:\\WINDOWS\\system32\\svchost.exe \nC:\\WINDOWS\\System32\\svchost.exe \nC:\\WINDOWS\\system32\\svchost.exe \nC:\\WINDOWS\\system32\\spoolsv.exe \nC:\\WINDOWS\\System32\\nvsvc32.exe \nC:\\Program Files\\Analog Devices\\SoundMAX\\SMAgent.exe \nC:\\WINDOWS\\system32\\ZoneLabs\\vsmon.exe \nC:\\WINDOWS\\Explorer.EXE \nC:\\Program Files\\Analog Devices\\SoundMAX\\SMax4PNP.exe \nC:\\WINDOWS\\system32\\RUNDLL32.EXE \nC:\\Program Files\\Zone Labs\\ZoneAlarm\\zlclient.exe \nC:\\Program Files\\iTunes\\iTunesHelper.exe \nC:\\Program Files\\QuickTime\\qttask.exe \nC:\\Program Files\\Microsoft IntelliPoint\\point32.exe \nC:\\Program Files\\Java\\jre1.5.0_07\\bin\\jusched.exe \nC:\\WINDOWS\\system32\\ctfmon.exe \nC:\\Program Files\\MSN Messenger\\MsnMsgr.Exe \nC:\\Program Files\\Microsoft Money\\System\\mnyexpr.exe \nC:\\Program Files\\iPod\\bin\\iPodService.exe \nC:\\Program Files\\Internet Explorer\\iexplore.exe \nC:\\WINDOWS\\system32\\ipconfig.exe \nC:\\WINDOWS\\system32\\svchost.exe \nC:\\Program Files\\Internet Explorer\\IEXPLORE.EXE \nC:\\Program Files\\Hijackthis Version Française\\VERSION TRADUITE ORIGINALE.EXE \n  \nR1 - HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Default_Page_URL = http://home.free.fr/ \nR0 - HKLM\\Software\\Microsoft\\Internet Explorer\\Search,SearchAssistant =  \nR0 - HKCU\\Software\\Microsoft\\Internet Explorer\\Toolbar,LinksFolderName = Liens \nR3 - URLSearchHook: (no name) - {5AD993A0-9D60-7000-48BB-6CEDF85F09B0} - ERTYDF.dll (file missing) \nF2 - REG:system.ini: UserInit=userinit.exe \nO1 - Hosts: localhost 127.0.0.1 \nO2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\\Program Files\\Adobe\\Acrobat 5.0\\Reader\\ActiveX\\AcroIEHelper.ocx \nO2 - BHO: (no name) - {549B5CA7-4A86-11D7-A4DF-000874180BB3} - (no file) \nO2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\\Program Files\\Java\\jre1.5.0_07\\bin\\ssv.dll \nO2 - BHO: (no name) - {FDD3B846-8D59-4ffb-8758-209B6AD74ACC} - (no file) \nO4 - HKLM\\..\\Run: [soundMAXPnP] C:\\Program Files\\Analog Devices\\SoundMAX\\SMax4PNP.exe \nO4 - HKLM\\..\\Run: [soundMAX] \"C:\\Program Files\\Analog Devices\\SoundMAX\\Smax4.exe\" /tray \nO4 - HKLM\\..\\Run: [NvCplDaemon] RUNDLL32.EXE C:\\WINDOWS\\system32\\\\NVCpl.dll,NvStartup \nO4 - HKLM\\..\\Run: [nwiz] nwiz.exe /install \nO4 - HKLM\\..\\Run: [NvMediaCenter] RUNDLL32.EXE C:\\WINDOWS\\system32\\NvMcTray.dll,NvTaskbarInit \nO4 - HKLM\\..\\Run: [Zone Labs Client] C:\\Program Files\\Zone Labs\\ZoneAlarm\\zlclient.exe \nO4 - HKLM\\..\\Run: [iTunesHelper] \"C:\\Program Files\\iTunes\\iTunesHelper.exe\" \nO4 - HKLM\\..\\Run: [QuickTime Task] \"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime \nO4 - HKLM\\..\\Run: [intelliPoint] \"C:\\Program Files\\Microsoft IntelliPoint\\point32.exe\" \nO4 - HKLM\\..\\Run: [zxc] teqq32.exe \nO4 - HKLM\\..\\Run: [RtlFindVal] clamav.exe \nO4 - HKLM\\..\\Run: [sunJavaUpdateSched] C:\\Program Files\\Java\\jre1.5.0_07\\bin\\jusched.exe \nO4 - HKLM\\..\\Run: [dmctt.exe] C:\\WINDOWS\\system32\\dmctt.exe \nO4 - HKLM\\..\\Run: [etyca.exe] C:\\WINDOWS\\system32\\etyca.exe \nO4 - HKCU\\..\\Run: [CTFMON.EXE] C:\\WINDOWS\\system32\\ctfmon.exe \nO4 - HKCU\\..\\Run: [NvMediaCenter] RUNDLL32.EXE C:\\WINDOWS\\system32\\\\NVMCTRAY.DLL,NvTaskbarInit \nO4 - HKCU\\..\\Run: [MsnMsgr] \"C:\\Program Files\\MSN Messenger\\MsnMsgr.Exe\" /background \nO4 - HKCU\\..\\Run: [WhenUSave] \"C:\\Program Files\\Save\\Save.exe\" \nO4 - HKCU\\..\\Run: [MoneyAgent] \"C:\\Program Files\\Microsoft Money\\System\\mnyexpr.exe\" \nO4 - HKCU\\..\\Run: [KillAndClean] \"C:\\Program Files\\KillAndClean\\KillAndClean.exe\" \nO4 - HKCU\\..\\Run: [dePloy] lpt.exe \nO4 - HKCU\\..\\Run: [shaitan1678] iehelper.exe \nO4 - HKCU\\..\\Run: [defect08] TRPT.exe \nO9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\\Program Files\\Java\\jre1.5.0_07\\bin\\ssv.dll \nO9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\\Program Files\\Java\\jre1.5.0_07\\bin\\ssv.dll \nO14 - IERESET.INF: START_PAGE_URL=http://home.free.fr/ \nO17 - HKLM\\System\\CCS\\Services\\Tcpip\\..\\{2FCE0B69-9890-4B92-8B67-81B1904A6105}: NameServer = 85.255.113.115,85.255.112.12 \nO17 - HKLM\\System\\CCS\\Services\\Tcpip\\..\\{4D04058C-05B6-41D7-9DF9-09346BDCA393}: NameServer = 85.255.113.115,85.255.112.12 \nO17 - HKLM\\System\\CCS\\Services\\Tcpip\\..\\{CEE88A7C-4954-4046-8844-E839F3901F91}: NameServer = 85.255.113.115,85.255.112.12 \nO17 - HKLM\\System\\CS1\\Services\\Tcpip\\Parameters: NameServer = 85.255.113.115 85.255.112.12 \nO17 - HKLM\\System\\CS2\\Services\\Tcpip\\Parameters: NameServer = 85.255.113.115 85.255.112.12 \nO17 - HKLM\\System\\CCS\\Services\\Tcpip\\Parameters: NameServer = 85.255.113.115 85.255.112.12 \nO18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\\PROGRA~1\\MSN Messenger\\msgrapp.8.0.0792.00.dll \nO18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\\PROGRA~1\\MSN Messenger\\msgrapp.8.0.0792.00.dll \nO23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\\Program Files\\Fichiers communs\\InstallShield\\Driver\\11\\Intel 32\\IDriverT.exe \nO23 - Service: iPodService - Apple Computer, Inc. - C:\\Program Files\\iPod\\bin\\iPodService.exe \nO23 - Service: NVIDIA Driver Helper Service (nvsvc) - NVIDIA Corporation - C:\\WINDOWS\\System32\\nvsvc32.exe \nO23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\\Program Files\\Analog Devices\\SoundMAX\\SMAgent.exe \nO23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\\WINDOWS\\system32\\ZoneLabs\\vsmon.exe \n"
<https://forum.zebulon.fr/topic/100992-mon-rapport-hi-jack/>