Je pense que j'ai un keylogger, suis-je nettoyer?

  • kmaster22
  • Born
  • Born
  • No Avatar
  • Inscription: Sep 24, 2008
  • Messages: 1
  • Status: Offline

Message Septembre 24th, 2008, 2:17 pm

Heres HijackThis mon rapport, je suis propre?

Logfile de HijackThis v1.99.1
Scan sauvé à 4:13:04 PM, le 9.24.2008
Plate-forme: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)

Running processes:
C: \ WINDOWS \ System32 \ smss.exe
C: \ WINDOWS \ system32 \ winlogon.exe
C: \ WINDOWS \ system32 \ services.exe
C: \ WINDOWS \ system32 \ lsass.exe
C: \ WINDOWS \ system32 \ svchost.exe
C: \ WINDOWS \ System32 \ svchost.exe
C: \ WINDOWS \ system32 \ LEXBCES. EXE
C: \ WINDOWS \ system32 \ spoolsv.exe
C: \ WINDOWS \ system32 \ LEXPPS.EXE
C: \ WINDOWS \ Explorer.EXE
C: \ Program Files \ Java \ jre1.6.0_07 \ bin \ jusched.exe
C: \ windows \ system \ hpsysdrv.exe
C: \ WINDOWS \ system32 \ hkcmd.exe
C: \ WINDOWS \ system32 \ hphmon06.exe
C: \ HP \ KBD \ KBD.EXE
C: \ WINDOWS \ AGRSMMSG.exe
C: \ WINDOWS \ SOUNDMAN.EXE
C: \ WINDOWS \ ALCWZRD.EXE
C: \ WINDOWS \ alcmtr.exe
C: \ Program Files \ Webroot \ Spy Sweeper \ SpySweeperUI.exe
C: \ WINDOWS \ system32 \ ctfmon. exe
C: \ Program Files \ HP \ Digital Imaging \ bin \ hpqtra08.exe
C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe
c: \ Program Files \ Common Files \ LightScribe \ LSSrvc.exe
C: \ Program Files \ Fichiers communs \ Microsoft Shared \ VS7DEBUG \ Mdm.exe
C: \ WINDOWS \ system32 \ svchost.exe
C: \ Program Files \ Webroot \ Spy Sweeper \ spysweeper.exe
C: \ Program Files \ Webroot \ Spy Sweeper \ ssu.exe
C: \ Program Files \ Mozilla Firefox 3 Beta 2 \ firefox. exe
C: \ WINDOWS \ ALCFDRTM.EXE
C: \ Program Files \ Internet Explorer \ iexplore.exe
C: \ WINDOWS \ system32 \ taskmgr.exe
C: \ Program Files \ HijackThis \ HijackThis. exe

R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TYPE= ... pf=desktop
R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TYPE= ... pf=desktop
R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE= ... pf=desktop
R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://ie.redirect.hp.com/svs/rdr?TYPE= ... pf=desktop
R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://google.com/
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main , Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Bar = http://ie.redirect.hp.com/svs/rdr?TYPE= ... pf=desktop
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: AcroIEHlprObj Class - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C: \ Program Files \ Adobe \ Acrobat 6. 0 \ Reader \ ActiveX \ AcroIEHelper.dll
O2 - BHO: SSVHelper Class - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files \ Java \ jre1.6.0_07 \ bin \ ssv.dll
O3 - Toolbar: HP view - (B2847E28-5D7D-4DEB-8B67-05D28BCF79F5) - c: \ Program Files \ HP \ Digital Imaging \ bin \ HPDTLK02.dll
O4 - HKLM \ .. \ Run: [SunJavaUpdateSched] "C: \ Program Files \ Java \ jre1.6.0_07 \ bin \ jusched.exe"
O4 - HKLM \ .. \ Run: [hpsysdrv] "c: \ windows \ system \ hpsysdrv.exe"
O4 - HKLM \ .. \ Run: [HotKeysCmds] "C: \ WINDOWS \ system32 \ hkcmd.exe"
O4 - HKLM \ .. \ Run: [HPHUPD06] "c: \ Program Files \ HP \ (AAC4FC36-8F89-4587-8DD3-EBC57C83374D) \ hphupd06.exe"
O4 - HKLM \ .. \ Run: [HPHmon06] "C: \ WINDOWS \ system32 \ hphmon06.exe"
O4 - HKLM \ .. \ Run: [KBD] "C: \ HP \ KBD \ KBD.EXE"
O4 - HKLM \ .. \ Run: [UpdateManager] "C: \ Program Files \ Common Files \ Sonic \ Update Manager \ sgtray.exe" / r
O4 - HKLM \ .. \ Run: [Recguard] "C: \ WINDOWS \ SMINST \ RECGUARD. EXE "
O4 - HKLM \ .. \ Run: [VTTimer] VTTimer.exe
O4 - HKLM \ .. \ Run: [AlcxMonitor] "C: \ WINDOWS \ ALCXMNTR.EXE"
O4 - HKLM \ .. \ Run: [AGRSMMSG] "C: \ WINDOWS \ AGRSMMSG.exe"
O4 - HKLM \ .. \ Run: [sonorisateur] "C: \ WINDOWS \ SOUNDMAN.EXE"
O4 - HKLM \ .. \ Run: [PS2] "C: \ WINDOWS \ system32 \ ps2.exe"
O4 - HKLM \ .. \ Run: [AlcWzrd] "C: \ WINDOWS \ ALCWZRD.EXE"
O4 - HKLM \ .. \ Run: [Alcmtr] "C: \ WINDOWS \ alcmtr.exe"
O4 - HKLM \ .. \ Run: [LSBWatcher] "c: \ hp \ drivers \ hplsbwatcher \ lsburnwatcher.exe"
O4 - HKLM \ .. \ Run: [QuickTime Task] "C: \ Program Files \ QuickTime \ QTTask.exe"-atboottime
O4 - HKLM \ .. \ Run: [Lexmark X5100 Series] "C: \ Program Files \ Lexmark X5100 Series \ lxbabmgr.exe"
O4 - HKLM \ .. \ Run: [UfSeAgnt.exe] "C: \ Program Files \ Trend Micro \ Internet Security \ UfSeAgnt.exe"
O4 - HKLM \ .. \ Run: [SpySweeper] "C: \ Program Files \ Webroot \ Spy Sweeper \ SpySweeperUI. exe "/ startintray
O4 - HKCU \ .. \ Run: [ctfmon.exe] "C: \ WINDOWS \ system32 \ ctfmon.exe"
O4 - Startup: Adobe Gamma.lnk = C: \ Program Files \ Fichiers communs \ Adobe \ Calibration \ Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C: \ Program Files \ Fichiers communs \ Adobe \ Calibration \ Adobe Gamma Loader.exe
O4 - Global Startup: EdgeCLS9.75.lnk = C: \ Program Files \ EdgeCAM \ Cam \ edgecls.exe
O4 - Global Startup: HP Digital Imaging Monitor. lnk = C: \ Program Files \ HP \ Digital Imaging \ bin \ hpqtra08.exe
O4 - Global Startup: Microsoft Office.lnk = C: \ Program Files \ Microsoft Office \ Office10 \ Osa.exe
O8 - Extra du menu contextuel: E & xporter vers Microsoft Excel -- res://C : \ PROGRA ~ 1 \ MI1933 ~ 1 \ OFFICE11 \ EXCEL.EXE/3000
O9 - Extra button: (no name) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_07 \ bin \ ssv. dll
O9 - Extra "Outils" menuitem: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_07 \ bin \ ssv.dll
O9 - Extra button: (no name) - (85d1f590-48F4-11d9-9669-0800200c9a66) -% windir% \ bdoscandel.exe (file missing)
O9 - Extra "Outils" menuitem: Uninstall BitDefender Online Scanner v8 - (85d1f590-48F4-11d9-9669-0800200c9a66) -% windir% \ bdoscandel. exe (file missing)
O9 - Extra button: AIM - (AC9E2541-2814-11d5-BC6D-00B0D0A1DE45) - C: \ Program Files \ AIM \ aim.exe
O9 - Extra button: (no name) - (e2e2dd38-d088-4134-82b7-f2ba38496583) -% windir% \ Network Diagnostic \ xpnetdiag.exe (file missing)
O9 - Extra "Outils" menuitem: @ xpsp3res.dll, -20001 - (e2e2dd38-d088-4134-82b7-f2ba38496583) -% windir% \ Network Diagnostic \ xpnetdiag. exe (file missing)
O9 - Extra button: Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe
O9 - Extra "Outils" menuitem: Windows Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs. exe
O11 - Options group: [INTERNATIONAL] International *
O16 - DPF: (4C68DACE-E6BC-4650-9C7E-D036720CA729) -- http://kr.gameguard.nprotect.com/inca/o ... an/nps.cab
O16 - DPF: (5D86DDB5-BDF9-441B-9E9E-D4730F4EE499) (BDSCANONLINE Control) -- http://download.bitdefender.com/resourc ... oscan8.cab
O16 - DPF: (6414512B-B978-451D-A0D8-FCFDF33E833C) (WUWebControl Class) -- http://www.update.microsoft.com/windows ... 1483411671
O20 - Winlogon Notify: dimsntfy -% SystemRoot% \ System32 \ dimsntfy.dll (file missing)
O20 - Winlogon Notify: igfxcui - C: \ WINDOWS \ SYSTEM32 \ igfxsrvc. dll
O23 - Service: Adobe LM Service - Adobe Systems - C: \ Program Files \ Fichiers communs \ Adobe Systems Shared \ Service \ Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc - C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc - C: \ WINDOWS \ system32 \ LEXBCES. EXE
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Unknown owner - c: \ Program Files \ Common Files \ LightScribe \ LSSrvc.exe
O23 - Service: Trend Micro Central Control Component (SfCtlCom) - Trend Micro Inc - C: \ Program Files \ Trend Micro \ Internet Security \ SfCtlCom.exe
O23 - Service: Trend Micro Unauthorized Change Prevention Service (TMBMServer) - Unknown owner - C: \ Program Files \ Trend Micro \ BM \ TMBMSRV. exe "/ service (file missing)
O23 - Service: Trend Micro Proxy Service (tmproxy) - Trend Micro Inc - C: \ Program Files \ Trend Micro \ Internet Security \ TmProxy.exe
O23 - Service: Webroot Spy Sweeper Engine (WebrootSpySweeperService) - Webroot Software, Inc ( http://www.webroot.com ) - C: \ Program Files \ Webroot \ Spy Sweeper \ spysweeper.exe
  • Anonymous
  • Bot
  • No Avatar
  • Inscription: 25 Feb 2008
  • Messages: ?
  • Loc: Ozzuland
  • Status: Online

Message Septembre 24th, 2008, 2:17 pm

  • Don2007
  • Web Master
  • Web Master
  • No Avatar
  • Inscription: Nov 21, 2006
  • Messages: 4924
  • Loc: NY
  • Status: Offline

Message Septembre 24th, 2008, 5:02 pm

Je ne vois pas un keylogger, mais les rubriques ci-dessous ne regarde pas à droite.




O9 - Extra button: (no name) - (e2e2dd38-d088-4134-82b7-f2ba38496583) -% windir% \ Network Diagnostic \ xpnetdiag.exe (file missing)
O9 - Extra "Outils" menuitem: @ xpsp3res.dll, -20001 - (e2e2dd38-d088-4134-82b7-f2ba38496583) -% windir% \ Network Diagnostic \ xpnetdiag.exe (file missing)
How do you know when a politician is lying? His mouth is moving.

Afficher de l'information

  • Total des messages de ce sujet: 2 messages
  • Utilisateurs parcourant ce forum: Aucun utilisateur enregistré et 131 invités
  • Vous ne pouvez pas poster de nouveaux sujets
  • Vous ne pouvez pas répondre aux sujets
  • Vous ne pouvez pas éditer vos messages
  • Vous ne pouvez pas supprimer vos messages
  • Vous ne pouvez pas joindre des fichiers
 
 

© 2011 Unmelted, LLC. Ozzu® est une marque déposée de Unmelted, LLC