et voici le log de HiJackThis:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:55:58, on 28/09/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\\WINDOWS\\System32\\smss.exe
C:\\WINDOWS\\system32\\winlogon.exe
C:\\WINDOWS\\system32\\services.exe
C:\\WINDOWS\\system32\\lsass.exe
C:\\WINDOWS\\system32\\Ati2evxx.exe
C:\\WINDOWS\\system32\\svchost.exe
C:\\WINDOWS\\System32\\svchost.exe
C:\\WINDOWS\\system32\\Ati2evxx.exe
C:\\WINDOWS\\system32\\spoolsv.exe
C:\\Program Files\\Avira\\AntiVir PersonalEdition Classic\\avguard.exe
C:\\Program Files\\Avira\\AntiVir PersonalEdition Classic\\sched.exe
C:\\Program Files\\Fichiers communs\\Apple\\Mobile Device Support\\bin\\AppleMobileDeviceService.exe
C:\\Program Files\\Bonjour\\mDNSResponder.exe
C:\\Program Files\\WIDCOMM\\Logiciel Bluetooth\\bin\\btwdins.exe
C:\\Program Files\\Analog Devices\\SoundMAX\\SMAgent.exe
C:\\WINDOWS\\system32\\svchost.exe
C:\\Program Files\\Analog Devices\\SoundMAX\\SMax4PNP.exe
C:\\WINDOWS\\AGRSMMSG.exe
C:\\Program Files\\Apoint2K\\Apoint.exe
C:\\Program Files\\ATI Technologies\\ATI Control Panel\\atiptaxx.exe
C:\\Program Files\\Hp\\HP Software Update\\HPWuSchd2.exe
C:\\Program Files\\HPQ\\Quick Launch Buttons\\EabServr.exe
C:\\Program Files\\Java\\jre1.6.0_07\\bin\\jusched.exe
C:\\Program Files\\hpq\\HP Wireless Assistant\\HP Wireless Assistant.exe
C:\\Program Files\\Avira\\AntiVir PersonalEdition Classic\\avgnt.exe
C:\\Program Files\\Fichiers communs\\InstallShield\\UpdateService\\issch.exe
C:\\WINDOWS\\system32\\LVCOMSX.EXE
C:\\Program Files\\Logitech\\Video\\LogiTray.exe
C:\\Program Files\\Microsoft Office\\Office12\\GrooveMonitor.exe
C:\\Program Files\\iTunes\\iTunesHelper.exe
C:\\WINDOWS\\system32\\ctfmon.exe
C:\\Documents and Settings\\françois de visscher\\Mes
documents\\programmes\\RocketDock\\RocketDock.exe
C:\\Program Files\\Druide\\Antidote\\Gestionnaire Antidote.exe
C:\\Program Files\\Spybot - Search & Destroy\\TeaTimer.exe
C:\\Program Files\\Picasa2\\PicasaMediaDetector.exe
C:\\Program Files\\Apoint2K\\Apntex.exe
C:\\Program Files\\HPQ\\shared\\hpqwmi.exe
C:\\Program Files\\WIDCOMM\\Logiciel Bluetooth\\BTTray.exe
C:\\Program Files\\Logitech\\Video\\FxSvr2.exe
C:\\Program Files\\Sony\\Sony Picture Utility\\PMBCore\\SPUVolumeWatcher.exe
C:\\Program Files\\Yahoo!\\Widgets\\YahooWidgets.exe
C:\\PROGRA~1\\WIDCOMM\\LOGICI~1\\BTSTAC~1.EXE
C:\\Program Files\\iPod\\bin\\iPodService.exe
C:\\Program Files\\Yahoo!\\Widgets\\YahooWidgets.exe
C:\\WINDOWS\\explorer.exe
C:\\WINDOWS\\system32\\notepad.exe
C:\\Program Files\\Mozilla Firefox\\firefox.exe
C:\\Program Files\\Trend Micro\\HijackThis\\HT.exe
R1 - HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\\Software\\Microsoft\\Internet Explorer\\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKCU\\Software\\Microsoft\\Internet Connection Wizard,ShellNext =
http://www.hp.com/
R1 - HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Internet
Settings,ProxyOverride = *.local
R0 - HKCU\\Software\\Microsoft\\Internet Explorer\\Toolbar,LinksFolderName =
Liens
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -
C:\\Program Files\\Adobe\\Acrobat 6.0\\Reader\\ActiveX\\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -
C:\\Program Files\\Microsoft Office\\Office12\\GrooveShellExtensions.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -
C:\\Program Files\\Java\\jre1.6.0_07\\bin\\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live -
{9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\\Program Files\\Fichiers
communs\\Microsoft Shared\\Windows Live\\WindowsLiveLogin.dll
O4 - HKLM\\..\\Run: [IMJPMIG8.1] "C:\\WINDOWS\\IME\\imjp8_1\\IMJPMIG.EXE"
/Spoil /RemAdvDef /Migration32
O4 - HKLM\\..\\Run: [PHIME2002ASync]
C:\\WINDOWS\\system32\\IME\\TINTLGNT\\TINTSETP.EXE /SYNC
O4 - HKLM\\..\\Run: [PHIME2002A]
C:\\WINDOWS\\system32\\IME\\TINTLGNT\\TINTSETP.EXE /IMEName
O4 - HKLM\\..\\Run: [SoundMAXPnP] C:\\Program Files\\Analog
Devices\\SoundMAX\\SMax4PNP.exe
O4 - HKLM\\..\\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\\..\\Run: [Apoint] C:\\Program Files\\Apoint2K\\Apoint.exe
O4 - HKLM\\..\\Run: [ATIPTA] C:\\Program Files\\ATI Technologies\\ATI Control
Panel\\atiptaxx.exe
O4 - HKLM\\..\\Run: [Cpqset] C:\\Program Files\\HPQ\\Default
Settings\\cpqset.exe
O4 - HKLM\\..\\Run: [HP Software Update] C:\\Program Files\\Hp\\HP Software
Update\\HPWuSchd2.exe
O4 - HKLM\\..\\Run: [eabconfg.cpl] C:\\Program Files\\HPQ\\Quick Launch
Buttons\\EabServr.exe /Start
O4 - HKLM\\..\\Run: [SunJavaUpdateSched] "C:\\Program
Files\\Java\\jre1.6.0_07\\bin\\jusched.exe"
O4 - HKLM\\..\\Run: [hpWirelessAssistant] C:\\Program Files\\hpq\\HP Wireless
Assistant\\HP Wireless Assistant.exe
O4 - HKLM\\..\\Run: [avgnt] "C:\\Program Files\\Avira\\AntiVir
PersonalEdition Classic\\avgnt.exe" /min
O4 - HKLM\\..\\Run: [ISUSPM Startup]
C:\\PROGRA~1\\FICHIE~1\\INSTAL~1\\UPDATE~1\\ISUSPM.exe -startup
O4 - HKLM\\..\\Run: [ISUSScheduler] "C:\\Program Files\\Fichiers
communs\\InstallShield\\UpdateService\\issch.exe" -start
O4 - HKLM\\..\\Run: [LVCOMSX] C:\\WINDOWS\\system32\\LVCOMSX.EXE
O4 - HKLM\\..\\Run: [LogitechVideoRepair] C:\\Program
Files\\Logitech\\Video\\ISStart.exe
O4 - HKLM\\..\\Run: [LogitechVideoTray] C:\\Program
Files\\Logitech\\Video\\LogiTray.exe
O4 - HKLM\\..\\Run: [GrooveMonitor] "C:\\Program Files\\Microsoft
Office\\Office12\\GrooveMonitor.exe"
O4 - HKLM\\..\\Run: [QuickTime Task] "C:\\Program Files\\QuickTime
Alternative\\QTTask.exe" -atboottime
O4 - HKLM\\..\\Run: [iTunesHelper] "C:\\Program
Files\\iTunes\\iTunesHelper.exe"
O4 - HKCU\\..\\Run: [CTFMON.EXE] C:\\WINDOWS\\system32\\ctfmon.exe
O4 - HKCU\\..\\Run: [Gestionnaire Antidote.exe] C:\\Program
Files\\Druide\\Antidote\\Gestionnaire Antidote.exe
O4 - HKCU\\..\\Run: [SpybotSD TeaTimer] C:\\Program Files\\Spybot - Search
& Destroy\\TeaTimer.exe
O4 - HKCU\\..\\Run: [LogitechSoftwareUpdate] "C:\\Program
Files\\Logitech\\Video\\ManifestEngine.exe" boot
O4 - HKCU\\..\\Run: [Skype] "C:\\Program
Files\\Skype\\Phone\\Skype.exe" /nosplash /minimized
O4 - HKCU\\..\\Run: [Picasa Media Detector] C:\\Program
Files\\Picasa2\\PicasaMediaDetector.exe
O4 - HKCU\\..\\Run: [googletalk] "C:\\Program Files\\Google\\Google
Talk\\googletalk.exe" /autostart
O4 - HKUS\\S-1-5-19\\..\\Run: [CTFMON.EXE] C:\\WINDOWS\\system32\\CTFMON.EXE
(User 'SERVICE LOCAL')
O4 - HKUS\\S-1-5-20\\..\\Run: [CTFMON.EXE] C:\\WINDOWS\\system32\\CTFMON.EXE
(User 'SERVICE RÉSEAU')
O4 - HKUS\\S-1-5-18\\..\\Run: [CTFMON.EXE] C:\\WINDOWS\\system32\\CTFMON.EXE
(User 'SYSTEM')
O4 - HKUS\\.DEFAULT\\..\\Run: [CTFMON.EXE] C:\\WINDOWS\\system32\\CTFMON.EXE
(User 'Default user')
O4 - S-1-5-18 Startup: Outil de détection de support Picture Motion Browser.lnk
= C:\\Program Files\\Sony\\Sony Picture Utility\\PMBCore\\SPUVolumeWatcher.exe
(User 'SYSTEM')
O4 - S-1-5-18 Startup: Yahoo! Widgets.lnk = C:\\Program
Files\\Yahoo!\\Widgets\\YahooWidgets.exe (User 'SYSTEM')
O4 - .DEFAULT Startup: Outil de détection de support Picture Motion Browser.lnk
= C:\\Program Files\\Sony\\Sony Picture Utility\\PMBCore\\SPUVolumeWatcher.exe
(User 'Default user')
O4 - .DEFAULT Startup: Yahoo! Widgets.lnk = C:\\Program
Files\\Yahoo!\\Widgets\\YahooWidgets.exe (User 'Default user')
O4 - Startup: Outil de détection de support Picture Motion Browser.lnk =
C:\\Program Files\\Sony\\Sony Picture Utility\\PMBCore\\SPUVolumeWatcher.exe
O4 - Startup: Yahoo! Widgets.lnk
= C:\\Program Files\\Yahoo!\\Widgets\\YahooWidgets.exe
O4 - Global Startup: BTTray.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel -
res://C:\\PROGRA~1\\MICROS~2\\Office12\\EXCEL.EXE/3000
O8 - Extra context menu item: Envoyer à &Bluetooth - C:\\Program
Files\\WIDCOMM\\Logiciel Bluetooth\\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} -
C:\\Program Files\\Java\\jre1.6.0_07\\bin\\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) -
{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\\Program
Files\\Java\\jre1.6.0_07\\bin\\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} -
C:\\PROGRA~1\\MICROS~2\\Office12\\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote -
{2670000A-7350-4f3c-8081-5663EE0C6C49} -
C:\\PROGRA~1\\MICROS~2\\Office12\\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} -
C:\\PROGRA~1\\MICROS~2\\Office12\\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} -
C:\\Program Files\\Messenger\\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683}
- C:\\Program Files\\Messenger\\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) -
C:\\Program Files\\Yahoo!\\Common\\Yinsthelper.dll
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} -
C:\\Program Files\\Microsoft Office\\Office12\\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} -
C:\\PROGRA~1\\FICHIE~1\\Skype\\SKYPE4~1.DLL
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) -
Avira GmbH - C:\\Program Files\\Avira\\AntiVir PersonalEdition
Classic\\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira
GmbH - C:\\Program Files\\Avira\\AntiVir PersonalEdition Classic\\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\\Program Files\\Fichiers
communs\\Apple\\Mobile Device Support\\bin\\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. -
C:\\WINDOWS\\system32\\Ati2evxx.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\\Program
Files\\Bonjour\\mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. -
C:\\Program Files\\WIDCOMM\\Logiciel Bluetooth\\bin\\btwdins.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. -
C:\\Program Files\\Fichiers communs\\Macrovision Shared\\FLEXnet
Publisher\\FNPLicensingService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\\Program
Files\\Google\\Common\\Google Updater\\GoogleUpdaterService.exe
O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company,
L.P. - C:\\Program Files\\HPQ\\shared\\hpqwmi.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\\Program
Files\\iPod\\bin\\iPodService.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) -
Analog Devices, Inc. - C:\\Program Files\\Analog Devices\\SoundMAX\\SMAgent.exe
--
End of file - 10523 bytes
Le point de restauration a été crée aussi. j'espère que tout va mieux (pour ma
part je ne le sait pas encore
)
Encore merci
François