Citation de pierrrot le 29 février 2008, 16 h 50 min

bonjour,

depuis quelque jours mon ordi ram possible que c'est un virus ?je vous poste un rapport HijackThis pouvez vous me dire de vos conseils merci de votre aide

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 1753, on 29.02.2008

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16608)

Boot mode: Normal

Running processes:

C:WINDOWSSystem32smss.exe

C:WINDOWSsystem32csrss.exe

C:WINDOWSsystem32winlogon.exe

C:WINDOWSsystem32services.exe

C:WINDOWSsystem32lsass.exe

C:WINDOWSsystem32svchost.exe

C:WINDOWSsystem32svchost.exe

C:WINDOWSSystem32svchost.exe

C:WINDOWSsystem32svchost.exe

C:WINDOWSsystem32svchost.exe

C:WINDOWSExplorer.EXE

C😛rogram FilesAlwil SoftwareAvast4aswUpdSv.exe

C😛rogram FilesAlwil SoftwareAvast4ashServ.exe

C:WINDOWSsystem32keyhook.exe

C:WINDOWSSOUNDMAN.EXE

C😛rogram FilesSynapticsSynTPSynTPLpr.exe

C😛rogram FilesSynapticsSynTPSynTPEnh.exe

C😛ROGRA~1ALWILS~1Avast4ashDisp.exe

C:WINDOWSsystem32ctfmon.exe

C:WINDOWSsystem32spoolsv.exe

C:AcereManageranbmServ.exe

C:WINDOWSsystem32svchost.exe

C😛rogram FilesacereRecoveryMonitor.exe

C😛rogram FilesAlwil SoftwareAvast4ashMaiSv.exe

C😛rogram FilesAlwil SoftwareAvast4ashWebSv.exe

C:WINDOWSSystem32alg.exe

C:WINDOWSsystem32wbemwmiprvse.exe

C:WINDOWSsystem32wuauclt.exe

C😛rogram FilesTrend MicroHijackThisHijackThis.exe

R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = http://www.homepagerestore.com/?cm=708&lt=1&it=2008-02-10%2023%3A04%3A10&dt=2008-02-18%2000%3A00%3A09&q=http://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome

R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKCUSoftwareMicrosoftInternet Connection Wizard,ShellNext = http://global.acer.com/

R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Liens

O4 - HKLM..Run: [SiS Windows KeyHook] C:WINDOWSsystem32keyhook.exe

O4 - HKLM..Run: [SoundMan] SOUNDMAN.EXE

O4 - HKLM..Run: [SynTPLpr] C😛rogram FilesSynapticsSynTPSynTPLpr.exe

O4 - HKLM..Run: [SynTPEnh] C😛rogram FilesSynapticsSynTPSynTPEnh.exe

O4 - HKLM..Run: [IMJPMIG8.1] "C:WINDOWSIMEimjp8_1IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32

O4 - HKLM..Run: [MSPY2002] C:WINDOWSsystem32IMEPINTLGNTImScInst.exe /SYNC

O4 - HKLM..Run: [PHIME2002ASync] C:WINDOWSsystem32IMETINTLGNTTINTSETP.EXE /SYNC

O4 - HKLM..Run: [PHIME2002A] C:WINDOWSsystem32IMETINTLGNTTINTSETP.EXE /IMEName

O4 - HKLM..Run: [eRecoveryService] C:WindowsSystem32Check.exe

O4 - HKLM..Run: [avast!] C😛ROGRA~1ALWILS~1Avast4ashDisp.exe

O4 - HKCU..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe

O4 - HKLM..PoliciesExplorerRun: [some] C😛rogram FilesNetProjectscit.exe

O4 - HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'SERVICE LOCAL')

O4 - HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'SERVICE RÉSEAU')

O4 - HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'SYSTEM')

O4 - HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'Default user')

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork Diagnosticxpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork Diagnosticxpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C😛rogram FilesMessengermsmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C😛rogram FilesMessengermsmsgs.exe

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1192296966234

O16 - DPF: {D821DC4A-0814-435E-9820-661C543A4679} (CRLDownloadWrapper Class) - http://drmlicense.one.microsoft.com/crlupdate/en/crlocx.ocx

O17 - HKLMSystemCCSServicesTcpip..{4085C3AB-4D5D-4A2E-BEC5-B9B762B341AF}: NameServer = 85.255.114.103,85.255.112.151

O17 - HKLMSystemCCSServicesTcpip..{511069ED-C5E9-4FB8-B35C-D075E68378C9}: NameServer = 85.255.114.103,85.255.112.151

O17 - HKLMSystemCCSServicesTcpip..{C9AA5CAF-D8CD-4DF7-A943-201DA7501F35}: NameServer = 85.255.114.103,85.255.112.151

O17 - HKLMSystemCS1ServicesTcpipParameters: NameServer = 85.255.114.103 85.255.112.151

O17 - HKLMSystemCCSServicesTcpipParameters: NameServer = 85.255.114.103 85.255.112.151

O22 - SharedTaskScheduler: didact - {747e1fbe-b70f-441d-bbca-6e536c04924a} - (no file)

O23 - Service: Notebook Manager Service (anbmService) - OSA Technologies Inc. - C:AcereManageranbmServ.exe

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C😛rogram FilesAlwil SoftwareAvast4aswUpdSv.exe

O23 - Service: avast! Antivirus - ALWIL Software - C😛rogram FilesAlwil SoftwareAvast4ashServ.exe

O23 - Service: avast! Mail Scanner - ALWIL Software - C😛rogram FilesAlwil SoftwareAvast4ashMaiSv.exe

O23 - Service: avast! Web Scanner - ALWIL Software - C😛rogram FilesAlwil SoftwareAvast4ashWebSv.exe

--

End of file - 5493 bytes