Bonjour,
a l'aide virus!!!!!
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:20:51, on 09/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\VTtrayp.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Logitech\Video\LogiTray.exe
C:\Program Files\Labtec\Desktop\V5.1\moffice.exe
C:\Program Files\Labtec\Desktop\V5.1\kbdap32a.exe
C:\Program Files\Labtec\Desktop\V5.1\MOUSE32A.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\Program Files\QuickTime\qttask.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\?dobe\m?hta.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
C:\WINDOWS\system32\CROSOF~1.NET\spool32.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Logitech\Video\FxSvr2.exe
C:\WINDOWS\system32\tcpsvcs.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Windows Live Toolbar\msn_sl.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =
https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
https://actus.sfr.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://home.neuf.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
https://fr.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
https://actus.sfr.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
https://home.sweetim.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
https://actus.sfr.fr
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) =
https://www.bing.com/?FORM=TOOLBR&cc=fr&toHttps=1&redig=4527FFF1C12746FC9EDB535C75E80ECC
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = localhost
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {0A6ED48C-1962-1EE1-6526-3D71C278C4B1} - C:\WINDOWS\system32\cbyxb.dll (file missing)
O2 - BHO: (no name) - {146C14F9-DE14-8A9C-1A11-FE8DCD2DD5BF} - C:\WINDOWS\system32\pmtjbd.dll (file missing)
O2 - BHO: (no name) - {173D19FB-881B-8C9B-1A11-FE8DCD2DD0E8} - C:\WINDOWS\system32\jbull.dll (file missing)
O2 - BHO: (no name) - {17E95B65-C4D2-C159-82F8-B06943A78DB9} - C:\WINDOWS\system32\zcnbx.dll (file missing)
O2 - BHO: (no name) - {1C634CFB-D414-8E98-1A11-FE8DCD2D85EF} - C:\WINDOWS\system32\ldsre.dll (file missing)
O2 - BHO: (no name) - {1D3949FC-8914-8ACE-1A11-FE8DCD2C82EA} - C:\WINDOWS\system32\yxt.dll (file missing)
O2 - BHO: (no name) - {24FE15DA-D73B-DDEE-6F86-F7AD0F70EFE4} - C:\WINDOWS\system32\hliool.dll (file missing)
O2 - BHO: (no name) - {2D59C113-5DF4-5177-A1EA-71D5F829E0B9} - C:\WINDOWS\system32\kon.dll (file missing)
O2 - BHO: (no name) - {31B2FB15-6FF8-6820-A34A-1BE34BE0AAB8} - C:\WINDOWS\system32\nfwp.dll (file missing)
O2 - BHO: (no name) - {3B84FECE-347C-3EA8-2972-48B67E41F2B3} - C:\WINDOWS\system32\mjhvocik.dll (file missing)
O2 - BHO: (no name) - {3C48D0A8-4B45-17CC-4CF4-60D4B9CEA8BF} - C:\WINDOWS\system32\pcwwhy.dll (file missing)
O2 - BHO: (no name) - {41681DF5-DB19-8C9C-1A11-FE8DCD2D83B9} - C:\WINDOWS\system32\nige.dll (file missing)
O2 - BHO: (no name) - {436F4FA9-D415-889A-1A11-FE8DCD2CD0B9} - C:\WINDOWS\system32\vsnq.dll (file missing)
O2 - BHO: (no name) - {478B2B12-EFA1-E221-A04A-9B2B289F8CBE} - C:\WINDOWS\system32\meme.dll (file missing)
O2 - BHO: (no name) - {4CBABDC3-7322-7AA1-7767-09B21E6585EF} - C:\WINDOWS\system32\vnqcgbu.dll (file missing)
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: (no name) - {5D3C8F8A-4835-49E2-6526-3D71C27896BB} - C:\WINDOWS\system32\orwneday.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {8B79337D-A99C-AC4F-CB4C-8BBADE3B40EE} - C:\WINDOWS\system32\dhctfoix.dll (file missing)
O2 - BHO: (no name) - {8B8E9D73-5D99-5D48-9B19-7EE52B6211B1} - C:\WINDOWS\system32\mzhmw.dll (file missing)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {913D7F13-BBFB-B126-F1DF-C2DEC8BB0BE0} - C:\WINDOWS\system32\hxuq.dll (file missing)
O2 - BHO: (no name) - {94ACF962-6088-3C5C-DA2D-4DE6048C59B4} - C:\WINDOWS\system32\pka.dll (file missing)
O2 - BHO: (no name) - {9B93A80D-6DBE-6E3A-EC5E-4A766D3405E1} - C:\WINDOWS\system32\myrkmjxk.dll (file missing)
O2 - BHO: (no name) - {9EC2FF59-62EA-6E3F-EC5E-4A76626102B5} - C:\WINDOWS\system32\irxn.dll (file missing)
O2 - BHO: (no name) - {A01DC43B-5DD2-5D08-DB4D-2B90ECD939B7} - C:\WINDOWS\system32\dhvcs.dll (file missing)
O2 - BHO: (no name) - {A041986C-0FD5-0A0C-DB4D-2B90ECD938EC} - C:\WINDOWS\system32\fmi.dll (file missing)
O2 - BHO: (no name) - {A5199A3D-5CD6-5D0F-DB4D-2B90ECD86CBF} - C:\WINDOWS\system32\tkf.dll (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar4.dll
O2 - BHO: (no name) - {B30B4A61-D4DD-DB5C-D90D-FFADAFB173B6} - C:\WINDOWS\system32\rydlgp.dll (file missing)
O2 - BHO: (no name) - {B5AA9390-0F22-0CA5-25F2-7045017370E2} - C:\WINDOWS\system32\zuwwreue.dll (file missing)
O2 - BHO: (no name) - {B7271B66-8DDB-D808-8438-FC4D81FB24EC} - C:\WINDOWS\system32\pnsbqxd.dll (file missing)
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: (no name) - {CE2E2693-E078-B1FF-7BE7-C19E8C3B53BE} - C:\WINDOWS\system32\dndi.dll (file missing)
O2 - BHO: (no name) - {CF7E259A-B02F-E0AA-7BE7-C19E8D6D5FE8} - C:\WINDOWS\system32\qkxkj.dll (file missing)
O2 - BHO: (no name) - {E529C32D-54CE-5247-9EA9-2550D0FE29B1} - C:\WINDOWS\system32\mkv.dll (file missing)
O2 - BHO: (no name) - {ECEF6958-FFB6-A830-BB2B-8D8A42F82FE0} - C:\WINDOWS\system32\fihe.dll (file missing)
O2 - BHO: (no name) - {F04C983E-58D6-0E08-DB4D-2B90ECD93AEA} - C:\WINDOWS\system32\vltg.dll (file missing)
O2 - BHO: (no name) - {F1AFC2AB-5F1E-50CC-1C51-2AF00BC660E5} - C:\WINDOWS\system32\ngndfdv.dll (file missing)
O2 - BHO: (no name) - {F2AD9FAC-5F48-5E96-1C51-2AF00BC66CE0} - C:\WINDOWS\system32\giu.dll (file missing)
O2 - BHO: (no name) - {F6F9CBFB-0F1E-5AC4-1C51-2AF00BC03DE0} - C:\WINDOWS\system32\tomvcm.dll (file missing)
O2 - BHO: (no name) - {F76D1D6D-8681-835A-DEAD-A528977A3BBD} - C:\WINDOWS\system32\chtdqp.dll (file missing)
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar4.dll
O4 - HKLM\..\Run: [LaunchApp] Alaunch
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [eRecoveryService] C:\Program Files\Acer\eRecovery\Monitor.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [MediaSync] C:\Program Files\Acer\Acer eConsole\MediaSync.exe
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Program Files\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [FLMOFFICE4DMOUSE] C:\Program Files\Labtec\Desktop\V5.1\moffice.exe
O4 - HKLM\..\Run: [OFFICEKB] C:\Program Files\Labtec\Desktop\V5.1\kbdap32a.exe
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Fichiers communs\Sonic\Update Manager\sgtray.exe" /r
O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\ZTE Corporation\ZXDSL852\CnxDslTb.exe" "ZTE Corporation\ZXDSL852"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [blryyur] c:\windows\system32\blryyur.exe blryyur
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Program Files\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [WOOKIT] C:\PROGRA~1\WANADOO\GestMaj.exe EspaceWanadoo.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Uullo] C:\WINDOWS\?dobe\m?hta.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
O4 - HKCU\..\Run: [Nphb] "C:\WINDOWS\system32\CROSOF~1.NET\spool32.exe" -vt ndrv
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LDMConf.exe
O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites -
https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Easy-WebPrint Ajouter à la liste d'impressions - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint Impression rapide - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Imprimer - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: Easy-WebPrint Prévisualiser - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O15 - Trusted Zone:
http://www.secuser.com
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -
http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {D4323BF2-006A-4440-A2F5-27E3E7AB25F8} (Virtools WebPlayer Class) -
http://a532.g.akamai.net/...
O16 - DPF: {EB6D7E70-AAA9-40D9-BA05-F214089F2275} (Vitalize Class) -
https://www.clickteam.com/
O23 - Service: Acer Media Server - Unknown owner - C:\Program Files\acer\Acer eConsole\MediaServerService.exe (file missing)
O23 - Service: Boonty Games - BOONTY - C:\Program Files\Fichiers communs\BOONTY Shared\Service\Boonty.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
Afficher la suite