Demande d 'analyse hijackthis merci

Bonjour,
depuis une semaine j'ai des messages intempestifs du soi disant centre de securité windows me disant que mon pc est infesté par un spyware malvaillant et me demande d'aller telecharger (ce k je n'ai pas fait) SWS antispyware. J'ai sans arret des pages internet ki apparaissent en rapport avec ce k je recherche ex vetements la redoute ect . J'avais eu le meme problème avec serwab il y a un moment.
ca ressemble etrangement c'est pourquoi je vous joins le rapport hijack this que je viens d'effectuer. Mon pare feu est sygate et je n'ai pasd'antivirus depuis deux semaine (autre pb a résoudre par la suite)
merci a ceux ki voudront bien m'aider

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:28:44, on 15/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00

(7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\CTSvcCDA.EXE
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\ewido anti-spyware

4.0\guard.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Program Files\Fichiers communs\Microsoft

Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Symantec

Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Inventel\Gateway\wlancfg.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\ATI Technologies\ATI Control

Panel\atiptaxx.exe
C:\Program

Files\ScanSoft\OmniPagePro14.0\WorkFlowTray.e

xe
C:\Program Files\Fichiers

communs\Real\Update_OB\realsched.exe
C:\Program

Files\Java\j2re1.4.2_03\bin\jusched.exe
C:\Program

Files\ScanSoft\OmniPagePro14.0\PdfPrn\SPrnAge

nt.exe
C:\WINDOWS\system32\keyhook.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program

Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
C:\Program

Files\ScanSoft\OmniPagePro14.0\Opware14.exe
C:\Program

Files\ScanSoft\OmniPagePro14.0\OpScheduler.ex

e
C:\WINDOWS\MXOALDR.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\windows\system\hpsysdrv.exe
C:\WINDOWS\system32\hphmon06.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\Program

Files\SlySoft\CloneCD\CloneCDTray.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Alt-Tab Thingy

v3\attmain.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Adobe\Photoshop Album

Edition Découverte\3.0\Apps\apdproxy.exe
C:\windows\system32\ocujvdvz.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\PROGRA~1\HELPAN~1\Pavilion\XPEWWBF4\plugin

\bin\pchbutton.exe
C:\Program Files\Packard Bell Data

Secure\PBDataSecure.exe
C:\Program Files\HP\Digital

Imaging\bin\hpqtra08.exe
C:\Program Files\Sony Corporation\Picture

Package\Picture Package Menu\SonyTray.exe
C:\Program Files\Sony Corporation\Picture

Package\Picture Package

Applications\Residence.exe
C:\Program Files\Vente Flash\vente_flash.exe
C:\Program Files\RMClient\PMCTray.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Microsoft

Office\OFFICE11\OUTLOOK.EXE
C:\Program Files\Microsoft

Office\OFFICE11\WINWORD.EXE
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Internet

Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\cidaemon.exe
C:\DOCUME~1\HP_ADM~1\LOCALS~1\Temp\HijackThis

.exe

R1 - HKCU\Software\Microsoft\Internet

Explorer\Main,Default_Page_URL =

https://www8.hp.com/fr/fr/home.html

ehome&locale=FR_FR&c=Q404&bd=pavilion&pf=desk

top
R1 - HKCU\Software\Microsoft\Internet

Explorer\Main,Default_Search_URL =

https://www8.hp.com/fr/fr/home.html

esearch&locale=FR_FR&c=Q404&bd=pavilion&pf=de

sktop
R0 - HKCU\Software\Microsoft\Internet

Explorer\Main,Start Page = https://www.msn.com/fr-fr
R1 - HKLM\Software\Microsoft\Internet

Explorer\Main,Default_Page_URL =

https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet

Explorer\Main,Default_Search_URL =

https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet

Explorer\Main,Search Bar =

https://www8.hp.com/fr/fr/home.html

esearch&locale=FR_FR&c=Q404&bd=pavilion&pf=de

sktop
R1 - HKLM\Software\Microsoft\Internet

Explorer\Main,Search Page =

https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet

Explorer\Main,Start Page =

https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet

Explorer\Search,SearchAssistant =

http://as.starware.com/dp/search?x=wKX1ILEOi+

Vh7AfA98Gm4Nh4mHWDdShFq0rj6sVvCfZzZbFL4mnanmJ

gcPJu6HgjPh/xK92KIjAT41ynlVJZkj+9PrsoW1H8Y2Ya

iVg7FV5JtbZ7kMABSvU5qzumvWjyZ5fRL4rWJag4Z2P+l

g4yz5CQTFTUB2ict/dEvTHs6+TaqKg9kfCAKY0mcXpkmt

Qe
R1 - HKCU\Software\Microsoft\Internet

Connection Wizard,ShellNext =

https://www8.hp.com/fr/fr/home.html

ehome&locale=FR_FR&c=Q404&bd=pavilion&pf=desk

top
R0 - HKCU\Software\Microsoft\Internet

Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class -

{08C06D61-F1F3-4799-86F8-BE1A89362C85} -

C:\PROGRA~1\Wanadoo\SEARCH~1.DLL (file

missing)
O2 - BHO: Aide pour le lien d'Adobe PDF

Reader -

{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -

C:\Program Files\Fichiers

communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dl

l
O2 - BHO: (no name) -

{53707962-6F74-2D53-2644-206D7942484F} -

C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) -

{7E853D72-626A-48EC-A868-BA8D5E23E045} - (no

file)
O2 - BHO: Windows Live Sign-in Helper -

{9030D464-4C02-4ABF-8ECC-5164760863C6} -

C:\Program Files\Fichiers communs\Microsoft

Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ST -

{9394EDE7-C8B5-483E-8773-474BF36AF6E4} -

C:\Program Files\MSN

Apps\ST\01.03.0000.1005\en-xu\stmain.dll

(file missing)
O2 - BHO: MSNToolBandBHO -

{BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} -

C:\Program Files\MSN Apps\MSN

Toolbar\01.02.5000.1021\fr\msntb.dll (file

missing)
O2 - BHO: Starware -

{F7C7AA47-BCA6-451D-8DBC-C10A8F75C8C7} -

C:\Program Files\Starware\bin\Starware.dll

(file missing)
O3 - Toolbar: Vue HP -

{B2847E28-5D7D-4DEB-8B67-05D28BCF79F5} -

c:\Program Files\HP\Digital

Imaging\bin\HPDTLK02.dll
O3 - Toolbar: MSN -

{BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} -

C:\Program Files\MSN Apps\MSN

Toolbar\01.02.5000.1021\fr\msntb.dll (file

missing)
O3 - Toolbar: Starware -

{9839B3B7-3F99-4498-884D-6CFCCD251AB1} -

C:\Program Files\Starware\bin\Starware.dll

(file missing)
O4 - HKLM\..\Run: [kav] "C:\Program

Files\Kaspersky Lab\Kaspersky Anti-Virus

6.0\avp.exe"
O4 - HKLM\..\Run: [SmcService]

C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKLM\..\Run: [Adobe Reader Speed

Launcher] "C:\Program Files\Adobe\Reader

8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [ATIPTA] C:\Program

Files\ATI Technologies\ATI Control

Panel\atiptaxx.exe
O4 - HKLM\..\Run: [JobHisInit] C:\Program

Files\RMClient\JobHisInit.exe
O4 - HKLM\..\Run: [MplSetUp] C:\Program

Files\RMClient\MplSetUp.exe
O4 - HKLM\..\Run: [WorkFlowTray] "C:\Program

Files\ScanSoft\OmniPagePro14.0\WorkFlowTray.e

xe"
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program

Files\Fichiers

communs\Real\Update_OB\realsched.exe"

-osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched]

C:\Program

Files\Java\j2re1.4.2_03\bin\jusched.exe
O4 - HKLM\..\Run: [SSPrnAgent] C:\Program

Files\ScanSoft\OmniPagePro14.0\PdfPrn\SPrnAge

nt.exe
O4 - HKLM\..\Run: [SiS Windows KeyHook]

C:\WINDOWS\system32\keyhook.exe
O4 - HKLM\..\Run: [Recguard]

C:\WINDOWS\SMINST\RECGUARD.EXE
O4 - HKLM\..\Run: [QuickTime Task]

"C:\Program Files\QuickTime\qttask.exe"

-atboottime
O4 - HKLM\..\Run: [PS2]

C:\WINDOWS\system32\ps2.exe
O4 - HKLM\..\Run: [PDF Converter Registry

Controller] "C:\Program

Files\ScanSoft\OmniPagePro14.0\PdfCnv\Registr

yController.exe"
O4 - HKLM\..\Run: [OpwareSE2] "C:\Program

Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [Opware14] "C:\Program

Files\ScanSoft\OmniPagePro14.0\Opware14.exe"
O4 - HKLM\..\Run: [OpScheduler] "C:\Program

Files\ScanSoft\OmniPagePro14.0\OpScheduler.ex

e"
O4 - HKLM\..\Run: [NeroFilterCheck]

C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [MXOBG]

C:\WINDOWS\MXOALDR.EXE
O4 - HKLM\..\Run: [MaxtorOneTouch]

C:\PROGRA~1\Maxtor\OneTouch\Utils\OneTouch.ex

e
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program

Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [hpsysdrv]

c:\windows\system\hpsysdrv.exe
O4 - HKLM\..\Run: [HPHUPD06] c:\Program

Files\HP\{AAC4FC36-8F89-4587-8DD3-EBC57C83374

D}\hphupd06.exe
O4 - HKLM\..\Run: [HPHmon06]

C:\WINDOWS\system32\hphmon06.exe
O4 - HKLM\..\Run: [fnacVOD] C:\Program

Files\fnacVOD\fnacVOD.exe
O4 - HKLM\..\Run: [ehTray]

C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program

Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [ccApp] "C:\Program

Files\Fichiers communs\Symantec

Shared\ccApp.exe"
O4 - HKLM\..\Run: [BootWarn] C:\Program

Files\Norton AntiVirus\BootWarn.exe /a
O4 - HKLM\..\Run:

[BluetoothAuthenticationAgent] rundll32.exe

bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [Alt-Tab Thingy]

"C:\Program Files\Alt-Tab Thingy

v3\attmain.exe"
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [Adobe Photo Downloader]

"C:\Program Files\Adobe\Photoshop Album

Edition Découverte\3.0\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [CProgramFile0] C:\Program

Files\ViaVoice\bin\prtStart.exe 00 50 11 22

2007 "C:\Program

Files\ViaVoice\bin\PRTIBM.exe" /lang=fra

/splashDelay=3
O4 - HKLM\..\Run: [ocujvdvz]

c:\windows\system32\ocujvdvz.exe ocujvdvz
O4 - HKCU\..\Run: [ctfmon.exe]

C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program

Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Acme.PCHButton]

C:\PROGRA~1\HELPAN~1\Pavilion\XPEWWBF4\plugin

\bin\pchbutton.exe
O4 - HKCU\..\Run: [Packard Bell Data Secure]

C:\Program Files\Packard Bell Data

Secure\PBDataSecure.exe
O4 - HKCU\..\Run: [NBJ] "C:\Program

Files\Ahead\Nero BackItUp\NBJ.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE]

C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE

LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE]

C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE

RÉSEAU')
O4 - HKUS\S-1-5-18\..\RunOnce:

[SetDefaultMIDI] MIDIDEF.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce:

[SetDefaultMIDI] MIDIDEF.EXE (User 'Default

user')
O4 - Startup: OneNote 2007 - Capture d'écran

et lancement.lnk = C:\Program Files\Microsoft

Office\Office12\ONENOTEM.EXE
O4 - Startup: Vente Flash.lnk = C:\Program

Files\Vente Flash\vente_flash.exe
O4 - Global Startup: Adobe Reader

Synchronizer.lnk = C:\Program

Files\Adobe\Reader

8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: E-Compagnon.lnk =

C:\Program Files\ColiPoste\e-COMO\e-COMO.exe
O4 - Global Startup: HP Digital Imaging

Monitor.lnk = C:\Program Files\HP\Digital

Imaging\bin\hpqtra08.exe
O4 - Global Startup: Kaspersky

Anti-Hacker.lnk = C:\Program Files\Kaspersky

Lab\Kaspersky Anti-Hacker\KAVPF.exe
O4 - Global Startup: Lancement rapide d'Adobe

Reader.lnk = C:\Program Files\Adobe\Reader

8.0\Reader\reader_sl.exe
O4 - Global Startup: Picture Package Menu.lnk

= ?
O4 - Global Startup: Picture Package VCD

Maker.lnk = ?
O4 - Global Startup: SmartDeviceMonitor for

Client.lnk = C:\Program

Files\RMClient\PMClient.exe
O8 - Extra context menu item: E&xporter vers

Microsoft Excel -

res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE

/3000
O8 - Extra context menu item: Ouvrir le

fichier PDF dans Word - res://C:\Program

Files\ScanSoft\OmniPagePro14.0\PdfCnv\IEShell

Ext.dll /300
O9 - Extra button: (no name) -

{08B0E5C0-4FCB-11CF-AAA5-00401C608501} -

C:\Program

Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra 'Tools' menuitem: Console Java

(Sun) -

{08B0E5C0-4FCB-11CF-AAA5-00401C608501} -

C:\Program

Files\Java\j2re1.4.2_03\bin\npjpi142_03.dll
O9 - Extra button: Envoyer à OneNote -

{2670000A-7350-4f3c-8081-5663EE0C6C49} -

C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à

OneNote -

{2670000A-7350-4f3c-8081-5663EE0C6C49} -

C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: (no name) -

{85d1f590-48f4-11d9-9669-0800200c9a66} -

C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall

BitDefender Online Scanner v8 -

{85d1f590-48f4-11d9-9669-0800200c9a66} -

C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Recherche -

{92780B25-18CC-41C8-B9BE-3C9C571A8263} -

C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) -

{e2e2dd38-d088-4134-82b7-f2ba38496583} -

C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem:

@xpsp3res.dll,-20001 -

{e2e2dd38-d088-4134-82b7-f2ba38496583} -

C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger -

{FB5F1910-F110-11d2-BB9E-00C04F795683} -

C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows

Messenger -

{FB5F1910-F110-11d2-BB9E-00C04F795683} -

C:\Program Files\Messenger\msmsgs.exe
O16 - DPF:

{238F6F83-B8B4-11CF-8771-00A024541EE3}

(Citrix ICA Client) -

http://a516.g.akamai.net/f/516/25175/7d/runaw

are.download.akamai.com/25175/citrix/wficat-n

o-eula.cab
O16 - DPF:

{5D86DDB5-BDF9-441B-9E9E-D4730F4EE499}

(BDSCANONLINE Control) -

http://download.bitdefender.com/resources/sca

n8/oscan8.cab
O16 - DPF:

{9A9307A0-7DA4-4DAF-B042-5009F29E09E1}

(ActiveScan Installer Class) -

http://acs.pandasoftware.com/activescan/as5fr

ee/asinst.cab
O23 - Service: Ati HotKey Poller - ATI

Technologies Inc. -

C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner -

C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Creative Service for CDROM

Access - Creative Technology Ltd -

C:\WINDOWS\system32\CTSvcCDA.EXE
O23 - Service: ewido anti-spyware 4.0 guard -

Anti-Malware Development a.s. - C:\Program

Files\ewido anti-spyware 4.0\guard.exe
O23 - Service: Google Updater Service (gusvc)

- Google - C:\Program

Files\Google\Common\Google

Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager

(IDriverT) - Macrovision Corporation -

C:\Program Files\Fichiers

communs\InstallShield\Driver\11\Intel

32\IDriverT.exe
O23 - Service: iPodService - Apple Computer,

Inc. - C:\Program

Files\iPod\bin\iPodService.exe
O23 - Service: Planificateur LiveUpdate

automatique - Unknown owner - C:\Program

Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe

(file missing)
O23 - Service: Sygate Personal Firewall

(SmcService) - Sygate Technologies, Inc. -

C:\Program Files\Sygate\SPF\smc.exe
O23 - Service: Symantec Core LC - Symantec

Corporation - C:\Program Files\Fichiers

communs\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: Service de lancement de

WlanCfg (Wlancfg) - Inventel - C:\Program

Files\Inventel\Gateway\wlancfg.exe