prepress

up please

bonjour a tous je trouve mon PC un peu lent, j'ai defrag, lancer : ccleaner, adware, trend, malwarebytes... mais sans ameliorations voila ce que dit hijackthis, mais je ne comprend pas. je ne connais pas de soft et je ne parle par l'anglais. faut il sélectionné les éléments et ensuite les fix, si oui lequel, et quel sont les risques... c'est quoi exactement le éléments que hijackthis mets en évidence? voila le log : Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 12:18:51, on 25/11/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe C:\Program Files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe C:\WINDOWS\system32\imapi.exe C:\Program Files\Fichiers communs\InterVideo\RegMgr\iviRegMgr.exe C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Trend Micro\Client Server Security Agent\ntrtscan.exe C:\WINDOWS\system32\nvsvc32.exe C:\PROGRA~1\Xerox\FreeFlow\COMMON~1\SERVIC~1.EXE C:\Program Files\JavaSoft\Jre\1.5\bin\javaw.exe C:\WINDOWS\System32\svchost.exe c:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Trend Micro\Client Server Security Agent\tmlisten.exe C:\WINDOWS\system32\mqsvc.exe C:\WINDOWS\system32\mqtgsvc.exe C:\WINDOWS\system32\wbem\wmiapsrv.exe C:\Program Files\Trend Micro\Client Server Security Agent\TmPfw.exe C:\Program Files\Trend Micro\Client Server Security Agent\CNTAoSMgr.exe C:\Program Files\Trend Micro\Client Server Security Agent\TmProxy.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe C:\WINDOWS\RTHDCPL.EXE C:\WINDOWS\SMINST\Scheduler.exe C:\Program Files\Trend Micro\Client Server Security Agent\pccntmon.exe C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Extensis\Suitcase 9.2\Suitcase.exe C:\Program Files\Darwin\WinPilot\WinPilot.exe C:\Program Files\Adobe\Adobe InDesign CS3\InDesign.exe C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe C:\Program Files\Kodak\Prinergy\Workshop\Contents\Resources\bin\Workshop.exe C:\Program Files\Adobe\Adobe Illustrator CS3\Support Files\Contents\Windows\Illustrator.exe C:\Program Files\Microsoft Office\Office12\OUTLOOK.EXE C:\WINDOWS\system32\mmc.exe C:\WINDOWS\system32\DfrgNtfs.exe C:\WINDOWS\system32\taskmgr.exe C:\Program Files\Mozilla Firefox\firefox.exe D:\Mes Documents\Téléchargements\HiJackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.fr R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/svs/rdr?TYPE=3&a...;pf=workstation R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = ftp://Clieasilyprint@172.17.15.20/ R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Windows Internet Explorer fourni par ML Soft R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O1 - Hosts: 74.125.45.100 4-open-davinci.com O1 - Hosts: 74.125.45.100 securitysoftwarepayments.com O1 - Hosts: 74.125.45.100 privatesecuredpayments.com O1 - Hosts: 74.125.45.100 secure.privatesecuredpayments.com O1 - Hosts: 74.125.45.100 getantivirusplusnow.com O1 - Hosts: 74.125.45.100 secure-plus-payments.com O1 - Hosts: 74.125.45.100 www.getantivirusplusnow.com O1 - Hosts: 74.125.45.100 www.secure-plus-payments.com O1 - Hosts: 74.125.45.100 www.getavplusnow.com O1 - Hosts: 74.125.45.100 safebrowsing-cache.google.com O1 - Hosts: 74.125.45.100 www.securesoftwarebill.com O1 - Hosts: 74.125.45.100 secure.paysecuresystem.com O1 - Hosts: 74.125.45.100 paysoftbillsolution.com O1 - Hosts: 88.198.198.202 google.ae O1 - Hosts: 88.198.198.202 google.as O1 - Hosts: 88.198.198.202 google.at O1 - Hosts: 88.198.198.202 google.az O1 - Hosts: 88.198.198.202 google.ba O1 - Hosts: 88.198.198.202 google.be O1 - Hosts: 88.198.198.202 google.bg O1 - Hosts: 88.198.198.202 google.bs O1 - Hosts: 88.198.198.202 google.ca O1 - Hosts: 88.198.198.202 google.cd O1 - Hosts: 88.198.198.202 google.com.gh O1 - Hosts: 88.198.198.202 google.com.hk O1 - Hosts: 88.198.198.202 google.com.jm O1 - Hosts: 88.198.198.202 google.com.mx O1 - Hosts: 88.198.198.202 google.com.my O1 - Hosts: 88.198.198.202 google.com.na O1 - Hosts: 88.198.198.202 google.com.nf O1 - Hosts: 88.198.198.202 google.com.ng O1 - Hosts: 88.198.198.202 google.ch O1 - Hosts: 88.198.198.202 google.com.np O1 - Hosts: 88.198.198.202 google.com.pr O1 - Hosts: 88.198.198.202 google.com.qa O1 - Hosts: 88.198.198.202 google.com.sg O1 - Hosts: 88.198.198.202 google.com.tj O1 - Hosts: 88.198.198.202 google.com.tw O1 - Hosts: 88.198.198.202 google.dj O1 - Hosts: 88.198.198.202 google.de O1 - Hosts: 88.198.198.202 google.dk O1 - Hosts: 88.198.198.202 google.dm O1 - Hosts: 88.198.198.202 google.ee O1 - Hosts: 88.198.198.202 google.fi O1 - Hosts: 88.198.198.202 google.fm O1 - Hosts: 88.198.198.202 google.fr O1 - Hosts: 88.198.198.202 google.ge O1 - Hosts: 88.198.198.202 google.gg O1 - Hosts: 88.198.198.202 google.gm O1 - Hosts: 88.198.198.202 google.gr O1 - Hosts: 88.198.198.202 google.ht O1 - Hosts: 88.198.198.202 google.ie O1 - Hosts: 88.198.198.202 google.im O1 - Hosts: 88.198.198.202 google.in O1 - Hosts: 88.198.198.202 google.it O1 - Hosts: 88.198.198.202 google.ki O1 - Hosts: 88.198.198.202 google.la O1 - Hosts: 88.198.198.202 google.li O1 - Hosts: 88.198.198.202 google.lv O1 - Hosts: 88.198.198.202 google.ma O1 - Hosts: 88.198.198.202 google.ms O1 - Hosts: 88.198.198.202 google.mu O1 - Hosts: 88.198.198.202 google.mw O1 - Hosts: 88.198.198.202 google.nl O1 - Hosts: 88.198.198.202 google.no O1 - Hosts: 88.198.198.202 google.nr O1 - Hosts: 88.198.198.202 google.nu O1 - Hosts: 88.198.198.202 google.pl O1 - Hosts: 88.198.198.202 google.pn O1 - Hosts: 88.198.198.202 google.pt O1 - Hosts: 88.198.198.202 google.ro O1 - Hosts: 88.198.198.202 google.ru O1 - Hosts: 88.198.198.202 google.rw O1 - Hosts: 88.198.198.202 google.sc O1 - Hosts: 88.198.198.202 google.se O1 - Hosts: 88.198.198.202 google.sh O1 - Hosts: 88.198.198.202 google.si O1 - Hosts: 88.198.198.202 google.sm O1 - Hosts: 88.198.198.202 google.sn O1 - Hosts: 88.198.198.202 google.st O1 - Hosts: 88.198.198.202 google.tl O1 - Hosts: 88.198.198.202 google.tm O1 - Hosts: 88.198.198.202 google.tt O1 - Hosts: 88.198.198.202 google.us O1 - Hosts: 88.198.198.202 google.vu O1 - Hosts: 88.198.198.202 google.ws O1 - Hosts: 88.198.198.202 google.co.ck O1 - Hosts: 88.198.198.202 google.co.id O1 - Hosts: 88.198.198.202 google.co.il O1 - Hosts: 88.198.198.202 google.co.in O1 - Hosts: 88.198.198.202 google.co.jp O1 - Hosts: 88.198.198.202 google.co.kr O1 - Hosts: 88.198.198.202 google.co.ls O1 - Hosts: 88.198.198.202 google.co.ma O1 - Hosts: 88.198.198.202 google.co.nz O1 - Hosts: 88.198.198.202 google.co.tz O1 - Hosts: 88.198.198.202 google.co.ug O1 - Hosts: 88.198.198.202 google.co.uk O1 - Hosts: 88.198.198.202 google.co.za O1 - Hosts: 88.198.198.202 google.co.zm O1 - Hosts: 88.198.198.202 google.com O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM\..\Run: [Recguard] C:\WINDOWS\Sminst\Recguard.exe O4 - HKLM\..\Run: [Reminder] C:\WINDOWS\Creator\Remind_XP.exe O4 - HKLM\..\Run: [scheduler] C:\WINDOWS\SMINST\Scheduler.exe O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [OfficeScanNT Monitor] "C:\Program Files\Trend Micro\Client Server Security Agent\pccntmon.exe" -HideWindow O4 - HKLM\..\Run: [MsmqIntCert] regsvr32 /s mqrt.dll O4 - HKLM\..\Run: [OE] C:\Program Files\Trend Micro\Client Server Security Agent\TMAS_OE\TMAS_OEMon.exe O4 - HKLM\..\Run: [Acrobat Assistant 7.0] "C:\Program Files\Adobe\Acrobat 7.0\Distillr\Acrotray.exe" O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: Lancement rapide d'Adobe Acrobat.lnk = ? O4 - Global Startup: Suitcase Startup.lnk = ? O8 - Extra context menu item: Convertir en Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convertir en un fichier PDF existant - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convertir la cible du lien en Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convertir la cible du lien en un fichier PDF existant - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convertir la sélection en Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html O8 - Extra context menu item: Convertir la sélection en un fichier PDF existant - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html O8 - Extra context menu item: Convertir les liens sélectionnés en fichier Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html O8 - Extra context menu item: Convertir les liens sélectionnés en un fichier PDF existant - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0\bin\npjpi150.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O14 - IERESET.INF: START_PAGE_URL=http://www.google.fr O16 - DPF: {00134F72-5284-44F7-95A8-52A619F70751} (ObjWinNTCheck Class) - https://172.16.2.19:4343/officescan/console...ll/WinNTChk.cab O16 - DPF: {08D75BC1-D2B5-11D1-88FC-0080C859833B} (OfficeScan Corp Edition Web-Deployment SetupCtrl Class) - https://172.16.2.19:4343/officescan/console...stall/setup.cab O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - http://dlm.tools.akamai.com/dlmanager/vers...vex-2.2.4.3.cab O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = mlsoft.local O17 - HKLM\Software\..\Telephony: DomainName = mlsoft.local O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = mlsoft.local O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = mlsoft.local O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## (Bonjour Service) - Apple Computer, Inc. - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\Cisco Systems\VPN Client\cvpnd.exe O23 - Service: EpsonBidirectionalService - SEIKO EPSON CORPORATION - C:\Program Files\Fichiers communs\EPSON\EBAPI\eEBSVC.exe O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Roxio\Roxio MyDVD Basic v9\InstallShield\Driver\1050\Intel 32\IDriverT.exe O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Fichiers communs\InterVideo\RegMgr\iviRegMgr.exe O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe O23 - Service: Scan en temps réel Trend Micro Client/Server Security Agent (ntrtscan) - Trend Micro Inc. - C:\Program Files\Trend Micro\Client Server Security Agent\ntrtscan.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: Printer Administration Service (PAServer) - Macrovision - C:\PROGRA~1\Xerox\FreeFlow\COMMON~1\SERVIC~1.EXE O23 - Service: PC Angel (PCA) - SoftThinks - C:\WINDOWS\SMINST\PCAngel.exe O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Fichiers communs\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Fichiers communs\SureThing Shared\stllssvr.exe O23 - Service: Trend Micro Client/Server Security Agent Listener (tmlisten) - Trend Micro Inc. - C:\Program Files\Trend Micro\Client Server Security Agent\tmlisten.exe O23 - Service: Pare-feu personnel Trend Micro Client/Server Security Agent (TmPfw) - Trend Micro Inc. - C:\Program Files\Trend Micro\Client Server Security Agent\TmPfw.exe O23 - Service: Service proxy Trend Micro Client/Server Security Agent (TmProxy) - Trend Micro Inc. - C:\Program Files\Trend Micro\Client Server Security Agent\TmProxy.exe O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/GRARD~1.MLS/LOCALS~1/Temp/msohtmlclip1/01/clip_image002.gif O24 - Desktop Component 1: (no name) - file:///C:/DOCUME~1/GRARD~1.MLS/LOCALS~1/Temp/msohtmlclip1/01/clip_image002.jpg -- End of file - 15104 bytes merci a vous et bonne continuation