Demande d'analyse de rapport Hijacthis / Troyen

[quidam]

J'ai trouvé un virus sur ma machine dénommé : TR/Spy.Banker.vk.1 grace à AntiVir.

Je l'ai détruit de ma quarantaine mais malgré cela mon PC continue à tourner bizarement et surtout quand je le redémarre je suis obligé d'appuyer sur enter pour arriver à l'écran de choix de profils, autrement il s'arréte brusquement!!!

Je me demande si c'est pas du au fait que XP soit réglé pour démarrer dans un certain laps de temps et que si passé ce délai ( j'ai pas cronométré mais çà dure environ 3 min) il s'arréte automatiquement???

A moins que je n'ai d'autres trojens présents sur la machine?

 

Voici le rapport:

 

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 15:10:34, on 10/05/2008

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v7.00 (7.00.6000.16640)

Boot mode: Normal

 

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Windows Defender\MsMpEng.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

c:\program files\a-squared free\a2service.exe

C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe

C:\Program Files\Helexis\Drive Health\dhcore.exe

C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe

C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE

C:\WINDOWS\system32\tcpsvcs.exe

C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe

C:\Program Files\Sunbelt Software\Personal Firewall\kpf4gui.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\taskmgr.exe

C:\Program Files\Windows Defender\MSASCui.exe

C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe

C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

C:\WINDOWS\system32\LVComsX.exe

C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe

C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe

C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe

C:\Program Files\Opera\Opera.exe

C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe

C:\Program Files\VideoLAN\VLC\vlc.exe

C:\Program Files\Messenger\msmsgs.exe

C:\Documents and Settings\Anibal\Mes documents\Mes téléchargements\Antivirus\HiJackThis.exe

 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

R3 - URLSearchHook: (no name) - {73c7d5b0-7b03-444a-84c7-ce1ba03b5573} - (no file)

O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: (no name) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - (no file)

O3 - Toolbar: (no name) - {73c7d5b0-7b03-444a-84c7-ce1ba03b5573} - (no file)

O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide

O4 - HKLM\..\Run: [iSUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup

O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice

O4 - HKLM\..\Run: [synTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

O4 - HKLM\..\Run: [sunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_06\bin\jusched.exe"

O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

O4 - HKCU\..\Run: [spybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')

O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')

O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\FICHIE~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')

O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] "C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" /NoDialog (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')

O4 - Startup: Diagnostics .lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe

O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll

O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe

O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL

O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O15 - Trusted Zone: http://bsg-front.univ-paris1.fr

O15 - Trusted Zone: http://bsg-side1.univ-paris1.fr

O15 - Trusted Zone: http://bsg-side2.univ-paris1.fr

O15 - Trusted Zone: http://bsg-side3.univ-paris1.fr

O15 - Trusted Zone: http://bsg-side4.univ-paris1.fr

O15 - Trusted Zone: http://auth.wifi.bsg

O16 - DPF: {0B79F48A-E8D6-11DB-9283-E25056D89593} (F-Secure Online Scanner 3.1) - http://support.f-secure.com/ols/fscax.cab

O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll

O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://gfx1.hotmail.com/mail/w2/pr02/resources/MSNPUpld.cab

O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1154473671346

O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://rotminet.spaces.live.com/PhotoUpload/MsnPUpld.cab

O16 - DPF: {D3D0E7BC-170E-11D0-B2D1-00AA00B92B50} (FireEvent Control) - http://singles.sfr.fr/dlm/ax/fireev.2.4.0.0.cab

O17 - HKLM\System\CCS\Services\Tcpip\..\{130FF9AA-3ACA-435E-ABD1-E15DC6C9B4F0}: NameServer = 86.64.145.142 84.103.237.142

O18 - Protocol: bw+0 - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bw+0s - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bw-0 - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bw-0s - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bw00 - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bw00s - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bw10 - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bw10s - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bw20 - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bw20s - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bw30 - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bw30s - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bw40 - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bw40s - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bw50 - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bw50s - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bw60 - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bw60s - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bw70 - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bw70s - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bw80 - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bw80s - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bw90 - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bw90s - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwa0 - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwa0s - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwb0 - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwb0s - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwc0 - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwc0s - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwd0 - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwd0s - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwe0 - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwe0s - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwf0 - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwf0s - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - (no file)

O18 - Protocol: bwg0 - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwg0s - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwh0 - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwh0s - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwi0 - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwi0s - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwj0 - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwj0s - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwk0 - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwk0s - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwl0 - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwl0s - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwm0 - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwm0s - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwn0 - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwn0s - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwo0 - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwo0s - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwp0 - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwp0s - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwq0 - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwq0s - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwr0 - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwr0s - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bws0 - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bws0s - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwt0 - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwt0s - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwu0 - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwu0s - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwv0 - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwv0s - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bww0 - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bww0s - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwx0 - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwx0s - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwy0 - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwy0s - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwz0 - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: bwz0s - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: offline-8876480 - {88D2FE45-61C2-4387-9B05-2CAC36E4FCA0} - (no file)

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL

O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - c:\program files\a-squared free\a2service.exe

O23 - Service: Avira AntiVir Personal – Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe

O23 - Service: Avira AntiVir Personal – Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe

O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: AVG Anti-Spyware Guard - GRISOFT s.r.o. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe

O23 - Service: DriveHealth - Helexis Software Development - C:\Program Files\Helexis\Drive Health\dhcore.exe

O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe

O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe

O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe

O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: Steganos AntiTheft (SatSrv) - Unknown owner - C:\WINDOWS\system32\SatSrv.exe (file missing)

O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe

O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe

O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

O23 - Service: Sunbelt Personal Firewall 4 (SPF4) - Sunbelt Software - C:\Program Files\Sunbelt Software\Personal Firewall\kpf4ss.exe

 

--

End of file - 16422 bytes

 

UN GRAND MERCI D'AVANCE POUR VOTRE AIDE!!!!

[pear]

Bonjour,

 

Plusieurs parapluies ne servent à rien.

Le principe:

1 parefeu,

1 antivirus ,

1 antispyware résidents(c.a.d actifs) sinon conflits et problèmes.

 

Désactivez le messager de logitech.

 

Dans Hijackthis cochez ces lignes puis Fix checked:

R3 - URLSearchHook: (no name) - {73c7d5b0-7b03-444a-84c7-ce1ba03b5573} - (no file)

O2 - BHO: (no name) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - (no file)

O3 - Toolbar: (no name) - {73c7d5b0-7b03-444a-84c7-ce1ba03b5573} - (no file)

O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')

O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')

O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - (no file) => logitech Desktop Messenger toutes les lignes 018

[quidam]

Bonjour,

 

Plusieurs parapluies ne servent à rien.

Le principe:

1 parefeu,

1 antivirus ,

1 antispyware résidents(c.a.d actifs) sinon conflits et problèmes.

 

Désactivez le messager de logitech.

 

Dans Hijackthis cochez ces lignes puis Fix checked:

R3 - URLSearchHook: (no name) - {73c7d5b0-7b03-444a-84c7-ce1ba03b5573} - (no file)

O2 - BHO: (no name) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - (no file)

O3 - Toolbar: (no name) - {73c7d5b0-7b03-444a-84c7-ce1ba03b5573} - (no file)

O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')

O4 - HKUS\S-1-5-18\..\Run: [Picasa Media Detector] C:\Program Files\Picasa2\PicasaMediaDetector.exe (User 'SYSTEM')

O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - (no file) => logitech Desktop Messenger toutes les lignes 018

 

Bonsoir,

 

Merci pour votre réponse.

 

Je n'ai qu'un parefeu...à ma connaisance et c'est Kerio.

J'ai gardé NOD 32 antivirus mais il n'est pas actif et j'uilise AntiVir en ce moment.

J'ai trois "anti spyware" résidants Spybot, A² et spywareblaster sans que cela ne m'ai jamais posé de problème!

 

Je vais "fixer" les lignes que vous m'avez conseillé de "fixer".

Il n'y a pas moyen de désactiver le messager de logitech autrement ?