Analyse log Hi jack this

Bonjour mon pote a un probleme avec son ordi serbw.exe s'execute au demarrage
Voila son log Hijackthis:
Logfile of HijackThis v1.99.1
Scan saved at 17:50:31, on 15/08/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
G:\WINDOWS\System32\smss.exe
G:\WINDOWS\system32\winlogon.exe
G:\WINDOWS\system32\services.exe
G:\WINDOWS\system32\lsass.exe
G:\WINDOWS\system32\svchost.exe
G:\WINDOWS\System32\svchost.exe
G:\WINDOWS\system32\spoolsv.exe
G:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
G:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
G:\WINDOWS\system32\GEARSEC.EXE
G:\Program Files\Norton AntiVirus\navapsvc.exe
G:\WINDOWS\system32\nvsvc32.exe
G:\WINDOWS\System32\svchost.exe
G:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
G:\WINDOWS\Explorer.EXE
G:\Program Files\Norton AntiVirus\SAVScan.exe
G:\WINDOWS\SOUNDMAN.EXE
G:\WINDOWS\Anvshell.exe
G:\Program Files\Microsoft IntelliType Pro\type32.exe
G:\Program Files\Microsoft IntelliPoint\point32.exe
G:\PROGRA~1\Wanadoo\CnxMon.exe
G:\PROGRA~1\MESSAG~1\Demon.exe
G:\PROGRA~1\Wanadoo\TaskbarIcon.exe
G:\Program Files\D-Tools\daemon.exe
G:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
G:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
G:\WINDOWS\system32\MMTray2k.exe
G:\WINDOWS\system32\MMTrayLSI.exe
G:\WINDOWS\System32\pjqdekck.exe
G:\Program Files\iTunes\iTunesHelper.exe
G:\Documents and Settings\FAMILLE\Mes documents\MsgPlus.exe
G:\Program Files\iPod\bin\iPodService.exe
G:\WINDOWS\system32\P2P Networking\P2P Networking.exe
G:\Program Files\Common files\SearchUpgrader\SearchUpgrader.exe
C:\program files\altnet\points manager\points manager.exe
G:\Program Files\Fichiers communs\CMEII\CMESys.exe
G:\WINDOWS\VM_STI.EXE
G:\Program Files\Philips\Sound Agent 2\mc500cpl.exe
C:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
C:\PROGRA~1\Altnet\DOWNLO~1\asm.exe
G:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\PhilipsRemote.exe
G:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\Program Files\Xvkxas\Osgljho.exe
G:\Program Files\SlySoft\CloneCD\CloneCDTray.exe
G:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_director.exe
G:\Program Files\Fichiers communs\GMT\GMT.exe
C:\program files\qttask.exe
G:\Program Files\Internet Explorer\iexplore.exe
G:\Program Files\Skype\Phone\Skype.exe
g:\progra~1\intern~1\iexplore.exe
G:\WINDOWS\system32\RUNDLL32.EXE
G:\WINDOWS\system32\wuauclt.exe
G:\Program Files\MSN Messenger\msnmsgr.exe
G:\Program Files\Fichiers communs\DataViz\DvzIncMsgr.exe
G:\Program Files\SAGEM\SAGEM F@st800\dslmon.exe
G:\Program Files\palmOne\Hotsync.exe
G:\Program Files\Internet Explorer\iexplore.exe
G:\Program Files\Internet Explorer\iexplore.exe
G:\Program Files\Messenger\msmsgs.exe
G:\Documents and Settings\FAMILLE\Local Settings\Temporary Internet Files\Content.IE5\KPCPUNOT\HijackThis[1].exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.dftgjslmxpyxgef.com/KbTeEB5rpyF2qWG4/1zfHiYN...
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.duktoskejpronjuzgji.net/KbTeEB5rpyH7tbbURQLf...
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Wanadoo
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - G:\PROGRA~1\Wanadoo\SEARCH~1.DLL
R3 - URLSearchHook: PerfectNavBHO Class - {00D6A7E7-4A97-456f-848A-3B75BF7554D7} - G:\PROGRA~1\PERFEC~1\BHO\PERFEC~1.DLL
O1 - Hosts: 64.233.167.104 www.symantec.com
O1 - Hosts: 64.233.167.104 www.sophos.com
O1 - Hosts: 64.233.167.104 www.mcafee.com
O1 - Hosts: 64.233.167.104 www.viruslist.com
O1 - Hosts: 64.233.167.104 www.f-secure.com
O1 - Hosts: 64.233.167.104 www.avp.com
O1 - Hosts: 64.233.167.104 www.kaspersky.com
O1 - Hosts: 64.233.167.104 www.networkassociates.com
O1 - Hosts: 64.233.167.104 www.ca.com
O1 - Hosts: 64.233.167.104 www.my-etrust.com
O1 - Hosts: 64.233.167.104 www.nai.com
O1 - Hosts: 64.233.167.104 www.trendmicro.com
O1 - Hosts: 64.233.167.104 www.grisoft.com
O1 - Hosts: 64.233.167.104 securityresponse.symantec.com
O1 - Hosts: 64.233.167.104 symantec.com
O1 - Hosts: 64.233.167.104 sophos.com
O1 - Hosts: 64.233.167.104 mcafee.com
O1 - Hosts: 64.233.167.104 liveupdate.symantecliveupdate.com
O1 - Hosts: 64.233.167.104 viruslist.com
O1 - Hosts: 64.233.167.104 f-secure.com
O1 - Hosts: 64.233.167.104 kaspersky.com
O1 - Hosts: 64.233.167.104 kaspersky-labs.com
O1 - Hosts: 64.233.167.104 avp.com
O1 - Hosts: 64.233.167.104 networkassociates.com
O1 - Hosts: 64.233.167.104 ca.com
O1 - Hosts: 64.233.167.104 mast.mcafee.com
O1 - Hosts: 64.233.167.104 my-etrust.com
O1 - Hosts: 64.233.167.104 download.mcafee.com
O1 - Hosts: 64.233.167.104 dispatch.mcafee.com
O1 - Hosts: 64.233.167.104 secure.nai.com
O1 - Hosts: 64.233.167.104 nai.com
O1 - Hosts: 64.233.167.104 update.symantec.com
O1 - Hosts: 64.233.167.104 updates.symantec.com
O1 - Hosts: 64.233.167.104 us.mcafee.com
O1 - Hosts: 64.233.167.104 liveupdate.symantec.com
O1 - Hosts: 64.233.167.104 customer.symantec.com
O1 - Hosts: 64.233.167.104 rads.mcafee.com
O1 - Hosts: 64.233.167.104 trendmicro.com
O1 - Hosts: 64.233.167.104 grisoft.com
O1 - Hosts: 64.233.167.104 sandbox.norman.no
O1 - Hosts: 64.233.167.104 www.pandasoftware.com
O1 - Hosts: 64.233.167.104 uk.trendmicro-europe.com
O2 - BHO: MxTargetObj Class - {0000607D-D204-42C7-8E46-216055BF9918} - G:\WINDOWS\mxTarget.dll
O2 - BHO: LocalNRDObj Class - {00320615-B6C2-40A6-8F99-F1C52D674FAD} - G:\WINDOWS\localNRD.dll
O2 - BHO: PerfectNavBHO Class - {00D6A7E7-4A97-456f-848A-3B75BF7554D7} - G:\PROGRA~1\PERFEC~1\BHO\PERFEC~1.DLL
O2 - BHO: Yahoo! Companion BHO - {02478D38-C3F9-4efb-9B51-7695ECA05670} - G:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
O2 - BHO: myBar BHO - {0494D0D1-F8E0-41ad-92A3-14154ECE70AC} - G:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - G:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {79FDE017-2E0C-4C2C-B020-0EB2F1E83708} - G:\DOCUME~1\FAMILLE\APPLIC~1\WAYCLO~1\gpl data.exe
O2 - BHO: BHObj Class - {8F4E5661-F99E-4B3E-8D85-0EA71C0748E4} - G:\WINDOWS\wsem303.dll
O2 - BHO: BAHelper Class - {A3FDD654-A057-4971-9844-4ED8E67DBBB8} - G:\Program Files\SideFind\sfbho.dll (file missing)
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - G:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - G:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: My &Search Bar - {0494D0D9-F8E0-41ad-92A3-14154ECE70AC} - G:\Program Files\MyWay\myBar\1.bin\MYBAR.DLL
O3 - Toolbar: Yahoo! Companion - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - G:\Program Files\Yahoo!\Companion\Installs\cpn\ycomp5_5_7_0.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Ptipbmf] rundll32.exe ptipbmf.dll,SetWriteCacheMode
O4 - HKLM\..\Run: [Anvshell] G:\WINDOWS\Anvshell.exe
O4 - HKLM\..\Run: [LiveNote] livenote.exe
O4 - HKLM\..\Run: [type32] "G:\Program Files\Microsoft IntelliType Pro\type32.exe"
O4 - HKLM\..\Run: [IntelliPoint] "G:\Program Files\Microsoft IntelliPoint\point32.exe"
O4 - HKLM\..\Run: [WooCnxMon] G:\PROGRA~1\Wanadoo\CnxMon.exe
O4 - HKLM\..\Run: [Demon] G:\PROGRA~1\MESSAG~1\Demon.exe
O4 - HKLM\..\Run: [WOOWATCH] G:\PROGRA~1\Wanadoo\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] G:\PROGRA~1\Wanadoo\TaskbarIcon.exe
O4 - HKLM\..\Run: [DAEMON Tools-1033] "G:\Program Files\D-Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [ccApp] "G:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [MMTray] G:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [MMTray2K] MMTray2k.exe
O4 - HKLM\..\Run: [MMTrayLSI] MMTrayLSI.exe
O4 - HKLM\..\Run: [NeroFilterCheck] G:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Internet Optimizer] "G:\Program Files\Internet Optimizer\optimize313.exe"
O4 - HKLM\..\Run: [vjqheswslwtph] G:\WINDOWS\System32\pjqdekck.exe
O4 - HKLM\..\Run: [conscorr] G:\WINDOWS\conscorr.exe
O4 - HKLM\..\Run: [iTunesHelper] G:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [MessengerPlus3] "G:\Documents and Settings\FAMILLE\Mes documents\MsgPlus.exe"
O4 - HKLM\..\Run: [satmat] G:\WINDOWS\satmat.exe
O4 - HKLM\..\Run: [P2P Networking] G:\WINDOWS\system32\P2P Networking\P2P Networking.exe /AUTOSTART
O4 - HKLM\..\Run: [SearchUpgrader] G:\Program Files\Common files\SearchUpgrader\SearchUpgrader.exe
O4 - HKLM\..\Run: [AltnetPointsManager] c:\program files\altnet\points manager\points manager.exe -s
O4 - HKLM\..\Run: [CMESys] "G:\Program Files\Fichiers communs\CMEII\CMESys.exe"
O4 - HKLM\..\Run: [BigDogPath] G:\WINDOWS\VM_STI.EXE lebeca web camera driver
O4 - HKLM\..\Run: [QveCtl2Tray] G:\Program Files\Philips\Sound Agent 2\mc500cpl.exe
O4 - HKLM\..\Run: [mmtask] c:\Program Files\MusicMatch\MusicMatch Jukebox\mmtask.exe
O4 - HKLM\..\Run: [PhilipsRemote] G:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\PhilipsRemote.exe
O4 - HKLM\..\Run: [TkBellExe] "G:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Yosjvgue] C:\Program Files\Xvkxas\Osgljho.exe
O4 - HKLM\..\Run: [CloneCDTray] "G:\Program Files\SlySoft\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [serpe] G:\WINDOWS\system32\serbw.exe
O4 - HKLM\..\Run: [avnort] G:\WINDOWS\system32\serbw.exe
O4 - HKLM\..\Run: [ltwob] G:\WINDOWS\system32\formatsys.exe
O4 - HKLM\..\Run: [SDTaskbar] "h:\VS5 Taskbar.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\program files\qttask.exe" -atboottime
O4 - HKLM\..\Run: [Tweak UI] RUNDLL32.EXE TWEAKUI.CPL,TweakMeUp
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE G:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [1vgahtmmanager] G:\Documents and Settings\All Users\Application Data\ownscash1vga\LOCKSBAT.exe
O4 - HKLM\..\RunServices: [serpe] G:\WINDOWS\system32\serbw.exe
O4 - HKLM\..\RunServices: [avnort] G:\WINDOWS\system32\serbw.exe
O4 - HKLM\..\RunServices: [ltwob] G:\WINDOWS\system32\formatsys.exe
O4 - HKCU\..\Run: [MessengerPlus3] "G:\Documents and Settings\FAMILLE\Mes documents\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [Draw enc] G:\DOCUME~1\FAMILLE\APPLIC~1\MEDIAF~1\tray knob.exe
O4 - HKCU\..\Run: [Skype] "G:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Steam] H:\Jeux\Counter Strike Steam\Steam.exe -silent
O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE G:\WINDOWS\system32\NVMCTRAY.DLL,NvTaskbarInit
O4 - HKCU\..\Run: [msnmsgr] "G:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: DataViz Inc Messenger.lnk = G:\Program Files\Fichiers communs\DataViz\DvzIncMsgr.exe
O4 - Global Startup: DSLMON.lnk = ?
O4 - Global Startup: GStartup.lnk = G:\Program Files\Fichiers communs\GMT\GMT.exe
O4 - Global Startup: HotSync Manager.lnk = G:\Program Files\palmOne\Hotsync.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://G:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: SideFind - {10E42047-DEB9-4535-A118-B3F6EC39B807} - G:\Program Files\SideFind\sidefind.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - G:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - G:\PROGRA~1\MESSAG~1\Messager Wanadoo.exe
O9 - Extra 'Tools' menuitem: Messager Wanadoo - {FB5F1910-F110-11d2-BB9E-00C04F795683} - G:\PROGRA~1\MESSAG~1\Messager Wanadoo.exe
O9 - Extra button: Wanadoo - {1462651F-F4BA-4C76-A001-C4284D0FE16E} - http://www.wanadoo.fr (file missing) (HKCU)
O10 - Broken Internet access because of LSP provider 'xfire_lsp_10650.dll' missing
O16 - DPF: {1D6711C8-7154-40BB-8380-3DEA45B69CBF} (Web P2P Installer) -
O16 - DPF: {386A771C-E96A-421F-8BA7-32F1B706892F} (Installer Class) - http://www.xxxtoolbar.com/ist/softwares/v4.0/0006_regul...
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5consumer/V5Cont...
O17 - HKLM\System\CCS\Services\Tcpip\..\{42A07537-7136-4E40-88CF-1938C78A9F6C}: NameServer = 80.10.246.1 80.10.246.132
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - G:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - G:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - G:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: EPSON Printer Status Agent2 (EPSONStatusAgent2) - SEIKO EPSON CORPORATION - G:\Program Files\Fichiers communs\EPSON\EBAPI\SAgent2.exe
O23 - Service: GEARSecurity - GEAR Software - G:\WINDOWS\system32\GEARSEC.EXE
O23 - Service: iPod Service (iPodService) - Apple Computer, Inc. - G:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - G:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - G:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SAVScan - Symantec Corporation - G:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - G:\PROGRA~1\FICHIE~1\SYMANT~1\SCRIPT~1\SBServ.exe