Re analyser mon Hijackthis

Dsl a partir de la page 5 tout est vide donc je ne retrouve pas mon post...J'en refais un donc, on en était a un nouveau scan Hijackthis demandé par Angeldark donc le voila :

"bertrand" - 2007-11-11 0:59:09 Service Pack 2
ComboFix 07-05.08.3.V - Running from: "C:\Documents and Settings\bertrand\Bureau\Utilitaires\Popup system\"


((((((((((((((((((((((((((((((( Files Created from 2007-10-01 to 2007-11-11 ))))))))))))))))))))))))))))))))))


2007-10-31 18:02 75,512 --a------ C:\WINDOWS\zllsputility.exe
2007-10-31 18:02 42,648 --a------ C:\WINDOWS\zllsputility_loc040c.dll
2007-10-31 18:02 22,168 --a------ C:\WINDOWS\system32\imsinstall_loc040c.dll
2007-10-31 18:02 18,072 --a------ C:\WINDOWS\system32\imslsp_install_loc040c.dll
2007-10-31 18:02 11,264 --a------ C:\WINDOWS\system32\SpOrder.dll
2007-10-31 18:02 1,087,216 --a------ C:\WINDOWS\system32\zpeng24.dll
2007-10-27 12:52 45,568 --a------ C:\WINDOWS\UniFish3.exe
2007-10-27 12:52 227 --a------ C:\WINDOWS\PowerReg.dat


(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))


2007-11-10 17:14:18 -------- d-----w C:\DOCUME~1\bertrand\APPLIC~1\Azureus
2007-10-31 17:03:25 4,212 ---h--w C:\WINDOWS\system32\zllictbl.dat
2007-10-28 08:58:32 79,172 ----a-w C:\WINDOWS\system32\perfc00C.dat
2007-10-28 08:58:32 476,478 ----a-w C:\WINDOWS\system32\perfh00C.dat
2007-10-07 17:12:11 -------- d-----w C:\Program Files\3DO
2007-09-30 10:10:41 967 ----a-w C:\WINDOWS\ScUnin.pif
2007-09-30 10:10:41 70,656 ----a-w C:\WINDOWS\ScUnin.exe
2007-09-30 10:10:41 26,357 ----a-w C:\WINDOWS\scunin.dat
2007-09-27 13:15:44 70,208 ----a-w C:\WINDOWS\system32\egomvuoy.dll
2007-09-27 13:03:57 75,328 ----a-w C:\WINDOWS\system32\pvsxrsqp.exe
2007-09-23 09:47:51 75,328 ----a-w C:\WINDOWS\system32\kbhchboi.exe
2007-09-23 09:34:16 -------- d-----w C:\Program Files\Windows Live
2007-09-23 09:34:16 -------- d-----w C:\Program Files\MSN Messenger
2007-09-22 18:49:58 75,328 ----a-w C:\WINDOWS\system32\rktqrgjx.exe
2007-09-21 18:49:04 75,328 ----a-w C:\WINDOWS\system32\gmxwwqqs.exe
2007-09-16 16:44:04 75,328 ----a-w C:\WINDOWS\system32\goovluob.exe
2007-09-15 16:41:01 75,328 ----a-w C:\WINDOWS\system32\xlijigre.exe
2007-09-08 22:21:23 75,328 ----a-w C:\WINDOWS\system32\pbbrxbtu.exe
2007-09-05 12:29:37 75,328 ----a-w C:\WINDOWS\system32\dgxpmpcn.exe
2007-09-02 09:00:56 75,328 ----a-w C:\WINDOWS\system32\ynrpryeg.exe
2007-09-01 09:01:59 75,328 ----a-w C:\WINDOWS\system32\ktfmwrjl.exe
2007-08-31 09:05:56 75,328 ----a-w C:\WINDOWS\system32\jhkdsswg.exe
2007-08-30 09:00:28 75,328 ----a-w C:\WINDOWS\system32\xgqionhm.exe
2007-08-29 07:53:05 75,328 ----a-w C:\WINDOWS\system32\lxtoqlwm.exe
2007-08-27 08:02:09 43,542 ----a-w C:\WINDOWS\system32\byxwtst.dll
2007-08-27 08:01:49 43,542 ----a-w C:\WINDOWS\system32\hgghfgh.dll
2007-08-26 10:07:33 43,542 ----a-w C:\WINDOWS\system32\awttuss.dll
2007-08-21 06:17:23 683,520 ----a-w C:\WINDOWS\system32\inetcomm.dll
2007-08-07 14:44:40 356 ----a-w C:\drmHeader.bin


(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))


*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects]
"{02478D38-C3F9-4EFB-9B51-7695ECA05670}"="C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll"
"{22BF413B-C6D2-4d91-82A9-A0F997BA588C}"="C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll"
"{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}"="C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll"
"{9030D464-4C02-4ABF-8ECC-5164760863C6}"="C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"CTxfiHlp"="CTXFIHLP.EXE"
"Logitech Hardware Abstraction Layer"="KHALMNPR.EXE"
"AVG7_CC"="C:\\PROGRA~1\\Grisoft\\AVG7\\avgcc.exe /STARTUP"
"NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup"
"ZoneAlarm Client"="\"C:\\Program Files\\Zone Labs\\ZoneAlarm\\zlclient.exe\""

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"LClock"="lclock.exe"
"MsnMsgr"="\"C:\\Program Files\\MSN Messenger\\MsnMsgr.Exe\" /background"

[HKEY_USERS\.default\software\microsoft\windows\currentversion\runonce]
"LSD_III"=hex(2):25,73,79,73,74,65,6d,72,6f,6f,74,25,5c,4c,53,44,5c,65,6e,64,\
2e,63,6d,64,00
"tscuninstall"=hex(2):25,73,79,73,74,65,6d,72,6f,6f,74,25,5c,73,79,73,74,65,6d,\
33,32,5c,74,73,63,75,70,67,72,64,2e,65,78,65,00

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoCDBurning"=dword:00000001
"ForceClassicControlPanel"=dword:00000001
"NoLowDiskSpaceChecks"=dword:00000001
"ClearRecentDocsOnExit"=dword:00000040
"NoSMBalloonTip"=dword:00000000

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\run]


HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa
Authentication Packages msv1_0\0\0
Security Packages kerberos\0msv1_0\0schannel\0wdigest\0\0
Notification Packages scecli\0\0


[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Svchost]
HTTPFilter HTTPFilter\0\0
LocalService Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0
NetworkService DnsCache\0\0
DcomLaunch DcomLaunch\0TermService\0\0
rpcss RpcSs\0\0
imgsvc StiSvc\0\0
termsvcs TermService\0\0

HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost



Contents of the 'Scheduled Tasks' folder
C:\WINDOWS\tasks\AppleSoftwareUpdate.job

********************************************************************

catchme 0.3.660 W2K/XP/Vista - userland rootkit detector by Gmer, http://www.gmer.net
Rootkit scan 2007-11-11 01:00:07
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden services ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 0


********************************************************************

Completion time: 2007-11-11 1:00:08
C:\ComboFix-quarantined-files.txt ... 2007-11-11 01:00
C:\ComboFix2.txt ... 2007-11-04 14:13
C:\ComboFix3.txt ... 2007-11-01 22:53


Encore dsl de refaire un post...