bonjour,

je trouve que ma connexion internet est ralentie depuis qq temps, et la connexion est active alors qu'aucun fichier n'est en téléchargement ;une personne aimable pour analyser log hijackthis svp ?

merci


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:38:44, on 25/01/2008
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcLog.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Panda Software\Panda Antivirus Platinum\Firewall\PavFires.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe
C:\Program Files\Panda Software\Panda Antivirus Platinum\pavsrv51.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcIp.exe
C:\Program Files\Panda Software\Panda Antivirus Platinum\AVENGINE.EXE
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\WINDOWS\System32\RUNDLL32.EXE
C:\Program Files\Panda Software\Panda Antivirus Platinum\APVXDWIN.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program Files\PowerISO\PWRISOVM.EXE
C:\Program Files\FlashGet\flashget.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Veoh Networks\Veoh\VeohClient.exe
C:\Program Files\Panda Software\Panda Antivirus Platinum\pavProxy.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\ozler\Bureau\HiJackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [WinSys2] C:\WINDOWS\System32\winsys2.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [SCANINICIO] "C:\Program Files\Panda Software\Panda Antivirus Platinum\Inicio.exe"
O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Software\Panda Antivirus Platinum\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE
O4 - HKLM\..\Run: [Flashget] C:\Program Files\FlashGet\flashget.exe /min
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: &Tout télécharger avec FlashGet - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: &Télécharger avec FlashGet - C:\Program Files\FlashGet\jc_link.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.google.fr
O16 - DPF: {5EDB10D9-7E95-4833-A218-62F375DAFCF1} (Aventail Installer ) - https://parici.sopragroup.com/postauthI/epi.cab
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA Corporation - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA Corporation - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcLog.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Panda Firewall Service (PAVFIRES) - Panda Software - C:\Program Files\Panda Software\Panda Antivirus Platinum\Firewall\PavFires.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software - C:\Program Files\Panda Software\Panda Antivirus Platinum\pavsrv51.exe

--
End of file - 5478 bytes

Bonjour,

Désactive tes protections résidentes (antivirus, Spybot...) !

• Télécharge Combofix (sUBs) sur ton Bureau.
• Double clique sur combofix.exe afin de le lancer.
• Tape sur la touche 1 (Yes) pour démarrer le scan.
• Lorsque le scan sera complété, un rapport apparaîtra. Poste ce rapport dans ta prochaine réponse.

voici le rapport combofix :

ComboFix 08-01-23.1C - ozler 2008-01-27 10:46:16.1 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.1.1252.1.1036.18.1650 [GMT 1:00]
Endroit: C:\Documents and Settings\ozler\Bureau\ComboFix.exe
* Création d'un nouveau point de restauration

[color=red]AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !![/color]
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\WINDOWS\system32\install.exe
C:\WINDOWS\system32\winsys.exe

.
((((((((((((((((((((((((((((( Fichiers créés 2007-12-27 to 2008-01-27 ))))))))))))))))))))))))))))))))))))
.

2008-01-27 10:45 . 2000-08-31 08:00 51,200 --a------ C:\WINDOWS\Nircmd.exe
2008-01-26 18:13 . 2008-01-26 18:13 385 --a------ C:\WINDOWS\ODBC.INI
2008-01-26 18:10 . 2008-01-26 18:13 <REP> d-------- C:\WINDOWS\ShellNew
2008-01-25 18:28 . 2008-01-25 18:28 <REP> d-------- C:\Program Files\ReflexiveArcade
2008-01-20 19:43 . 2008-01-20 19:43 <REP> d-------- C:\Program Files\PowerISO
2008-01-20 19:42 . 2008-01-20 19:42 715 ---h----- C:\PANDA.RPT
2008-01-18 20:23 . 2008-01-18 20:23 <REP> d-------- C:\Program Files\Fichiers communs\Adobe
2008-01-18 19:17 . 2008-01-18 19:30 <REP> d-------- C:\Program Files\DkZ Studio
2008-01-18 19:17 . 2008-01-18 19:17 737,280 --a------ C:\WINDOWS\iun6002.exe
2008-01-18 19:15 . 2002-08-29 01:32 21,760 --a--c--- C:\WINDOWS\system32\dllcache\usbstor.sys
2008-01-15 19:24 . 2006-08-03 13:53 31,232 --a------ C:\WINDOWS\system32\drivers\odptdi.sys
2008-01-15 19:23 . 2008-01-15 19:23 <REP> d-------- C:\Program Files\Java
2008-01-15 19:23 . 2007-09-24 23:31 69,632 --a------ C:\WINDOWS\system32\javacpl.cpl
2008-01-15 19:22 . 2008-01-15 19:22 <REP> d-------- C:\Program Files\Fichiers communs\Java
2008-01-15 19:21 . 2008-01-15 19:23 659 --a------ C:\WINDOWS\mozver.dat
2008-01-15 15:22 . 2008-01-15 15:22 <REP> d-------- C:\WINDOWS\Downloaded Installations
2008-01-15 15:22 . 2008-01-15 15:22 <REP> d-------- C:\Program Files\Veoh Networks
2008-01-15 14:57 . 2008-01-15 14:57 <REP> d-------- C:\usbadslv3ep
2008-01-15 14:57 . 2004-09-13 16:21 3,277,890 --a------ C:\WINDOWS\system32\drivers\CnxE2Fw.bin
2008-01-15 14:57 . 2003-03-06 19:21 49,536 --a------ C:\WINDOWS\system32\drivers\CnxTrUsb.sys
2008-01-15 14:57 . 2003-03-06 19:21 23,168 --a------ C:\WINDOWS\system32\drivers\CnxTrLan.sys
2008-01-13 18:03 . 2002-08-12 09:46 85,456 --a------ C:\WINDOWS\system32\drivers\Teefer.sys
2008-01-13 18:03 . 2002-08-12 09:46 15,360 --a------ C:\WINDOWS\system32\drivers\wpsdrvnt.sys
2008-01-13 18:03 . 2002-08-12 09:46 8,023 --a------ C:\WINDOWS\system32\drivers\wg3n.sys
2008-01-13 18:02 . 2008-01-13 18:02 <REP> d-------- C:\Program Files\Panda Software
2008-01-13 18:02 . 2003-02-13 16:21 58,752 --a------ C:\WINDOWS\system32\drivers\Pavdrv51.sys
2008-01-13 18:02 . 2001-07-30 17:40 24,576 --a------ C:\WINDOWS\system32\msxml3a.dll
2008-01-13 18:02 . 1997-09-18 06:12 9,488 --a------ C:\WINDOWS\system32\sporder.dll
2008-01-13 17:23 . 2008-01-13 17:23 0 --a------ C:\WINDOWS\nsreg.dat
2008-01-13 17:07 . 2008-01-26 13:14 524,288 --a------ C:\WINDOWS\system32\drivers\CnxE2FS.bin
2008-01-13 13:29 . 2008-01-13 13:29 <REP> d--h----- C:\WINDOWS\system32\GroupPolicy
2008-01-13 12:44 . 2008-01-13 12:44 98,304 --a------ C:\WINDOWS\system32\CmdLineExt.dll
2008-01-13 12:36 . 2001-08-17 22:02 9,600 --a------ C:\WINDOWS\system32\drivers\hidusb.sys
2008-01-13 12:36 . 2001-08-17 22:02 9,600 --a--c--- C:\WINDOWS\system32\dllcache\hidusb.sys
2008-01-13 12:15 . 2008-01-13 11:22 2,197 --a------ C:\WINDOWS\system32\$winnt$.inf
2008-01-13 12:05 . 2003-03-06 18:21 22,048 -ra------ C:\WINDOWS\system32\cocpyinf.dll
2008-01-13 12:02 . 2008-01-13 12:02 0 --a------ C:\WINDOWS\msicpl.ini
2008-01-13 11:59 . 2008-01-20 18:35 127,254 --a------ C:\WINDOWS\system32\nvapps.xml
2008-01-13 11:59 . 2007-06-28 17:43 17,254 --a------ C:\WINDOWS\system32\nvwsapps.xml
2008-01-13 11:48 . 2001-09-19 05:47 765,952 -ra------ C:\WINDOWS\system\crlds3d.dll
2008-01-13 11:47 . 2008-01-13 11:47 <REP> d-------- C:\WINDOWS\LastGood
2008-01-13 11:39 . 2008-01-13 11:39 25 --a------ C:\WINDOWS\FileName
2008-01-13 11:33 . 2003-10-04 09:11 1,646,080 --a------ C:\WINDOWS\system32\netshell.dll
2008-01-13 11:33 . 2003-10-04 09:11 1,646,080 --a--c--- C:\WINDOWS\system32\dllcache\netshell.dll
2008-01-13 11:33 . 2003-10-04 00:42 580,096 --------- C:\WINDOWS\system32\xpsp2res.dll
2008-01-13 11:33 . 2003-09-26 20:19 281,088 --a------ C:\WINDOWS\system32\wzcsvc.dll
2008-01-13 11:33 . 2003-09-26 20:19 57,856 --a------ C:\WINDOWS\system32\wzcdlg.dll
2008-01-13 11:33 . 2003-09-26 20:19 57,856 --a--c--- C:\WINDOWS\system32\dllcache\wzcdlg.dll
2008-01-13 11:33 . 2003-09-26 20:19 31,232 --a------ C:\WINDOWS\system32\wzcsapi.dll
2008-01-13 11:32 . 2008-01-13 11:32 <REP> d-------- C:\Program Files\Common Files
2008-01-13 11:31 . 2008-01-13 11:31 <REP> d-------- C:\WINDOWS\PeerNet
2008-01-13 11:31 . 2003-10-22 00:14 32,256 --a------ C:\WINDOWS\system32\msgsvc.dll
2008-01-13 11:31 . 2003-10-22 00:14 32,256 --a--c--- C:\WINDOWS\system32\dllcache\msgsvc.dll
2008-01-13 11:31 . 2003-10-14 07:50 26,112 --a------ C:\WINDOWS\system32\xpsp1hfm.exe
2008-01-13 11:24 . 2003-11-30 01:38 3,932,214 --a------ C:\WINDOWS\system32\xprouting.ocx
2008-01-13 11:24 . 2003-11-30 01:38 1,111,508 --a------ C:\WINDOWS\system32\xprouting.dll
2008-01-13 11:24 . 2003-12-11 14:42 413,547 --a------ C:\WINDOWS\ecran.jpg
2008-01-13 11:24 . 2003-12-24 14:04 63,158 --a------ C:\WINDOWS\system32\oemlogo.bmp
2008-01-13 11:24 . 2003-12-24 14:04 63,158 --a------ C:\WINDOWS\system32\hdlayer.dll
2008-01-13 11:24 . 2008-01-13 11:29 239 --a------ C:\WINDOWS\system32\oeminfo.ini
2008-01-13 11:23 . 2008-01-13 11:23 8,192 --a------ C:\WINDOWS\REGLOCS.OLD
2008-01-13 11:21 . 2001-08-23 17:47 2,134,528 --a--c--- C:\WINDOWS\system32\dllcache\EXCH_smtpsnap.dll
2008-01-13 11:20 . 2001-08-28 15:00 4,399,505 --a--c--- C:\WINDOWS\system32\dllcache\nls302en.lex
2008-01-13 11:19 . 2002-08-29 12:44 1,268,224 --a--c--- C:\WINDOWS\system32\dllcache\cimwin32.dll
2008-01-13 11:18 . 2001-08-23 17:47 70,144 --a------ C:\WINDOWS\system32\usbui.dll
2008-01-13 11:18 . 2002-08-29 11:23 57,728 --a------ C:\WINDOWS\system32\drivers\redbook.sys
2008-01-13 11:18 . 2001-08-17 21:59 3,072 --a------ C:\WINDOWS\system32\drivers\audstub.sys
2008-01-13 11:16 . 2002-08-29 17:35 1,901,553 --a--c--- C:\WINDOWS\system32\dllcache\NT5.CAT
2008-01-12 21:57 . 2008-01-12 21:57 <REP> d-------- C:\Program Files\VideoLAN
2008-01-12 21:20 . 2008-01-18 16:05 <REP> d-------- C:\Program Files\DivX
2008-01-12 21:19 . 2008-01-26 17:27 <REP> d-------- C:\Downloads
2008-01-12 21:18 . 2008-01-26 20:52 <REP> d-------- C:\Program Files\FlashGet
2008-01-12 20:13 . 2008-01-20 21:05 <REP> d-------- C:\Program Files\KONAMI
2008-01-12 19:37 . 2008-01-12 19:37 <REP> d-------- C:\Program Files\Conexant
2008-01-12 19:34 . 2008-01-12 19:34 <REP> d-------- C:\WINDOWS\system32\PAV

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-01-20 18:54 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-01-13 01:23 --------- d-----w C:\Program Files\Analog Devices
2008-01-13 01:14 --------- d-----w C:\Program Files\NVIDIA Corporation
2008-01-13 01:11 --------- d--h--w C:\Program Files\Uninstall Information
2008-01-13 00:31 --------- d-----w C:\Program Files\Services en ligne
2008-01-13 00:31 --------- d-----w C:\Program Files\microsoft frontpage
2008-01-13 00:31 --------- d-----w C:\Program Files\Fichiers communs\speechengines
2008-01-13 00:31 --------- d-----w C:\Program Files\Fichiers communs\ODBC
2008-01-13 00:30 --------- d-----w C:\Program Files\Fichiers communs\MSSoap
2008-01-12 18:33 --------- d-----w C:\Program Files\Fichiers communs\InstallShield
2007-11-29 22:30 200,704 ----a-w C:\WINDOWS\system32\ssldivx.dll
2007-11-29 22:30 1,044,480 ----a-w C:\WINDOWS\system32\libdivx.dll
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\ctfmon.exe" [2002-08-29 12:45 13312]
"Veoh"="C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" [2007-12-21 17:51 3481600]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SoundMAXPnP"="C:\Program Files\Analog Devices\Core\smax4pnp.exe" [2006-12-18 14:34 868352]
"SoundMAX"="C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" [2006-07-13 07:12 729088]
"NvCplDaemon"="C:\WINDOWS\System32\NvCpl.dll" [2007-06-28 17:43 8466432]
"nwiz"="nwiz.exe" [2007-06-28 17:43 1626112 C:\WINDOWS\system32\nwiz.exe]
"WinSys2"="C:\WINDOWS\System32\winsys2.exe" [2006-04-29 04:36 208896]
"NvMediaCenter"="C:\WINDOWS\System32\NvMcTray.dll" [2007-06-28 17:43 81920]
"SCANINICIO"="C:\Program Files\Panda Software\Panda Antivirus Platinum\Inicio.exe" [2003-06-18 13:00 20480]
"APVXDWIN"="C:\Program Files\Panda Software\Panda Antivirus Platinum\APVXDWIN.exe" [2003-07-01 13:41 282624]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11 132496]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-05-11 03:06 40048]
"PWRISOVM.EXE"="C:\Program Files\PowerISO\PWRISOVM.EXE" [2006-11-06 09:27 200704]
"Flashget"="C:\Program Files\FlashGet\flashget.exe" [2007-09-25 09:10 2007088]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2002-08-29 12:45 13312]

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"ForceClassicControlPanel"= 1 (0x1)
"NoLowDiskSpaceCheck"= 1 (0x1)

R1 Odptdi;Odptdi;C:\WINDOWS\System32\drivers\odptdi.sys [2006-08-03 13:53]
R2 PAVFIRES;Panda Firewall Service;C:\Program Files\Panda Software\Panda Antivirus Platinum\Firewall\PavFires.exe [2003-06-04 15:56]
S3 Ip6FwHlp;Pare-feu de connexion Internet IPv6;C:\WINDOWS\System32\svchost.exe [2001-08-28 15:00]
S3 SetupNTGLM7X;SetupNTGLM7X;E:\NTGLM7X.sys []

*Newly Created Service* - PROCEXP90
.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-01-27 10:47:12
Windows 5.1.2600 Service Pack 1 NTFS

Balayage processus cachés ...

Balayage caché autostart entries ...

Balayage des fichiers cachés ...

Scan terminé avec succès
Les fichiers cachés: 0

**************************************************************************
.
Temps d'accomplissement: 2008-01-27 10:47:29
ComboFix-quarantined-files.txt 2008-01-27 09:47:21



merci de ton aide

Reposte un rapport Hijactkhis.

voici le rapport hijackthis :




Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:24:10, on 27/01/2008
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcLog.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Panda Software\Panda Antivirus Platinum\Firewall\PavFires.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe
C:\Program Files\Panda Software\Panda Antivirus Platinum\pavsrv51.exe
C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcIp.exe
C:\Program Files\Panda Software\Panda Antivirus Platinum\AVENGINE.EXE
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\WINDOWS\System32\RUNDLL32.EXE
C:\Program Files\Panda Software\Panda Antivirus Platinum\APVXDWIN.EXE
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\PowerISO\PWRISOVM.EXE
C:\Program Files\FlashGet\flashget.exe
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\Veoh Networks\Veoh\VeohClient.exe
C:\Program Files\Panda Software\Panda Antivirus Platinum\pavProxy.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\ozler\Bureau\HiJackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: flashget urlcatch - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - C:\Program Files\FlashGet\jccatch.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [WinSys2] C:\WINDOWS\System32\winsys2.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SCANINICIO] "C:\Program Files\Panda Software\Panda Antivirus Platinum\Inicio.exe"
O4 - HKLM\..\Run: [APVXDWIN] "C:\Program Files\Panda Software\Panda Antivirus Platinum\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE
O4 - HKLM\..\Run: [Flashget] C:\Program Files\FlashGet\flashget.exe /min
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [Veoh] "C:\Program Files\Veoh Networks\Veoh\VeohClient.exe" /VeohHide
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Startup: Ubisoft register.lnk = C:\Program Files\UBISOFT\Register\schedule.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O8 - Extra context menu item: &Tout télécharger avec FlashGet - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: &Télécharger avec FlashGet - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.google.fr
O16 - DPF: {5EDB10D9-7E95-4833-A218-62F375DAFCF1} (Aventail Installer ) - https://parici.sopragroup.com/postauthI/epi.cab
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\PROGRA~1\NVIDIA~1\NETWOR~1\Apache Group\Apache2\bin\apache.exe
O23 - Service: ForceWare IP service (nSvcIp) - NVIDIA Corporation - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - NVIDIA Corporation - C:\PROGRA~1\NVIDIA~1\NETWOR~1\bin\nSvcLog.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Panda Firewall Service (PAVFIRES) - Panda Software - C:\Program Files\Panda Software\Panda Antivirus Platinum\Firewall\PavFires.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software - C:\Program Files\Panda Software\Panda Antivirus Platinum\pavsrv51.exe

--
End of file - 5805 bytes




merci

Re,

Fix la ligne dans le cadre ci-dessous avec Hijackthis : AIDE EN IMAGES