Interprétation Hijackthis

Bonsoir tout le monde
Une âme charitable pourrait elle me dire si tout
va bien sur ma machine, je trouve qu'elle rame en
ce moment..
ci-aprés une copie de Hijacthis toute fraîche.
merci d'avance pour vos commentaires.

bonne soirée.

Logfile of HijackThis v1.98.2
Scan saved at 19:39:38, on 19/12/2004
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2
(6.00.2900.2180)

Running processes:
C:\WINDOWS\Explorer.EXE
C:\Program Files\Analog
Devices\SoundMAX\SMTray.exe
C:\Program Files\Symantec\Norton Ghost
2003\GhostStartTrayApp.exe
C:\Program
Files\Logitech\MouseWare\system\em_exec.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\vsnpstd.exe
C:\WINDOWS\System32\taskswitch.exe
D:\PROGS\Motherboard Monitor 5\MBM5.EXE
C:\Program Files\F-Secure\Common\FSM32.EXE
C:\Program Files\Spybot - Search &
Destroy\TeaTimer.exe
C:\Program Files\Nikon\NkView6\NkvMon.exe
C:\Program Files\SEC\Natural
Color\NaturalColorLoad.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\Program
Files\F-Secure\BackWeb\7681197\Program\BackWeb-7681197.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\WINDOWS\explorer.exe
C:\hjt\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet
Explorer\Main,Start Page = http://www.google.fr/
R0 - HKCU\Software\Microsoft\Internet
Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet
Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet
Explorer\Main,Window Title = The Net avec WinDoze
R1 -
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet
Settings,ProxyServer = localhost:8080
R1 -
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet
Settings,ProxyOverride = localhost;<local>
R0 - HKCU\Software\Microsoft\Internet
Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: AcroIEHlprObj Class -
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -
C:\Program Files\Adobe\Acrobat
5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: SpywareGuard Download Protection -
{4A368E80-174F-4872-96B5-0B27DDD11DB2} -
C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: (no name) -
{53707962-6F74-2D53-2644-206D7942484F} -
C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Google Toolbar Helper -
{AA58ED58-01DD-4d91-8333-CF10577473F7} -
c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Google -
{2318C2B1-4965-11d4-9B18-009027A5CD4F} -
c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [IMJPMIG8.1]
"C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil
/RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync]
C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE
/SYNC
O4 - HKLM\..\Run: [PHIME2002A]
C:\WINDOWS\System32\IME\TINTLGNT\TINTSETP.EXE
/IMEName
O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog
Devices\SoundMAX\SMTray.exe
O4 - HKLM\..\Run: [GhostStartTrayApp] C:\Program
Files\Symantec\Norton Ghost
2003\GhostStartTrayApp.exe
O4 - HKLM\..\Run: [CloneCDElbyCDFL] "C:\Program
Files\Elaborate Bytes\CloneCD\ElbyCheck.exe" /L
ElbyCDFL
O4 - HKLM\..\Run: [CloneCDTray] "C:\Program
Files\Elaborate Bytes\CloneCD\CloneCDTray.exe"
O4 - HKLM\..\Run: [NeroFilterCheck]
C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Logitech Utility] Logi_MwX.Exe
O4 - HKLM\..\Run: [LiveNote] livenote.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [anvshell] anvshell.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE
C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [snpstd] C:\WINDOWS\vsnpstd.exe
O4 - HKLM\..\Run: [CoolSwitch]
C:\WINDOWS\System32\taskswitch.exe
O4 - HKLM\..\Run: [FastUser]
C:\WINDOWS\System32\fast.exe
O4 - HKLM\..\Run: [MBM 5] "D:\PROGS\Motherboard
Monitor 5\MBM5.EXE"
O4 - HKLM\..\Run: [F-Secure Manager] "C:\Program
Files\F-Secure\Common\FSM32.EXE" /splash
O4 - HKLM\..\Run: [F-Secure TNB] "C:\Program
Files\F-Secure\TNB\TNBUtil.exe" /CHECKALL
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE
C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program
Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKCU\..\Run: [STYLEXP] C:\Program
Files\TGTSoft\StyleXP\StyleXP.exe -Hide
O4 - Startup: NaturalColorLoad.lnk = ?
O4 - Startup: SpywareGuard.lnk = C:\Program
Files\SpywareGuard\sgmain.exe
O4 - Global Startup: NaturalColorLoad.lnk = ?
O4 - Global Startup: NkvMon.exe.lnk = C:\Program
Files\Nikon\NkView6\NkvMon.exe
O6 - HKCU\Software\Policies\Microsoft\Internet
Explorer\Control Panel present
O8 - Extra context menu item: &Add animation to
IncrediMail Style Box -
D:\PROGS\INCRED~1\binesources\WebMenuImg.htm
O8 - Extra context menu item: &Google Search -
res://c:\program
files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: Ouvrir avec
GetRight - C:\Program Files\GetRight\GRbrowse.htm
O8 - Extra context menu item: Pages liées -
res://c:\program
files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Pages similaires -
res://c:\program
files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Télecharger avec
GetRight - C:\Program
Files\GetRight\GRdownload.htm
O8 - Extra context menu item: Version de la page
actuelle disponible dans le cache Google -
res://c:\program
files\google\GoogleToolbar2.dll/cmcache.html
O9 - Extra button: AIM -
{AC9E2541-2814-11d5-BC6D-00B0D0A1DE45} -
D:\PROGS\aim95\aim.exe
O9 - Extra button: ICQ 4.1 -
{B863453A-26C3-4e1f-A54D-A2CD196348E9} -
D:\PROGS\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite -
{B863453A-26C3-4e1f-A54D-A2CD196348E9} -
D:\PROGS\ICQLite\ICQLite.exe
O9 - Extra button: Messenger -
{FB5F1910-F110-11d2-BB9E-00C04F795683} -
C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger -
{FB5F1910-F110-11d2-BB9E-00C04F795683} -
C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {166B1BCA-3F9C-11CF-8075-444553540000}
-
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C}
(WUWebControl Class) -
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93}
-
O16 - DPF: {CAFEEFAC-0014-0002-0001-ABCDEFFEDCBA}
-
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000}
(Shockwave Flash Object) -
O16 - DPF: {FB48C7B0-EB66-4BE6-A1C5-9DDF3C37249A}
-
O17 -
HKLM\System\CCS\Services\Tcpip\..\{440FE61A-064D-474A-9B04-B2D504D92023}:
NameServer = 192.168.0.1

--
Amicalement
Michel.P
Serai Calife à la place du Calife

prive.ma-boite_sans_spam@laposte.net
retirez _sans_spam pour m'envoyer un
message.