Dois-je avoir la clé de journalisation?

Logfile de Trend Micro HijackThis v2.0.2
Scan sauvé à 10:22:24 PM, le 5.14.2009
Platform: Unknown Windows (WinNT 6.01.3004)
MSIE: Internet Explorer v8.00 (8.00.7100.0000)
Boot mode: Normal

Running processes:
C: \ Program Files (x86) \ Windows Live \ Messenger \ msnmsgr.exe
C: \ Program Files (x86) \ Skype \ Phone \ Skype.exe
C: \ Program Files (x86) \ Steam \ Steam.exe
C: \ Program Files (x86) \ Skype \ Plugin Manager \ skypePM.exe
C: \ Program Files (x86) \ Windows Live \ Contacts \ wlcomm. exe
C: \ Windows \ SysWow64 \ Dllhost.exe
C: \ Program Files (x86) \ Mozilla Firefox \ firefox.exe
C: \ Program Files (x86) \ Trend Micro \ HijackThis \ HijackThis. exe

R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Search, SearchAssistant =
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Search, CustomizeSearch =
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Local Page = C: \ Windows \ SysWow64 \ blank.htm
R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Toolbar, LinksFolderName =
F2 - REG: system.ini: Userinit = userinit.exe
O1 - Hosts::: 1 localhost
O2 - BHO: AskBar BHO - (201f27d4-3704-41d6-89c1-aa35e39143ed) - C: \ Program Files (x86) \ AskBarDis \ bar \ bin \ askBar. dll
O2 - BHO: (no name) - (5C255C8A-E604-49b4-9D64-90988571CECB) - (no file)
O2 - BHO: Windows Live Sign-in Helper - (9030D464-4C02-4ABF-8ECC-5164760863C6) - C: \ Program Files (x86) \ Common Files \ Microsoft Shared \ Windows Live \ WindowsLiveLogin.dll
O2 - BHO: Java (tm) Plug-In 2 SSV Helper - (DBC80044-A445-435b-BC74-9C25C1C588A9) - C: \ Program Files (x86) \ Java \ jre6 \ bin \ jp2ssv. dll
O3 - Toolbar: Ask Toolbar - (3041d03e-fd4b-44e0-b742-2d9b88305f98) - C: \ Program Files (x86) \ AskBarDis \ bar \ bin \ askBar.dll
O4 - HKLM \ .. \ Run: [AdobeCS4ServiceManager] "C: \ Program Files (x86) \ Common Files \ Adobe \ CS4ServiceManager \ CS4ServiceManager.exe" launchedbylogin
O4 - HKCU \ .. \ Run: [msnmsgr] "C: \ Program Files (x86) \ Windows Live \ Messenger \ msnmsgr.exe" / background
O4 - HKCU \ .. \ Run: [Skype] "C: \ Program Files (x86) \ Skype \ Phone \ Skype. exe "/ nosplash / minimiser
O4 - HKCU \ .. \ Run: [Steam] "C: \ Program Files (x86) \ Steam \ steam.exe"-silent
O4 - HKUS \ S-1-5-19 \ .. \ Run: [Sidebar]% ProgramFiles% \ Windows Sidebar \ Sidebar.exe / autorun (User SERVICE LOCAL)
O4 - HKUS \ S-1-5-19 \ .. \ RunOnce: [mctadmin] C: \ Windows \ System32 \ mctadmin.exe (User SERVICE LOCAL)
O4 - HKUS \ S-1-5-20 \ .. \ Run: [Sidebar]% ProgramFiles% \ Windows Sidebar \ Sidebar.exe / autorun (User service réseau)
O4 - HKUS \ S-1-5-20 \ .. \ RunOnce: [mctadmin] C: \ Windows \ System32 \ mctadmin.exe (User service réseau)
O8 - Extra du menu contextuel: E & xporter vers Microsoft Excel -- res://C : \ PROGRA ~ 2 \ MICROS ~ 3 \ Office12 \ EXCEL.EXE/3000
O9 - Extra button: Research - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ PROGRA ~ 2 \ MICROS ~ 3 \ Office12 \ REFIEBAR.DLL
O13 - Gopher Prefix:
O18 - Protocol: skype4com - (FFC8B962-9B40-4DFF-9458-1830C7DD7F5D) - C: \ PROGRA ~ 2 \ COMMON ~ 1 \ Skype \ SKYPE4 ~ 1. DLL
O23 - Service: @% SystemRoot% \ system32 \ alg.exe, -112 (ALG) - Unknown owner - C: \ Windows \ System32 \ alg.exe (file missing)
O23 - Service: @% SystemRoot% \ system32 \ efssvc.dll, -100 (AEF) - Unknown owner - C: \ Windows \ System32 \ lsass.exe (file missing)
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C: \ Program Files \ ESET \ ESET NOD32 Antivirus \ EHttpSrv.exe
O23 - Service: Service ESET (ekrn) - ESET - C: \ Program Files \ ESET \ ESET NOD32 Antivirus \ x86 \ ekrn. exe
O23 - Service: @% systemroot% \ system32 \ fxsresm.dll, -118 (Fax) - Unknown owner - C: \ Windows \ system32 \ fxssvc.exe (file missing)
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc - C: \ Program Files (x86) \ Common Files \ Macrovision Shared \ FLEXnet Publisher \ FNPLicensingService.exe
O23 - Service: FLEXnet Licensing Service 64 - Acresso Software Inc - C: \ Program Files \ Fichiers communs \ Macrovision Shared \ FLEXnet Publisher \ FNPLicensingService64.exe
O23 - Service: @ keyiso. dll, -100 (KeyIso) - Unknown owner - C: \ Windows \ system32 \ lsass.exe (file missing)
O23 - Service: @ comres.dll, -2797 (MSDTC) - Unknown owner - C: \ Windows \ System32 \ msdtc.exe (file missing)
O23 - Service: @% SystemRoot% \ System32 \ Netlogon.dll, -102 (Netlogon) - Unknown owner - C: \ Windows \ system32 \ lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C: \ Windows \ system32 \ nvvsvc.exe (file missing)
O23 - Service: @% systemroot% \ system32 \ psbase. dll, -300 (ProtectedStorage) - Unknown owner - C: \ Windows \ system32 \ lsass.exe (file missing)
O23 - Service: @% systemroot% \ system32 \ Locator.exe, -2 (RpcLocator) - Unknown owner - C: \ Windows \ system32 \ locator.exe (file missing)
O23 - Service: @% SystemRoot% \ system32 \ Samsrv.dll, -1 (SamSs) - Unknown owner - C: \ Windows \ system32 \ lsass.exe (file missing)
O23 - Service: @% SystemRoot% \ system32 \ snmptrap.exe, -3 (SNMPTRAP) - Unknown owner - C: \ Windows \ System32 \ SNMPTRAP. exe (file missing)
O23 - Service: @% systemroot% \ system32 \ spoolsv.exe, -1 (Spooler) - Unknown owner - C: \ Windows \ System32 \ spoolsv.exe (file missing)
O23 - Service: @% SystemRoot% \ system32 \ sppsvc.exe, -101 (sppsvc) - Unknown owner - C: \ Windows \ system32 \ sppsvc.exe (file missing)
O23 - Service: Steam Client Service - Valve Corporation - C: \ Program Files (x86) \ Common Files \ Steam \ SteamService. exe
O23 - Service: TeamViewer 4 (TeamViewer4) - TeamViewer GmbH - C: \ Program Files (x86) \ TeamViewer \ Version4 \ TeamViewer_Service.exe
O23 - Service: @% SystemRoot% \ system32 \ ui0detect.exe, -101 (UI0Detect) - Unknown owner - C: \ Windows \ system32 \ UI0Detect.exe (file missing)
O23 - Service: @% SystemRoot% \ system32 \ vaultsvc.dll, -1003 (VaultSvc) - Unknown owner - C: \ Windows \ system32 \ lsass.exe (file missing)
O23 - Service: @% SystemRoot% \ system32 \ vds. exe, -100 (vds) - Unknown owner - C: \ Windows \ System32 \ vds.exe (file missing)
O23 - Service: @% systemroot% \ system32 \ vssvc.exe, -102 (VSS) - Unknown owner - C: \ Windows \ system32 \ vssvc.exe (file missing)
O23 - Service: @% systemroot% \ system32 \ wbengine.exe, -104 (wbengine) - Unknown owner - C: \ Windows \ system32 \ wbengine.exe (file missing)
O23 - Service: @% Systemroot% \ system32 \ wbem \ wmiapsrv.exe, -110 (wmiApSrv) - Unknown owner - C: \ Windows \ system32 \ wbem \ WmiApSrv. exe (file missing)
O23 - Service: @% PROGRAMFILES% \ Windows Media Player \ wmpnetwk.exe, -101 (WMPNetworkSvc) - Unknown owner - C: \ Program Files (x86) \ Windows Media Player \ wmpnetwk.exe (file missing)

--
Fin de file - 6685 bytes

oh bon seigneur vous avez quelque chose. Très probablement, la réponse est oui, vous avez un keylogger. Êtes-vous exécutez Windows 7?

Vérifiez nix et les suivantes (je doute que ce sera corriger tous vos probs mais devrait corriger la plupart)



R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Search, SearchAssistant =
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Search, CustomizeSearch =
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Local Page = C: \ Windows \ SysWow64 \ blanc. htm
R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Toolbar, LinksFolderName =
F2 - REG: system.ini: Userinit = userinit.exe
O2 - BHO: AskBar BHO - (201f27d4-3704-41d6-89c1-aa35e39143ed) - C: \ Program Files (x86) \ AskBarDis \ bar \ bin \ askBar.dll
O2 - BHO: (no name) - (5C255C8A-E604-49b4-9D64-90988571CECB) - (no file)
O3 - Toolbar: Ask Toolbar - (3041d03e-fd4b-44e0-b742-2d9b88305f98) - C: \ Program Files (x86) \ AskBarDis \ bar \ bin \ askBar.dll
O4 - HKUS \ S-1-5-19 \ .. \ Run: [Sidebar]% ProgramFiles% \ Windows Sidebar \ Sidebar.exe / autorun (User SERVICE LOCAL)
O4 - HKUS \ S-1-5-20 \ .. \ Run: [Sidebar]% ProgramFiles% \ Windows Sidebar \ Sidebar.exe / autorun (User service réseau)
O13 - Gopher Prefix:


Il ya un tas de services de fonctionnement que je trouve contestable. Je ne voulais pas toucher à ceux-ci. Question clé est que vous êtes sur Windows 7 et où avez-vous l'obtenir à partir de?

Je suis sur Windows 7, et je l'ai eu du site officiel de Microsoft, est-il possible de fixer ce sans le reformater?