HijackThis log - cmd.exe ne fonctionne pas

Salut,

Le problème a commencé quand j'ai téléchargé un fichier de voyous. Ensuite, msconfig, regedit, services.msc

cmd et cessé de travailler. Toutefois, après la réalisation des 8 premières étapes de nettoyage, toutes les autres a commencé à travailler à nouveau, sauf cmd.exe.

Lorsque je tente de l'exécuter, j'obtiens le message d'erreur Windows ne trouve pas cmd.exe, même

si elle est dans le dossier system32. Maintenant, la chose drôle est quand je rebaptisé à cmd.exe

xcmd. exe, il fonctionne bien, mais le remplacement de fichier cmd.exe ne fonctionne pas toujours, et j'ai besoin d'elle

au travail.


S'il vous plaît trouver ci-dessous le journal HijackThis

Ill apprécier toute l'aide que je peux obtenir.

Logfile de Trend Micro HijackThis v2.0.2
Scan sauvé à 14:53:26, le 28/01/2009
Plate-forme: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
G: \ WINDOWS \ System32 \ smss. exe
G: \ WINDOWS \ system32 \ winlogon.exe
G: \ WINDOWS \ system32 \ services.exe
G: \ WINDOWS \ system32 \ lsass.exe
G: \ WINDOWS \ system32 \ svchost.exe
G: \ WINDOWS \ System32 \ svchost.exe
G: \ Program Files \ WIDCOMM \ Logiciel Bluetooth \ bin \ btwdins.exe
G: \ WINDOWS \ Explorer.EXE
G: \ WINDOWS \ system32 \ spoolsv.exe
G: \ Program Files \ Avira \ AntiVir PersonalEdition Classic \ sched.exe
G: \ Program Files \ Avira \ AntiVir PersonalEdition Classic \ avguard.exe
G: \ Program Files \ Bonjour \ mDNSResponder. exe
G: \ Program Files \ COMODO \ Firewall \ cmdagent.exe
G: \ Program Files \ MySQL \ MySQL Server 5.0 \ bin \ mysqld-NT.EXE
G: \ Program Files \ Analog Devices \ Core \ smax4pnp.exe
G: \ WINDOWS \ system32 \ hkcmd.exe
G: \ Program Files \ Avira \ AntiVir PersonalEdition Classic \ avgnt.exe
G: \ WINDOWS \ system32 \ ctfmon.exe
G: \ Program Files \ Google \ GoogleToolbarNotifier \ 1.2.1128.5462 \ GoogleToolbarNotifier.exe
G: \ Program Files \ WIDCOMM \ Logiciel Bluetooth \ BTTray. exe
G: \ Program Files \ Apache Software Foundation \ Apache2.2 \ bin \ ApacheMonitor.exe
G: \ Program Files \ Windows Live \ Messenger \ usnsvc.exe
G: \ WINDOWS \ system32 \ wscntfy.exe
G: \ Program Files \ Opera \ opera.exe
G: \ Documents and Settings \ Administrator \ Desktop \ Crusty.exe

R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://www.google.co.uk/
R1 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Internet Settings, ProxyOverride = *. local
O2 - BHO: Adobe PDF Reader Link Helper - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - G: \ Program Files \ Fichiers communs \ Adobe \ Acrobat \ ActiveX \ AcroIEHelper.dll
O2 - BHO: (no name) - (7E853D72-626A-48EC-A868-BA8D5E23E045) - (no file)
O2 - BHO: Google Toolbar Helper - (AA58ED58-01DD-4d91-8333-CF10577473F7) - g: \ program files \ google \ googletoolbar1.dll
O2 - BHO: Java (tm) Plug-In 2 SSV Helper - (DBC80044-A445-435b-BC74-9C25C1C588A9) - G: \ Program Files \ Java \ jre6 \ bin \ jp2ssv. dll (file missing)
O2 - BHO: Ask Toolbar BHO - (F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA) - G: \ Program Files \ AskSBar \ bar \ 1.bin \ ASKSBAR.DLL
O3 - Toolbar: & Google - (2318C2B1-4965-11D4-9B18-009027A5CD4F) - g: \ program files \ google \ googletoolbar1.dll
O3 - Toolbar: Ask Toolbar - (F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA) - G: \ Program Files \ AskSBar \ bar \ 1.bin \ ASKSBAR.DLL
O4 - HKLM \ .. \ Run: [Adobe Reader Speed Launcher] "C: \ Program Files \ Adobe \ Reader 8.0 \ Reader \ Reader_sl. exe "
O4 - HKLM \ .. \ Run: [SoundMAXPnP] G: \ Program Files \ Analog Devices \ Core \ smax4pnp.exe
O4 - HKLM \ .. \ Run: [igfxtray] G: \ WINDOWS \ system32 \ igfxtray.exe
O4 - HKLM \ .. \ Run: [igfxhkcmd] G: \ WINDOWS \ system32 \ hkcmd.exe
O4 - HKLM \ .. \ Run: [igfxpers] G: \ WINDOWS \ system32 \ igfxpers.exe
O4 - HKLM \ .. \ Run: [HotKeysCmds] G: \ WINDOWS \ system32 \ hkcmd.exe
O4 - HKLM \ .. \ Run: [AVP] "G: \ Program Files \ Kaspersky Lab \ Kaspersky Anti-Virus 2009 \ avp.exe"
O4 - HKLM \ .. \ Run: [avgnt] "C: \ Program Files \ Avira \ AntiVir PersonalEdition Classic \ avgnt.exe" / min
O4 - HKLM \ .. \ Run: [COMODO SafeSurf] "G: \ Program Files \ COMODO \ SafeSurf \ cssurf.exe"-s
O4 - HKLM \ .. \ Run: [COMODO Firewall Pro] "C: \ Program Files \ COMODO \ Firewall \ cfp.exe"-h
O4 - HKCU \ .. \ Run: [MsnMsgr] "G: \ Program Files \ Windows Live \ Messenger \ msnmsgr.exe" / background
O4 - HKCU \ .. \ Run: [ctfmon.exe] G: \ WINDOWS \ system32 \ ctfmon.exe
O4 - HKCU \ .. \ Run: [swg] G: \ Program Files \ Google \ GoogleToolbarNotifier \ 1.2.1128.5462 \ GoogleToolbarNotifier.exe
O4 - HKCU \ .. \ Run: [SUPERAntiSpyware] G: \ Program Files \ SUPERAntiSpyware \ SUPERAntiSpyware.exe
O4 - Startup: Monitor Apache Servers.lnk = G: \ Program Files \ Apache Software Foundation \ Apache2.2 \ bin \ ApacheMonitor.exe
O4 - Global Startup: Bluetooth.lnk =?
O8 - Extra du menu contextuel: Envoyer à & Bluetooth Device...- G: \ Program Files \ WIDCOMM \ Logiciel Bluetooth \ btsendto_ie_ctx. htm
O9 - Extra button: @ btrez.dll, -4015 - (CCA281CA-C863-46ef-9331-5C8D4460577F) - G: \ Program Files \ WIDCOMM \ Logiciel Bluetooth \ btsendto_ie.htm
O9 - Extra "Outils" menuitem: @ btrez.dll, -12650 - (CCA281CA-C863-46ef-9331-5C8D4460577F) - G: \ Program Files \ WIDCOMM \ Logiciel Bluetooth \ btsendto_ie.htm
O9 - Extra button: Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - G: \ Program Files \ Messenger \ msmsgs. exe
O9 - Extra "Outils" menuitem: Windows Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - G: \ Program Files \ Messenger \ msmsgs.exe
O16 - DPF: (CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7) (get_atlcom Class) -- http://wwwimages.adobe.com/www.adobe.co ... nos/gp.cab
O20 - AppInit_DLLs: G: \ WINDOWS \ system32 \ guard32.dll G: \ WINDOWS \ system32 \ cssdll32.dll
O20 - Winlogon Notify:! SASWinLogon - G: \ Program Files \ SUPERAntiSpyware \ SASWINLO. dll
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - G: \ Program Files \ Avira \ AntiVir PersonalEdition Classic \ sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - G: \ Program Files \ Avira \ AntiVir PersonalEdition Classic \ avguard.exe
O23 - Service: Kaspersky Anti-Virus (AVP) - Kaspersky Lab - G: \ Program Files \ Kaspersky Lab \ Kaspersky Anti-Virus 2009 \ avp.exe
O23 - Service: ## Id_String1.6844F930_1628_4223_B5CC_5BB94B879762 ##(Bonjour Service) - Apple Computer, Inc - G: \ Program Files \ Bonjour \ mDNSResponder.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - G: \ Program Files \ WIDCOMM \ Logiciel Bluetooth \ bin \ btwdins.exe
O23 - Service: COMODO Firewall Pro Helper Service (cmdAgent) - Unknown owner - G: \ Program Files \ COMODO \ Firewall \ cmdagent. exe
O23 - Service: COM + System Applications (COMSystemApp) - Unknown owner - G: \ WINDOWS \ DLLHost.exe tombait (file missing)
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd - G: \ Program Files \ Fichiers communs \ Macrovision Shared \ FLEXnet Publisher \ FNPLicensingService.exe
O23 - Service: getPlus (R) Helper - NOS Microsystems Ltd - G: \ Program Files \ NOS \ bin \ getPlus_HelperSvc. exe
O23 - Service: Google Updater Service (gusvc) - Google - G: \ Program Files \ Google \ Common \ Google Updater \ GoogleUpdaterService.exe
O23 - Service: MySQL - Unknown owner - G: \ Program.exe (file missing)
O23 - Service: Intel NCS Netservice (NetSvc) - Intel (R) Corporation - G: \ Program Files \ Intel \ PROSetWired \ NCS \ Sync \ Netsvc.exe

--
Fin de la file - 6306 bytes

Ces deux sont inutiles et peuvent être supprimés en utilisant Hijack Cette


Celui-ci est un problème plus grave et peut être fixé à l'aide Hijack Cette

j'ai un gros problème ici. i ont semron2600 amd + 1.6ghz et 512 Mo de RAM
Je n'ai aucune idée de ho de guérir cette grande utilisation de l'UC...il fonctionne jusqu'à 100%, je n'ai même pas ouvert toute demande
il tourne toujours à 100%

i l'utilisation du logiciel HijackThis et il sort comme ça

Logfile de Trend Micro HijackThis v2.0.2
Scan sauvé à 8:53:08 PM, le 2.27.2009
Plate-forme: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900. 5512)
Boot mode: Normal

Running processes:
C: \ WINDOWS \ System32 \ smss.exe
C: \ WINDOWS \ system32 \ winlogon.exe
C: \ WINDOWS \ system32 \ services.exe
C: \ WINDOWS \ system32 \ lsass.exe
C: \ Program Files \ Faronics \ Deep Freeze \ Install C-0 \ DF5Serv.exe
C: \ WINDOWS \ system32 \ svchost.exe
C: \ WINDOWS \ System32 \ svchost.exe
C: \ WINDOWS \ Explorer.EXE
C: \ Program Files \ Faronics \ Deep Freeze \ Install C-0 \ _ $ Df \ FrzState2k.exe
C: \ WINDOWS \ system32 \ spoolsv.exe
C: \ WINDOWS \ system32 \ Rundll32. EXE
C: \ Program Files \ HP \ Digital Imaging \ bin \ hpqSRMon.exe
C: \ WINDOWS \ system32 \ ctfmon.exe
C: \ VSTASCAN \ vsaccess.exe
C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe
C: \ Program Files \ Bonjour \ mDNSResponder.exe
C: \ Program Files \ Symantec \ Norton Ghost 2003 \ GhostStartService.exe
C: \ WINDOWS \ system32 \ nvsvc32.exe
C: \ WINDOWS \ system32 \ HPZipm12.exe
C: \ WINDOWS \ system32 \ svchost.exe
C: \ Program Files \ Viewpoint \ Common \ ViewpointService. exe
C: \ Program Files \ Mozilla Firefox \ firefox.exe
C: \ WINDOWS \ system32 \ taskmgr.exe
C: \ Program Files \ Trend Micro \ HijackThis \ HijackThis. exe

R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Search Bar = http://us.rd.yahoo.com/customize/ie/def ... earch.html
R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://us.rd.yahoo.com/customize/ie/def ... .yahoo.com
R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://www.yahoo.com/
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://www.yahoo.com/
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://us.rd.yahoo.com/customize/ie/def ... .yahoo.com
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Bar = http://us.rd.yahoo.com/customize/ie/def ... earch.html
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://us.rd.yahoo.com/customize/ie/def ... .yahoo.com
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://www.yahoo.com/
R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ SearchURL, (Default) = http://us.rd.yahoo.com/customize/ie/def ... .yahoo.com
R1 - HKCU \ Software \ Microsoft \ Internet Connection Wizard, ShellNext = http://stats.garena.com/clientinstall.php
R1 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Internet Settings, ProxyOverride = *. local; http://192.168.0.150:918
O2 - BHO: AcroIEHelperStub - (18DF081C-E8AD-4283-A596-FA578C2EBDC3) - C: \ Program Files \ Fichiers communs \ Adobe \ Acrobat \ ActiveX \ AcroIEHelperShim.dll
O2 - BHO: SSVHelper Class - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files \ Java \ jre1.6.0_07 \ bin \ ssv.dll
O2 - BHO: (no name) - (7E853D72-626A-48EC-A868-BA8D5E23E045) - (no file)
O4 - HKLM \ .. \ Run: [NvCplDaemon] RUNDLL32.EXE C: \ WINDOWS \ system32 \ NvCpl.dll, NvStartup
O4 - HKLM \ .. \ Run: [nwiz] nwiz. exe / install
O4 - HKLM \ .. \ Run: [NvMediaCenter] RUNDLL32.EXE C: \ WINDOWS \ system32 \ NvMcTray.dll, NvTaskbarInit
O4 - HKLM \ .. \ Run: [hpqSRMon] C: \ Program Files \ HP \ Digital Imaging \ bin \ hpqSRMon.exe
O4 - HKLM \ .. \ Run: [KernelFaultCheck]% systemroot% \ system32 \ dumprep 0-k
O4 - HKLM \ .. \ RunOnce: [WIAWizardMenu] RUNDLL32.EXE C: \ WINDOWS \ system32 \ sti_ci.dll, WiaCreateWizardMenu
O4 - HKCU \ .. \ Run: [ctfmon.exe] C: \ WINDOWS \ system32 \ ctfmon.exe
O4 - Startup: UMAX VistaAccess. lnk = C: \ VSTASCAN \ vsaccess.exe
O8 - Extra du menu contextuel: E & xporter vers Microsoft Excel -- res://C : \ PROGRA ~ 1 \ MICROS ~ 2 \ Office12 \ EXCEL.EXE/3000
O9 - Extra button: (no name) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_07 \ bin \ ssv.dll
O9 - Extra "Outils" menuitem: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_07 \ bin \ ssv. dll
O9 - Extra button: PalTalk - (4EAFEF58-EEFA-4116-983D-03B49BCBFFFE) - C: \ Program Files \ Paltalk Messenger \ Paltalk.exe
O9 - Extra button: Research - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ PROGRA ~ 1 \ MICROS ~ 2 \ Office12 \ REFIEBAR.DLL
O9 - Extra button: Run IMVU - (d9288080-1BAA-4bc4-9cf8-a92d743db949) - C: \ Documents and Settings \ PC \ Start Menu \ Programs \ IMVU \ Run IMVU. lnk (file missing)
O9 - Extra button: (no name) - (e2e2dd38-d088-4134-82b7-f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe
O9 - Extra "Outils" menuitem: @ xpsp3res.dll, -20001 - (e2e2dd38-d088-4134-82b7-f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe
O9 - Extra button: Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs. exe
O9 - Extra "Outils" menuitem: Windows Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe
O10 - Unknown file dans Winsock LSP: c: \ windows \ system32 \ nwprovau.dll
O18 - Protocol: skype4com - (FFC8B962-9B40-4DFF-9458-1830C7DD7F5D) - C: \ PROGRA ~ 1 \ Common ~ 1 \ Skype \ SKYPE4 ~ 1.DLL
O20 - Winlogon Notify: DfLogon - C: \ WINDOWS \ SYSTEM32 \ LogonDll. dll
O23 - Service: Adobe LM Service - Adobe Systems - C: \ Program Files \ Fichiers communs \ Adobe Systems Shared \ Service \ Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple Inc - C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc - C: \ Program Files \ Bonjour \ mDNSResponder.exe
O23 - Service: DF5Serv - Faronics Corporation - C: \ Program Files \ Faronics \ Deep Freeze \ Install C-0 \ DF5Serv. exe
O23 - Service: GhostStartService - Symantec Corporation - C: \ Program Files \ Symantec \ Norton Ghost 2003 \ GhostStartService.exe
O23 - Service: iPod Service - Apple Inc - C: \ Program Files \ iPod \ bin \ iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C: \ WINDOWS \ system32 \ nvsvc32.exe
O23 - Service: pml Driver HPZ12 - HP - C: \ WINDOWS \ system32 \ HPZipm12. exe
O23 - Service: Viewpoint Manager Service - Viewpoint Corporation - C: \ Program Files \ Viewpoint \ Common \ ViewpointService.exe

--
Fin de la file - 6115 bytes

s'il vous plaît me dire ce que je doit supprimer la cause du logiciel HijackThis prévient moi si je peut supprimer cette i supprimer la mauvaise application de façon im mise à l'emploi des professionnels afin d'aider moi plss thx.
attente de votre réponse rapide thx.