IE s'ouvre et se ferme et ne peut pas exécuter rdp session plus

Annuler les suivants, classés ont maintenant

Salut à tous, - comme dit le titre.....

peut-on contribuer à la lecture du journal HJT-moi s'il vous plaît au point dans la bonne direction? beaucoup, merci beaucoup d'avance.

Logfile de HijackThis v1.99.1
Scan sauvé à 08:39:42, le 28/11/2008
Plate-forme: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)

Running processes:
C: \ WINDOWS \ system32 \ CSRSS. exe
C: \ WINDOWS \ SYSTEM32 \ winlogon.exe
C: \ WINDOWS \ system32 \ services.exe
C: \ WINDOWS \ system32 \ lsass.exe
C: \ WINDOWS \ system32 \ Ati2evxx.exe
C: \ WINDOWS \ system32 \ svchost.exe
C: \ WINDOWS \ system32 \ svchost.exe
C: \ WINDOWS \ System32 \ svchost.exe
C: \ Program Files \ Intel \ Wireless \ Bin \ EvtEng.exe
C: \ WINDOWS \ SYSTEM32 \ Ati2evxx.exe
C: \ Program Files \ Intel \ Wireless \ Bin \ S24EvMon.exe
C: \ WINDOWS \ system32 \ svchost.exe
C: \ WINDOWS \ system32 \ svchost.exe
C: \ WINDOWS \ system32 \ spoolsv. exe
C: \ Program Files \ ASUS \ Mobile Theater \ Kernel \ TV \ CLCapSvc.exe
C: \ Program Files \ ASUS \ Mobile Theater \ Kernel \ CLML_NTService \ CLMLServer.exe
C: \ Program Files \ ASUS \ Mobile Theater \ Kernel \ CLML_NTService \ CLMLService.exe
C: \ Program Files \ ITECIR \ RemoteControlService.exe
C: \ PROGRA ~ 1 \ MICROS ~ 4 \ MSSQL \ Binn \ sqlservr.exe
C: \ Program Files \ Trend Micro \ OfficeScan Client \ ntrtscan.exe
C: \ Program Files \ Intel \ Wireless \ Bin \ RegSrvc.exe
C: \ Program Files \ Common Files \ Roxio Shared \ 10. 0 \ SharedCOM \ RoxWatch10.exe
C: \ Program Files \ Seekeen \ seekeen.exe
C: \ WINDOWS \ system32 \ svchost.exe
C: \ Program Files \ ASUS \ Mobile Theater \ Kernel \ TV \ CLSched.exe
C: \ Program Files \ Trend Micro \ OfficeScan Client \ tmlisten.exe
C: \ WINDOWS \ TEMP \ VY8103.EXE
C: \ PROGRA ~ 1 \ MICROS ~ 4 \ MSSQL \ Binn \ sqlagent.exe
C: \ WINDOWS \ System32 \ alg.exe
C: \ WINDOWS \ Explorer.EXE
C: \ Program Files \ Seekeen \ seekeen.exe
C: \ Program Files \ Common Files \ Roxio Shared \ 10.0 \ SharedCOM \ RoxMediaDB10. exe
C: \ WINDOWS \ ATK0100 \ HControl.exe
C: \ WINDOWS \ RTHDCPL.EXE
C: \ Program Files \ ATI Technologies \ ATI.ACE \ CLI.EXE
C: \ Program Files \ Wireless Console 2 \ wcourier.exe
C: \ Program Files \ ASUS \ ATK Media \ DMEDIA.EXE
C: \ Program Files \ Apoint2K \ Apoint.exe
C: \ Program Files \ ASUS \ ASUS Direct Console \ LCMP.EXE
C: \ Program Files \ ASUS \ ASUS Direct Console \ D3DCheck.exe
C: \ WINDOWS \ ATK0100 \ ATKOSD.EXE
C: \ Program Files \ PowerForPhone \ PowerForPhone \ PowerForPhone. exe
C: \ Program Files \ Microsoft Office \ Office \ OUTLOOK.EXE
C: \ Program Files \ Apoint2K \ Apntex.exe
C: \ Program Files \ Apoint2K \ HidFind.exe
C: \ Program Files \ ASUS \ Splendid \ ACMON.exe
C: \ Program Files \ Apoint2K \ Apvfb.exe
C: \ Program Files \ Intel \ Wireless \ bin \ ZCfgSvc.exe
C: \ WINDOWS \ system32 \ ACEngSvr.exe
C: \ Program Files \ Intel \ Wireless \ Bin \ ifrmewrk.exe
C: \ Program Files \ Farstone \ VirtualDrive \ VDTask.exe
C: \ Program Files \ Farstone \ VirtualDrive \ VHD \ RDTask. exe
C: \ Program Files \ Java \ jre1.6.0_07 \ bin \ jusched.exe
C: \ Program Files \ Trend Micro \ OfficeScan Client \ pccntmon.exe
C: \ Program Files \ ASUS \ Mobile Theater \ pcmservice.exe
C: \ program files \ relevantknowledge \ rlvknlg.exe
C: \ WINDOWS \ system32 \ ctfmon.exe
C: \ Program Files \ Microsoft ActiveSync \ Wcescomm.exe
C: \ Program Files \ Toshiba \ Bluetooth Toshiba Stack \ TosBtMng1.exe
C: \ Program Files \ Logitech \ SetPoint \ SetPoint.exe
C: \ PROGRA ~ 1 \ MI3AA1 ~ 1 \ rapimgr. exe
C: \ Program Files \ ASUS \ Asus Multiframe \ MultiFrame.exe
C: \ Program Files \ Microsoft SQL Server \ 80 \ Tools \ Binn \ sqlmangr.exe
C: \ Program Files \ Fichiers communs \ Logitech \ Khal \ KHALMNPR.EXE
C: \ Program Files \ Trend Micro \ OfficeScan Client \ CNTAoSMgr.exe
C: \ Program Files \ ATI Technologies \ ATI.ACE \ cli.exe
C: \ Program Files \ ATI Technologies \ ATI.ACE \ cli.exe
C: \ Program Files \ Common Files \ System \ Mapi \ 1033 \ nt \ Mapisp32.exe
U: \ Mes documents \ Downloads \ HijackThis \ HijackThis. exe

R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://www.google.co.uk/
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Search, SearchAssistant =
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Search, CustomizeSearch =
R1 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Internet Settings, ProxyServer = 192.168.2.155:8080
F2 - REG: system.ini: Userinit = C: \ WINDOWS \ system32 \ userinit.exe, C: \ WINDOWS \ system32 \ twext.exe,
O2 - BHO: Yahoo! Toolbar Helper - (02478D38-C3F9-4EFB-9B51-7695ECA05670) - C: \ Program Files \ Yahoo! \ Companion \ Installs \ CPN \ yt. dll
O2 - BHO: AcroIEHlprObj Class - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - c: \ Program Files \ Adobe \ Acrobat 7.0 \ ActiveX \ AcroIEHelper.dll
O2 - BHO: Smart-Shopper - (4A7C84E2-E95C-43C6-8DD3-03ABCD0EB60E) - C: \ Program Files \ Smart-Shopper \ Bin \ 2.5.1 \ Smrt-Shpr.dll
O2 - BHO: Spybot-S & D IE Protection - (53707962-6F74-2D53-2644-206D7942484F) - C: \ PROGRA ~ 1 \ Spybot ~ 1 \ SDHelper.dll
O2 - BHO: SSVHelper Class - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files \ Java \ jre1.6. 0_07 \ bin \ ssv.dll
O2 - BHO: Google Toolbar Helper - (AA58ED58-01DD-4d91-8333-CF10577473F7) - c: \ program files \ google \ googletoolbar1.dll
O3 - Toolbar: & Google - (2318C2B1-4965-11D4-9B18-009027A5CD4F) - c: \ program files \ google \ googletoolbar1.dll
O3 - Toolbar: Yahoo! Toolbar - (EF99BD32-C1FB-11D2-892F-0090271D4F88) - C: \ Program Files \ Yahoo! \ Companion \ Installs \ CPN \ yt.dll
O4 - HKLM \ .. \ Run: [HControl] C: \ WINDOWS \ ATK0100 \ HControl.exe
O4 - HKLM \ .. \ Run: [ATICCC] "C: \ Program Files \ ATI Technologies \ ATI.ACE \ CLIStart.exe"
O4 - HKLM \ .. \ Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM \ .. \ Run: [Alcmtr] alcmtr.exe
O4 - HKLM \ .. \ Run: [Wireless Console 2] C: \ Program Files \ Wireless Console 2 \ wcourier.exe
O4 - HKLM \ .. \ Run: [ATKMEDIA] C: \ Program Files \ ASUS \ ATK Media \ DMEDIA.EXE
O4 - HKLM \ .. \ Run: [apoint] C: \ Program Files \ Apoint2K \ Apoint.exe
O4 - HKLM \ .. \ Run: [DirectMessenger] "C: \ Program Files \ ASUS \ ASUS Direct Console \ LCMP. EXE "
O4 - HKLM \ .. \ Run: [Power_Gear] C: \ Program Files \ ASUS \ Power4 Gear \ BatteryLife.exe 1
O4 - HKLM \ .. \ Run: [PowerForPhone] C: \ Program Files \ PowerForPhone \ PowerForPhone \ PowerForPhone.exe
O4 - HKLM \ .. \ Run: [ACMON] C: \ Program Files \ ASUS \ Splendid \ ACMON.exe
O4 - HKLM \ .. \ Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM \ .. \ Run: [IntelZeroConfig] "C: \ Program Files \ Intel \ Wireless \ Bin \ ZCfgSvc.exe"
O4 - HKLM \ .. \ Run: [IntelWireless] "C: \ Program Files \ Intel \ Wireless \ Bin \ ifrmewrk.exe" / tf Intel PROSet / Wireless
O4 - HKLM \ .. \ Run: [VirtualDrive] "c: \ Program Files \ Farstone \ VirtualDrive \ VDTask.exe / AutoRestore
O4 - HKLM \ .. \ Run: [RAMDrive] "c: \ Program Files \ Farstone \ VirtualDrive \ VHD \ RDTask.exe" / AutoRestore
O4 - HKLM \ .. \ Run: [SunJavaUpdateSched] "C: \ Program Files \ Java \ jre1.6.0_07 \ bin \ jusched.exe"
O4 - HKLM \ .. \ Run: [OfficeScanNT Monitor] "C: \ Program Files \ Trend Micro \ OfficeScan Client \ pccntmon.exe" HideWindow
O4 - HKLM \ .. \ Run: [PCMService] "C: \ Program Files \ ASUS \ Mobile Theater \ pcmservice.exe"
O4 - HKLM \ .. \ Run: [RelevantKnowledge] C: \ program files \ relevantknowledge \ rlvknlg.exe-boot
O4 - HKCU \ .. \ Run: [ctfmon.exe] C: \ WINDOWS \ system32 \ ctfmon.exe
O4 - HKCU \ .. \ Run: [ISUSScheduler] "C: \ Program Files \ Fichiers communs \ InstallShield \ UpdateService \ issch. exe "-start
O4 - HKCU \ .. \ Run: [H / PC Connection Agent] "C: \ Program Files \ Microsoft ActiveSync \ Wcescomm.exe"
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C: \ Program Files \ Adobe \ Acrobat 7.0 \ Reader \ reader_sl.exe
O4 - Global Startup: Bluetooth Manager.lnk =?
O4 - Global Startup: Logitech SetPoint.lnk = C: \ Program Files \ Logitech \ SetPoint \ SetPoint.exe
O4 - Global Startup: Microsoft à Office.lnk = C: \ Program Files \ Microsoft Office \ Office \ OSA9. EXE
O4 - Global Startup: MultiFrame.lnk =?
O4 - Global Startup: Service Manager.lnk = C: \ Program Files \ Microsoft SQL Server \ 80 \ Tools \ Binn \ sqlmangr.exe
O9 - Extra button: (no name) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_07 \ bin \ ssv.dll
O9 - Extra "Outils" menuitem: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_07 \ bin \ ssv. dll
O9 - Extra button: Create Mobile Favorite - (2EAF5BB1-070F-11D3-9307-00C04FAE2D4F) - C: \ PROGRA ~ 1 \ MI3AA1 ~ 1 \ INetRepl.dll
O9 - Extra button: (no name) - (2EAF5BB2-070F-11D3-9307-00C04FAE2D4F) - C: \ PROGRA ~ 1 \ MI3AA1 ~ 1 \ INetRepl.dll
O9 - Extra "Outils" menuitem: Create Mobile Favorite...- (2EAF5BB2-070F-11D3-9307-00C04FAE2D4F) - C: \ PROGRA ~ 1 \ MI3AA1 ~ 1 \ INetRepl. dll
O9 - Extra button: JF - Comparez les prix des produits - (3CC3D8FE-F0E0-4dd1-A69A-8C56BCC7BEBF) - C: \ Program Files \ Smart-Shopper \ Bin \ 2.5.1 \ Smrt-Shpr.dll
O9 - Extra button: JF - Comparer les taux Voyage - (3CC3D8FE-F0E0-4dd1-A69A-8C56BCC7BEC0) - C: \ Program Files \ Smart-Shopper \ Bin \ 2.5.1 \ Smrt-Shpr.dll
O9 - Extra button: (no name) - (DFB852A3-47F8-48C4-A200-58CAB36FD2A2) - C: \ PROGRA ~ 1 \ Spybot ~ 1 \ SDHelper. dll
O9 - Extra "Outils" menuitem: Spybot - Search & Destroy Configuration - (DFB852A3-47F8-48C4-A200-58CAB36FD2A2) - C: \ PROGRA ~ 1 \ Spybot ~ 1 \ SDHelper.dll
O9 - Extra button: (no name) - (e2e2dd38-d088-4134-82b7-f2ba38496583) -% windir% \ Network Diagnostic \ xpnetdiag.exe (file missing)
O9 - Extra "Outils" menuitem: @ xpsp3res.dll, -20001 - (e2e2dd38-d088-4134-82b7-f2ba38496583) -% windir% \ Network diagnostic \ xpnetdiag. exe (file missing)
O9 - Extra button: Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe
O9 - Extra "Outils" menuitem: Windows Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe
O11 - Options group: [INTERNATIONAL] International *
Ø14 - IERESET.INF: START_PAGE_URL = http://www.asus. com
O16 - DPF: (0CCA191D-13A6-4E29-B746-314DEE697D83) (Facebook Photo Uploader 5 Control) -- http://upload.facebook.com/controls/200 ... oader5.cab
O16 - DPF: (30528230-99f7-4bb4-88d8-fa1d4f56a2ab) (YInstStarter Class) - C: \ Program Files \ Yahoo! \ Common \ yinsthelper.dll
O16 - DPF: (6414512B-B978-451D-A0D8-FCFDF33E833C) (WUWebControl Class) -- http://www.update.microsoft.com/windows ... 9908465482
O16 - DPF: (6E32070A-766D-4EE6-879C-DC1FA91D2FC3) (MUWebControl Class) -- http://www.update.microsoft.com/microso ... 9908814439
O16 - DPF: (8AD9C840-044E-11D1-B3E9-00805F499D93) (Java Runtime Environment 1.6. 0) -- http://dl8-cdn-01.sun.com/s/ESD44/JSCDL ... 586-jc.cab
O17 - HKLM \ System \ CCS \ Services \ Tcpip \ Parameters: Domain = edom.com
O17 - HKLM \ Software \ .. \ Telephony: DomainName = edom.com
O17 - HKLM \ System \ CS1 \ Services \ Tcpip \ Parameters: Domain = edom.com
O17 - HKLM \ System \ CS2 \ Services \ Tcpip \ Parameters: Domain = edom.com
O18 - Protocol: skype4com - (FFC8B962-9B40-4DFF-9458-1830C7DD7F5D) - C: \ PROGRA ~ 1 \ Common ~ 1 \ Skype \ SKYPE4 ~ 1.DLL
O20 - Winlogon Notify: dimsntfy -% SystemRoot% \ System32 \ dimsntfy. dll (file missing)
O20 - Winlogon Notify: WgaLogon - C: \ WINDOWS \ SYSTEM32 \ WgaLogon.dll
O21 - SSODL: WPDShServiceObj - (AAA288BA-9A4C-45B0-95D7-94D524869DB5) - C: \ WINDOWS \ system32 \ WPDShServiceObj.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc - C: \ WINDOWS \ system32 \ Ati2evxx.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C: \ Program Files \ ASUS \ Mobile Theater \ Kernel \ TV \ CLCapSvc. exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C: \ Program Files \ ASUS \ Mobile Theater \ Kernel \ TV \ CLSched.exe
O23 - Service: CyberLink Media Library Service - Cyberlink - C: \ Program Files \ ASUS \ Mobile Theater \ Kernel \ CLML_NTService \ CLMLServer.exe
O23 - Service: Intel (R) PROSet / Wireless Event Log (EvtEng) - Intel Corporation - C: \ Program Files \ Intel \ Wireless \ Bin \ EvtEng. exe
O23 - Service: Google Updater Service (gusvc) - Google - C: \ Program Files \ Google \ Common \ Google Updater \ GoogleUpdaterService.exe
O23 - Service: ITE Remote Control Service (ITECIRService) - ITE Tech. Inc - C: \ Program Files \ ITECIR \ RemoteControlService.exe
O23 - Service: OfficeScanNT RealTime Scan (ntrtscan) - Trend Micro Inc - C: \ Program Files \ Trend Micro \ OfficeScan Client \ ntrtscan.exe
O23 - Service: pml Driver HPZ12 - HP - C: \ WINDOWS \ system32 \ HPZipm12. exe
O23 - Service: Intel (R) PROSet / Wireless Registry Service (RegSrvc) - Intel Corporation - C: \ Program Files \ Intel \ Wireless \ Bin \ RegSrvc.exe
O23 - Service: Roxio UPnP Renderer 10 - Sonic Solutions - C: \ Program Files \ Roxio \ Digital Home 10 \ RoxioUPnPRenderer10.exe
O23 - Service: Roxio upnp Server 10 - Sonic Solutions - C: \ Program Files \ Roxio \ Digital Home 10 \ RoxioUpnpService10. exe
O23 - Service: LiveShare P2P Server 10 (RoxLiveShare10) - Sonic Solutions - C: \ Program Files \ Common Files \ Roxio Shared \ 10.0 \ SharedCOM \ RoxLiveShare10.exe
O23 - Service: RoxMediaDB10 - Sonic Solutions - C: \ Program Files \ Common Files \ Roxio Shared \ 10.0 \ SharedCOM \ RoxMediaDB10.exe
O23 - Service: Roxio Hard Drive Watcher 10 (RoxWatch10) - Sonic Solutions - C: \ Program Files \ Common Files \ Roxio Shared \ 10.0 \ SharedCOM \ RoxWatch10. exe
O23 - Service: Intel (R) PROSet / Wireless Service (S24EventMonitor) - Intel Corporation - C: \ Program Files \ Intel \ Wireless \ Bin \ S24EvMon.exe
O23 - Service: Seekeen Service - Unknown owner - C: \ Program Files \ Seekeen \ seekeen.exe "" C: \ Program Files \ Seekeen \ seekeen.dll "Service (file missing)
O23 - Service: SessionLauncher - Unknown owner - C: \ DOCUME ~ 1 \ Admini ~ 1 \ LOCALS ~ 1 \ Temp \ DX9 \ SessionLauncher. exe (file missing)
O23 - Service: OfficeScan NT Listener (tmlisten) - Trend Micro Inc - C: \ Program Files \ Trend Micro \ OfficeScan Client \ tmlisten.exe