Windows XP SP2: cmd.exe 100 CPU

Bonjour, j'ai un problème. Mon bureau a été bas, tout un problème. Récemment, il a commencé à courir le svchost.exe CPU à 100%, il courut cmd.exe à 100% du processeur, puis quand cmd cessé de fonctionner d'autres programmes est devenu 100% CPU, comme Avast, Spybot TeaTimer. Ive a couru Process Explorer, et le svchost.exe la première fois était liée à Winlogon. Alors, j'ai fait un scan malwarebytes, avast scan antivir, CCleaner, Spybot scan, fouillé le registre des erreurs, rien ne semble fonctionner. Toute suggestions. Merci.

Run Hijack This & Post le journal.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:06:40, on 09-mar-10
Plate-forme: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16827)
Boot mode: Normal

Running processes:
C: \ WINDOWS \ System32 \ smss.exe
C: \ WINDOWS \ system32 \ csrss.exe
C: \ WINDOWS \ system32 \ winlogon.exe
C: \ WINDOWS \ system32 \ services.exe
C: \ WINDOWS \ system32 \ lsass.exe
C: \ WINDOWS \ system32 \ svchost.exe
C: \ WINDOWS \ system32 \ svchost.exe
C: \ WINDOWS \ System32 \ svchost. exe
C: \ WINDOWS \ system32 \ svchost.exe
C: \ WINDOWS \ system32 \ svchost.exe
C: \ WINDOWS \ system32 \ svchost.exe
C: \ WINDOWS \ Explorer.EXE
C: \ Program Files \ Alwil Software \ Avast5 \ AvastSvc.exe
C: \ PROGRA ~ 1 \ ALWILS ~ 1 \ Avast5 \ avastUI.exe
C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ ashDisp.exe
C: \ WINDOWS \ system32 \ igfxtray.exe
C: \ WINDOWS \ system32 \ NvTaskbarInit
C: \ WINDOWS \ system32 \ hkcmd.exe
C: \ Program Files \ Fichiers communs \ Symantec Shared \ ccApp.exe \ Communications_Helper. exe
C: \ Program Files \ Logitech \ QuickCam \ Quickcam.exe
C: \ WINDOWS \ system32 \ ctfmon.exe
C: \ Program Files \ Google \ GoogleToolbarNotifier \ GoogleToolbarNotifier.exe
C: \ Program Files \ Spybot - Search & Destroy \ TeaTimer.exe
C: \ Documents and Settings \ Danijay \ Local Settings \ Application Data \ Google \ Update \ 1.2.183.17 \ GoogleCrashHandler.exe
C: \ Documents and Settings \ Danijay \ Start Menu \ Programs \ Startup \ winesm32.exe
C: \ WINDOWS \ system32 \ svchost.exe
C: \ WINDOWS \ system32 \ svchost. exe
C: \ WINDOWS \ system32 \ Cisvc.exe
C: \ WINDOWS \ system32 \ svchost.exe
C: \ WINDOWS \ system32 \ wscntfy.exe
C: \ WINDOWS \ System32 \ alg.exe
C: \ WINDOWS \ system32 \ cidaemon.exe
C: \ Program Files \ Fichiers communs \ Symantec Shared \ LQCVFX \ COCIManager.exe
C: \ Program Files \ Google \ Update \ googleupdate.exe
C: \ Program Files \ Alwil Software \ Avast5 \ setup \ avastXX.setup
C: \ Program Files \ Google \ Chrome \ Application \ chrome.exe
C: \ Program Files \ Google \ Chrome \ Application \ chrome. exe
C: \ Program Files \ Trend Micro \ HijackThis \ HijackThis.exe
C: \ WINDOWS \ system32 \ WBEM \ wmiprvse.exe
C: \ Program Files \ Google \ Chrome \ Application \ chrome.exe
C: \ Program Files \ Google \ Chrome \ Application \ chrome. exe

R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.micrsoft/fwlink/?LinkId=54896
R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://www.comca/
- R1 HKLM \ Software \ Micrsoft \ Internet Explorer \ Main, Local = http://go.microsof/fwlink/?LinkId=69157
- R1 HKLM \ Software \ Micosoft \ Internet Explorer \ Main, Start Page = http://go.microsoft/fwlink/?LinkId=54896
R1 - HKCU \ Software \ Microoft \ Internet Explorer \ Main, Start Page = http://go.microsof/fwlink/?LinkId=54896
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://www.comcas/
R1 - HKCU \ Software \ Microsoft \ Internet Connection Wizard Search, SearchAssistant = http://www.hotmail/cgi-bin/sbox?action=inbox
R1 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Internet Settings, ProxyServer =: 0
R3 - Default URLSearchHook est manquant
O2 - BHO: (no name) - (02478D38-C3F9-4efb-9B51-7695ECA05670) - (no file)
O2 - BHO: Adobe PDF Reader Link Helper - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C: \ Program Files \ Fichiers communs \ Adobe \ Acrobat \ ActiveX \ AcroIEHelper. dll
O2 - BHO: (no name) - (5C255C8A-E604-49b4-9D64-90988571CECB) - (no file)
O2 - BHO: IEHelperObj Class - (6754A456-BAD9-11D4-93D3-00B0D03A2F91) - (no file)
O2 - BHO: Search Helper - (6EBF7485-159F-4bff-A14F-B9E3AAC4465B) - C: \ Program Files \ Microsoft \ Search Enhancement Pack \ Search Helper \ SearchHelper.dll
O2 - BHO: SSVHelper Class - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ ssv. dll
Windows O2 - BHO: Live Sign-in Helper - (9030D464-4C02-4ABF-8ECC-5164760863C6) - C: \ Program Files \ Fichiers communs \ Microsoft Shared \ Windows Live \ WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - (AF69DE43-7D58-4638-B6FA-CE66B5AD205D) - C: \ Program Files \ Google \ GoogleToolbarNotifier \ 5.4.4525.1752 \ swg.dll
O2 - BHO: Ask Toolbar Helper - (D4027C7F-154A-4066-A1AD-4243D8127440) - C: \ Program Files \ Demandez \ GenericAskToolbar. dll
O2 - BHO: Windows Live Toolbar Helper - (E15A8DC0-8516-42A1-81EA-DC94EC1ACF10) - C: \ Program Files \ Windows Live \ Toolbar \ wltcore.dll
- O3 Toolbar: McAfee VirusScan - (ACB1E670-3217-45C4-A021-6B829A8A27CB) - C: \ Program Files \ McAfee \ McAfee VirusScan \ VSCShellExtension.dll
O3 - Toolbar: & Windows Live Toolbar - (21FA44EF-376D-4D53-9B0F-8A89D3229068) - C: \ Program Files \ Windows Live \ Toolbar \ wltcore. dll
- O3 Toolbar: Ask Toolbar - (D4027C7F-154A-4066-A1AD-4243D8127440) - C: \ Program Files \ Demandez \ GenericAskToolbar.dll
O4 - HKLM \ .. \ Run: [avast5] C: \ PROGRA ~ 1 \ ALWILS ~ 1 \ Avast5 \ avastUI.exe / nogui
O4 - HKLM \ .. \ Run: [avast!] "C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ ashDisp.exe
O4 - HKLM \ .. \ Run: [ehTray] C: \ WINDOWS \ system32 \ igfxtray.exe
O4 - HKLM \ .. \ Run: [Cpqset] C: \ WINDOWS \ system32 \ NvTaskbarInit
O4 - HKLM \ .. \ Run: [ehTray] C: \ WINDOWS \ system32 \ hkcmd. exe
O4 - HKLM \ .. \ Run: [ccApp] "C: \ Program Files \ Fichiers communs \ Symantec Shared \ ccApp.exe \ Communications_Helper.exe"
O4 - HKLM \ .. \ Run: [SoundMAX] "C: \ Program Files \ Logitech \ QuickCam \ Quickcam.exe" / hide
O4 - HKLM \ .. \ Run: [Jyolar] rundll32.exe "C: \ WINDOWS \ axibagog.dll", Startup
O4 - HKCU \ .. \ Run: [CTFMON.EXE] C: \ WINDOWS \ system32 \ ctfmon.exe
O4 - HKCU \ .. \ Run: [Google Update] "C: \ Documents and Settings \ Danijay \ Local Settings \ Application Data \ Google \ Update \ googleupdate.exe" / c
O4 - HKCU \ .. \ Run: [Skype] "C: \ Program Files \ Google \ GoogleToolbarNotifier \ GoogleToolbarNotifier.exe"
O4 - HKCU \ .. \ Run: [Skype] "C: \ Program Files \ Spybot - Search & Destroy \ TeaTimer.exe
O4 - Startup: winesm32.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C: \ Program Files \ WinZip \ WZQKPICK. EXE
O9 - Extra button: (no name) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ ssv.dll
O9 - Extra "Outils" menuitem: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ ssv.dll
O9 - Extra button: Blog This - (219C3416-8CB2-491a-A3C7-D9FCDDC9D600) - C: \ Program Files \ Windows Live \ Writer \ WriterBrowserExtension. dll
O9 - Extra "Outils" menuitem: & Blog dans Windows Live Writer - (219C3416-8CB2-491a-A3C7-D9FCDDC9D600) - C: \ Program Files \ Windows Live \ Writer \ WriterBrowserExtension.dll
O9 - Extra button: (no name) - (e2e2dd38-d088-4134-82b7-f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe
O9 - Extra "Outils" menuitem: @ xpsp3res.dll, -20001 - (e2e2dd38-d088-4134-82b7-f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag. exe
O9 - Extra button: Messenger - (FB5F1910-F110-11D2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msnmsgr.exe
O9 - Extra "Outils" menuitem: Windows Messenger - (FB5F1910-F110-11D2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msnmsgr.exe
O16 - DPF: (6414512B-B978-451D-A0D8-FCFDF33E833C) (WUWebControl Class) -- http://www.update.microsof/windowsupdat ... 4595090078
- Ø18 Protocol: skype4com - (FFC8B962-9B40-4DFF-9458-1830C7DD7F5D) - C: \ PROGRA ~ 1 \ ALWILS ~ 1 \ Skype \ SKYPE4 ~ 1.DLL
O23 - Service: avast! Antivirus - ALWIL Software - C: \ Program Files \ Alwil Software \ Avast5 \ AvastSvc.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C: \ Program Files \ Alwil Software \ Avast5 \ AvastSvc.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C: \ Program Files \ Alwil Software \ Avast5 \ AvastSvc.exe
O23 - Service: Google Software Updater (gusvc) - Google - C: \ Program Files \ Google \ Common \ Google Updater \ GoogleUpdaterService.exe
O23 - Service: LVSrvLauncher - Logitech Inc - C: \ Program Files \ Fichiers communs \ Symantec Shared \ SrvLnch \ SrvLnch.exe

--
End of file - 7604 bytes

--
End of file - 7604 bytes

Outre la suppression de la liste ci-dessous, mai je vous suggère de désinstaller tous les barres d'outils?

R1 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Internet Settings, ProxyServer =: 0

O2 - BHO: (no name) - (02478D38-C3F9-4efb-9B51-7695ECA05670) - (no file)

O2 - BHO: (no name) - (5C255C8A-E604-49b4-9D64-90988571CECB) - (no file)

O2 - BHO: IEHelperObj Class - (6754A456-BAD9-11D4-93D3-00B0D03A2F91) - (no file)

O4 - HKLM \ .. \ Run: [Jyolar] Rundll32. exe "C: \ WINDOWS \ axibagog.dll", Startup

O4 - Startup: winesm32.exe

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 21:21:50, on 11-mar-10
Plate-forme: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16827)
Boot mode: Normal

Running processes:
C: \ WINDOWS \ System32 \ smss.exe
C: \ WINDOWS \ system32 \ winlogon.exe
C: \ WINDOWS \ system32 \ services.exe
C: \ WINDOWS \ system32 \ lsass.exe
C: \ WINDOWS \ system32 \ svchost.exe
C: \ WINDOWS \ System32 \ svchost.exe
C: \ WINDOWS \ system32 \ svchost. exe
C: \ Program Files \ Alwil Software \ Avast5 \ AvastSvc.exe
C: \ WINDOWS \ Explorer.EXE
C: \ PROGRA ~ 1 \ ALWILS ~ 1 \ Avast5 \ avastUI.exe
C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ ashDisp.exe
C: \ WINDOWS \ system32 \ igfxtray.exe
C: \ WINDOWS \ system32 \ NvTaskbarInit
C: \ WINDOWS \ system32 \ hkcmd.exe
C: \ WINDOWS \ system32 \ ctfmon.exe
C: \ Documents and Settings \ Danijay \ Local Settings \ Application Data \ Google \ Update \ googleupdate.exe
C: \ Program Files \ Google \ GoogleToolbarNotifier \ GoogleToolbarNotifier. exe
C: \ Documents and Settings \ Danijay \ Local Settings \ Application Data \ Google \ Update \ 1.2.183.17 \ GoogleCrashHandler.exe
C: \ Program Files \ WinZip \ WZQKPICK.EXE
C: \ WINDOWS \ system32 \ svchost.exe
C: \ Program Files \ Google \ Update \ googleupdate.exe
C: \ WINDOWS \ system32 \ Cisvc.exe
C: \ Program Files \ CDBurnerXP \ NMSAccessU.exe
C: \ WINDOWS \ system32 \ svchost.exe
C: \ WINDOWS \ system32 \ wscntfy.exe
C: \ Program Files \ Google \ Chrome \ Application \ chrome. exe
C: \ Program Files \ Google \ Chrome \ Application \ chrome.exe
C: \ Program Files \ Google \ Messenger \ ypager.exe
C: \ Program Files \ Trend Micro \ HijackThis \ HijackThis. exe

R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microso/fwlink/?LinkId=54896
R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://www.comc/
- R1 HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Local = http://go.microsof/fwlink/?LinkId=69157
- R1 HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsof/fwlink/?LinkId=54896
R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsof/fwlink/?LinkId=54896
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://www.comca/
R1 - HKCU \ Software \ Microsoft \ Internet Connection Wizard Search, SearchAssistant = http://www.hotmai/cgi-bin/sbox?action=inbox
R3 - Default URLSearchHook est manquant
O2 - BHO: Adobe PDF Reader Link Helper - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C: \ Program Files \ Fichiers communs \ Adobe \ Acrobat \ ActiveX \ AcroIEHelper.dll
O2 - BHO: IEHelperObj Class - (6754A456-BAD9-11D4-93D3-00B0D03A2F91) - (no file)
O2 - BHO: SSVHelper Class - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ ssv. dll
Windows O2 - BHO: Live Sign-in Helper - (9030D464-4C02-4ABF-8ECC-5164760863C6) - C: \ Program Files \ Fichiers communs \ Microsoft Shared \ Windows Live \ WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - (AF69DE43-7D58-4638-B6FA-CE66B5AD205D) - C: \ Program Files \ Google \ GoogleToolbarNotifier \ 5.4.4525.1752 \ swg.dll
- O3 Toolbar: McAfee VirusScan - (ACB1E670-3217-45C4-A021-6B829A8A27CB) - C: \ Program Files \ McAfee \ McAfee VirusScan \ VSCShellExtension.dll
O4 - HKLM \ .. \ Run: [avast5] C: \ PROGRA ~ 1 \ ALWILS ~ 1 \ Avast5 \ avastUI.exe / nogui
O4 - HKLM \ .. \ Run: [avast!] "C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ ashDisp.exe
O4 - HKLM \ .. \ Run: [ehTray] C: \ WINDOWS \ system32 \ igfxtray.exe
O4 - HKLM \ .. \ Run: [Cpqset] C: \ WINDOWS \ system32 \ NvTaskbarInit
O4 - HKLM \ .. \ Run: [ehTray] C: \ WINDOWS \ system32 \ hkcmd.exe
O4 - HKLM \ .. \ Run: [Jyolar] rundll32.exe "C: \ WINDOWS \ axibagog.dll", Startup
O4 - HKCU \ .. \ Run: [ctfmon. exe] C: \ WINDOWS \ system32 \ ctfmon.exe
O4 - HKCU \ .. \ Run: [Google Update] "C: \ Documents and Settings \ Danijay \ Local Settings \ Application Data \ Google \ Update \ googleupdate.exe" / c
O4 - HKCU \ .. \ Run: [Skype] "C: \ Program Files \ Google \ GoogleToolbarNotifier \ GoogleToolbarNotifier.exe"
O4 - Global Startup: WinZip Quick Pick.lnk = C: \ Program Files \ WinZip \ WZQKPICK.EXE
O9 - Extra button: (no name) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6. 0_03 \ bin \ ssv.dll
O9 - Extra "Outils" menuitem: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ ssv.dll
O9 - Extra button: (no name) - (CD67F990-D8E9-11d2-98FE-00C0F0318AFE) - (no file)
O9 - Extra button: (no name) - (e2e2dd38-d088-4134-82b7-f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe
O9 - Extra "Outils" menuitem: @ xpsp3res.dll, -20001 - (e2e2dd38-d088-4134-82b7-f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag. exe
O9 - Extra button: Messenger - (FB5F1910-F110-11D2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msnmsgr.exe
O9 - Extra "Outils" menuitem: Windows Messenger - (FB5F1910-F110-11D2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msnmsgr.exe
O16 - DPF: (6414512B-B978-451D-A0D8-FCFDF33E833C) (WUWebControl Class) -- http://www.update.microswindowsupdate/v ... 4595090078
O23 - Service: avast! Antivirus - ALWIL Software - C: \ Program Files \ Alwil Software \ Avast5 \ AvastSvc.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C: \ Program Files \ Alwil Software \ Avast5 \ AvastSvc.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C: \ Program Files \ Alwil Software \ Avast5 \ AvastSvc.exe
O23 - Service: Google Software Updater (gusvc) - Google - C: \ Program Files \ Google \ Common \ Google Updater \ GoogleUpdaterService.exe
O23 - Service: NMSAccessU - ALWIL Software - C: \ Program Files \ CDBurnerXP \ NMSAccessU. exe

--
End of file - 5501 bytes




Voici le deuxième fichier de scan HJT .. après la suppression des barres d'outils et les entrées spécifiées. Merci

O4 - HKLM \ .. \ Run: [Jyolar] rundll32.exe "C: \ WINDOWS \ axibagog.dll", Startup

Qui revenait ce qui signifie que vous avez à le trouver dans le Registre et supprimez-le. Vous pouvez essayer de fixer combo si vous ne savez pas comment faire cela.

Autre que celui du journal l'air propre.

Dans le msconfig dans démarrage .. Que le point "O4 - HKLM \ .. \ Run: [Jyolar] rundll32.exe" C: \ WINDOWS \ axibagog.dll "démarrage" est cochée pour démarrer, si elle n'est pas cochée i, .. Ne serait-il s'en aller? Im pas assez d'expérience avec la suppression d'entrées de registre. Qu'est-ce que le point exactement anyways? Par ailleurs, toutes les barres d'outils vont disparaître. Dans la fenêtre Ajouter ou supprimer des programmes barre d'outils winamp ne se retirer. ComboFix, je vais essayer qu'après que vous répondre. gif "alt =":)" title =" Smile ">

Aussi, je démarre mon ordinateur scanné avec des anti-virus Avast. Elle a trouvé les éléments endommagés et enlevés eux. Malwarebytes ne trouve pas de logiciels malveillants. Je peux également ajouter un autre journal HJT; Après avoir répondu avec une certaine aide.

D'autres choses dont je tiens à ajouter. Quand il démarre, il se bloque automatiquement. Les processus inactif du système sont en cours d'exécution à 100% dans l'arrière-plan. Le PC n'est pas fixe, mais, une fois qu'il s'exécute pendant un certain temps pour dire qu'il cesse de fonctionner à 100% dans l'avant-garde et va à l'arrière-plan.

Décochez cette entrée dans msconfig, redémarrez et cliquez sur ok. Cela devrait être tout ce que vous devez faire.

malwarebytes doit être actualisée chaque fois que vous l'exécutez. Avez-vous fait cela?

Oui, il revient toujours. Je l'ai décocher, il devient automatiquement vérifiée. Ah!...aussi il faut environ 15 minutes pour le PC de répondre normalement. La tâche-bar perd toutes ses fonctions et est gelé depuis au moins-15-20mins. Alors est bips et ensuite il commence à fonctionner correctement.

Cliquez sur Démarrer, sur Exécuter, sonde du type regedit et appuyez sur ENTRÉE. Puis cliquez sur modifier, trouver, tapez le nom de ce fichier dll et appuyez sur ENTRÉE. Quand il le trouve, le mettre en surbrillance et supprimez-le. Ensuite, appuyez sur F3. Il va rechercher une deuxième entrée. S'il le trouve, supprimer aussi. Continuer avec F4 jusqu'à ce que toutes les entrées sont trouvés et supprimés.

Merci de votre temps. Vous avez été des plus utiles.

You're welcome.

J'ai la même question exacte.... Voici journal HijackThis:

Toute aide grandement appréciée.

Logfile HijackThis v1.99.1 de
Scan saved at 9:14:35 PM, le 4/18/2010
Plate-forme: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)

processus en cours:
C: \ WINDOWS \ System32 \ smss.exe
C: \ WINDOWS \ system32 \ winlogon.exe
C: \ WINDOWS \ system32 \ services.exe
C: \ WINDOWS \ system32 \ lsass.exe
C: \ WINDOWS \ system32 \ svchost. exe
C: \ WINDOWS \ system32 \ svchost.exe
C: \ Program Files \ Security Panda Security \ Panda Internet 2010 \ TPSrv.exe
C: \ Program Files \ Panda Security SECURITY \ Panda Internet 2010 \ WebProxy.exe
C: \ WINDOWS \ system32 \ svchost.exe
C: \ Program Files \ Security Panda Security \ Panda Internet 2010 \ PsCtrls.exe
C: \ Program Files \ Security Panda Security \ Panda Internet 2010 \ PavFnSvr.exe
C: \ Program Files \ Common Files \ Panda Security \ PavShld \ pavprsrv.exe
Explorer C: \ WINDOWS \. EXE
c: \ program files \ Security Panda Security \ Panda Internet 2010 \ pare-feu \ PSHOST.EXE
C: \ Program Files \ Security Panda Security \ Panda Internet 2010 \ PsImSvc.exe
C: \ Program Files \ Security Panda Security \ Panda Internet 2010 \ PskSvc.exe
C: \ Program Files \ Panda Security \ Panda Internet Security 2010 \ pavsrv51.exe
C: \ Program Files \ Security Panda Security \ Panda Internet 2010 \ AVENGINE.EXE
C: \ Program Files Synaptics \ \ SynTP \ SynTPLpr.exe
C: \ Program Files \ Synaptics \ SynTPEnh \ SynTP. exe
C: \ Program Files \ Security Panda Security \ Panda Internet 2010 \ APVXDWIN.EXE
C: \ WINDOWS \ system32 \ ctfmon.exe
C: \ Program Files \ Security Panda Security \ Panda Internet 2010 \ SRVLOAD.EXE
C: \ Program Files \ Security Panda Security \ Panda Internet 2010 \ PavBckPT.exe
C: \ Documents and Settings \ Douglas \ Local Settings \ Application Data \ Google \ Chrome \ Application \ chrome.exe
C: \ Documents and Settings \ Douglas \ Local Settings \ Application Data \ Google \ Chrome \ Application \ chrome. exe
C: \ Documents and Settings \ Douglas \ Local Settings \ Application Data \ Google \ Chrome \ Application \ chrome.exe
C: \ Documents and Settings \ Douglas \ Local Settings \ Application Data \ Google \ Chrome \ Application \ chrome.exe
C: \ Documents and Settings \ Douglas \ Local Settings \ Application Data \ Google \ Chrome \ Application \ chrome.exe
C: \ Documents and Settings \ Douglas \ Desktop \ HijackThis.exe
C: \ Documents and Settings \ Douglas \ Local Settings \ Application Data \ Google \ Chrome \ Application \ chrome. exe
C: \ Documents and Settings \ Douglas \ Local Settings \ Application Data \ Google \ Chrome \ Application \ chrome.exe

O2 - BHO: Classe AcroIEHlprObj - (06849E9F-C8D7-4D59-B87D-programme 784B7D6BE0B3) - C: \ Files \ Adobe \ Acrobat 7.0 \ ActiveX \ AcroIEHelper.dll
BHO O2 -: Spybot-S & D Protection IE - (53707962-6F74-2D53-2644-206D7942484F) - C: \ progra ~ 1 \ SPYBOT ~ 1 \ SDHelper.dll
O4 - HKLM \ .. \ Run:] SynTPLpr [C: \ Program Files Synaptics \ \ SynTP \ SynTPLpr.exe
O4 - HKLM \ .. \ Run: [] SynTPEnh C: \ Program Files Synaptics \ \ SynTP \ Syntpenh.exe
O4 - HKLM \ .. \ Run: [Cpqset] C: \ Program Files \ HPQ \ Default Settings \ cpqset.exe
O4 - HKLM \ .. \ Run: [APVXDWIN] "C: \ Program Files \ Security Panda Security \ Panda Internet APVXDWIN.EXE 2010 \" / s
O4 - HKLM \ .. \ Run: [SCANINICIO] "C: \ Program Files \ Security Panda Security \ Panda Internet Inicio.exe 2010 \"
O4 - HKCU \ .. \ Run: [] TeaTimer spybotsd C: \ Program Files \ Spybot - Search & Destroy \ TeaTimer.exe
O4 - HKCU \ .. \ Run: [ctfmon.exe] C: \ WINDOWS \ system32 \ ctfmon.exe
O4 - HKCU \ .. \ Run:] UIWatcher [C: \ Program Files \ Ashampoo \ UnInstaller 4 Ashampoo \ UIWatcher.exe
O4 - HKCU \ .. \ Run:] [Mise à jour Google "C: \ Documents and Settings \ Douglas \ Local Settings \ Application Data \ Google \ Update GoogleUpdate.exe \" / c
O4 - HKCU \ .. \ Run: [BitTorrent] "C: \ Program Files \ BitTorrent \ BitTorrent. exe "
O8 - Extra context menu item: E & xporter vers Microsoft Excel - res://C : \ Progra ~ 1 \ MICROS ~ 2 \ Office11 \ EXCEL.EXE/3000
O9 - Extra button: Recherche - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ PROGRA ~ 1 \ MICROS ~ 2 \ Office11 \ REFIEBAR.DLL
O9 - Extra button: (no name) - (DFB852A3-47F8-48C4-A200-58CAB36FD2A2) - C: \ PROGRA ~ 1 \ SPYBOT ~ 1 \ SDHelper. dll
O9 - Extra "Outils" menuitem: Spybot - Search & Destroy Configuration - (DFB852A3-47F8-48C4-A200-58CAB36FD2A2) - C: \ PROGRA ~ 1 \ SPYBOT ~ 1 \ SDHelper.dll
O9 - Extra button: Messenger - (FB5F1910-F110-11D2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe
O9 - Extra "Outils" menuitem: Windows Messenger - (FB5F1910-F110-11D2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs. exe
O11 - groupe Options: [INTERNATIONAL] International
O16 - DPF: (6414512B-B978-451D-A0D8-FCFDF33E833C) -
O16 - DPF: (B8BE5E93-A60C-4D26-A2DC-220313175592) (MSN Games - Installer) -
O16 - DPF: (F773E7B2-62A9-4524-9109-87D2F0BEFAA4) (classe ChessControl) -
O20 - Winlogon Notify: avldr - C: \ WINDOWS \
O23 - Service: Service de défragmentation (DfSdkS) - logiciel de mst GmbH, Allemagne - C: \ Program Files \ Ashampoo \ Ashampoo UnInstaller 4 \ DfSdkS. exe
Macrovision Corporation Service O23 -: Gestionnaire d'InstallDriver (IDriverT) - - C: \ Program Files \ Fichiers communs \ InstallShield \ Driver \ 11 \ Intel 32 \ IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C: \ WINDOWS \ system32 \ nvsvc32.exe
Service O23 -: Controller Software Panda - Panda Security, SL - C: \ Program Files \ Security Panda Security \ Panda Internet 2010 \ PsCtrls.exe
Panda Security Service O23 -: Service Fonction Panda (PAVFNSVR) -, SL - C: \ Program Files \ Security Panda Security \ Panda Internet 2010 \ PavFnSvr.exe
O23 - service: Panda Process Protection Service (PavPrSrv) - Panda Security, SL - C: \ Program Files \ Common Files \ Panda Security \ PavShld \ pavprsrv.exe
O23 - Service: Panda On-Access Service Anti-Malware (PAVSRV) - Panda Security, SL - C: \ Program Files \ Panda Security \ Internet Security 2010 Panda \ pavsrv51. exe
O23 - Service: Panda hôte de service (PSHost) - de Panda Security International - c: \ program files \ Security Panda Security \ Panda Internet 2010 \ pare-feu \ PSHOST.EXE
Service O23 -: Service iManager Panda (PSIMSVC) - SL Panda Security - C: \ Program Files \ Security Panda Security \ Panda Internet 2010 \ PsImSvc.exe
O23 - Service: Panda PSK service (PskSvcRetail) - Panda Security, SL - C: \ Program Files \ Panda Security \ Panda Internet Security 2010 \ PskSvc. exe
Panda Security Service O23 -: TPSrv Panda (TPSrv) -, SL - C: \ Program Files \ Security Panda Security \ Panda Internet 2010 \ TPSrv.exe


Je vous remercie

Il me semble avoir le même problème que Dugliss voir les fichiers similaires en cours d'exécution dans hijackthis trouve ici:

Logfile of Trend Micro HijackThis v2.0.2
Scan sauvé à 11:33:49, le 22/03/2011
Windows XP SP3 (WinNT 05/01/2600): Plate-forme
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Les processus en cours:
C: \ WINDOWS \ System32 \ smss.exe
C: \ WINDOWS \ system32 \ winlogon.exe
C: \ WINDOWS \ system32 \ services.exe
C: \ WINDOWS \ system32 \ lsass. exe
C: \ WINDOWS \ system32 \ svchost.exe
C: \ WINDOWS \ system32 \ svchost.exe
C: \ Program Files \ Panda Security \ Panda Internet Security 2011 \ TPSrv.exe
C: \ PROGRAM FILES \ PANDA SECURITY \ Panda Internet Security 2011 \ WebProxy.exe
C: \ Program Files \ Lavasoft \ Ad-Aware \ AAWService.exe
C: \ WINDOWS \ system32 \ spoolsv.exe
C: \ Program Files \ Carbonite \ Carbonite Backup \ carboniteservice.exe
C: \ WINDOWS \ system32 \ svchost.exe
\ Program Files \ LogMeIn \ x86 \ LMIGuardianSvc: C. exe
\ Program Files \ LogMeIn \ x86 \ RaMaint.exe: C
\ Program Files \ LogMeIn \ x86 \ LogMeIn.exe: C
C: \ WINDOWS \ System32 \ svchost.exe
C: \ WINDOWS \ system32 \ nvsvc32.exe
C: \ Program Files \ Panda Security \ Panda Internet Security 2011 \ PsCtrls.exe
C: \ Program Files \ Panda Security \ Panda Internet Security 2011 \ PavFnSvr.exe
C: \ Program Files \ Common Files \ Panda Security \ PavShld \ pavprsrv.exe
C: \ WINDOWS \ System32 \ svchost. exe
c: \ program files \ Panda Security \ Panda Internet Security 2011 \ pare-feu \ PSHOST.EXE
C: \ Program Files \ Panda Security \ Panda Internet Security 2011 \ PsImSvc.exe
C: \ Program Files \ Panda Security \ Panda Internet Security 2011 \ PskSvc.exe
\ Program Files \ Microsoft \ BingBar \ SeaPort.EXE: C
C: \ WINDOWS \ system32 \ svchost.exe
C: \ Program Files \ Fichiers communs \ Microsoft Shared \ Windows Live \ WLIDSVC.EXE
C: \ WINDOWS \ system32 \ SearchIndexer.exe
\ Program Files \ Extended Systems \ Avantage 8: C. 1 \ Server \ ADS.EXE
C: \ Program Files \ Panda Security \ Panda Internet Security 2011 \ pavsrvx86.exe
C: \ Program Files \ Panda Security \ Panda Internet Security 2011 \ AVENGINE.EXE
C: \ Program Files \ Fichiers communs \ Microsoft Shared \ Windows Live \ WLIDSvcM.exe
C: \ WINDOWS \ Explorer.EXE
C: \ WINDOWS \ system32 \ RUNDLL32.EXE
C: \ WINDOWS \ RTHDCPL.EXE
C: \ Program Files \ Panda Security \ Panda Internet Security 2011 \ APVXDWIN.EXE
\ Program Files \ Microsoft Office \ Office12 \ GrooveMonitor: C. exe
\ Program Files \ Carbonite \ Sauvegarde Carbonite \ CarboniteUI.exe: C
C: \ Program Files \ HP \ Digital Imaging \ bin \ hpqSRMon.exe
C: \ WINDOWS \ system32 \ ctfmon.exe
C: \ Program Files \ Panda Security \ Panda Internet Security 2011 \ SRVLOAD.EXE
C: \ Program Files \ Panda Security \ Panda Internet Security 2011 \ PavBckPT.exe
C: \ Program Files \ Lavasoft \ Ad-Aware \ AAWTray.exe
C: \ Program Files \ Panda Security \ Panda Internet Security 2011 \ PAVJOBS.EXE
C: \ WINDOWS \ system32 \ dllhost.exe
C: \ WINDOWS \ System32 \ vssvc. exe
C: \ WINDOWS \ system32 \ dllhost.exe
\ Program Files \ Caterease9 \ Program Files \ Caterease.exe: C
C: \ WINDOWS \ system32 \ taskmgr.exe
C: \ WINDOWS \ system32 \ cmd.exe
C: \ Program Files \ Internet Explorer \ iexplore.exe
C: \ Program Files \ Internet Explorer \ iexplore.exe
C: \ Program Files \ Internet Explorer \ iexplore.exe
C: \ Program Files \ Internet Explorer \ iexplore.exe
C: \ Program Files \ Panda Security \ Panda Internet Security 2011 \ psimreal.exe
C: \ WINDOWS \ system32 \ SearchProtocolHost. exe
\ Program Files \ Trend Micro \ HijackThis \ HijackThis.exe: C

R1 - Explorer HKLM \ Software \ Microsoft \ Internet \ Main, Default_Page_URL = [...] / Fwlink /? LinkId = 69157
R1 - Explorer HKLM \ Software \ Microsoft \ Internet \ Main, Default_Search_URL = [...] / Fwlink /? LinkId = 54896
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = [...] / Fwlink /? LinkId = 54896
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = [...] / Fwlink /? LinkId = 69157
O2 - BHO: Aide Groove Browser GFS - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C: \ Program Files \ Microsoft Office \ Office12 \ GrooveShellExtensions.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C: \ Program Files \ Microsoft \ BingBar \ BingExt. dll "(file missing)
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - C: \ Program Files \ Microsoft \ BingBar \ BingExt.dll "(file missing)
O4 - HKLM \ .. \ Run: [NvCplDaemon] RUNDLL32.EXE C: \ WINDOWS \ system32 \ nvcpl.dll, NvStartup
O4 - HKLM \ .. \ Run: nwiz.exe [nwiz] / install
O4 - HKLM \ .. \ Run: [NvMediaCenter] RUNDLL32.EXE C: \ WINDOWS \ system32 \ NvMcTray.dll, NvTaskbarInit
O4 - HKLM \ .. \ Run: RTHDCPL.EXE [RTHDCPL]
O4 - HKLM \ .. \ Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM \ .. \ Run: [Adobe Reader Speed ​​Launcher] "C: \ Program Files \ Adobe \ Reader 9.0 \ Reader \ reader_sl.exe"
O4 - HKLM \ .. \ Run: [APVXDWIN] "C: \ Program Files \ Panda Security \ Panda Internet Security 2011 \ APVXDWIN.EXE" / s
O4 - HKLM \ .. \ Run: [SCANINICIO] "C: \ Program Files \ Panda Security \ Panda Internet Security 2011 \ Inicio.exe"
O4 - HKLM \ .. \ Run: [GrooveMonitor] "C: \ Program Files \ Microsoft Office \ Office12 \ GrooveMonitor.exe"
O4 - HKLM \ .. \ Run: [Carbonite Backup] C: \ Program Files \ Carbonite \ Sauvegarde Carbonite \ CarboniteUI.exe
O4 - HKLM \ .. \ Run: [hpqSRMon] C: \ Program Files \ HP \ Digital Imaging \ bin \ hpqSRMon.exe
O4 - HKLM \ .. \ Run: [ctfmon.exe] C: \ WINDOWS \ system32 \ ctfmon.exe
O8 - Extra context menu item: E & xporter vers Microsoft Excel - res://C : \ PROGRA ~ 1 \ MICROS ~ 2 \ Office12 \ EXCEL.EXE/3000
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-8081-4f3c-5663EE0C6C49} - C: \ PROGRA ~ 1 \ MICROS ~ 2 \ Office12 \ ONBttnIE. dll
O9 - Extra "Outils" menuitem: S & fin à OneNote - {2670000A-7350-8081-4f3c-5663EE0C6C49} - C: \ PROGRA ~ 1 \ MICROS ~ 2 \ Office12 \ ONBttnIE.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C: \ PROGRA ~ 1 \ MICROS ~ 2 \ Office12 \ REFIEBAR.DLL
O9 - Extra button: Afficher ou masquer HP Web d'impression intelligente - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C: \ Program Files \ HP \ Digital Imaging \ Smart Web Printing \ hpswp_BHO. dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe
O9 - Extra "Outils" menuitem: @ xpsp3res.dll, -20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C: \ Program Files \ Messenger \ msmsgs. exe
O9 - Extra "Outils" menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C: \ Program Files \ Messenger \ msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - [...]. / Fwlink /? LinkId = 39204
O16 - DPF: {E2883E8F-472f-4FB0-9522-AC9BF37916A7} - [...] / NOS/getPlusPlus/1.6/gp. cabine
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C: \ Program Files \ Microsoft Office \ Office12 \ GrooveSystemServices.dll
O23 - Service: Database Server Advantage (Avantage) - Extended Systems, Inc - C: \ Program Files \ Extended Systems \ Advantage 8.1 \ Server \ ADS.EXE
Carbonite, Inc ([- CarboniteService: - O23 Service...]) - C:. \ Program Files \ Carbonite \ Carbonite Backup \ carboniteservice. exe
O23 - Service: Service Lavasoft Ad-Aware - Lavasoft - C: \ Program Files \ Lavasoft \ Ad-Aware \ AAWService.exe
Service - O23: LMIGuardianSvc - LogMeIn, Inc - C: \ Program Files \ LogMeIn \ x86 \ LMIGuardianSvc.exe
O23 - Service: Service d'entretien LogMeIn (LMIMaint) - LogMeIn, Inc - C: \ Program Files \ LogMeIn \ x86 \ RaMaint.exe
x86 \ Program Files \ LogMeIn \ \ LogMeIn: O23 - Service: C - LogMeIn - LogMeIn, Inc. exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C: \ WINDOWS \ system32 \ nvsvc32.exe
O23 - Service: Controller Software Panda - Panda Security, SL - C: \ Program Files \ Panda Security \ Panda Internet Security 2011 \ PsCtrls.exe
O23 - Service: Service Fonction Panda (PAVFNSVR) - Panda Security, SL - C: \ Program Files \ Panda Security \ Panda Internet Security 2011 \ PavFnSvr.exe
O23 - Service: Service de la protection Panda Process (PavPrSrv) - Panda Security, SL - C: \ Program Files \ Common Files \ Panda Security \ PavShld \ pavprsrv.exe
O23 - Service: Panda à l'accès Anti-Malware Service (PAVSRV) - Panda Security, SL - C: \ Program Files \ Panda Security \ Panda Internet Security 2011 \ pavsrvx86.exe
O23 - Service: Panda Host Service (PSHost) - Panda Security International - c: \ program files \ Panda Security \ Panda Internet Security 2011 \ pare-feu \ PSHOST.EXE
O23 - Service: Service iManager Panda (PSIMSVC) - SL Panda Security - C: \ Program Files \ Panda Security \ Panda Internet Security 2011 \ PsImSvc.exe
O23 - Service: Panda PSK service (PskSvcRetail) - Panda Security, SL - C: \ Program Files \ Panda Security \ Panda Internet Security 2011 \ PskSvc.exe
TPSrv Panda (TPSrv) - Panda Security, SL - C:: Service - O23 \ Program Files \ Panda Security \ Panda Internet Security 2011 \ TPSrv.exe

-
End of file - 8504 bytes

Tout d'idées sur ce que cela pourrait être?