Qui peut me dire à quoi sert le prog "DINST" ?

Bonjour,

Je trouve depuis qques temps que mon ordi (CP/WindosXPpro/SP2) ralentit beaucoup.
J'ai ouvert mon gestionnaire de tâches et j'ai un programme actif s'appellant "Dinst" qui me prend entre 70% et 95% du processeur.

Est-ce normal ? A quoi sert ce programme ? Serait-ce un trojan ou autre bestiole du même genre.

Pour info, j'ai Norton et j'ai bloqué ce programme. Et malgré cela, ma ressource est quand même utilisée...

Merci pour vos éclaicissements.

Salut,

-Télécharge HijackThis: (lien sur l'image).
-Crée un dossier nommé HijackThis et place le dedans.
-Exécute le et clique sur Do a scan and save log file.
-Copie et colle ici ton rapport ouvert avec le bloc note. Sans rien faire d'autre.

@++

Wouah, c'est quasiment du temps réel, merci pour la réactivité.

Voici mon rapport :

Logfile of HijackThis v1.99.1
Scan saved at 15:50:53, on 04/04/2006
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\RunDll32.exe
C:\WINDOWS\System32\atiptaxx.exe
C:\WINDOWS\System32\cxakeqa.exe
C:\WINDOWS\System32\msmsn8.exe
C:\WINDOWS\newfrn.exe
C:\WINDOWS\System32\fbwzthy.exe
C:\dinst.exe
C:\Program Files\Network\ipnetwork.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\WINDOWS\System32\jwrsfhcdx.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\ATI Multimedia\main\launchpd.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\RegFreeze\regfreeze.exe
C:\Program Files\Outlook Express\msimn.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Hijack This\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.voila.fr/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.ad-w-a-r-e.com/cgi-bin/PopupV3?ID={7FBED98E-6DC7-2B75-0DC5-70D00AF95384}&type=normal&mSkip=1&rnd=20745
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O1 - Hosts: 72.36.245.217 lloydstsb.co.uk
O1 - Hosts: 72.36.245.217 online.lloydstsb.co.uk
O1 - Hosts: 72.36.245.217 www.lloydstsb.co.uk
O1 - Hosts: 72.36.245.217 www.lloydstsb.com
O1 - Hosts: 72.36.245.217 www.lloydstsb.com
O1 - Hosts: 72.36.245.217 personal.barclays.co.uk
O1 - Hosts: 72.36.245.217 barclays.co.uk
O1 - Hosts: 72.36.245.217 ibank.barclays.co.uk
O1 - Hosts: 72.36.245.217 www.barclays.co.uk
O1 - Hosts: 72.36.245.217 www.nwolb.com
O1 - Hosts: 72.36.245.217 nwolb.com
O1 - Hosts: 72.36.245.217 hsbc.co.uk
O1 - Hosts: 72.36.245.217 www.hsbc.co.uk
O1 - Hosts: 72.36.245.217 abbey.com
O1 - Hosts: 72.36.245.217 www.abbey.com
O1 - Hosts: 72.36.245.217 www.abbey.co.uk
O1 - Hosts: 72.36.245.217 abbey.co.uk
O1 - Hosts: 72.36.245.217 cahoot.com
O1 - Hosts: 72.36.245.217 www.cahoot.com
O1 - Hosts: 72.36.245.217 www.cahoot.co.uk
O1 - Hosts: 72.36.245.217 cahoot.co.uk
O1 - Hosts: 72.36.245.217 www.co-operativebank.co.uk
O1 - Hosts: 72.36.245.217 co-operativebank.co.uk
O1 - Hosts: 72.36.245.217 www.co-operativebank.com
O1 - Hosts: 72.36.245.217 co-operativebank.com
O1 - Hosts: 72.36.245.217 welcome2.co-operativebankonline.co.uk
O1 - Hosts: 72.36.245.217 welcome6.co-operativebankonline.co.uk
O1 - Hosts: 72.36.245.217 welcome8.co-operativebankonline.co.uk
O1 - Hosts: 72.36.245.217 welcome10.co-operativebankonline.co.uk
O1 - Hosts: 72.36.245.217 www.smile.co.uk
O1 - Hosts: 72.36.245.217 smile.co.uk
O1 - Hosts: 72.36.245.217 www.cajamar.es
O1 - Hosts: 72.36.245.217 cajamar.es
O1 - Hosts: 72.36.245.217 www.cajamar.com
O1 - Hosts: 72.36.245.217 cajamar.com
O1 - Hosts: 72.36.245.217 www.unicaja.es
O1 - Hosts: 72.36.245.217 unicaja.es
O1 - Hosts: 72.36.245.217 www.unicaja.com
O1 - Hosts: 72.36.245.217 unicaja.com
O1 - Hosts: 72.36.245.217 www.caixagalicia.es
O1 - Hosts: 72.36.245.217 caixagalicia.es
O1 - Hosts: 72.36.245.217 www.caixagalicia.com
O1 - Hosts: 72.36.245.217 caixagalicia.com
O1 - Hosts: 72.36.245.217 activa.caixagalicia.es
O1 - Hosts: 72.36.245.217 www.caixapenedes.es
O1 - Hosts: 72.36.245.217 caixapenedes.es
O1 - Hosts: 72.36.245.217 www.caixapenedes.com
O1 - Hosts: 72.36.245.217 caixapenedes.com
O1 - Hosts: 72.36.245.217 bancae.caixapenedes.com
O1 - Hosts: 72.36.245.217 www.caixasabadell.es
O1 - Hosts: 72.36.245.217 caixasabadell.es
O1 - Hosts: 72.36.245.217 www.caixasabadell.net
O1 - Hosts: 72.36.245.217 caixasabadell.net
O1 - Hosts: 72.36.245.217 www.cajamadrid.es
O1 - Hosts: 72.36.245.217 cajamadrid.es
O1 - Hosts: 72.36.245.217 www.cajamadrid.com
O1 - Hosts: 72.36.245.217 cajamadrid.com
O1 - Hosts: 72.36.245.217 oi.cajamadrid.es
O1 - Hosts: 72.36.245.217 www.ccm.es
O1 - Hosts: 72.36.245.217 ccm.es
O1 - Hosts: 72.36.245.217 www.haspa.de
O1 - Hosts: 72.36.245.217 haspa.de
O1 - Hosts: 72.36.245.217 ssl2.haspa.de
O1 - Hosts: 72.36.245.217 www.dresdner-bank.de
O1 - Hosts: 72.36.245.217 dresdner-bank.de
O1 - Hosts: 72.36.245.217 www.dresdner-privat.de
O1 - Hosts: 72.36.245.217 postbank.de
O1 - Hosts: 72.36.245.217 www.postbank.de
O1 - Hosts: 72.36.245.217 banking.postbank.de
O1 - Hosts: 72.36.245.217 www.sparda-b.de
O1 - Hosts: 72.36.245.217 sparda-b.de
O1 - Hosts: 72.36.245.217 www.bankingonline.de
O1 - Hosts: 72.36.245.217 www.raiffeisenbank-erding.de
O1 - Hosts: 72.36.245.217 raiffeisenbank-erding.de
O1 - Hosts: 72.36.245.217 www.vr-networld-ebanking.de
O1 - Hosts: 72.36.245.217 vr-networld-ebanking.de
O1 - Hosts: 72.36.245.217 www.bnhof.de
O1 - Hosts: 72.36.245.217 bnhof.de
O1 - Hosts: 72.36.245.217 www.deutsche-bank.de
O1 - Hosts: 72.36.245.217 deutsche-bank.de
O1 - Hosts: 72.36.245.217 meine.deutsche-bank.de
O1 - Hosts: 72.36.245.217 www.citibank.de
O1 - Hosts: 72.36.245.217 citibank.de
O1 - Hosts: 72.36.245.217 www.dkb.de
O1 - Hosts: 72.36.245.217 dkb.de
O1 - Hosts: 72.36.245.217 www.sparkasse-regensburg.de
O1 - Hosts: 72.36.245.217 sparkasse-regensburg.de
O1 - Hosts: 72.36.245.217 www.berliner-bank.de
O1 - Hosts: 72.36.245.217 berliner-bank.de
O1 - Hosts: 72.36.245.217 www.berliner-sparkasse.de
O1 - Hosts: 72.36.245.217 berliner-sparkasse.de
O1 - Hosts: 72.36.245.217 www.wellsfargo.com
O1 - Hosts: 72.36.245.217 wellsfargo.com
O1 - Hosts: 72.36.245.217 www.bankofamerica.com
O1 - Hosts: 72.36.245.217 bankofamerica.com
O1 - Hosts: 72.36.245.217 www.usbank.com
O1 - Hosts: 72.36.245.217 usbank.com
O1 - Hosts: 72.36.245.217 www.bankone.com
O1 - Hosts: 72.36.245.217 bankone.com
O1 - Hosts: 72.36.245.217 www.citibank.com
O1 - Hosts: 72.36.245.217 citibank.com
O2 - BHO: (no name) - {20D57A66-F7DF-467d-907B-9B7F4A118AB7} - C:\WINDOWS\System32\mllmn.dll (file missing)
O3 - Toolbar: Norton Internet Security 2006 - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKLM\..\Run: [ifdrv] rundll32.exe C:\WINDOWS\System32\ifdrv.dll,start
O4 - HKLM\..\Run: [Virtual CD v8] cxakeqa.exe
O4 - HKLM\..\Run: [ServicesLog] msssmsngr6417.exe
O4 - HKLM\..\Run: [MICROSFT NT SUPPORT] ewmubcnhyx.EXE
O4 - HKLM\..\Run: [Microsoft Service Messenger 8] msmsn8.exe
O4 - HKLM\..\Run: [NewFrn] C:\WINDOWS\newfrn.exe
O4 - HKLM\..\Run: [Microsoft Command C] winhost32.exe
O4 - HKLM\..\Run: [SySSL] sysl.exe
O4 - HKLM\..\Run: [Realtek Sound Manager] fbwzthy.exe
O4 - HKLM\..\Run: [Windows Helper] C:\WINDOWS\System32\svchelper.exe
O4 - HKLM\..\Run: [asdgs] C:\dinst.exe
O4 - HKLM\..\Run: [IpNetwork] C:\Program Files\Network\ipnetwork.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SSC_UserPrompt] "C:\Program Files\Fichiers communs\Symantec Shared\Security Center\UsrPrmpt.exe"
O4 - HKLM\..\Run: [DR service] jwrsfhcdx.exe
O4 - HKLM\..\Run: [EPSON Stylus DX4200 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE /P26 "EPSON Stylus DX4200 Series" /O6 "USB001" /M "Stylus DX4200"
O4 - HKLM\..\RunServices: [Virtual CD v8] cxakeqa.exe
O4 - HKLM\..\RunServices: [ServicesLog] msssmsngr6417.exe
O4 - HKLM\..\RunServices: [MICROSFT NT SUPPORT] ewmubcnhyx.EXE
O4 - HKLM\..\RunServices: [Microsoft Service Messenger 8] msmsn8.exe
O4 - HKLM\..\RunServices: [Microsoft Command C] winhost32.exe
O4 - HKLM\..\RunServices: [SySSL] sysl.exe
O4 - HKLM\..\RunServices: [Realtek Sound Manager] fbwzthy.exe
O4 - HKLM\..\RunServices: [DR service] jwrsfhcdx.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [ATI Launchpad] "C:\Program Files\ATI Multimedia\main\launchpd.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Microsoft Command C] winhost32.exe
O4 - HKCU\..\RunServices: [Microsoft Command C] winhost32.exe
O4 - Startup: RegFreeze.lnk = C:\Program Files\RegFreeze\regfreeze.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: ATI TV - {44226DFF-747E-4edc-B30C-78752E50CD0C} - C:\Program Files\ATI Multimedia\TV\EXPLBAR.DLL
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/yinst/yinst_current.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O20 - Winlogon Notify: mllmn - mllmn.dll (file missing)
O20 - Winlogon Notify: Reliability - C:\WINDOWS\system32\jr4025hmg.dll (file missing)
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\ccPwdSvc.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Norton Internet Security\comHost.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: MicroSoft Media Tools - Unknown owner - C:\WINDOWS\MSmedia.exe (file missing)
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: Performance True Type Font (PerfFont) - Unknown owner - C:\WINDOWS\System32\perfont.exe (file missing)
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: wins(WINS) (wins) - Unknown owner - C:\WINDOWS\system32\winscntrl.exe (file missing)


Est-ce lisible ?

Re,

Relance Hijackthis en sélectionnant "Do a scan only", coche les cases des lignes suivantes :

C:\WINDOWS\System32\cxakeqa.exe
C:\WINDOWS\newfrn.exe
C:\WINDOWS\System32\fbwzthy.exe
C:\dinst.exe
C:\WINDOWS\System32\jwrsfhcdx.exe
O1 - Hosts: toutes les lignes commençant par 01 - Hosts !!
O2 - BHO: (no name) - {20D57A66-F7DF-467d-907B-9B7F4A118AB7} - C:\WINDOWS\System32\mllmn.dll (file missing)
O4 - HKLM\..\Run: [ifdrv] rundll32.exe C:\WINDOWS\System32\ifdrv.dll,start
O4 - HKLM\..\Run: [Virtual CD v8] cxakeqa.exe
O4 - HKLM\..\Run: [ServicesLog] msssmsngr6417.exe
O4 - HKLM\..\Run: [MICROSFT NT SUPPORT] ewmubcnhyx.EXE
O4 - HKLM\..\Run: [Microsoft Service Messenger 8] msmsn8.exe
O4 - HKLM\..\Run: [NewFrn] C:\WINDOWS\newfrn.exe
O4 - HKLM\..\Run: [Microsoft Command C] winhost32.exe
O4 - HKLM\..\Run: [SySSL] sysl.exe
O4 - HKLM\..\Run: [Realtek Sound Manager] fbwzthy.exe
O4 - HKLM\..\Run: [Windows Helper] C:\WINDOWS\System32\svchelper.exe
O4 - HKLM\..\Run: [asdgs] C:\dinst.exe
O4 - HKLM\..\Run: [DR service] jwrsfhcdx.exe
O4 - HKLM\..\RunServices: [MICROSFT NT SUPPORT] ewmubcnhyx.EXE
O4 - HKLM\..\RunServices: [Microsoft Command C] winhost32.exe
O4 - HKLM\..\RunServices: [SySSL] sysl.exe
O4 - HKLM\..\RunServices: [DR service] jwrsfhcdx.exe
O4 - HKCU\..\Run: [Microsoft Command C] winhost32.exe
O4 - HKCU\..\RunServices: [Microsoft Command C] winhost32.exe
O20 - Winlogon Notify: mllmn - mllmn.dll (file missing)
O20 - Winlogon Notify: Reliability - C:\WINDOWS\system32\jr4025hmg.dll (file missing)
O23 - Service: MicroSoft Media Tools - Unknown owner - C:\WINDOWS\MSmedia.exe (file missing)
O23 - Service: Performance True Type Font (PerfFont) - Unknown owner - C:\WINDOWS\System32\perfont.exe (file missing)
O23 - Service: wins(WINS) (wins) - Unknown owner - C:\WINDOWS\system32\winscntrl.exe (file missing)


ensuite, ferme les logiciels de protections, tous les programmes ainsi que la connection et clique sur "FIX CHECKED"


Colle un nouveau rapport

attends un peu avant de faire ça!

Télécharge ce fichier
Exécute-le et clique sur "Restore original hosts".
---

colle un nouveau log HijackThis.

et bhé.. ça fait du monde

ouaip


tu m'en veut pas n.tary?

huhuhu

Colle quoi ? Je relance, c'est ça ?

oui

Et voilà le nouveau rapport.

Logfile of HijackThis v1.99.1
Scan saved at 17:30:35, on 04/04/2006
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\RunDll32.exe
C:\WINDOWS\System32\atiptaxx.exe
C:\Program Files\Network\ipnetwork.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\ATI Multimedia\main\launchpd.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Hijack This\HijackThis.exe

Et ensuite...

PS : merci pour ces procédures, mon ordi va mieux (si, si, il me l'a dit!).
Mais, j'ai quand même deux questions qui me trotent dans la tête (est-ce le bon topic ?) :
- finalement, "Dinst", c'est quoi ?
- pourquoi Norton ne m'a pas aidé sur ce coup là ?

merci de coller un rapport complet

Oups désolé, mais j'avais l'impression d'avoir tout collé.
Alors voilà... et merci !

Logfile of HijackThis v1.99.1
Scan saved at 15:06:14, on 05/04/2006
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\RunDll32.exe
C:\WINDOWS\System32\atiptaxx.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Network\ipnetwork.exe
C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe
C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE
C:\WINDOWS\System32\ctfmon.exe
C:\Program Files\ATI Multimedia\main\launchpd.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Hijack This\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.voila.fr/
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.ad-w-a-r-e.com/cgi-bin/PopupV3?ID={7FBED98E-6DC7-2B75-0DC5-70D00AF95384}&type=normal&mSkip=1&rnd=20745
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: (no name) - {20D57A66-F7DF-467d-907B-9B7F4A118AB7} - C:\WINDOWS\System32\mllmn.dll (file missing)
O3 - Toolbar: Norton Internet Security 2006 - {0B53EAC3-8D69-4b9e-9B19-A37C9A5676A7} - C:\Program Files\Fichiers communs\Symantec Shared\AdBlocking\NISShExt.dll
O3 - Toolbar: Norton AntiVirus - {C4069E3A-68F1-403E-B40E-20066696354B} - C:\Program Files\Norton Internet Security\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKLM\..\Run: [IpNetwork] C:\Program Files\Network\ipnetwork.exe
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [SSC_UserPrompt] "C:\Program Files\Fichiers communs\Symantec Shared\Security Center\UsrPrmpt.exe"
O4 - HKLM\..\Run: [EPSON Stylus DX4200 Series] C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_FATIAEE.EXE /P26 "EPSON Stylus DX4200 Series" /O6 "USB001" /M "Stylus DX4200"
O4 - HKLM\..\RunServices: [Virtual CD v8] cxakeqa.exe
O4 - HKLM\..\RunServices: [ServicesLog] msssmsngr6417.exe
O4 - HKLM\..\RunServices: [Microsoft Service Messenger 8] msmsn8.exe
O4 - HKLM\..\RunServices: [Realtek Sound Manager] fbwzthy.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [ATI Launchpad] "C:\Program Files\ATI Multimedia\main\launchpd.exe"
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Microsoft Command C] winhost32.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office\OSA9.EXE
O9 - Extra button: ATI TV - {44226DFF-747E-4edc-B30C-78752E50CD0C} - C:\Program Files\ATI Multimedia\TV\EXPLBAR.DLL
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {30528230-99F7-4BB4-88D8-FA1D4F56A2AB} (YInstStarter Class) - http://us.dl1.yimg.com/download.yahoo.com/dl/yinst/yinst_current.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O20 - Winlogon Notify: mllmn - mllmn.dll (file missing)
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Internet Security Password Validation (ccISPwdSvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\ccPwdSvc.exe
O23 - Service: Symantec Network Proxy (ccProxy) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccProxy.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe
O23 - Service: COM Host (comHost) - Symantec Corporation - C:\Program Files\Norton Internet Security\comHost.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Service Norton AntiVirus Auto-Protect (navapsvc) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Protection Center Service (NSCService) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\Security Console\NSCSRVCE.EXE
O23 - Service: Performance True Type Font (PerfFont) - Unknown owner - C:\WINDOWS\System32\perfont.exe (file missing)
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Symantec AVScan (SAVScan) - Symantec Corporation - C:\Program Files\Norton Internet Security\Norton AntiVirus\SAVScan.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: wins(WINS) (wins) - Unknown owner - C:\WINDOWS\system32\winscntrl.exe (file missing)