bonjour,
depuis deux jours je m’arrache les cheuveux sur ce problème, et malgré maintes recherches sur le net je ne l’ai pas résolu.
J’ai repéré grace à Process Explorer ce qui en est la cause : svchost.exe-knetsvcs.
Et si j’arrete ce processus, mon pc ne répond plus à certaines commandes (boutons de pause ou de grand écran inacessible sur youtube, icône de fermeture des programmes -la petite croix blanche sur fond rouge- inacessible, etc…)
voici un rapport hijackthis au cas où :
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 23:15:16, on 16/12/2013
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.21359)
Boot mode: Normal
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:Program FilesAviraAntiVir Desktopsched.exe
C:WINDOWSExplorer.EXE
C:Program FilesAviraAntiVir Desktopavguard.exe
C:AcerEmpowering TechnologyadmServ.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesJavajre7binjqs.exe
C:WINDOWSRTHDCPL.EXE
C:Program FilesFichiers communsLightScribeLSSrvc.exe
C:PROGRA~1LAUNCH~1LManager.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32igfxtray.exe
C:WINDOWSsystem32igfxpers.exe
C:Program FilesSynapticsScrybeServiceScrybeUpdater.exe
C:AcerEmpowering TechnologyeRecoveryMonitor.exe
C:WINDOWSsystem32hkcmd.exe
C:AcerEmpowering TechnologyePowerePower_DMC.exe
C:AcerEmpowering TechnologyeDataSecurityeDSloader.exe
C:WINDOWSsystem32svchost.exe
C:AcerEmpowering Technologyadmtray.exe
C:Program FilesAviraAntiVir Desktopavgnt.exe
C:Program FilesFichiers communsJavaJava Updatejusched.exe
C:WINDOWSsystem32ctfmon.exe
C:WINDOWSsystem32igfxext.exe
C:WINDOWSsystem32igfxsrvc.exe
C:WINDOWSsystem32wuauclt.exe
C:DOCUME~1PORTABLELOCALS~1TempRtkBtMnt.exe
C:WINDOWSsystem32wbemunsecapp.exe
C:Program FilesAviraAntiVir Desktopavshadow.exe
C:WINDOWSsystem32wbemwmiapsrv.exe
C:WINDOWSsystem32msiexec.exe
C:WINDOWSSystem32svchost.exe
C:Program FilesTrend MicroHiJackThisHiJackThis.exe
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page = about:blank
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Page_URL = go.microsoft.com…
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL = go.microsoft.com…
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Page = go.microsoft.com…
R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = fr.fr.acer.yahoo.com…
R0 - HKCUSoftwareMicrosoftInternet ExplorerToolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - (no file)
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:Program FilesHPDigital ImagingSmart Web Printinghpswp_printenhancer.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Java™ Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:Program FilesJavajre7binssv.dll
O2 - BHO: Programme d’aide de l’Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:Program FilesFichiers communsMicrosoft SharedWindows LiveWindowsLiveLogin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:Program FilesGoogleGoogleToolbarNotifier5.1.1309.3572swg.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:Program FilesJavajre7binjp2ssv.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:Program FilesHPDigital ImagingSmart Web Printinghpswp_BHO.dll
O3 - Toolbar: Acer eDataSecurity Management - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:WINDOWSsystem32eDStoolbar.dll
O4 - HKLM…Run: [SynTPEnh] %ProgramFiles%SynapticsSynTPSynTPEnh.exe
O4 - HKLM…Run: [SkyTel] SkyTel.EXE
O4 - HKLM…Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM…Run: [PHIME2002ASync] C:WINDOWSsystem32IMETINTLGNTTINTSETP.EXE /SYNC
O4 - HKLM…Run: [PHIME2002A] C:WINDOWSsystem32IMETINTLGNTTINTSETP.EXE /IMEName
O4 - HKLM…Run: [MSPY2002] C:WINDOWSsystem32IMEPINTLGNTImScInst.exe /SYNC
O4 - HKLM…Run: [LManager] C:PROGRA~1LAUNCH~1LManager.exe
O4 - HKLM…Run: [LaunchApp] Alaunch
O4 - HKLM…Run: [KernelFaultCheck] %systemroot%system32dumprep 0 -k
O4 - HKLM…Run: [IMJPMIG8.1] “C:WINDOWSIMEimjp8_1IMJPMIG.EXE” /Spoil /RemAdvDef /Migration32
O4 - HKLM…Run: [igfxtray] C:WINDOWSsystem32igfxtray.exe
O4 - HKLM…Run: [igfxpers] C:WINDOWSsystem32igfxpers.exe
O4 - HKLM…Run: [igfxhkcmd] C:WINDOWSsystem32hkcmd.exe
O4 - HKLM…Run: [eRecoveryService] C:AcerEmpowering TechnologyeRecoveryMonitor.exe
O4 - HKLM…Run: [ePower_DMC] C:AcerEmpowering TechnologyePowerePower_DMC.exe
O4 - HKLM…Run: [eDataSecurity Loader] C:AcerEmpowering TechnologyeDataSecurityeDSloader.exe
O4 - HKLM…Run: [AzMixerSel] C:Program FilesRealtekInstallShieldAzMixerSel.exe
O4 - HKLM…Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM…Run: [ADMTray.exe] “C:AcerEmpowering Technologyadmtray.exe”
O4 - HKLM…Run: [Acer ePower Management] C:AcerEmpowering TechnologyePowerAcer ePower Management.exe boot
O4 - HKLM…Run: [avgnt] “C:Program FilesAviraAntiVir Desktopavgnt.exe” /min
O4 - HKLM…Run: [Adobe ARM] “C:Program FilesFichiers communsAdobeARM1.0AdobeARM.exe”
O4 - HKLM…Run: [SunJavaUpdateSched] “C:Program FilesFichiers communsJavaJava Updatejusched.exe”
O4 - HKCU…Run: [CTFMON.EXE] C:WINDOWSsystem32ctfmon.exe
O4 - HKUSS-1-5-19…Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SERVICE LOCAL’)
O4 - HKUSS-1-5-20…Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SERVICE RÉSEAU’)
O4 - HKUSS-1-5-18…Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘SYSTEM’)
O4 - HKUS.DEFAULT…Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User ‘Default user’)
O4 - Global Startup: Scrybe.lnk.disabled
O4 - Global Startup: HP Digital Imaging Monitor.lnk.disabled
O8 - Extra context menu item: E&xporter vers Microsoft Excel - C:PROGRA~1MICROS~2Office12EXCEL.EXE…
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:Program FilesWindows LiveWriterWriterBrowserExtension.dll
O9 - Extra ‘Tools’ menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:Program FilesWindows LiveWriterWriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:PROGRA~1MICROS~2Office12REFIEBAR.DLL
O9 - Extra button: Afficher ou masquer l’HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:Program FilesHPDigital ImagingSmart Web Printinghpswp_BHO.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 - Extra ‘Tools’ menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O9 - Extra ‘Tools’ menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O15 - Trusted Zone: .mappy.com…
O15 - Trusted Zone: .orange.fr…
O15 - Trusted Zone: rw.search.ke.voila.fr…
O15 - Trusted Zone: orange.weborama.fr…
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - gfx1.hotmail.com…
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:PROGRA~1FICHIE~1SkypeSKYPE4~1.DLL
O22 - SharedTaskScheduler: Pré-chargeur Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:WINDOWSsystem32browseui.dll
O22 - SharedTaskScheduler: Démon de cache des catégories de composant - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:WINDOWSsystem32browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:WINDOWSsystem32MacromedFlashFlashPlayerUpdateService.exe
O23 - Service: Avira Planificateur (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:Program FilesAviraAntiVir Desktopsched.exe
O23 - Service: Avira Protection temps réel (AntiVirService) - Avira Operations GmbH & Co. KG - C:Program FilesAviraAntiVir Desktopavguard.exe
O23 - Service: AdminWorks Agent X6 (AWService) - Avocent Inc. - C:AcerEmpowering TechnologyadmServ.exe
O23 - Service: Service d’administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:WINDOWSSystem32dmadmin.exe
O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:WINDOWSsystem32services.exe
O23 - Service: Fax - Unknown owner - C:WINDOWSsystem32fxssvc.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:Program FilesGoogleCommonGoogle UpdaterGoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:Program FilesFichiers communsInstallShieldDriver11Intel 32IDriverT.exe
O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:WINDOWSsystem32imapi.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:Program FilesJavajre7binjqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:Program FilesFichiers communsLightScribeLSSrvc.exe
O23 - Service: Partage de Bureau à distance NetMeeting (mnmsrvc) - Unknown owner - C:WINDOWSsystem32mnmsrvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:Program FilesMozilla Maintenance Servicemaintenanceservice.exe
O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:WINDOWSsystem32services.exe
O23 - Service: Gestionnaire de session d’aide sur le Bureau à distance (RDSessMgr) - Unknown owner - C:WINDOWSsystem32sessmgr.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:Program FilesCyberLinkShared FilesRichVideo.exe (file missing)
O23 - Service: Carte à puce (SCardSvr) - Unknown owner - C:WINDOWSSystem32SCardSvr.exe
O23 - Service: Programme de mise à jour de Scrybe (ScrybeUpdater) - Synaptics, Inc. - C:Program FilesSynapticsScrybeServiceScrybeUpdater.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:Program FilesSkypeUpdaterUpdater.exe
O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:WINDOWSsystem32smlogsvc.exe
O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:WINDOWSSystem32vssvc.exe
O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:WINDOWSsystem32wbemwmiapsrv.exe
–
End of file - 10813 bytes
voilà. par avance merci pour toute aide !!