Ordinateur lent, ramant et même bug - Marre !!

Bonjour,

Pas forcément une infection.

Télécharge puis installe Hijackthis (Trend Micro)
Poste ensuite un rapport dans ta prochaine réponse.
AIDE : Comment utiliser Hijackthis v2.0.2

Bonsoir et merci de vous occuper de mon problème




Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:40:12, on 18/09/2008
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\System32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\SSC Service Utility\ssc_serv.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\PROGRA~1\MOZILL~1\FIREFOX.EXE
C:\Program Files\eMule\emule.exe
C:\Documents and Settings\Réda\Bureau\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SSC Service Utility] C:\Program Files\SSC Service Utility\ssc_serv.exe /s
O4 - HKLM\..\Run: [686484a6] rundll32.exe "C:\WINDOWS\System32\gokyaaqp.dll",b
O4 - HKLM\..\Run: [BM6b57b73a] Rundll32.exe "C:\WINDOWS\System32\lwlrbqjq.dll",s
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Unibet Poker - {C53BFCFC-7A54-4627-AEBA-2CD4871FCA97} - C:\Microgaming\Poker\UnibetpokerMPP\MPPoker.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.google.fr/
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPACl...
O20 - Winlogon Notify: winrkp32 - C:\WINDOWS\SYSTEM32\winrkp32.dll
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

--
End of file - 5533 bytes

Re,

[#ff0000]Désactive tes protections résidentes (antivirus, Spybot-S&D, etc.) ![/#f]

Télécharge ComboFix ([#ff0000]sUBs[/#f]) sur ton Bureau.

Double clique sur ComboFix.exe (le .exe n'est pas forcément visible) afin de le lancer.

Lorsque la recherche sera terminée, un rapport apparaîtra. Poste ce rapport (C:\combofix.txt*) dans ta prochaine réponse.

AIDE : Un guide et un tutoriel sur l'utilisation de ComboFix
* le nom de la partition peut changer

ComboFix 08-09-19.02 - R‚da 2008-09-19 21:12:34.4 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.1.1252.1.1036.18.87 [GMT 2:00]
Lancé depuis: C:\Documents and Settings\R‚da\Bureau\ComboFix.exe
* Un nouveau point de restauration a été créé

AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!
.

((((((((((((((((((((((((((((( Fichiers crÚÚs du 2008-08-19 au 2008-09-19 ))))))))))))))))))))))))))))))))))))
.

2008-09-19 13:36 . 2008-09-19 13:36 <REP> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\MSN6
2008-09-19 03:05 . 2008-09-19 03:05 <REP> d-------- C:\Program Files\BetClic Poker
2008-09-16 22:20 . 2008-09-18 17:31 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2008-09-16 22:20 . 2008-09-16 22:20 1,409 --a------ C:\WINDOWS\QTFont.for
2008-08-30 20:44 . 2008-08-30 20:44 <REP> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\TVU Networks
2008-08-22 03:26 . 2008-08-22 03:26 <REP> d-------- C:\Program Files\Veoh Networks

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-09-19 18:54 --------- d-----w C:\Program Files\eMule
2008-09-17 22:30 --------- d-----w C:\Program Files\Fichiers communs\Adobe
2008-09-13 09:54 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-09-13 09:54 --------- d-----w C:\Program Files\FBM Software
2008-09-13 09:48 --------- d-----w C:\Program Files\Free Audio Pack
2008-09-13 08:05 131,072 ----a-w C:\WINDOWS\system32\datestamp.dll
2008-08-30 19:42 --------- d-----w C:\Program Files\SopCast
2008-08-30 18:45 --------- d-----w C:\Program Files\TVUPlayer
2008-08-16 09:19 --------- d-----w C:\Program Files\TVAnts
2008-08-16 01:21 --------- d-----w C:\Program Files\CCleaner
2008-08-16 01:16 --------- d-----w C:\Program Files\BitComet
2008-08-16 01:12 --------- d-----w C:\Program Files\NRJ
2008-08-16 01:06 --------- d-----w C:\Program Files\River Past
2008-08-16 01:06 --------- d-----w C:\Program Files\Fichiers communs\River Past
2008-08-16 01:06 --------- d-----w C:\Program Files\ERUNT
2008-08-16 01:06 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\River Past G5
2008-08-16 01:05 --------- d-----w C:\Program Files\Mozilla Firefox 3 Beta 3
2008-08-16 01:05 --------- d-----w C:\Program Files\Loto1N2
2008-08-16 01:05 --------- d-----w C:\Program Files\free-downloads.net
2008-08-16 00:38 1,244 ----a-w C:\WINDOWS\system32\drivers\APPFLTR.CFG.bck
2008-08-16 00:33 225,612 ----a-w C:\WINDOWS\system32\drivers\APPFCONT.DAT.bck
2008-08-16 00:33 225,612 ----a-w C:\WINDOWS\system32\drivers\APPFCONT.DAT
2008-08-14 15:19 --------- d-----w C:\Program Files\Alwil Software
2008-08-13 19:20 0 ----a-w C:\WINDOWS\system32\drivers\wnmsav.dat
2008-08-09 02:17 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\sentinel
2008-08-09 02:13 --------- d-----w C:\Program Files\Panda Security
2008-08-09 02:08 --------- d-----w C:\Program Files\Fichiers communs\Panda Software
2008-08-07 21:37 32,256 ----a-w C:\WINDOWS\system32\winrkp32.dll
2008-08-07 21:35 7,140 ----a-w C:\tubecodec.exe
2008-08-07 21:35 58,368 ----a-w C:\directx.exe
2008-08-07 21:33 57,868 ----a-w C:\wmcodec_update.exe
2008-07-18 20:10 94,920 ----a-w C:\WINDOWS\system32\cdm.dll
2008-07-18 20:10 53,448 ----a-w C:\WINDOWS\system32\wuauclt.exe
2008-07-18 20:10 45,768 ----a-w C:\WINDOWS\system32\wups2.dll
2008-07-18 20:10 36,552 ----a-w C:\WINDOWS\system32\wups.dll
2008-07-18 20:09 563,912 ----a-w C:\WINDOWS\system32\wuapi.dll
2008-07-18 20:09 325,832 ----a-w C:\WINDOWS\system32\wucltui.dll
2008-07-18 20:09 205,000 ----a-w C:\WINDOWS\system32\wuweb.dll
2008-07-18 20:09 1,811,656 ----a-w C:\WINDOWS\system32\wuaueng.dll
.

((((((((((((((((((((((((((((( snapshot_2008-08-16_12.08.34.45 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-03-24 17:33:02 1,527,056 ----a-w C:\WINDOWS\Downloaded Program Files\CONFLICT.1\FP_AX_CAB_INSTALLER.exe
+ 2008-03-24 17:33:02 1,527,056 ----a-w C:\WINDOWS\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe
+ 2007-12-12 13:06:42 295,606 ----a-r C:\WINDOWS\Installer\{AC76BA86-7AD7-1036-7B44-A90000000001}\SC_Reader.exe
- 2007-08-26 13:42:50 8,738 ----a-w C:\WINDOWS\PCHealth\HelpCtr\Config\Cntstore.bin
+ 2008-08-17 11:22:05 8,972 ----a-w C:\WINDOWS\PCHealth\HelpCtr\Config\Cntstore.bin
- 2007-08-26 13:42:48 80,007 ----a-w C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\index.dat
+ 2008-08-17 16:25:00 80,007 ----a-w C:\WINDOWS\PCHealth\HelpCtr\OfflineCache\index.dat
- 2007-08-27 15:15:05 2,410 ----a-w C:\WINDOWS\PCHealth\HelpCtr\PackageStore\SkuStore.bin
+ 2008-08-17 16:25:00 2,410 ----a-w C:\WINDOWS\PCHealth\HelpCtr\PackageStore\SkuStore.bin
+ 2005-01-10 22:12:26 400,384 ----a-w C:\WINDOWS\Resources\Themes\blade\shell\normalcolor\shellstyle.dll
- 2006-08-16 12:16:05 95,232 ----a-w C:\WINDOWS\system32\6to4svc.dll
+ 2004-08-19 23:09:19 100,352 ----a-w C:\WINDOWS\system32\6to4svc.dll
- 2008-08-16 00:30:28 16,384 ----a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat
+ 2008-08-18 11:24:30 16,384 ----a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat
- 2008-08-16 00:30:28 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat
+ 2008-08-18 11:24:30 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat
+ 2008-08-17 12:18:35 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Historique\History.IE5\MSHist012008081720080818\index.dat
- 2007-07-30 17:19:20 92,504 -c--a-w C:\WINDOWS\system32\dllcache\cdm.dll
+ 2008-07-18 20:10:48 94,920 -c--a-w C:\WINDOWS\system32\dllcache\cdm.dll
- 2005-08-31 16:50:42 409,600 -c--a-w C:\WINDOWS\system32\dllcache\SHLWAPI.DLL
+ 2005-09-01 01:50:41 409,600 ------w C:\WINDOWS\system32\dllcache\shlwapi.dll
+ 2007-04-10 12:00:52 236,928 -c----w C:\WINDOWS\system32\dllcache\WgaLogon.dll
+ 2007-04-10 12:01:40 337,280 -c----w C:\WINDOWS\system32\dllcache\WgaTray.exe
- 2007-07-30 17:19:16 53,080 -c--a-w C:\WINDOWS\system32\dllcache\wuauclt.exe
+ 2008-07-18 20:10:42 53,448 -c--a-w C:\WINDOWS\system32\dllcache\wuauclt.exe
- 2007-07-30 17:19:42 1,712,984 -c--a-w C:\WINDOWS\system32\dllcache\wuaueng.dll
+ 2008-07-18 20:09:42 1,811,656 -c--a-w C:\WINDOWS\system32\dllcache\wuaueng.dll
+ 2005-12-22 11:24:50 80,272 ----a-w C:\WINDOWS\system32\drivers\sscdbus.sys
+ 2005-12-22 11:24:52 11,877 ----a-w C:\WINDOWS\system32\drivers\sscdcm.sys
+ 2005-12-22 11:24:52 11,877 ----a-w C:\WINDOWS\system32\drivers\sscdcmnt.sys
+ 2005-12-22 11:24:52 10,864 ----a-w C:\WINDOWS\system32\drivers\sscdmdfl.sys
+ 2005-12-22 11:24:52 137,884 ----a-w C:\WINDOWS\system32\drivers\sscdmdm.sys
+ 2005-12-22 11:24:54 11,188 ----a-w C:\WINDOWS\system32\drivers\sscdwh.sys
+ 2005-12-22 11:24:54 11,188 ----a-w C:\WINDOWS\system32\drivers\sscdwhnt.sys
- 2008-08-16 01:31:43 114,176 ----a-w C:\WINDOWS\system32\FNTCACHE.DAT
+ 2008-09-04 09:22:57 114,176 ----a-w C:\WINDOWS\system32\FNTCACHE.DAT
+ 2007-04-10 12:02:50 1,476,992 ------w C:\WINDOWS\system32\LegitCheckControl.dll
+ 2008-03-25 02:32:44 218,496 ----a-r C:\WINDOWS\system32\Macromed\Flash\FlashUtil9f.exe
+ 2008-09-16 17:26:36 74,649 ----a-w C:\WINDOWS\system32\Macromed\Flash\uninstall_activeX.exe
- 2008-05-29 23:35:11 17,486,968 ----a-w C:\WINDOWS\system32\MRT.exe
+ 2008-08-26 20:28:12 16,208,504 ----a-w C:\WINDOWS\system32\MRT.exe
- 2008-08-09 02:25:30 39,992 ----a-w C:\WINDOWS\system32\perfc009.dat
+ 2008-08-17 16:49:57 39,992 ----a-w C:\WINDOWS\system32\perfc009.dat
- 2008-08-09 02:25:32 48,616 ----a-w C:\WINDOWS\system32\perfc00C.dat
+ 2008-08-17 16:49:57 48,616 ----a-w C:\WINDOWS\system32\perfc00C.dat
- 2008-08-09 02:25:30 311,604 ----a-w C:\WINDOWS\system32\perfh009.dat
+ 2008-08-17 16:49:57 311,604 ----a-w C:\WINDOWS\system32\perfh009.dat
- 2008-08-09 02:25:33 367,658 ----a-w C:\WINDOWS\system32\perfh00C.dat
+ 2008-08-17 16:49:57 367,658 ----a-w C:\WINDOWS\system32\perfh00C.dat
+ 2001-08-17 20:28:04 150,239 ----a-w C:\WINDOWS\system32\ReinstallBackups\0017\DriverFiles\i386\HSF_AMOS.sys
+ 2001-08-17 20:28:04 67,167 ----a-w C:\WINDOWS\system32\ReinstallBackups\0017\DriverFiles\i386\HSF_BSC2.sys
+ 2001-08-17 20:28:06 289,887 ----a-w C:\WINDOWS\system32\ReinstallBackups\0017\DriverFiles\i386\HSF_FALL.sys
+ 2001-08-17 20:28:06 199,711 ----a-w C:\WINDOWS\system32\ReinstallBackups\0017\DriverFiles\i386\HSF_FAXX.sys
+ 2001-08-17 20:28:06 115,807 ----a-w C:\WINDOWS\system32\ReinstallBackups\0017\DriverFiles\i386\HSF_FSKS.sys
+ 2001-08-23 16:47:04 9,759 ----a-w C:\WINDOWS\system32\ReinstallBackups\0017\DriverFiles\i386\HSF_INST.dll
+ 2001-08-17 20:28:08 391,199 ----a-w C:\WINDOWS\system32\ReinstallBackups\0017\DriverFiles\i386\HSF_K56K.sys
+ 2001-08-17 20:28:10 542,879 ----a-w C:\WINDOWS\system32\ReinstallBackups\0017\DriverFiles\i386\HSF_MSFT.sys
+ 2001-08-17 20:28:10 57,471 ----a-w C:\WINDOWS\system32\ReinstallBackups\0017\DriverFiles\i386\HSF_SAMP.sys
+ 2001-08-17 20:28:10 44,863 ----a-w C:\WINDOWS\system32\ReinstallBackups\0017\DriverFiles\i386\HSF_SOAR.sys
+ 2001-08-17 20:28:10 73,279 ----a-w C:\WINDOWS\system32\ReinstallBackups\0017\DriverFiles\i386\HSF_SPKP.sys
+ 2001-08-17 20:28:12 50,751 ----a-w C:\WINDOWS\system32\ReinstallBackups\0017\DriverFiles\i386\HSF_TONE.sys
+ 2001-08-17 20:28:12 488,383 ----a-w C:\WINDOWS\system32\ReinstallBackups\0017\DriverFiles\i386\HSF_V124.sys
+ 2002-08-29 12:17:04 33,408 ----a-w C:\WINDOWS\system32\ReinstallBackups\0019\DriverFiles\i386\processr.sys
- 2002-04-10 18:18:00 4,573 ----a-w C:\WINDOWS\system32\secupd.dat
+ 2004-08-02 12:20:40 4,569 ------w C:\WINDOWS\system32\secupd.dat
+ 2008-07-18 20:10:20 36,552 ----a-w C:\WINDOWS\system32\SoftwareDistribution\Setup\ServiceStartup\wups.dll\7.2.6001.784\wups.dll
+ 2008-07-18 20:10:40 45,768 ----a-w C:\WINDOWS\system32\SoftwareDistribution\Setup\ServiceStartup\wups2.dll\7.2.6001.784\wups2.dll
+ 2004-08-19 23:10:03 8,192 ----a-w C:\WINDOWS\system32\spdwnwxp.exe
- 2005-06-28 08:20:24 13,536 ------w C:\WINDOWS\system32\spmsg.dll
+ 2006-12-10 12:10:04 15,664 ------w C:\WINDOWS\system32\spmsg.dll
+ 2007-04-10 12:00:52 236,928 ------w C:\WINDOWS\system32\WgaLogon.dll
+ 2007-04-10 12:01:40 337,280 ------w C:\WINDOWS\system32\WgaTray.exe
- 2002-12-11 23:34:42 208,896 ----a-w C:\WINDOWS\system32\wmpns.dll
+ 2004-08-19 23:09:49 221,184 ----a-w C:\WINDOWS\system32\wmpns.dll
+ 2006-10-18 09:32:38 807,032 ----a-w C:\WINDOWS\system32\wmv9dmod.dll
+ 2006-12-01 20:54:32 479,232 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcm80.dll
+ 2006-12-01 20:54:34 548,864 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcp80.dll
+ 2006-12-01 20:54:32 626,688 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcr80.dll
+ 2004-08-19 23:07:57 1,050,624 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
+ 2004-08-19 23:07:57 1,712,128 ----a-w C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\GdiPlus.dll
.
-- InstantanÚ actualisÚ --
.
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les ÚlÚments vides & les ÚlÚments initiaux lÚgitimes ne sont pas listÚs
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="C:\Program Files\MSN Messenger\msnmsgr.exe" [2007-01-19 5674352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NVMixerTray"="C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe" [2004-06-03 131072]
"LVCOMS"="C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE" [2003-09-04 135214]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" [2007-07-12 132496]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-10-04 98304]
"SSC Service Utility"="C:\Program Files\SSC Service Utility\ssc_serv.exe" [2007-10-09 665600]
"686484a6"="C:\WINDOWS\System32\gokyaaqp.dll" [BU]
"BM6b57b73a"="C:\WINDOWS\System32\lwlrbqjq.dll" [BU]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2002-08-29 13312]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\winrkp32]
2008-08-07 23:37 32256 C:\WINDOWS\system32\winrkp32.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Authentication Packages REG_MULTI_SZ msv1_0 nwprovau

R3 PID_0920;Logitech QuickCam Express(PID_0920);C:\WINDOWS\System32\DRIVERS\LV532AV.SYS [2003-09-04 152576]
S3 EverestDriver;Lavalys EVEREST Kernel Driver;C:\Program Files\Lavalys\EVEREST Home Edition\kerneld.wnt [2005-08-18 7168]
S3 fbxusb;Carte réseau virtuelle FreeBox USB;C:\WINDOWS\System32\DRIVERS\fbxusb32.sys [2004-10-20 21344]
S3 ss_bus;SAMSUNG Mobile USB Device 1.0 driver (WDM);C:\WINDOWS\System32\DRIVERS\ss_bus.sys [2005-08-30 58320]
S3 ss_mdfl;SAMSUNG Mobile USB Modem 1.0 Filter;C:\WINDOWS\System32\DRIVERS\ss_mdfl.sys [2005-08-30 8304]
S3 ss_mdm;SAMSUNG Mobile USB Modem 1.0 Drivers;C:\WINDOWS\System32\DRIVERS\ss_mdm.sys [2005-08-30 94000]
.
.
------- Examen supplÚmentaire -------
.
R0 -: HKCU-Main,Start Page = hxxp://www.google.fr/
O8 -: E&xport to Microsoft Excel - C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 -: {C53BFCFC-7A54-4627-AEBA-2CD4871FCA97} - C:\Microgaming\Poker\UnibetpokerMPP\MPPoker.exe
O9 -: {C53BFCFC-7A54-4627-AEBA-2CD4871FCA97} - C:\Microgaming\Poker\UnibetpokerMPP\MPPoker.exe -

O16 -: DirectAnimation Java Classes - file://C:\WINDOWS\Java\classes\dajava.cab
C:\WINDOWS\Downloaded Program Files\DirectAnimation Java Classes.osd

O16 -: Microsoft XML Parser for Java - file://C:\WINDOWS\Java\classes\xmldso.cab
C:\WINDOWS\Downloaded Program Files\Microsoft XML Parser for Java.osd
.

**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-19 21:18:52
Windows 5.1.2600 Service Pack 1 NTFS

Recherche de processus cachÚs ...

Recherche d'ÚlÚments en dÚmarrage automatique cachÚs ...

Recherche de fichiers cachÚs ...

Scan terminÚ avec succÞs
Fichiers cachÚs: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet002\Services\EverestDriver]
"ImagePath"="\??\C:\Program Files\Lavalys\EVEREST Home Edition\kerneld.wnt"
.
--------------------- DLLs chargÚes dans les processus actifs ---------------------

PROCESSUS: C:\WINDOWS\system32\winlogon.exe
-> C:\WINDOWS\system32\winrkp32.dll
.
------------------------ Autres processus actifs ------------------------
.
C:\WINDOWS\system32\ati2evxx.exe
C:\WINDOWS\system32\ati2evxx.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\system32\WgaTray.exe
C:\Program Files\MSN Messenger\usnsvc.exe
.
**************************************************************************
.
Heure de fin: 2008-09-19 21:23:36 - La machine a redÚmarrÚ
ComboFix-quarantined-files.txt 2008-09-19 19:23:32
ComboFix2.txt 2008-08-16 10:09:41
ComboFix3.txt 2007-11-05 22:11:17

Avant-CF: 47ÿ544ÿ037ÿ376 octets libres
Après-CF: 49,676,902,400 octets libres

218 --- E O F --- 2008-09-11 14:57:59

up

Re,

Copie (Ctrl+C) le texte se situant dans le cadre ci-dessous :



Ouvre le Bloc-Notes puis colle (Ctrl+V) le texte précédemment copié.
Sauvegarde ce fichier sous le nom de CFScript.txt.

Glisse maintenant le fichier CFScript.txt dans Combofix.exe comme ci-dessous :


Cela va relancer Combofix, tape sur 1 puis valide. Après redémarrage, poste le contenu du rapport Combofix.txt accompagné d'un rapport Hijackthis.
[#ff0000]NOTE : S'il n'y a pas de redémarrage, poste quand même les rapports demandés.[/#f]

combofix




ComboFix 08-09-19.02 - R‚da 2008-09-20 19:18:44.5 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.1.1252.1.1036.18.83 [GMT 2:00]
Lancé depuis: C:\Documents and Settings\R‚da\Bureau\ComboFix.exe
Commutateurs utilisés :: C:\Documents and Settings\R‚da\Bureau\CFScript.txt..txt
* Un nouveau point de restauration a été créé

AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\WINDOWS\system32\winrkp32.dll

.
((((((((((((((((((((((((((((( Fichiers crÚÚs du 2008-08-20 au 2008-09-20 ))))))))))))))))))))))))))))))))))))
.

2008-09-19 21:23 . 2008-09-19 21:23 <REP> d-------- C:\Documents and Settings\R‚da
2008-09-19 13:36 . 2008-09-19 13:36 <REP> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\MSN6
2008-09-19 03:05 . 2008-09-19 03:05 <REP> d-------- C:\Program Files\BetClic Poker
2008-09-16 22:20 . 2008-09-18 17:31 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2008-09-16 22:20 . 2008-09-16 22:20 1,409 --a------ C:\WINDOWS\QTFont.for
2008-08-30 20:44 . 2008-08-30 20:44 <REP> d-------- C:\Documents and Settings\All Users.WINDOWS\Application Data\TVU Networks
2008-08-22 03:26 . 2008-08-22 03:26 <REP> d-------- C:\Program Files\Veoh Networks

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-09-19 22:35 --------- d-----w C:\Program Files\eMule
2008-09-17 22:30 --------- d-----w C:\Program Files\Fichiers communs\Adobe
2008-09-13 09:54 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-09-13 09:54 --------- d-----w C:\Program Files\FBM Software
2008-09-13 09:48 --------- d-----w C:\Program Files\Free Audio Pack
2008-09-13 08:05 131,072 ----a-w C:\WINDOWS\system32\datestamp.dll
2008-08-30 19:42 --------- d-----w C:\Program Files\SopCast
2008-08-30 18:45 --------- d-----w C:\Program Files\TVUPlayer
2008-08-16 09:19 --------- d-----w C:\Program Files\TVAnts
2008-08-16 01:21 --------- d-----w C:\Program Files\CCleaner
2008-08-16 01:16 --------- d-----w C:\Program Files\BitComet
2008-08-16 01:12 --------- d-----w C:\Program Files\NRJ
2008-08-16 01:06 --------- d-----w C:\Program Files\River Past
2008-08-16 01:06 --------- d-----w C:\Program Files\Fichiers communs\River Past
2008-08-16 01:06 --------- d-----w C:\Program Files\ERUNT
2008-08-16 01:06 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\River Past G5
2008-08-16 01:05 --------- d-----w C:\Program Files\Mozilla Firefox 3 Beta 3
2008-08-16 01:05 --------- d-----w C:\Program Files\Loto1N2
2008-08-16 01:05 --------- d-----w C:\Program Files\free-downloads.net
2008-08-16 00:38 1,244 ----a-w C:\WINDOWS\system32\drivers\APPFLTR.CFG.bck
2008-08-16 00:33 225,612 ----a-w C:\WINDOWS\system32\drivers\APPFCONT.DAT.bck
2008-08-16 00:33 225,612 ----a-w C:\WINDOWS\system32\drivers\APPFCONT.DAT
2008-08-14 15:19 --------- d-----w C:\Program Files\Alwil Software
2008-08-13 19:20 0 ----a-w C:\WINDOWS\system32\drivers\wnmsav.dat
2008-08-09 02:17 --------- d-----w C:\Documents and Settings\All Users.WINDOWS\Application Data\sentinel
2008-08-09 02:13 --------- d-----w C:\Program Files\Panda Security
2008-08-09 02:08 --------- d-----w C:\Program Files\Fichiers communs\Panda Software
2008-08-07 21:35 7,140 ----a-w C:\tubecodec.exe
2008-08-07 21:35 58,368 ----a-w C:\directx.exe
2008-08-07 21:33 57,868 ----a-w C:\wmcodec_update.exe
2008-07-18 20:10 94,920 ----a-w C:\WINDOWS\system32\cdm.dll
2008-07-18 20:10 53,448 ----a-w C:\WINDOWS\system32\wuauclt.exe
2008-07-18 20:10 45,768 ----a-w C:\WINDOWS\system32\wups2.dll
2008-07-18 20:10 36,552 ----a-w C:\WINDOWS\system32\wups.dll
2008-07-18 20:09 563,912 ----a-w C:\WINDOWS\system32\wuapi.dll
2008-07-18 20:09 325,832 ----a-w C:\WINDOWS\system32\wucltui.dll
2008-07-18 20:09 205,000 ----a-w C:\WINDOWS\system32\wuweb.dll
2008-07-18 20:09 1,811,656 ----a-w C:\WINDOWS\system32\wuaueng.dll
.

((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les ÚlÚments vides & les ÚlÚments initiaux lÚgitimes ne sont pas listÚs
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="C:\Program Files\MSN Messenger\msnmsgr.exe" [2007-01-19 5674352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NVMixerTray"="C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe" [2004-06-03 131072]
"LVCOMS"="C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE" [2003-09-04 135214]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" [2007-07-12 132496]
"QuickTime Task"="C:\Program Files\QuickTime\qttask.exe" [2007-10-04 98304]
"SSC Service Utility"="C:\Program Files\SSC Service Utility\ssc_serv.exe" [2007-10-09 665600]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-12 34672]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2002-08-29 13312]

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa]
Authentication Packages REG_MULTI_SZ msv1_0 nwprovau

R3 PID_0920;Logitech QuickCam Express(PID_0920);C:\WINDOWS\System32\DRIVERS\LV532AV.SYS [2003-09-04 152576]
S3 EverestDriver;Lavalys EVEREST Kernel Driver;C:\Program Files\Lavalys\EVEREST Home Edition\kerneld.wnt [2005-08-18 7168]
S3 fbxusb;Carte réseau virtuelle FreeBox USB;C:\WINDOWS\System32\DRIVERS\fbxusb32.sys [2004-10-20 21344]
S3 ss_bus;SAMSUNG Mobile USB Device 1.0 driver (WDM);C:\WINDOWS\System32\DRIVERS\ss_bus.sys [2005-08-30 58320]
S3 ss_mdfl;SAMSUNG Mobile USB Modem 1.0 Filter;C:\WINDOWS\System32\DRIVERS\ss_mdfl.sys [2005-08-30 8304]
S3 ss_mdm;SAMSUNG Mobile USB Modem 1.0 Drivers;C:\WINDOWS\System32\DRIVERS\ss_mdm.sys [2005-08-30 94000]
.

**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-09-20 19:24:17
Windows 5.1.2600 Service Pack 1 NTFS

Recherche de processus cachÚs ...

Recherche d'ÚlÚments en dÚmarrage automatique cachÚs ...

Recherche de fichiers cachÚs ...

Scan terminÚ avec succÞs
Fichiers cachÚs: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet002\Services\EverestDriver]
"ImagePath"="\??\C:\Program Files\Lavalys\EVEREST Home Edition\kerneld.wnt"
.
------------------------ Autres processus actifs ------------------------
.
C:\WINDOWS\system32\ati2evxx.exe
C:\WINDOWS\system32\ati2evxx.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\system32\WgaTray.exe
C:\Program Files\MSN Messenger\usnsvc.exe
.
**************************************************************************
.
Heure de fin: 2008-09-20 19:29:41 - La machine a redÚmarrÚ
ComboFix-quarantined-files.txt 2008-09-20 17:29:38
ComboFix2.txt 2008-09-19 19:23:37
ComboFix3.txt 2008-08-16 10:09:41
ComboFix4.txt 2007-11-05 22:11:17

Avant-CF: 49ÿ702ÿ621ÿ184 octets libres
Après-CF: 49,709,436,928 octets libres

119 --- E O F --- 2008-09-11 14:57:59

Hijackthis



Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:33:03, on 20/09/2008
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\SSC Service Utility\ssc_serv.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\System32\WgaTray.exe
C:\WINDOWS\System32\wuauclt.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Réda\Bureau\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx
O3 - Toolbar: Veoh Browser Plug-in - {D0943516-5076-4020-A3B5-AEFAF26AB263} - C:\Program Files\Veoh Networks\Veoh\Plugins\reg\VeohToolbar.dll
O4 - HKLM\..\Run: [NVMixerTray] "C:\Program Files\NVIDIA Corporation\NvMixer\NVMixerTray.exe"
O4 - HKLM\..\Run: [LVCOMS] C:\Program Files\Fichiers communs\Logitech\QCDriver2\LVCOMS.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [SSC Service Utility] C:\Program Files\SSC Service Utility\ssc_serv.exe /s
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Unibet Poker - {C53BFCFC-7A54-4627-AEBA-2CD4871FCA97} - C:\Microgaming\Poker\UnibetpokerMPP\MPPoker.exe
O9 - Extra button: (no name) - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - (no file)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O9 - Extra 'Tools' menuitem: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O14 - IERESET.INF: START_PAGE_URL=http://www.google.fr/
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} - http://gfx1.hotmail.com/mail/w2/resources/MSNPUpld.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPACl...
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: StarWind AE Service (StarWindServiceAE) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe

--
End of file - 5273 bytes

Quel est ton antivirus ?

J'en ai pas

car quand j'en met un impossible d'afficher une page ou d'ouvrir un dossier tellement ça rame  

Mets AntiVir  

Ok

Mais bon plus rien a faire maintenant ?



car mon PC est toujours au même point  

Je pense plus à un problème Hardware là.

Peux tu en m'en dire plus car j'ai pas beaucoup de connaissance en informatique

Tu dois voir dans la section Hardware