PC Lent

Bonjour,

Voila Mon PC est devenue trés lent et je comprend pas pourquoi.

Voici la description ComFix

Merci

ComboFix 09-10-11.03 - CKF 12/10/2009 17:22.1.2 - NTFSx86
Lancé depuis: c:\documents and settings\CKF\Mes documents\Téléchargements\ComboFix.exe
AV: Symantec AntiVirus Corporate Edition *On-access scanning disabled* (Updated) {FB06448E-52B8-493A-90F3-E43226D3305C}

AVERTISSEMENT - LA CONSOLE DE RÉCUPÉRATION N'EST PAS INSTALLÉE SUR CETTE MACHINE !!
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\All Users\Application Data\1pdfdec.dll
c:\documents and settings\CKF\Application Data\inst.exe
c:\windows\Downloaded Program Files\bdcore.dll
c:\windows\Downloaded Program Files\libfn.dll
c:\windows\Installer\16dc1be.msi
c:\windows\patch.exe
c:\windows\system32\__c0018BE.exe
c:\windows\system32\__c0029.exe
c:\windows\system32\__c002CD6.exe
c:\windows\system32\__c003D6C.exe
c:\windows\system32\__c004823.exe
c:\windows\system32\__c004AE1.exe
c:\windows\system32\__c005F90.exe
c:\windows\system32\__c006784.exe
c:\windows\system32\__c006952.exe
c:\windows\system32\__c0072AE.exe
c:\windows\system32\Cache
c:\windows\system32\regedit.dll
D:\AUTORUN.INF

.
((((((((((((((((((((((((((((( Fichiers créés du 2009-09-12 au 2009-10-12 ))))))))))))))))))))))))))))))))))))
.

2009-09-28 17:35 . 2009-10-12 14:49 -------- d-----w- C:\tmp
2009-09-28 17:33 . 2009-10-01 15:29 -------- d-----w- c:\documents and settings\CKF\Local Settings\Application Data\smscut
2009-09-28 17:31 . 2009-09-28 17:30 411368 ----a-w- c:\windows\system32\deploytk.dll
2009-09-28 17:30 . 2009-09-28 17:30 -------- d-----w- c:\program files\Java
2009-09-28 17:23 . 2009-09-28 17:33 -------- d-----w- c:\program files\smsCut
2009-09-25 06:56 . 2009-09-25 06:56 221184 ----a-w- c:\windows\system32\bitcap.dll
2009-09-25 06:56 . 2009-09-25 06:56 221184 ----a-w- c:\windows\system32\olecache.dll
2009-09-18 10:09 . 2008-06-19 16:24 28544 ----a-w- c:\windows\system32\drivers\pavboot.sys
2009-09-18 10:05 . 2009-09-18 10:05 -------- d-----w- c:\program files\Panda Security
2009-09-18 09:55 . 2009-09-18 09:56 -------- d-----w- C:\GenProc
2009-09-17 14:23 . 2009-10-12 12:49 -------- d-----w- c:\documents and settings\CKF\Tracing
2009-09-17 14:20 . 2009-09-17 14:20 -------- d-----w- c:\program files\Microsoft
2009-09-17 13:30 . 2009-09-17 13:30 -------- d-----w- c:\program files\Windows Live SkyDrive
2009-09-17 13:29 . 2009-09-17 14:20 -------- d-----w- c:\program files\Windows Live
2009-09-17 12:47 . 2009-09-17 12:47 -------- d-----w- c:\program files\Fichiers communs\Windows Live

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-10-12 13:50 . 2007-05-14 15:04 -------- d-----w- c:\documents and settings\CKF\Application Data\Skype
2009-10-12 07:53 . 2008-03-24 08:49 -------- d-----w- c:\documents and settings\CKF\Application Data\skypePM
2009-09-29 11:54 . 2007-07-10 12:13 -------- d-----w- c:\program files\FiscaVision
2009-09-22 12:20 . 2009-09-05 11:51 -------- d-----w- c:\program files\Malwarebytes' Anti-Malware
2009-09-11 13:07 . 2009-08-19 08:23 -------- d-----w- c:\documents and settings\CKF\Application Data\FileZilla
2009-09-11 12:31 . 2008-12-25 15:05 -------- d-----w- c:\program files\ESET
2009-09-11 08:32 . 2009-09-11 08:32 -------- d-----w- c:\program files\Windows Installer Clean Up
2009-09-11 08:32 . 2009-09-11 08:32 -------- d-----w- c:\program files\MSECACHE
2009-09-10 13:54 . 2009-09-05 11:51 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-09-10 13:53 . 2009-09-05 11:51 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-09-05 11:52 . 2009-09-05 11:52 -------- d-----w- c:\documents and settings\CKF\Application Data\Malwarebytes
2009-09-05 11:51 . 2009-09-05 11:51 -------- d-----w- c:\documents and settings\All Users\Application Data\Malwarebytes
2009-09-05 11:27 . 2007-06-03 10:11 -------- d-----w- c:\program files\RM to MP3 Converter
2009-09-05 11:08 . 2008-06-21 07:20 -------- d-----w- c:\program files\Hotspot Shield
2009-09-01 13:12 . 2009-09-01 13:12 226816 ----a-w- c:\windows\system32\olemon.dll
2009-09-01 13:09 . 2009-09-01 13:09 226816 ----a-w- c:\windows\system32\sysutil.dll
2009-08-26 12:04 . 2001-08-28 10:00 564506 ----a-w- c:\windows\system32\perfh00C.dat
2009-08-26 12:04 . 2001-08-28 10:00 111174 ----a-w- c:\windows\system32\perfc00C.dat
2009-08-19 08:23 . 2009-08-19 08:22 -------- d-----w- c:\program files\FileZilla FTP Client
2009-07-26 15:44 . 2009-07-26 15:44 48448 ----a-w- c:\windows\system32\sirenacm.dll
2009-05-12 13:44 . 2009-05-12 13:42 2951000 ----a-w- c:\program files\FLV PlayerFCSetup.exe
2009-05-12 13:42 . 2009-05-12 13:38 9810664 ----a-w- c:\program files\FLV PlayerRCATSetup.exe
2009-05-12 13:37 . 2009-05-12 13:26 21433208 ----a-w- c:\program files\FLV PlayerRCSetup.exe
.

------- Sigcheck -------

[7] 2004-08-19 . 259AF82A0932EEA4F316F92DB94707B6 . 13312 . . [5.1.2600.2180] . . c:\windows\ServicePackFiles\i386\lsass.exe
[-] 2004-08-19 . 85E1AE7E1D73401CB08EF8620F79D3C5 . 14848 . . [5.1.2600.2180] . . c:\windows\system32\lsass.exe
[-] 2002-08-29 . B7B1C150AFF59455DB4DF082815F88F5 . 11776 . . [5.1.2600.1106] . . c:\windows\$NtServicePackUninstall$\lsass.exe

[7] 2004-08-19 . 63DCDE1A0D86EEB8924D6738FF616EAD . 108544 . . [5.1.2600.2180] . . c:\windows\ServicePackFiles\i386\services.exe
[-] 2004-08-19 . E048088F07EC4E6D99D7ACC1B4F2E0B5 . 110592 . . [5.1.2600.2180] . . c:\windows\system32\services.exe
[-] 2001-08-28 . FC0691097471EE374907E1024EDCBD43 . 101888 . . [5.1.2600.0] . . c:\windows\$NtServicePackUninstall$\services.exe

[7] 2004-08-19 . 2979B03D5382A602623C0535B16AB9C0 . 14336 . . [5.1.2600.2180] . . c:\windows\ServicePackFiles\i386\svchost.exe
[-] 2004-08-19 . D4E1C51B2193ACA4CB34D834B8BC967F . 17408 . . [5.1.2600.2180] . . c:\windows\system32\svchost.exe
[-] 2001-08-28 . 333A4DB8410D8E24DB06D6AEBECDC7C2 . 12800 . . [5.1.2600.0] . . c:\windows\$NtServicePackUninstall$\svchost.exe

[7] 2004-08-19 . 123EEA158F74D0F67A51DCDF065D1091 . 506368 . . [5.1.2600.2180] . . c:\windows\ServicePackFiles\i386\winlogon.exe
[-] 2004-08-19 . AA8CA6FBDDD1DD97EC2B9D7BA2A938DB . 510464 . . [5.1.2600.2180] . . c:\windows\system32\winlogon.exe
[-] 2002-08-29 . 71820BC9EE6653C8748922459DFC384D . 520704 . . [5.1.2600.1106] . . c:\windows\$NtServicePackUninstall$\winlogon.exe
.
((((((((((((((((((((((((((((((((( Points de chargement Reg ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés
REGEDIT4

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{88f8c352-20c7-4051-aaa1-5466cd5e5f63}"= "c:\program files\smscut\tbsmsc.dll" [2009-04-01 2086936]

[HKEY_CLASSES_ROOT\clsid\{88f8c352-20c7-4051-aaa1-5466cd5e5f63}]

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{88f8c352-20c7-4051-aaa1-5466cd5e5f63}]
2009-04-01 13:27 2086936 ----a-w- c:\program files\smsCut\tbsmsc.dll

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{88f8c352-20c7-4051-aaa1-5466cd5e5f63}"= "c:\program files\smscut\tbsmsc.dll" [2009-04-01 2086936]

[HKEY_CLASSES_ROOT\clsid\{88f8c352-20c7-4051-aaa1-5466cd5e5f63}]

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{88F8C352-20C7-4051-AAA1-5466CD5E5F63}"= "c:\program files\smscut\tbsmsc.dll" [2009-04-01 2086936]

[HKEY_CLASSES_ROOT\clsid\{88f8c352-20c7-4051-aaa1-5466cd5e5f63}]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-01-05 39408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ATICCC"="c:\program files\ATI Technologies\ATI.ACE\CLIStart.exe" [2006-05-10 90112]
"ccApp"="c:\program files\Fichiers communs\Symantec Shared\ccApp.exe" [2005-04-18 48752]
"GW Port Controller"="c:\program files\Samsung\SmarThru\PORTCTRL.EXE" [2004-02-09 163840]
"Adobe Photo Downloader"="c:\program files\Adobe\Photoshop Album Edition Découverte\3.0\Apps\apdproxy.exe" [2005-06-23 57344]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2006-01-12 155648]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2007-06-29 286720]
"tppoll"="c:\program files\Topro\tppoll.exe" [2005-03-02 24576]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-15 39792]
"TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" [2009-06-13 198160]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-09-28 149280]
"RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.exe [2006-06-01 16208384]
"SkyTel"="SkyTel.EXE" - c:\windows\SkyTel.exe [2006-05-16 2879488]
"SMSERIAL"="sm56hlpr.exe" - c:\windows\sm56hlpr.exe [2005-06-06 544768]
"CertificateRegistration"="aetcrss1.exe" - c:\windows\system32\aetcrss1.exe [2008-06-02 208896]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\
TL-WN321G Wireless Utility.lnk - c:\program files\TP-LINK\TL-WN321G Wireless Utility\Installer\WINXP\TWCU.exe [2008-4-2 622592]

c:\documents and settings\All Users\Menu D‚marrer\Programmes\D‚marrage\TP-LINK
TL-WN322G Wireless Utility.lnk - c:\program files\TP-LINK\TL-WN322G Wireless Utility\ZDWlan.exe [2009-5-20 491520]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"DisableCAD"= 1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Shareaza\\Shareaza.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009

R0 pavboot;pavboot;c:\windows\system32\drivers\pavboot.sys [18/09/2009 11:09 28544]
R2 HssSrv;Hotspot Shield Helper Service;c:\program files\Hotspot Shield\HssWPR\hsssrv.exe [05/02/2009 22:56 117208]
R3 DCamUSBIntel;USB Video Camera;c:\windows\system32\drivers\TP6800.sys [21/12/2007 07:54 201032]
R3 HssDrv;Hotspot Shield Helper Miniport;c:\windows\system32\drivers\hssdrv.sys [25/02/2009 10:48 31704]
S2 gupdate1c9c9aca1ce22ae;Service Google Update (gupdate1c9c9aca1ce22ae);c:\program files\Google\Update\GoogleUpdate.exe [30/04/2009 16:59 133104]
S3 cxbu1wdm;OEM USB Smart Card Reader;c:\windows\system32\drivers\cxbu1wdm.sys [05/08/2008 07:08 93312]
S3 SavRoam;SAVRoam;c:\program files\Symantec AntiVirus\SavRoam.exe [09/05/2005 09:46 127584]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\aetsprov]
c:\windows\system32\regsvr32.exe /s c:\windows\system32\aetsprov.dll
.
Contenu du dossier 'Tâches planifiées'

2009-10-12 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-04-30 15:59]

2009-10-12 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-04-30 15:59]
.
.
------- Examen supplémentaire -------
.
uStart Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT1940427
uSearch Page = hxxp://www.google.com
uSearch Bar = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
IE: Chercher avec Copernic Agent - c:\program files\Copernic Agent\CopernicAgentExt.rdl/INTEGRATION_MENU_SEARCHEXT
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
TCP: {6F27FBA6-B4E0-4D55-AAF9-7C1F3FCA869E} = 193.95.66.10,193.95.67.20
TCP: {A5ECB070-B2A2-4CAD-8C93-229384CB13E9} = 213.150.189.10,213.150.191.9
Handler: copernicagent - {A979B6BD-E40B-4A07-ABDD-A62C64A4EBF6} - c:\progra~1\COPERN~1\COPERN~1.DLL
Handler: copernicagentcache - {AAC34CFD-274D-4A9D-B0DC-C74C05A67E1D} - c:\progra~1\COPERN~1\COPERN~1.DLL
DPF: DirectAnimation Java Classes - file://c:\windows\Java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - hxxp://www.zebulon.fr/scan8/oscan8.cab
FF - ProfilePath - c:\documents and settings\CKF\Application Data\Mozilla\Firefox\Profiles\823c131f.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1940427&SearchSource=3&q={searchTerms}
FF - prefs.js: browser.startup.homepage - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1940427
FF - prefs.js: keyword.URL - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1940427&SearchSource=2&q=
FF - prefs.js: network.proxy.type - 2
FF - component: c:\documents and settings\CKF\Application Data\Mozilla\Firefox\Profiles\823c131f.default\extensions\{88f8c352-20c7-4051-aaa1-5466cd5e5f63}\components\FFExternalAlert.dll
FF - component: c:\documents and settings\CKF\Application Data\Mozilla\Firefox\Profiles\823c131f.default\extensions\{FCAB6FDD-5585-425b-95C1-5ED856F3FD08}\components\nsCatcher.dll
FF - plugin: c:\program files\Google\Update\1.2.183.7\npGoogleOneClick8.dll
.
.
------- Associations de fichier -------
.
inifile=%SystemRoot%\System32\NOTEPAD.EXE %1"
.
- - - - ORPHELINS SUPPRIMES - - - -

BHO-{F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - c:\program files\Hotspot Shield\hssie\HssIE.dll
HKLM-Run-antihost - c:\windows\system32\ahr.exe
HKU-Default-Run-Nokia.PCSync - c:\program files\Nokia\Nokia PC Suite 6\PcSync2.exe
SSODL-JcWvAgsBsuM-{1CAD5DD8-B607-F772-7582-AB3057ECB1BE} - c:\windows\system32\yzcxn.dll
Notify-WgaLogon - (no file)
AddRemove-Radio_Fr - c:\program files\Radio Fr Solo\Uninstall.exe



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-10-12 17:29
Windows 5.1.2600 Service Pack 2 NTFS

Recherche de processus cachés ...

Recherche d'éléments en démarrage automatique cachés ...

Recherche de fichiers cachés ...

Scan terminé avec succès
Fichiers cachés: 0

**************************************************************************
.
--------------------- CLES DE REGISTRE BLOQUEES ---------------------

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Reinstall\:ôwjY
*]
"DisplayName"="??8\17?\11\09"
"DeviceDesc"="??8\17?\11\09"
"ProviderName"="???\11?\17?\11??"
"MFG"="???????"
"ReinstallString"=".10.1000.7"
"DeviceInstanceIds"=multi:"c:\\windows\\temp\\sbdrv\\smbus\\smbusati.inf\00"
.
--------------------- DLLs chargées dans les processus actifs ---------------------

- - - - - - - > 'winlogon.exe'(1504)
c:\windows\system32\Ati2evxx.dll
.
Heure de fin: 2009-10-12 17:31
ComboFix-quarantined-files.txt 2009-10-12 16:31

Avant-CF: 21 354 168 320 octets libres
Après-CF: 23 021 338 624 octets libres

WindowsXP-KB310994-SP2-Pro-BootDisk-FRA.exe

219 --- E O F --- 2008-04-24 07:53