Lenteur pc suite desinfection - Page 3

Marie fait

A mon avis on tourne un peu en rond, malheureusement à cause de ta version ;;(

Refais ComboFix et un log hijackthis
stp

Bonjour Marie voici les 2 rapports

ComboFix 08-01-10.2 - blanchard 2008-01-13 10:52:49.9 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.0.1252.1.1036.18.248 [GMT 1:00]
Running from: C:\Documents and Settings\blanchard\Bureau\ComboFix.exe
.

(((((((((((((((((((((((((((((((((((( Autres suppressions ))))))))))))))))))))))))))))))))))))))))))))))))
.
.
---- Previous Run -------
.
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Alwil Software\Avast4\ashDisp .exe
C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\kernel
C:\Program Files\kernel\kernel .exe
C:\Program Files\kernel\kernel.exe
C:\Program Files\QuickTime\qttask .exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Ulead Systems\Ulead Photo Express 2 SE\ChkFont.exe
C:\WINDOWS\cookies.ini
C:\WINDOWS\Mixer .exe
C:\WINDOWS\System32\ctfmon.exe
C:\WINDOWS\system32\ctfmon.exe.tmp
C:\WINDOWS\system32\prtss.ini
C:\WINDOWS\system32\prtss.ini2
C:\WINDOWS\system32\RCX1B.tmp
C:\WINDOWS\system32\RCX1C.tmp
C:\WINDOWS\system32\RCX1D.tmp
C:\WINDOWS\system32\RCX1E.tmp
C:\WINDOWS\system32\RCX1F.tmp
C:\WINDOWS\system32\RCX20.tmp
C:\WINDOWS\system32\RCX21.tmp
C:\WINDOWS\system32\RCX22.tmp
C:\WINDOWS\system32\RCX23.tmp
C:\WINDOWS\system32\RCX24.tmp
C:\WINDOWS\system32\sstrp.dll
C:\WINDOWS\system32\sstrp.exe
C:\WINDOWS\system32\vempiutm.exe
C:\WINDOWS\system32\vtxyofsc.dll
C:\WINDOWS\UpdReg.EXE

[code] <pre>
C:\Program Files\Creative\SBLive\Program\ADGJDet .exe ---> ADGJDet.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched .exe ---> jusched.exe
C:\Program Files\kernel\kernel .exe ---> kernel.exe
C:\Program Files\QuickTime\qttask .exe ---> QooBox
C:\Program Files\Real\RealPlayer\RealPlay .exe ---> RealPlay.exe
C:\Program Files\Ulead Systems\Ulead Photo Express 2 SE\ChkFont .exe ---> ChkFont.exe
C:\WINDOWS\Mixer .exe ---> QooBox
C:\WINDOWS\UpdReg .EXE ---> UpdReg.EXE
C:\WINDOWS\system32\ctfmon .exe ---> ctfmon.exe
C:\Program Files\Alwil Software\Avast4\ashDisp .exe ---> QooBox
C:\Program Files\Creative\SBLive\Program\ADGJDet .exe ---> ADGJDet.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched .exe ---> jusched.exe
C:\Program Files\QuickTime\qttask .exe ---> QooBox
C:\Program Files\Real\RealPlayer\RealPlay .exe ---> RealPlay.exe
C:\Program Files\Ulead Systems\Ulead Photo Express 2 SE\ChkFont .exe ---> ChkFont.exe
C:\WINDOWS\Mixer .exe ---> QooBox
C:\WINDOWS\UpdReg .EXE ---> UpdReg.EXE
</pre> [/code]
.
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))

.
-------\LEGACY_DOMAINSERVICE
-------\DomainService

((((((((((((((((((((((((((((( Fichiers créés 2007-12-13 to 2008-01-13 ))))))))))))))))))))))))))))))))))))
.

2008-01-12 23:22 . 2008-01-12 23:22 1,818,624 --a------ C:\WINDOWS\Mixer .exe
2008-01-10 23:19 . 2008-01-11 16:15 344,576 --a------ C:\WINDOWS\system32\sstrp.dll
2008-01-10 22:30 . 2007-12-04 13:54 95,608 --a------ C:\WINDOWS\system32\AvastSS.scr
2008-01-10 22:30 . 2007-12-04 15:55 94,544 --a------ C:\WINDOWS\system32\drivers\aswmon2.sys
2008-01-10 22:30 . 2007-12-04 15:56 93,264 --a------ C:\WINDOWS\system32\drivers\aswmon.sys
2008-01-10 22:30 . 2007-12-04 15:51 42,912 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys
2008-01-10 22:30 . 2007-12-04 15:49 26,624 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys
2008-01-10 22:30 . 2007-12-04 15:53 23,152 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys
2008-01-10 22:29 . 2007-12-04 14:04 837,496 --a------ C:\WINDOWS\system32\aswBoot.exe
2008-01-10 22:29 . 2004-01-09 10:13 380,928 --a------ C:\WINDOWS\system32\actskin4.ocx
2008-01-10 21:58 . 2008-01-10 21:58 51,354,801 --a------ C:\upload_moi_DIDIER.tar.gz
2008-01-10 21:17 . 2008-01-12 22:09 90,112 --a------ C:\WINDOWS\UpdReg.EXE
2008-01-09 11:37 . 2008-01-09 11:37 <REP> d-------- C:\Program Files\Viewpoint
2008-01-09 11:37 . 2008-01-09 11:37 <REP> d-------- C:\Program Files\Carpe Diem
2008-01-08 23:24 . 2008-01-08 23:24 <REP> d--h----- C:\WINDOWS\system32\GroupPolicy
2008-01-08 21:15 . 2008-01-08 23:27 <REP> d-------- C:\Program Files\IZArc
2008-01-08 10:43 . 2008-01-08 23:26 <REP> d-------- C:\Program Files\eMule
2008-01-07 22:33 . 2008-01-09 22:27 <REP> d-------- C:\Program Files\Navilog1
2008-01-07 22:06 . 2008-01-07 22:06 138,752 --a------ C:\WINDOWS\system32\drivers\sp_rsdrv2.sys
2008-01-07 20:39 . 2008-01-07 20:39 <REP> d-------- C:\Documents and Settings\All Users\Application Data\MailFrontier
2008-01-07 20:39 . 2007-06-21 21:55 54,672 --a------ C:\WINDOWS\system32\vsutil_loc040c.dll
2008-01-07 20:39 . 2007-06-21 21:55 42,384 --a------ C:\WINDOWS\zllsputility_loc040c.dll
2008-01-07 20:39 . 2007-06-21 21:55 21,904 --a------ C:\WINDOWS\system32\imsinstall_loc040c.dll
2008-01-07 20:39 . 2007-06-21 21:55 17,808 --a------ C:\WINDOWS\system32\imslsp_install_loc040c.dll
2008-01-07 20:39 . 2004-04-27 04:40 11,264 --a------ C:\WINDOWS\system32\SpOrder.dll
2008-01-07 20:39 . 2008-01-07 21:44 4,212 ---h----- C:\WINDOWS\system32\zllictbl.dat
2008-01-07 20:38 . 2007-05-31 00:03 110,360 --a------ C:\WINDOWS\system32\drivers\kl1.sys
2008-01-07 20:38 . 2008-01-07 20:38 75,932 --a------ C:\WINDOWS\system32\drivers\klick.dat
2008-01-07 20:38 . 2008-01-07 20:38 74,396 --a------ C:\WINDOWS\system32\drivers\klin.dat
2008-01-07 20:38 . 2008-01-07 21:09 71,712 --ahs---- C:\WINDOWS\system32\drivers\fidbox.dat
2008-01-07 20:38 . 2008-01-07 21:09 7,456 --ahs---- C:\WINDOWS\system32\drivers\fidbox2.dat
2008-01-07 20:38 . 2008-01-07 21:09 1,916 --ahs---- C:\WINDOWS\system32\drivers\fidbox.idx
2008-01-07 20:38 . 2008-01-07 21:09 1,772 --ahs---- C:\WINDOWS\system32\drivers\fidbox2.idx
2008-01-07 20:37 . 2008-01-08 23:21 <REP> d-------- C:\WINDOWS\system32\ZoneLabs
2008-01-07 20:37 . 2008-01-10 17:55 <REP> d-------- C:\Program Files\Spyware Terminator
2008-01-07 20:37 . 2008-01-10 17:53 <REP> d-------- C:\Documents and Settings\blanchard\Application Data\Spyware Terminator
2008-01-07 20:37 . 2008-01-10 17:39 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Spyware Terminator
2008-01-07 20:36 . 2008-01-08 23:24 <REP> d-------- C:\WINDOWS\Internet Logs
2008-01-06 20:31 . 2002-02-28 22:28 233,472 --------- C:\WINDOWS\system32\kroysetup.dll
2008-01-04 23:10 . 2008-01-10 07:50 2,169,344 --a------ C:\WINDOWS\Mixer.exe
2008-01-04 21:50 . 2000-08-31 08:00 51,200 --a------ C:\WINDOWS\NirCmd.exe
2008-01-04 21:30 . 2008-01-07 20:08 <REP> d-------- C:\Program Files\a-squared Free
2008-01-04 18:50 . 2008-01-10 23:04 <REP> d-------- C:\VundoFix Backups
2008-01-03 23:14 . 2008-01-06 20:27 <REP> d-a------ C:\Documents and Settings\All Users\Application Data\TEMP
2008-01-03 23:00 . 2005-09-23 08:29 626,688 --a------ C:\WINDOWS\system32\msvcr80.dll
2008-01-03 21:34 . 2008-01-07 20:00 <REP> d-------- C:\Documents and Settings\All Users\Application Data\Avira
2008-01-03 20:25 . 2008-01-03 20:25 <REP> d-------- C:\Program Files\Trend Micro
2008-01-02 21:07 . 2008-01-02 21:07 <REP> d-------- C:\Program Files\Alwil Software
2008-01-02 21:07 . 2003-03-18 21:20 1,060,864 --a------ C:\WINDOWS\system32\MFC71.dll
2008-01-02 21:07 . 2003-03-18 20:14 499,712 --a------ C:\WINDOWS\system32\MSVCP71.dll
2008-01-02 16:08 . 2008-01-02 21:37 <REP> d--hs---- C:\WINDOWS\RGlkaWVyIEJMQU5DSEFSRA
2008-01-02 16:08 . 2008-01-02 22:09 389,120 --a------ C:\WINDOWS\mrofinu1000106.exe.tmp
2008-01-02 16:07 . 2008-01-02 16:07 <REP> d-------- C:\WINDOWS\system32\ardCo01
2008-01-02 16:07 . 2008-01-02 16:07 <REP> d-------- C:\Temp\cEeer12
2008-01-02 16:07 . 2008-01-05 18:57 <REP> d-------- C:\Temp
2008-01-02 11:56 . 2008-01-10 22:07 2,522 --a------ C:\WINDOWS\ACROREAD.INI
2008-01-02 11:53 . 2008-01-02 11:53 <REP> d-------- C:\Program Files\Canon
2008-01-02 11:46 . 2008-01-02 11:46 <REP> d-------- C:\Program Files\Ulead Systems
2008-01-02 11:46 . 1998-09-29 17:22 27,648 --a------ C:\WINDOWS\Photo Express 2 SE.scr
2007-12-25 22:20 . 2008-01-08 15:41 54,156 --ah----- C:\WINDOWS\QTFont.qfn
2007-12-25 22:20 . 2007-12-25 22:21 1,409 --a------ C:\WINDOWS\QTFont.for
2007-12-25 20:57 . 2006-11-30 15:14 18,704 -ra------ C:\WINDOWS\system32\drivers\se45nd5.sys
2007-12-25 20:56 . 2006-11-30 15:14 90,800 -ra------ C:\WINDOWS\system32\drivers\se45unic.sys
2007-12-25 20:56 . 2006-11-30 15:14 5,872 -ra------ C:\WINDOWS\system32\drivers\se45wh.sys
2007-12-25 20:56 . 2006-11-30 15:14 4,128 -ra------ C:\WINDOWS\system32\drivers\se45cr.sys
2007-12-25 20:55 . 2006-11-30 15:14 88,624 -ra------ C:\WINDOWS\system32\drivers\se45mgmt.sys
2007-12-25 20:55 . 2006-11-30 15:13 6,240 -ra------ C:\WINDOWS\system32\drivers\se45cmnt.sys
2007-12-25 20:55 . 2006-11-30 15:13 6,240 -ra------ C:\WINDOWS\system32\drivers\se45cm.sys
2007-12-25 20:54 . 2006-11-30 15:14 86,432 -ra------ C:\WINDOWS\system32\drivers\se45obex.sys
2007-12-25 20:51 . 2006-11-30 15:14 97,088 -ra------ C:\WINDOWS\system32\drivers\se45mdm.sys
2007-12-25 20:51 . 2006-11-30 15:14 9,360 -ra------ C:\WINDOWS\system32\drivers\se45mdfl.sys
2007-12-25 20:49 . 2006-11-30 15:13 61,536 -ra------ C:\WINDOWS\system32\drivers\se45bus.sys
2007-12-25 20:49 . 2006-11-30 15:14 5,872 -ra------ C:\WINDOWS\system32\drivers\se45whnt.sys

.
(((((((((((((((((((((((((((((((((( Compte-rendu de Find3M ))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-01-12 22:17 --------- d-----w C:\Program Files\QuickTime
2008-01-08 22:21 --------- d-----w C:\Program Files\Google
2008-01-08 22:21 --------- d-----w C:\Program Files\DahediSign
2008-01-08 22:19 --------- d-----w C:\Program Files\Slayers Online
2008-01-07 22:13 --------- d-----w C:\Program Files\Java
2008-01-07 19:02 --------- d-----w C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-01-02 20:25 --------- d-----w C:\Program Files\Services en ligne
2007-12-25 21:31 --------- d--h--w C:\Program Files\InstallShield Installation Information
2007-11-22 18:09 258,048 ------w C:\WINDOWS\Setup1.exe
2007-11-22 18:08 73,216 ----a-w C:\WINDOWS\ST6UNST.EXE
2007-11-22 16:44 --------- d-----w C:\Program Files\StepMania
2007-11-22 16:37 --------- d-----w C:\Program Files\Lavasoft
2007-10-24 19:47 45,224 ----a-w C:\Documents and Settings\blanchard\Application Data\GDIPFONTCACHEV1.DAT
2005-07-29 15:24 472 --sha-r C:\WINDOWS\RGlkaWVyIEJMQU5DSEFSRA\l354uqpVKHLgkocGmHImlE.vbs
.
[code]<pre>
----a-w 2,834,432 2008-01-10 16:44:29 C:\Program Files\Spyware Terminator\SpywareTerminatorShield .exe
----a-w 1,818,624 2008-01-12 22:22:36 C:\WINDOWS\Mixer .exe
</pre>[/code]

((((((((((((((((((((((((((((( snapshot_2008-01-10_18.57.12.29 )))))))))))))))))))))))))))))))))))))))))
.
- 2008-01-10 17:52:18 16,384 -c--a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat
+ 2008-01-12 22:21:04 16,384 -c--a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat
- 2008-01-10 17:52:18 32,768 -c--a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat
+ 2008-01-12 22:21:04 32,768 -c--a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat
- 2008-01-10 17:52:21 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
+ 2008-01-12 22:21:04 32,768 ----a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat
- 2008-01-10 17:43:30 270,336 ----a-w C:\WINDOWS\system32\config\systemprofile\ntuser.dat
+ 2008-01-13 09:52:35 270,336 ----a-w C:\WINDOWS\system32\config\systemprofile\ntuser.dat
- 2003-01-13 12:57:58 589,881 ----a-w C:\WINDOWS\system32\jscript.dll
+ 2003-01-13 13:57:58 589,881 ----a-w C:\WINDOWS\system32\jscript.dll
+ 2007-03-05 12:34:28 676,224 ----a-w C:\WINDOWS\system32\OGACheckControl.DLL
+ 2007-02-15 14:22:26 688,000 ----a-w C:\WINDOWS\system32\SelfHelpControl.DLL
+ 2008-01-12 22:20:57 16,384 ----atw C:\WINDOWS\temp\Perflib_Perfdata_508.dat
.
((((((((((((((((((((((((((((((((( Point de chargement Reg )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Note* les éléments vides & les éléments initiaux légitimes ne sont pas listés

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{34C00A56-6582-487A-80A4-2FA963C56F21}]
C:\Program Files\MSN Gaming Zone\laxulix539.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{A9B04FCD-3328-431E-BBF6-A13F2E32EBEA}]
2008-01-11 16:15 344576 --a------ C:\WINDOWS\System32\sstrp.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{C6ADDC12-10FB-4A08-DA5F-3EE600F55E99}]
C:\WINDOWS\System32\xnw.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{CC0BEA90-ECDF-4492-81CD-6C72D7E42914}]
C:\Program Files\Services en ligne\homer83122.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\System32\ctfmon.exe" [ ]
"kernel"="C:\Program Files\kernel\kernel.exe" [ ]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"C-Media Mixer"="Mixer.exe" [2008-01-10 07:50 2169344 C:\WINDOWS\Mixer.exe]
"nwiz"="nwiz.exe" [2002-07-16 11:16 372736 C:\WINDOWS\system32\nwiz.exe]
"RealTray"="C:\Program Files\Real\RealPlayer\RealPlay.exe" [2008-01-12 22:09 26112]
"WINDVDPatch"="CTHELPER.EXE" [2002-07-02 16:56 24576 C:\WINDOWS\system32\CTHELPER.EXE]
"UpdReg"="C:\WINDOWS\UpdReg.EXE" [2008-01-12 22:09 90112]
"Jet Detection"="C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe" [2008-01-12 22:09 28672]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2008-01-12 22:09 132496]
"PE2CKFNT SE"="C:\Program Files\Ulead Systems\Ulead Photo Express 2 SE\ChkFont.exe" [2008-01-12 22:09 25088]
"SpywareTerminator"="C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe" [ ]
"QuickTime Task"="C:\Program Files\QuickTime\qttask .exe" [ ]
"avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 14:00 79224]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [ ]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{ED0ACB58-556F-21DA-DDFE-6D20F3F611BB}"= C:\WINDOWS\system32\kb1ss1p.dll [ ]

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menu Démarrer^Programmes^Démarrage^WinZip Quick Pick.lnk]
path=C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\WinZip Quick Pick.lnk
backup=C:\WINDOWS\pss\WinZip Quick Pick.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
--a------ 2002-03-05 10:20 1462544 C:\Program Files\Messenger\msmsgs.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RealTray]
--a------ 2008-01-12 22:09 26112 C:\Program Files\Real\RealPlayer\RealPlay.exe

R1 sp_rsdrv2;Spyware Terminator Driver 2;C:\WINDOWS\System32\drivers\sp_rsdrv2.sys [2008-01-07 22:06]
R3 ADM8511;Convertisseur USB vers Fast Ethernet ADMtek ADM8511/AN986;C:\WINDOWS\System32\DRIVERS\ADM8511.SYS [2001-08-17 19:11]
S3 als4k;Avance Audio Miniport Driver (WDM);C:\WINDOWS\System32\drivers\als4000.sys []
S3 ctlsb16;Pilote Creative SB16/AWE32/AWE64 (WDM);C:\WINDOWS\System32\drivers\ctlsb16.sys [2001-08-17 19:19]
S3 cwbmidi_device;Pilote UART Crystal WDM MPU-401;C:\WINDOWS\System32\drivers\cwbmidi.sys [2001-08-17 19:19]
S3 ELNK3;3Com EtherLink III;C:\WINDOWS\System32\DRIVERS\elnk3.sys [2001-08-17 19:10]
S3 gsplittm;gsplittm;C:\DOCUME~1\BLANCH~1\LOCALS~1\Temp\gsplittm.sys []
S3 LcdMini;Digital Audio Player(Model : PA30B);C:\WINDOWS\System32\DRIVERS\LcdMini.sys [2002-03-28 12:38]
S3 msloop;Pilote de carte de bouclage Microsoft;C:\WINDOWS\System32\DRIVERS\loop.sys [2001-08-17 20:53]
S3 NtApm;Pilote d'interface NT APM/hérité;C:\WINDOWS\System32\DRIVERS\NtApm.sys [2001-08-23 16:11]
S3 PCASp50;PCASp50 NDIS Protocol Driver;C:\WINDOWS\System32\Drivers\PCASp50.sys [2005-11-19 02:13]

.
Contenu du dossier 'Scheduled Tasks/Tâches planifiées'
"2008-01-12 22:20:57 C:\WINDOWS\Tasks\Nettoyage de disque.job"
- C:\WINDOWS\system32\cleanmgr.exe
"2008-01-13 09:54:02 C:\WINDOWS\Tasks\Vérifier les mises à jour de Windows Live Toolbar.job"
- C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE
.
**************************************************************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-01-13 11:00:11
Windows 5.1.2600 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

**************************************************************************
.
Completion time: 2008-01-13 11:04:05
ComboFix-quarantined-files.txt 2008-01-13 10:03:02
.
2008-01-12 19:37:38 --- E O F ---

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:07:11, on 13/01/2008
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\cleanmgr.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\wanmpsvc.exe
C:\WINDOWS\Mixer.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\WINDOWS\System32\CTHELPER.EXE
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\Mixer .exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\WINDOWS\System32\devldr32.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Ulead Systems\Ulead Photo Express 2 SE\CalCheck.exe
C:\WINDOWS\RaUI.exe
C:\WINDOWS\explorer.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.fr/?gws_rd=ssl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://www.crawler.com/search/ie.aspx?tb_id=60327
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,CustomizeSearch = http://dnl.crawler.com/support/sa_customize.aspx?TbId=60327
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {BE89472C-B803-4D1D-9A9A-0A63660E0FE3} - C:\PROGRA~1\COPERN~1\COPERN~1.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: 0 - {34C00A56-6582-487A-80A4-2FA963C56F21} - C:\Program Files\MSN Gaming Zone\laxulix539.dll (file missing)
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {A9B04FCD-3328-431E-BBF6-A13F2E32EBEA} - C:\WINDOWS\System32\sstrp.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O2 - BHO: (no name) - {C6ADDC12-10FB-4A08-DA5F-3EE600F55E99} - C:\WINDOWS\System32\xnw.dll (file missing)
O2 - BHO: (no name) - {CC0BEA90-ECDF-4492-81CD-6C72D7E42914} - C:\Program Files\Services en ligne\homer83122.dll (file missing)
O3 - Toolbar: Copernic Agent - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - C:\PROGRA~1\COPERN~1\COPERN~1.DLL
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [C-Media Mixer] Mixer.exe /startup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [RealTray] C:\Program Files\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [Jet Detection] "C:\Program Files\Creative\SBLive\PROGRAM\ADGJDet.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [PE2CKFNT SE] C:\Program Files\Ulead Systems\Ulead Photo Express 2 SE\ChkFont.exe
O4 - HKLM\..\Run: [SpywareTerminator] "C:\Program Files\Spyware Terminator\SpywareTerminatorShield.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask .exe" -atboottime
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [kernel] C:\Program Files\kernel\kernel.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Icône AOL.lnk = C:\Program Files\AOL 7.0b\aoltray.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Photo Express Calendar Checker SE.lnk = C:\Program Files\Ulead Systems\Ulead Photo Express 2 SE\CalCheck.exe
O4 - Global Startup: Ralink Wireless Utility.lnk = C:\WINDOWS\RaUI.exe
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - https://onedrive.live.com/?id=favorites
O8 - Extra context menu item: Chercher avec Copernic Agent - res://C:\Program Files\Copernic Agent\CopernicAgentExt.rdl/INTEGRATION_MENU_SEARCHEXT
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Ouvrir dans un nouvel onglet d'arrière-plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/229?5063f681811e4e77af5cf0edda902b0c
O8 - Extra context menu item: Ouvrir dans un nouvel onglet de premier plan - res://C:\Program Files\Windows Live Toolbar\Components\fr-fr\msntabres.dll.mui/230?5063f681811e4e77af5cf0edda902b0c
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O15 - Trusted Zone: *.imageservr.com
O15 - Trusted Zone: *.imageservr.com (HKLM)
O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) - http://download.microsoft.com/download/C/B/F/CBF23A2C-3E55-4664-BC5C-762780D79BA0/OGAControl.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
O16 - DPF: {1E3F1348-4370-4BBE-A67A-CC7ED824CA85} (Microsoft Genuine Advantage Self Support Tool) - http://download.microsoft.com/download/7/4/9/749b0dc5-2175-4d5b-a6dd-9c4bc923683e/Selfhelpcontrol.cab
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
O16 - DPF: {2B323CD9-50E3-11D3-9466-00A0C9700498} (Yahoo! Audio Conferencing) - http://cs8.chat.sc5.yahoo.com/v43/yacscom.cab
O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) - http://messenger.zone.msn.com/FR-FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - http://charon777.free.fr/plugins/hardwaredetection.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) - http://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload.adobe.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - http://us.dl1.yimg.com/download.yahoo.com/dl/toolbar/my/yiebio5_0_2_7.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com - C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: WAN Miniport (ATW) Service (WANMiniportService) - America Online, Inc. - C:\WINDOWS\wanmpsvc.exe

Marie nous allons nous arreter la
je te remercie de ta patience
mais je vais essayer de trouver une solution pour sp2
je pense que je reviendrais a toi pour savoir comment on fait avec un disque et une cle valide pour le remonter sur mon pc
nous allons fermer ce post
et j'un recreer un quand j'aurais plus d'info
deuxieme merci
CDR Didier

didier

actuellement, te desinfecter est impossible, tu rechopperas aussi sec de nouvelles veroles, trop de failles dans ton systeme

et , à la vu de combofix, tu es surement encore infecté

avec un cd xp et une licence , tu seras dans la legalité , et protegé, mais il te faudra formater pour effacer les virus presents

sinon
comme, je t'ai dit , tu pourrais installer un linux, t'as machine n'etant pas tres performante, tu y gagnerais

tiens nous au courant,

Coucou

Malheureusement je crois que nous n'avons pas le choix. C'est l'inconvénient de certaines versions Xp .../...
Tu sais j'ai débuté comme ça ;;))
Comme tu te balades de temps en temps avec La Mule, tu prends des risques à planter ton PC.
Je pense que l'investissement dans une version ""au top"" t'enlèveras pas mal de galère.

De toutes les façons, si tu as besoin de renseignements ou autres, tu sais où nous joindre.

Bonne Chance
Bon courage

A++