winlogon.exe élevé d'utilisation cpu .. highjackthis posted info

Aider! avoir problème avec mon ordinateur car il hungs de temps en temps parce que mon winlogon.exe utilise des cpu usage .. il hungs quand il arrive à 50 .. quelqu'un peut-il aider? ci-dessous est l'info de HijackThis .. merci!

Logfile de Trend Micro HijackThis v2.0.2
Scan sauvé à 10:16:44 AM, le 9.3.2008
Plate-forme: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C: \ WINDOWS \ System32 \ smss. exe
C: \ WINDOWS \ system32 \ winlogon.exe
C: \ WINDOWS \ system32 \ services.exe
C: \ WINDOWS \ system32 \ lsass.exe
C: \ WINDOWS \ system32 \ svchost.exe
C: \ WINDOWS \ System32 \ svchost.exe
C: \ WINDOWS \ system32 \ spoolsv.exe
C: \ Program Files \ AntiVir PersonalEdition Classic \ avguard.exe
C: \ Program Files \ Common Files \ NComputer \ bootsrv.exe
C: \ WINDOWS \ System32 \ KmServc.exe
C: \ Program Files \ AntiVir PersonalEdition Classic \ sched.exe
C: \ Program Files \ Bonjour \ mDNSResponder. exe
C: \ Program Files \ Diskeeper Corporation \ Diskeeper \ DkService.exe
C: \ Program Files \ Fichiers communs \ Microsoft Shared \ VS7DEBUG \ Mdm.exe
C: \ WINDOWS \ system32 \ winlogon.exe
C: \ WINDOWS \ system32 \ winlogon.exe
C: \ WINDOWS \ system32 \ winlogon.exe
C: \ WINDOWS \ Explorer.EXE
C: \ WINDOWS \ system32 \ igfxpers.exe
C: \ Program Files \ AntiVir PersonalEdition Classic \ avgnt.exe
C: \ Program Files \ NCT-2000-XP \ KmMsg.exe
C: \ WINDOWS \ system32 \ ctfmon. exe
C: \ Program Files \ Siber Systems \ AI RoboForm \ RoboTaskBarIcon.exe
C: \ Program Files \ Yahoo! \ Messenger \ ymsgr_tray.exe
C: \ WINDOWS \ system32 \ Wuauclt.exe
C: \ WINDOWS \ system32 \ winlogon.exe
C: \ Program Files \ Trend Micro \ HijackThis \ HijackThis.exe

R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Window Title = Akashi kuma XP!
O1 - Hosts: 8.17.172.190 crawlbot.hostyourapps. com
O2 - BHO: (no name) - (724d43a9-0d85-11D4-9908-00400523e39a) - C: \ Program Files \ Siber Systems \ AI RoboForm \ roboform.dll
O2 - BHO: Groove GFS Browser Helper - (72853161-30C5-4D22-B7F9-0BBC1D38A37E) - C: \ PROGRA ~ 1 \ MICROS ~ 2 \ Office12 \ GRA8E1 ~ 1.DLL
O2 - BHO: SSVHelper Class - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files \ Java \ jre1.6.0_05 \ bin \ ssv. dll
O2 - BHO: EpsonToolBandKicker Class - (E99421FB-68DD-40F0-B4AC-B7027CAE2F1A) - C: \ Program Files \ EPSON \ EPSON Web-To-Page \ EPSON Web-To-Page.dll
O3 - Toolbar: & RoboForm - (724d43a0-0d85-11D4-9908-00400523e39a) - C: \ Program Files \ Siber Systems \ AI RoboForm \ roboform.dll
O3 - Toolbar: EPSON Web-To-Page - (EE5D279F-081B-4404-994D-C6B60AAEBA6D) - C: \ Program Files \ EPSON \ EPSON Web-To-Page \ EPSON Web-To-Page.dll
O4 - HKLM \ .. \ Run: [Persistence] C: \ WINDOWS \ system32 \ igfxpers. exe
O4 - HKLM \ .. \ Run: [avgnt] "C: \ Program Files \ AntiVir PersonalEdition Classic \ avgnt.exe" / min
O4 - HKLM \ .. \ Run: [HpMessage] C: \ Program Files \ NCT-2000-XP \ KmMsg.exe
O4 - HKCU \ .. \ Run: [ctfmon.exe] C: \ WINDOWS \ system32 \ ctfmon.exe
O4 - HKCU \ .. \ Run: [RoboForm] "C: \ Program Files \ Siber Systems \ AI RoboForm \ RoboTaskBarIcon.exe"
O4 - HKCU \ .. \ Run: [Yahoo! Pager] "C: \ Program Files \ Yahoo! \ Messenger \ YahooMessenger. exe "-quiet
O4 - HKUS \ S-1-5-21-1606980848-1532298954-839522115-1023 \ .. \ Run: [RoboForm] "C: \ Program Files \ Siber Systems \ AI RoboForm \ RoboTaskBarIcon.exe" (User m.poblete )
O4 - HKUS \ S-1-5-21-1606980848-1532298954-839522115-1023 \ .. \ Run: [ctfmon.exe] C: \ WINDOWS \ system32 \ ctfmon.exe (User m.poblete)
O4 - HKUS \ S-1-5-21-1606980848-1532298954-839522115-1023 \ .. \ Run: [Yahoo! Pager] "C: \ Program Files \ Yahoo! \ Messenger \ YahooMessenger.exe"-quiet (User m. POBLETE)
O4 - HKUS \ S-1-5-21-1606980848-1532298954-839522115-1024 \ .. \ Run: [RoboForm] "C: \ Program Files \ Siber Systems \ AI RoboForm \ RoboTaskBarIcon.exe" (User k.cabatuan )
O4 - HKUS \ S-1-5-21-1606980848-1532298954-839522115-1027 \ .. \ Run: [ctfmon.exe] C: \ WINDOWS \ system32 \ ctfmon.exe (User o.diron)
O4 - HKUS \ S-1-5-21-1606980848-1532298954-839522115-1042 \ .. \ Run: [ctfmon.exe] C: \ WINDOWS \ system32 \ ctfmon.exe (User j. Santillan)
O8 - Extra du menu contextuel: Personnaliser le menu -- file://C : \ Program Files \ Siber Systems \ AI RoboForm \ RoboFormComCustomizeIEMenu.html
O8 - Extra du menu contextuel: E & xporter vers Microsoft Excel -- res://C : \ PROGRA ~ 1 \ MICROS ~ 2 \ Office12 \ EXCEL.EXE/3000
O8 - Extra du menu contextuel: Fill Forms -- file://C : \ Program Files \ Siber Systems \ AI RoboForm \ RoboFormComFillForms. html
O8 - Extra du menu contextuel: RoboForm Toolbar -- file://C : \ Program Files \ Siber Systems \ AI RoboForm \ RoboFormComShowToolbar.html
O8 - Extra du menu contextuel: Save Forms -- file://C : \ Program Files \ Siber Systems \ AI RoboForm \ RoboFormComSavePass.html
O9 - Extra button: (no name) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_05 \ bin \ ssv. dll
O9 - Extra "Outils" menuitem: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_05 \ bin \ ssv.dll
O9 - Extra button: Envoyer à OneNote - (2670000A-7350-4f3c-8081-5663EE0C6C49) - C: \ PROGRA ~ 1 \ MICROS ~ 2 \ Office12 \ ONBttnIE.dll
O9 - Extra "Outils" menuitem: S & end à OneNote - (2670000A-7350-4f3c-8081-5663EE0C6C49) - C: \ PROGRA ~ 1 \ MICROS ~ 2 \ Office12 \ ONBttnIE. dll
O9 - Extra button: Fill Forms - (320AF880-6646-11D3-ABEE-C5DBF3571F46) -- file://C : \ Program Files \ Siber Systems \ AI RoboForm \ RoboFormComFillForms.html
O9 - Extra "Outils" menuitem: Fill Forms - (320AF880-6646-11D3-ABEE-C5DBF3571F46) -- file://C : \ Program Files \ Siber Systems \ AI RoboForm \ RoboFormComFillForms.html
O9 - Extra button: Enregistrer - (320AF880-6646-11D3-ABEE-C5DBF3571F49) -- file://C : \ Program Files \ Siber Systems \ AI RoboForm \ RoboFormComSavePass. html
O9 - Extra "Outils" menuitem: Save Forms - (320AF880-6646-11D3-ABEE-C5DBF3571F49) -- file://C : \ Program Files \ Siber Systems \ AI RoboForm \ RoboFormComSavePass.html
O9 - Extra button: RoboForm - (724d43aa-0d85-11D4-9908-00400523e39a) -- file://C : \ Program Files \ Siber Systems \ AI RoboForm \ RoboFormComShowToolbar. html
O9 - Extra "Outils" menuitem: RoboForm Toolbar - (724d43aa-0d85-11D4-9908-00400523e39a) -- file://C : \ Program Files \ Siber Systems \ AI RoboForm \ RoboFormComShowToolbar.html
O9 - Extra button: Bonjour - (7F9DB11C-E358-4ca6-A83D-ACC663939424) - C: \ Program Files \ Bonjour \ ExplorerPlugin.dll
O9 - Extra button: Research - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ PROGRA ~ 1 \ MICROS ~ 2 \ Office12 \ REFIEBAR.DLL
O9 - Extra button: Yahoo! Messenger - (E5D12C4E-7B4F-11D3-B5C9-0050045C3C96) - C: \ Program Files \ Yahoo! \ Messenger \ YahooMessenger.exe
O9 - Extra "Outils" menuitem: Yahoo! Messenger - (E5D12C4E-7B4F-11D3-B5C9-0050045C3C96) - C: \ Program Files \ Yahoo! \ Messenger \ YahooMessenger.exe
O9 - Extra button: Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe
O9 - Extra "Outils" menuitem: Windows Messenger - (FB5F1910-F110-11d2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs. exe
O18 - Protocol: grooveLocalGWS - (88FED34C-F0CA-4636-A375-3CB6248B04CD) - C: \ PROGRA ~ 1 \ MICROS ~ 2 \ Office12 \ GR99D3 ~ 1.DLL
O20 - Winlogon Notify: KmWinLog - C: \ WINDOWS \ SYSTEM32 \ Kmlogon.dll
O23 - Service: Adobe LM Service - Unknown owner - C: \ Program Files \ Fichiers communs \ Adobe Systems Shared \ Service \ Adobelmsvc.exe
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C: \ Program Files \ AntiVir PersonalEdition Classic \ sched. exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C: \ Program Files \ AntiVir PersonalEdition Classic \ avguard.exe
O23 - Service: Bonjour Service - Apple Inc - C: \ Program Files \ Bonjour \ mDNSResponder.exe
O23 - Service: Diskeeper - Diskeeper ® Corporation - C: \ Program Files \ Diskeeper Corporation \ Diskeeper \ DkService. exe
O23 - Service: Boot Multiuser Server pour Miniterm (HpBootSrv) - Unknown owner - C: \ Program Files \ Common Files \ NComputer \ bootsrv.exe
O23 - Service: Service Multiuser (HpService) - NComputing Co., Ltd - Corée - C: \ WINDOWS \ System32 \ KmServc.exe
O23 - Service: Macromedia Licensing Service - Macromedia - C: \ Program Files \ Common Files \ Macromedia Shared \ Service \ Macromedia Licensing.exe

--
Fin de la file - 7633 bytes

Exécutez HijackThis et fixe:
O1 - Hosts: 8.17.172.190 crawlbot.hostyourapps.com
avez-vous jamais dowonload / install
quelque chose à partir de: NComputing Co., Ltd - Corée

Salut, merci pour la réponse par la façon dont je n'ai pas à télécharger / installer quoi que ce soit de ce site .. qu'est-ce que vous penser que je vais faire? thanks again ..

Exécutez HijackThis et Fix:
O20 - Winlogon Notify: KmWinLog - C: \ WINDOWS \ SYSTEM32 \ Kmlogon.dll

O23 - Service: Boot Multiuser Server pour Miniterm (HpBootSrv) - Unknown owner - C: \ Program Files \ Common Files \ NComputer \ bootsrv.exe

O23 - Service: Service Multiuser (HpService) - NComputing Co., Ltd - Corée - C: \ WINDOWS \ System32 \ KmServc.exe

s