infections Résolu/Fermé

Question

Bonjour,
Avast refuse de me mettre en quarantaine des virus et autres vers Warezov, spyware etc.. En regardant les forums j'ai cru comprendre que quelqu'un de + compétent (facile) que moi pourrait m'aider en lui donnant les résultats de  hijackthis: les voici et la longeur de la lise m'inquiète un peu. Un gros merci de m'aider à sortir du pétrin (sous XP)
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:52:58, on 15/03/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32undll32.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Wave Systems Corp\Services Manager\Docmgr\bin\WavXDocMgr.exe
C:\Program Files\Wave Systems Corp\SecureUpgrade.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\Program Files\Roxio\Drag-to-Disc\DrgToDsc.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Microsoft ActiveSync\Wcescomm.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\PROGRA~1\MICROS~3apimgr.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
C:\WINDOWS\system32
vsvc32.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack	osOBEX.exe
C:\Program Files\Wave Systems Corp\Trusted Drive Manager\TdmService.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack	osBtProc.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Microsoft Office\OFFICE11\MSACCESS.EXE
C:\Program Files\NewSoft\Presto! PageManager 7.15\Pmsb.exe
C:\Program Files\Microsoft Office\OFFICE11\EXCEL.EXE
C:\Program Files\Geneatique2009\Genea2009.exe
C:\Documents and Settings\sylvie\Bureau\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.fr/ig/dell?hl=fr&client=dell-row-rel&channel=fr&ibd=0080115
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.google.fr/hws/sb/dell-row-rel/fr/side.html?channel=fr
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.fr/hws/sb/dell-row-rel/fr/side.html?channel=fr
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr/?ocid=iehp
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr/?ocid=iehp
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://www.google.fr/hws/sb/dell-row-rel/fr/side.html?channel=fr
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Page_URL = www.google.fr/ig/dell?hl=fr&client=dell-row-rel&channel=fr&ibd=0080115
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Acrobat\ActiveX\AcroIEHelper.ocx
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\4.1.805.4472\swg.dll
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\Dell\BAE\BAE.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet
O4 - HKLM\..\Run: [NVHotkey] rundll32.exe nvHotkey.dll,Start
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [WavXMgr] C:\Program Files\Wave Systems Corp\Services Manager\Docmgr\bin\WavXDocMgr.exe
O4 - HKLM\..\Run: [SecureUpgrade] C:\Program Files\Wave Systems Corp\SecureUpgrade.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [RoxioDragToDisc] "C:\Program Files\Roxio\Drag-to-Disc\DrgToDsc.exe"
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [ECenter] C:\Dell\E-Center\EULALauncher.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [OpwareSE2] "C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"
O4 - HKLM\..\Run: [PDVDDXSrv] "C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe"
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [UVS11 Preload] C:\Program Files\Ulead Systems\Ulead VideoStudio 11\uvPL.exe
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [PDFSaver] C:\Program Files\Photos de Famille\PdfDrv\Install\PDFSaver.exe
O4 - HKCU\..\Run: [SpywareStop] C:\Program Files\SpywareStop\SpywareStop.exe -boot
O4 - HKCU\..\Run: [H/PC Connection Agent] "C:\Program Files\Microsoft ActiveSync\Wcescomm.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Acrobat Assistant.lnk = C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
O4 - Global Startup: Bluetooth Manager.lnk = ?
O4 - Global Startup: Digital Line Detect.lnk = C:\Program Files\Digital Line Detect\DLG.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Create Mobile Favorite - {2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra 'Tools' menuitem: Créer un Favori de l'appareil mobile... - {2EAF5BB2-070F-11D3-9307-00C04FAE2D4F} - C:\PROGRA~1\MICROS~3\INetRepl.dll
O9 - Extra button: Recherche - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Sélection intelligente HP - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/...
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~2\GOEC62~1.DLL
O20 - Winlogon Notify: gemsafe - C:\Program Files\Gemplus\GemSafe Libraries\BIN\WLEventNotify.dll
O20 - Winlogon Notify: GoToAssist - C:\Program Files\Citrix\GoToAssist\480\G2AWinLogon.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Capture Device Service - InterVideo Inc. - C:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Google Desktop Manager 5.7.802.22438 (GoogleDesktopManager-022208-143751) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: GoToAssist - Citrix Online, a division of Citrix Systems, Inc. - C:\Program Files\Citrix\GoToAssist\480\g2aservice.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Service de l'iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32
vsvc32.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation  - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: SecureStorageService - Wave Systems Corp. - C:\Program Files\Wave Systems Corp\Secure Storage Manager\SecureStorageService.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Fichiers communs\SureThing Shared\stllssvr.exe
O23 - Service: NTRU TSS v1.2.1.25 TCS (tcsd_win32.exe) - Unknown owner - C:\Program Files\NTRU Cryptosystems\NTRU TCG Software Stack\bin	csd_win32.exe
O23 - Service: TdmService - Wave Systems Corp. - C:\Program Files\Wave Systems Corp\Trusted Drive Manager\TdmService.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
O23 - Service: WaveEnrollmentService - Wave Systems Corp. - C:\Program Files\Wave Systems Corp\Authentication Manager\WaveEnrollmentService.exe
O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

pimprenelle27 · Answer

Fait ceci et poste moi le rapport à la suite de la question êtes vous aider par quelqu'un, répondre oui. Merci.

Télécharge GenProc sur ton bureau (Attention le fichier est un fichier zip)
Dézippe le dossier, double-clique sur GenProc.bat
En final, poste le contenu du rapport qui s'affiche.
Comment utiliser GenProc

Pour ceux qui ont vista, ne pas oublier de désactiver Le contrôle des comptes utilisateurs

IMPORTANT : poste le rapport et ne fais rien d'autre pour l'instant ( souvent il faut ajouter des consignes à la manipe indiquée pour que cela fonctionne parfaitement )

pimprenelle27 · Answer

tu vas me faire 2 choses car je vais me coucher comme ça j'aurais les rapports demain : 

Telecharge malwarebytes

NB : S'il te manque COMCTL32.OCX alors télécharge le ici

Tu l´instale; le programme va se mettre automatiquement a jour.

Une fois a jour, le programme va se lancer; click sur l´onglet parametre, et coche la case : "Arreter internet explorer pendant la suppression".

Click maintenant sur l´onglet recherche et coche la case : "executer un examen complet".

Puis click sur "rechercher".

Laisse le scanner le pc...

Si des elements on ete trouvés > click sur supprimer la selection.

si il t´es demandé de redemarrer > click sur "yes".

A la fin un rapport va s´ouvrir; sauvegarde le de maniere a le retrouver en vu de le poster sur le forum.
Copie et colle le rapport stp.

PS : les rapport sont aussi rangé dans l onglet rapport/log


Tutoriaux



Puis ceci :

Pour commencer :  faire un petit nettoyage de l'ordi et du registre avec Ccleaner, regarde bien le Tuto CCleaner


Télécharge Superantispyware (SAS)



Choisis "enregistrer" et enregistre-le sur ton bureau.

Double-clique sur l'icône d'installation qui vient de se créer et suis les instructions.

Créé une icône sur le bureau.

Double-clique sur l'icône de SAS (une tête dans un cercle rouge barré) pour le lancer.

- Si l'outil te demande de mettre à jour le programme ("update the program definitions", clique sur yes.
- Sous Configuration and Preferences, clique sur le bouton "Preferences"
- Clique sur l'onglet "Scanning Control "
- Dans "Scanner Options ", assure toi que la case devant lles lignes suivantes est cochée :

Close browsers before scanning
Scan for tracking cookies
Terminate memory threats before quarantining
- Laisse les autres lignes décochées.

- Clique sur le bouton "Close" pour quitter l'écran du centre de contrôle.

- Dans la fenêtre principale, clique, dans "Scan for Harmful Software", sur "Scan your computer".

Dans la colonne de gauche, coche C:\Fixed Drive.

Dans la colonne de droite, sous "Complete scan", clique sur "Perform Complete Scan"

Clique sur "next" pour lancer le scan. Patiente pendant la durée du scan.

A la fin du scan, une fenêtre de résultats s'ouvre . Clique sur OK.

Assure toi que toutes les lignes de la fenêtre blanche sont cochées et clique sur "Next".

Tout ce qui a été trouvé sera mis en quarantaine. S'il t'es demandé de redémarrer l'ordi ("reboot"), clique sur Yes.

Pour recopier les informations sur le forum, fais ceci :

- après le redémarrage de l'ordi, double-clique sur l'icône pour lancer SAS.
- Clique sur "Preferences" puis sur l'onglet "Statistics/Logs ".
- Dans "scanners logs", double-clique sur SUPERAntiSpyware Scan Log.

- Le rapport va s'ouvrir dans ton éditeur de texte par défaut.

- Copie son contenu dans ta réponse.


Regarde bien le tuto SUPERAntiSpyware il est très bien expliqué.

pimprenelle27 · Answer

là tu as battu le record 1105 fichiers infectés

pimprenelle27 · Answer

Vide la quarantaine de malware et fait ceci : 

j'attends le rapport SAS.

laurdav · Answer

Ca y est. Tout a marché et mon PC est désinfecté. Un gros merci, c'était très clair

pimprenelle27 · Answer

non tu as vu ou que c'était fini?

laurdav · Answer

Bon, voila le résultat, j'ai pensé que c'était fini:
SUPERAntiSpyware Scan Log
https://www.superantispyware.com/

Generated 03/16/2009 at 06:48 PM

Application Version : 4.25.1014

Core Rules Database Version : 3796
Trace Rules Database Version: 1751

Scan type       : Complete Scan
Total Scan Time : 01:11:11

Memory items scanned      : 733
Memory threats detected   : 0
Registry items scanned    : 6459
Registry threats detected : 1
File items scanned        : 26128
File threats detected     : 0

Rogue.SpywareStop
	HKU\S-1-5-21-334841477-2087425202-1516539375-1005\Software\Microsoft\Windows\CurrentVersion\Run#SpywareStop [ C:\Program Files\SpywareStop\SpywareStop.exe -boot ]

pimprenelle27 · Answer

il à détecté ça quand même qui n'est pas rien : 

Rogue.SpywareStop
HKU\S-1-5-21-334841477-2087425202-1516539375-1005\Software\­Microsoft\Windows\CurrentVersion\Run#SpywareStop [ C:\Program Files\SpywareStop\SpywareStop.exe -boot


Ensuite me faire ceci : 

Télécharger RemoveIT Pro

Fais un scan et poste moi le full rapport log.

A la fin du 1er scan, s'il demande de faire un scan complet dite oui et à la fin du 2ème scan, si virus trouvé cliquez sur fix pour nettoyer des virus trouvés.

laurdav · Answer

Voilà le rapport, mais avant j'avais eu ce message

[Err] C:\WINDOWS\system32
etprovcredman.dll
[Err] C:\WINDOWS\system32
etprovcredman.dll

File cleaned
C:\WINDOWS\system32\DRVSTORE\pbadrv_1ED9972BE30DF14947162B124B5858DE701A5EBB\pbadvrdll.dll
Cleanng process finished

ET AUSSI

Sécurité du Pare feu Windows:
Voulez-vous continuer à bloquer ce programme removeit ? et j'ai répondu de bloquer temporairement

RAPPORT

RemoveIT Pro v4 - SE (Build date: 6.6.2008) full information log file.
Generated at: 18/03/2009 on 01:34:32
Microsoft Windows XP Professional Service Pack 3 (Build 2600)
Author: Damjan Irgolic
https://www.incodesolutions.com/
support@incodesolutions.com


You have some viruses in your computer.
Please Scan your computer with RemoveIT Pro to remove discovered viruses.
Virus list:
Infected with Sys32.netprovcredman - File C:\WINDOWS\system32
etprovcredman.dll
Infected with Sys32.wvauth - File C:\WINDOWS\system32\wvauth.dll

Running processes: (72)
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\system32undll32.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Wave Systems Corp\Services Manager\Docmgr\bin\WavXDocMgr.exe
C:\Program Files\Wave Systems Corp\SecureUpgrade.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe
C:\Program Files\Roxio\Drag-to-Disc\DrgToDsc.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe
C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\QuickTime\QTTask.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
C:\Program Files\Microsoft ActiveSync\Wcescomm.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
C:\WINDOWS\system32
vsvc32.exe
C:\PROGRA~1\MICROS~3apimgr.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\Program Files\Wave Systems Corp\Trusted Drive Manager\TdmService.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack	osOBEX.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack	osBtProc.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\InCode Solutions\RemoveIT Pro v4 - SEemoveit.exe
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE

Startup files:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\CTFMON.EXE
[C:\WINDOWS\system32\ctfmon.exe]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\PDFSaver
[C:\Program Files\Photos de Famille\PdfDrv\Install\PDFSaver.exe]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\H/PC Connection Agent
["C:\Program Files\Microsoft ActiveSync\Wcescomm.exe"]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\SpybotSD TeaTimer
[C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\SUPERAntiSpyware
[C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\SpywareStop
[C:\Program Files\SpywareStop\SpywareStop.exe -boot]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\SynTPEnh
[C:\Program Files\Synaptics\SynTP\SynTPEnh.exe]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\NvCplDaemon
[RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
wiz
[nwiz.exe /installquiet]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\NVHotkey
[rundll32.exe nvHotkey.dll,Start]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\NvMediaCenter
[RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\SunJavaUpdateSched
["C:\Program Files\Java\jre6\bin\jusched.exe"]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\SigmatelSysTrayApp
[stsystra.exe]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Dell QuickSet
[C:\Program Files\Dell\QuickSet\quickset.exe]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\WavXMgr
[C:\Program Files\Wave Systems Corp\Services Manager\Docmgr\bin\WavXDocMgr.exe]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\SecureUpgrade
[C:\Program Files\Wave Systems Corp\SecureUpgrade.exe]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\ISUSPM Startup
[C:\PROGRA~1\FICHIE~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\ISUSScheduler
["C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\RoxioDragToDisc
["C:\Program Files\Roxio\Drag-to-Disc\DrgToDsc.exe"]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Google Desktop Search
["C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\ECenter
[C:\Dell\E-Center\EULALauncher.exe]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\avast!
[C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\OpwareSE2
["C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe"]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\PDVDDXSrv
["C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe"]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\IntelZeroConfig
["C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\IntelWireless
["C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\UVS11 Preload
[C:\Program Files\Ulead Systems\Ulead VideoStudio 11\uvPL.exe]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\AppleSyncNotifier
[C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\QuickTime Task
["C:\Program Files\QuickTime\QTTask.exe" -atboottime]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\iTunesHelper
["C:\Program Files\iTunes\iTunesHelper.exe"]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\HP Software Update
[C:\Program Files\HP\HP Software Update\HPWuSchd2.exe]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\Malwarebytes' Anti-Malware
[C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent]

Detail report: (166)
Clsid c:\progra~1\google\google~2\goec62~1.dll[68eef9e636ab74554ab888e1190faff0][112128]
Clsid c:\program files\citrix\gotoassist\480\g2awinlogon.dll[3d6fd4ffde6de32c34dc280d0be781c2][10792]
Clsid c:\program files\gemplus\gemsafe libraries\bin\wleventnotify.dll[2f43a51f240034dd75f1b2ef739abd22][73728]
Clsid C:\WINDOWS\system32\crypt32.dll[39976dad9564b336b153184268db032f][606208]
Clsid C:\WINDOWS\system32\cryptnet.dll[938488d25648d26e6bfe3e47dc2ec5e8][64512]
Clsid C:\WINDOWS\system32\cscdll.dll[6b646a601aec823032af4dc19273cfda][102912]
Clsid C:\WINDOWS\system32\sclgntfy.dll[c01c7266e73b199101651a7508364df7][22016]
Clsid c:\windows\system32\stobject.dll[9689fcc8c26c3d6afac892a6c5d1b81a][122368]
Clsid c:\windows\system32\webcheck.dll[a163a85a0834b85faf918caadec55687][233472]
Clsid C:\WINDOWS\system32\wgalogon.dll[dd8b6382e30fbb58d69610abceebd3eb][267304]
Clsid C:\WINDOWS\system32\wlnotify.dll[c664757f8243499ba6e45102af459de6][94208]
Clsid c:\windows\system32\wpdshserviceobj.dll[045e228f71c31901084b64be59093499][133632]
Proc C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe[fc242dbd786557ac641726dc5c13f060][81000]
Proc C:\PROGRA~1\MICROS~3apimgr.exe[dcfc84480c76d862d9bfd386ea6e8de7][199464]
Proc C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe[0e6e43d31ac16bcf682eb5f63178c492][49254]
Proc C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe[f09461c8eccace33c271cc229f11e281][254040]
Proc C:\Program Files\Alwil Software\Avast4\ashServ.exe[62889d40a3fb1a9012428e16fe0dc67a][138680]
Proc C:\Program Files\Alwil Software\Avast4\ashWebSv.exe[23ca3e54474ae5ffdbc0f97b9e1815db][352920]
Proc C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe[b4253776ee034f6770fcee32c28490b0][18752]
Proc C:\Program Files\Bonjour\mDNSResponder.exe[cfd4c3352e29a8b729536648466e8df5][229376]
Proc C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe[12a6c0b31587a579d67fda710eaa05a3][128560]
Proc C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe[1d48375cada961d1e0d73653e0ca7dfa][475136]
Proc C:\Program Files\Dell\QuickSet\quickset.exe[ae4bb1791361dac62f3c7d2fdb9fb9a6][1228800]
Proc C:\Program Files\Digital Line Detect\DLG.exe[f03ffc962e18f36a922e61f96be09925][50688]
Proc C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe[2bda4a9480b550fcca6d29c22ca54c0d][116040]
Proc C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe[763dab43bdab27316dbf3373192823d7][81920]
Proc C:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe[1778eba872274c1226d869cd9486847e][198168]
Proc C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe[4bd2c322118a2470b450492a0c3302f9][67056]
Proc C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe[34b56a3c195aee6ae11001d277acc83e][168432]
Proc C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe[b39662e4c237aa25a2cd2379ff508099][29744]
Proc C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe[7e04b1ade140f483a6581461568d8d9c][610304]
Proc C:\Program Files\HP\Digital Imaging\bin\hpqgpc01.exe[8fc85c14b6316745670816f98693a100][262144]
Proc C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe[b70278d1459a677639d51892160fd365][184320]
Proc C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe[d9335549eae48b14fb66efcb6ffae736][214360]
Proc C:\Program Files\HP\HP Software Update\HPWuSchd2.exe[062f3db9afa9c3ce0da52f28595c0c6d][49152]
Proc C:\Program Files\InCode Solutions\RemoveIT Pro v4 - SEemoveit.exe[ff40be48bb2693efa51ca0386647729d][550912]
Proc C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe[669308536edb89e6ae90a9871793293e][659456]
Proc C:\Program Files\Intel\Wireless\Bin\EvtEng.exe[f10e7aa8bdf4488e3dfa989b8e7f7c9f][794624]
Proc C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe[094849718c47651ca255d08caf42a904][1101824]
Proc C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe[7274bd434b6165baa382bdd87f6ca4ce][483328]
Proc C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe[20f261e78ccf0ea36d4fe2c363a2ef8a][1183744]
Proc C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe[c2ed9211101f3c9cf70b9cbdb3e99c8c][356352]
Proc C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe[988cda5b406c1931a78e52bd8cc3bbfe][995328]
Proc C:\Program Files\iPod\bin\iPodService.exe[d7ed7d86c9fddc2eee637b303b3d6a6b][532264]
Proc C:\Program Files\iTunes\iTunesHelper.exe[4ced92963f453eb8dcfe67fd4248d657][289064]
Proc C:\Program Files\Java\jre6\bin\jqs.exe[32192b4ebe8720ed8d49a455c962cb91][152984]
Proc C:\Program Files\Java\jre6\bin\jusched.exe[b98ffa8288efaabc436c30d198608345][136600]
Proc C:\Program Files\Microsoft ActiveSync\Wcescomm.exe[4c4cf9220e628d1378f9807ec5175488][1289000]
Proc C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE[35ec2aca2f0f37aa977f7d50dc2dfe54][12310864]
Proc C:\Program Files\QuickTime\QTTask.exe[f34eb5d4f145ed5fe50033ca3a41ed24][413696]
Proc C:\Program Files\Roxio\Drag-to-Disc\DrgToDsc.exe[bd57a6afa05df87bcae9bb11fb0c4dde][1116920]
Proc C:\Program Files\ScanSoft\OmniPageSE2.0\OpwareSE2.exe[882539219b40107d5bc0557e0088dd79][49152]
Proc C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe[896a1db9a972ad2339c2e8569ec926d1][2144088]
Proc C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe[11afbca9eac51cf988918bffe935e6ee][1830128]
Proc C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[4e4b8f8e44f786fc4126d884e6ad892c][851968]
Proc C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe[101495e2863382e534efc0c5d6251b0f][278528]
Proc C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe[2c92b17e820094f37037b6ce114beb69][69632]
Proc C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe[8c35db52f07a78e8df230d76f141fd29][270336]
Proc C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe[e8dd777f7aa93648894574cc418b0624][2150400]
Proc C:\Program Files\Toshiba\Bluetooth Toshiba Stack	osBtProc.exe[9d0420569f55f30ca56f42d13fac4052][2170880]
Proc C:\Program Files\Toshiba\Bluetooth Toshiba Stack	osOBEX.exe[c5524b62edeb1b5aed7431b5387d10c1][311296]
Proc C:\Program Files\Wave Systems Corp\SecureUpgrade.exe[66c4b559b1390e8895b307c73d8137dc][218424]
Proc C:\Program Files\Wave Systems Corp\Services Manager\Docmgr\bin\WavXDocMgr.exe[62a4b2f9d96d95c6df2fe0e176233619][92160]
Proc C:\Program Files\Wave Systems Corp\Trusted Drive Manager\TdmService.exe[a27d803b21f24a5cfb775944ea4cb130][737280]
Proc C:\Program Files\WinZip\WZQKPICK.EXE[6d23b8cb307e455428a778535be6e6d9][394856]
Proc C:\WINDOWS\Explorer.EXE[f2317622d29f9ff0f88aeecd5f60f0dd][1037824]
Proc C:\WINDOWS\stsystra.exe[127e7dd016305ff87b9b59189672c497][405504]
Proc C:\WINDOWS\system32\ctfmon.exe[59dc5bb82e4c8e0b3eadcfdbc44ba6e4][15360]
Proc C:\WINDOWS\system32\dllhost.exe[0dad93bb0fecf5016ae3c06cbb0a873b][5120]
Proc C:\WINDOWS\system32\lsass.exe[91e6024d6d4dcdecdb36c43ecf9bbecb][13312]
Proc C:\WINDOWS\system32
vsvc32.exe[a9a999066e3f318172360a6aeab2a165][155717]
Proc C:\WINDOWS\system32undll32.exe[93ad0b78c7357a05f50e594ec7c22300][33792]
Proc C:\WINDOWS\system32\services.exe[54cb50058851d95e56ec70d09f70857f][109056]
Proc C:\WINDOWS\system32\spoolsv.exe[460e4ce148bd07218da0b6a3d31885a9][57856]
Proc C:\WINDOWS\system32\svchost.exe[e4bdf223cd75478bf44567b4d5c2634d][14336]
Proc C:\WINDOWS\system32\wbem\wmiapsrv.exe[4e8e8a58f56b25d0795f484e5eb7f898][126464]
RegRun c:\dell\e-center\eulalauncher.exe[d6b7814aa0d1412f0ea77845c0af7b51][17920]
RegRun c:\progra~1\alwils~1\avast4\ashdisp.exe[fc242dbd786557ac641726dc5c13f060][81000]
RegRun c:\progra~1\fichie~1\instal~1\update~1\isuspm.exe [fb9e5c251cf6c37749f296bacb34a69b][221184]
RegRun c:\program files\cyberlink\powerdvd dx\pdvddxsrv.exe[12a6c0b31587a579d67fda710eaa05a3][128560]
RegRun c:\program files\dell\quickset\quickset.exe[ae4bb1791361dac62f3c7d2fdb9fb9a6][1228800]
RegRun c:\program files\fichiers communs\apple\mobile device support\bin\applesyncnotifier.exe[0bbc0204478194e404df71b7a3e3fc22][116040]
RegRun c:\program files\fichiers communs\installshield\updateservice\issch.exe [763dab43bdab27316dbf3373192823d7][81920]
RegRun c:\program files\google\google desktop search\googledesktop.exe [b39662e4c237aa25a2cd2379ff508099][29744]
RegRun c:\program files\hp\hp software update\hpwuschd2.exe[062f3db9afa9c3ce0da52f28595c0c6d][49152]
RegRun c:\program files\intel\wireless\bin\ifrmewrk.exe [094849718c47651ca255d08caf42a904][1101824]
RegRun c:\program files\intel\wireless\bin\zcfgsvc.exe[988cda5b406c1931a78e52bd8cc3bbfe][995328]
RegRun c:\program files\itunes\ituneshelper.exe[4ced92963f453eb8dcfe67fd4248d657][289064]
RegRun c:\program files\java\jre6\bin\jusched.exe[b98ffa8288efaabc436c30d198608345][136600]
RegRun c:\program files\malwarebytes' anti-malware\mbamgui.exe [60c1936edb5007185108166807bcda4d][399504]
RegRun c:\program files\microsoft activesync\wcescomm.exe[4c4cf9220e628d1378f9807ec5175488][1289000]
RegRun c:\program files\quicktime\qttask.exe [f34eb5d4f145ed5fe50033ca3a41ed24][413696]
RegRun c:\program filesoxio\drag-to-disc\drgtodsc.exe[bd57a6afa05df87bcae9bb11fb0c4dde][1116920]
RegRun c:\program files\scansoft\omnipagese2.0\opwarese2.exe[882539219b40107d5bc0557e0088dd79][49152]
RegRun c:\program files\spybot - search & destroy	eatimer.exe[896a1db9a972ad2339c2e8569ec926d1][2144088]
RegRun c:\program files\superantispyware\superantispyware.exe[11afbca9eac51cf988918bffe935e6ee][1830128]
RegRun c:\program files\synaptics\syntp\syntpenh.exe[4e4b8f8e44f786fc4126d884e6ad892c][851968]
RegRun c:\program files\ulead systems\ulead videostudio 11\uvpl.exe[e6e4a1d21dd1632f5c6ff15e05570a5a][341488]
RegRun c:\program files\wave systems corp\secureupgrade.exe[66c4b559b1390e8895b307c73d8137dc][218424]
RegRun c:\program files\wave systems corp\services manager\docmgr\bin\wavxdocmgr.exe[62a4b2f9d96d95c6df2fe0e176233619][92160]
RegRun C:\WINDOWS\stsystra.exe[127e7dd016305ff87b9b59189672c497][405504]
RegRun c:\windows\system32\ctfmon.exe[59dc5bb82e4c8e0b3eadcfdbc44ba6e4][15360]
RegRun c:\windows\system32
vcpl.dll[b6f5d519e4200a55a5e31806d96d13ef][8466432]
RegRun c:\windows\system32
vmctray.dll[246c5b6cd3cabc00cc0b96ebeace6c33][81920]
Service c:\program files\alwil software\avast4\ashmaisv.exe [f09461c8eccace33c271cc229f11e281][254040]
Service c:\program files\alwil software\avast4\ashserv.exe[62889d40a3fb1a9012428e16fe0dc67a][138680]
Service c:\program files\alwil software\avast4\ashwebsv.exe [23ca3e54474ae5ffdbc0f97b9e1815db][352920]
Service c:\program files\alwil software\avast4\aswupdsv.exe[b4253776ee034f6770fcee32c28490b0][18752]
Service c:\program files\bonjour\mdnsresponder.exe[cfd4c3352e29a8b729536648466e8df5][229376]
Service c:\program files\citrix\gotoassist\480\g2aservice.exe [9d28b83e5830c143c37d6678c7409304][16936]
Service c:\program files\dell\quickset
icconfigsvc.exe[1d48375cada961d1e0d73653e0ca7dfa][475136]
Service c:\program files\fichiers communs\adobe systems shared\service\adobelmsvc.exe[8b46d5a1d3ef08232c04d0eafb871fb2][72704]
Service c:\program files\fichiers communs\apple\mobile device support\bin\applemobiledeviceservice.exe[2bda4a9480b550fcca6d29c22ca54c0d][116040]
Service c:\program files\fichiers communs\intervideo\deviceservice\devsvc.exe[1778eba872274c1226d869cd9486847e][198168]
Service c:\program files\fichiers communs\microsoft shared\source engine\ose.exe[7a56cf3e3f12e8af599963b16f50fb6a][89136]
Service c:\program files\fichiers communs\surething shared\stllssvr.exe[51778fd315c9882f1cbd932743e62a72][73728]
Service c:\program files\fichiers communs\ulead systems\dvd\ulcdrsvr.exe[4bd2c322118a2470b450492a0c3302f9][67056]
Service c:\program files\google\common\google updater\googleupdaterservice.exe[34b56a3c195aee6ae11001d277acc83e][168432]
Service c:\program files\google\google desktop search\googledesktop.exe[b39662e4c237aa25a2cd2379ff508099][29744]
Service c:\program files\intel\wireless\bin\evteng.exe[f10e7aa8bdf4488e3dfa989b8e7f7c9f][794624]
Service c:\program files\intel\wireless\binegsrvc.exe[7274bd434b6165baa382bdd87f6ca4ce][483328]
Service c:\program files\intel\wireless\bin\s24evmon.exe[20f261e78ccf0ea36d4fe2c363a2ef8a][1183744]
Service c:\program files\intel\wireless\bin\wlkeeper.exe[c2ed9211101f3c9cf70b9cbdb3e99c8c][356352]
Service c:\program files\ipod\bin\ipodservice.exe[d7ed7d86c9fddc2eee637b303b3d6a6b][532264]
Service c:\program files\java\jre6\bin\jqs.exe [32192b4ebe8720ed8d49a455c962cb91][152984]
Service c:\program files
tru cryptosystems
tru tcg software stack\bin	csd_win32.exe[23b506262493f1a521683ee88c5fbf60][1552384]
Service c:\program files\wave systems corp\authentication manager\waveenrollmentservice.exe[796fda916625be7e5f6cfece15a81c3a][192512]
Service c:\program files\wave systems corp\secure storage manager\securestorageservice.exe[472946edebf85c1f0b44b6eba01ac9b6][486400]
Service c:\program files\wave systems corp	rusted drive manager	dmservice.exe[a27d803b21f24a5cfb775944ea4cb130][737280]
Service c:\program files\windows media player\wmpnetwk.exe[c9bea742ce225cc993c9465fddae4656][918016]
Service c:\windows\microsoft.net\framework\v2.0.50727\aspnet_state.exe[4eabf511b1af176a971c3271e48fa3a8][33800]
Service c:\windows\microsoft.net\framework\v2.0.50727\mscorsvw.exe[234b1bc2796483e1f5c3f26649fb3388][70144]
Service c:\windows\system32\alg.exe[5e9a6658a2a69ae7eb195113b7a2e7a9][44544]
Service c:\windows\system32\cisvc.exe[793ef38a5fd086c3c8e48a8a861562ed][5632]
Service c:\windows\system32\clipsrv.exe[8b30cbb0c07d49b2658fb190946b0e7e][33280]
Service c:\windows\system32\dllhost.exe [0dad93bb0fecf5016ae3c06cbb0a873b][5120]
Service c:\windows\system32\dmadmin.exe [ead2b8aaeb16e538106d295cd7bd7a48][225280]
Service c:\windows\system32\fxssvc.exe[305687eb8c8e0a12a0b2bae387b6e466][268800]
Service c:\windows\system32\imapi.exe[c4221678bbaa55239c23632875759961][150528]
Service c:\windows\system32\locator.exe[499c59a2584f6d4ea41e944da571d993][75264]
Service c:\windows\system32\lsass.exe[91e6024d6d4dcdecdb36c43ecf9bbecb][13312]
Service c:\windows\system32\mnmsrvc.exe[d3a2870cd96cda7bcff3dc54f64087ad][32768]
Service c:\windows\system32\msdtc.exe[8648d670ae0d95c95e7bbb5b80661796][6144]
Service c:\windows\system32\msiexec.exe [0411f7ee63ae48d2918ab4f2c79ab6c4][78848]
Service c:\windows\system32
etdde.exe[5c9b1d83755b36237b70f95df3d46a52][114176]
Service c:\windows\system32
vsvc32.exe[a9a999066e3f318172360a6aeab2a165][155717]
Service c:\windows\system32svp.exe[414964844f4793acb868d057e8ed997e][132608]
Service c:\windows\system32\scardsvr.exe[67949cc8a865296c1333c96a4e1a2d66][100352]
Service c:\windows\system32\services.exe[54cb50058851d95e56ec70d09f70857f][109056]
Service c:\windows\system32\sessmgr.exe[9f63d9c5b238ed1c375d417eff3d5be7][142848]
Service c:\windows\system32\smlogsvc.exe[0899061318a6b1d9596aabfc77f45e44][93184]
Service c:\windows\system32\spoolsv.exe[460e4ce148bd07218da0b6a3d31885a9][57856]
Service c:\windows\system32\svchost.exe [e4bdf223cd75478bf44567b4d5c2634d][14336]
Service c:\windows\system32	lntsvr.exe[d859a9d2f026ce5804485068ffd6eaf2][75264]
Service c:\windows\system32\ups.exe[1edc93d7bd731b5ca6248ae245099b60][18432]
Service c:\windows\system32\vssvc.exe[5a4da252b2c0550ab83d129c02cf6c19][295424]
Service c:\windows\system32\wbem\wmiapsrv.exe[4e8e8a58f56b25d0795f484e5eb7f898][126464]
Startup c:\documents and settings\all users\menu démarrer\programmes\démarrage\desktop.ini[d6a6856702e3f0953e7246a9b4a9fe35][84]
Startup c:\documents and settings\sylvie\menu démarrer\programmes\démarrage\desktop.ini[d6a6856702e3f0953e7246a9b4a9fe35][84]
Startup c:\program files\adobe\acrobat 5.0\distillr\acrotray.exe[0e6e43d31ac16bcf682eb5f63178c492][49254]
Startup c:\program files\digital line detect\dlg.exe[f03ffc962e18f36a922e61f96be09925][50688]
Startup c:\program files\fichiers communs\adobe\calibration\adobe gamma loader.exe[c2ff17734176cd15221c10044ef0ba1a][113664]
Startup c:\program files\hp\digital imaging\bin\hpqtra08.exe[d9335549eae48b14fb66efcb6ffae736][214360]
Startup c:\program files	oshiba\bluetooth toshiba stack	osbtmng.exe[e8dd777f7aa93648894574cc418b0624][2150400]
Startup c:\program files\winzip\wzqkpick.exe[6d23b8cb307e455428a778535be6e6d9][394856]
System.ini c:\windows\system32\svchost.exe [e4bdf223cd75478bf44567b4d5c2634d][14336]

Startup folder: (8)
Startup name: Adobe Gamma.lnk
Command: C:\Program Files\Fichiers communs\Adobe\Calibration\Adobe Gamma Loader.exe
Startup name: desktop.ini
Command: C:\Documents and Settings\sylvie\Menu Démarrer\Programmes\Démarrage\desktop.ini
Startup name: Acrobat Assistant.lnk
Command: C:\Program Files\Adobe\Acrobat 5.0\Distillr\AcroTray.exe
Startup name: Bluetooth Manager.lnk
Command: C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
Startup name: desktop.ini
Command: C:\Documents and Settings\All Users\Menu Démarrer\Programmes\Démarrage\desktop.ini
Startup name: Digital Line Detect.lnk
Command: C:\Program Files\Digital Line Detect\DLG.exe
Startup name: HP Digital Imaging Monitor.lnk
Command: C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
Startup name: WinZip Quick Pick.lnk
Command: C:\Program Files\WinZip\WZQKPICK.EXE

Win.ini Startup: (1)
Path: No additional driver found!

Win.ini Startup: (1)
Path: No additional driver found!

Keyboard drivers: (1)
Name: No Keyboard Filter driver found!

Services: (119)
Service Name: .NET Runtime Optimization Service v2.0.50727_X86 [Stopped], 
Path: C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
Service Name: Accès à distance au Registre [Running], 
Path: C:\WINDOWS\system32\svchost.exe -k LocalService
Service Name: Accès du périphérique d'interface utilisateur [Stopped], 
Path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: Acquisition d'image Windows (WIA) [Running], 
Path: C:\WINDOWS\system32\svchost.exe -k imgsvc
Service Name: Adobe LM Service [Stopped], 
Path: "C:\Program Files\Fichiers communs\Adobe Systems Shared\Service\Adobelmsvc.exe"
Service Name: Affichage des messages [Stopped], 
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Service Name: Agent de protection d'accès réseau [Stopped], 
Path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: Aide et support [Running], 
Path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: Appel de procédure distante (RPC) [Running], 
Path: C:\WINDOWS\system32\svchost -k rpcss
Service Name: Apple Mobile Device [Running], 
Path: "C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe"
Service Name: Application système COM+ [Running], 
Path: C:\WINDOWS\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}
Service Name: ASP.NET State Service [Stopped], 
Path: C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
Service Name: Assistance TCP/IP NetBIOS [Running], 
Path: C:\WINDOWS\system32\svchost.exe -k LocalService
Service Name: Audio Windows [Running], 
Path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: avast! Antivirus [Running], 
Path: "C:\Program Files\Alwil Software\Avast4\ashServ.exe"
Service Name: avast! iAVS4 Control Service [Running], 
Path: "C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe"
Service Name: avast! Mail Scanner [Running], 
Path: "C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service
Service Name: avast! Web Scanner [Running], 
Path: "C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service
Service Name: Avertissement [Stopped], 
Path: C:\WINDOWS\system32\svchost.exe -k LocalService
Service Name: Capture Device Service [Running], 
Path: "C:\Program Files\Fichiers communs\InterVideo\DeviceService\DevSvc.exe"
Service Name: Carte à puce [Running], 
Path: C:\WINDOWS\System32\SCardSvr.exe
Service Name: Carte de performance WMI [Running], 
Path: C:\WINDOWS\system32\wbem\wmiapsrv.exe
Service Name: Centre de sécurité [Running], 
Path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: Cliché instantané de volume [Stopped], 
Path: C:\WINDOWS\System32\vssvc.exe
Service Name: Client de suivi de lien distribué [Running], 
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Service Name: Client DHCP [Running], 
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Service Name: Client DNS [Running], 
Path: C:\WINDOWS\system32\svchost.exe -k NetworkService
Service Name: Compatibilité avec le Changement rapide d'utilisateur [Running], 
Path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: Configuration automatique de réseau câblé [Stopped], 
Path: C:\WINDOWS\System32\svchost.exe -k dot3svc
Service Name: Configuration automatique sans fil [Stopped], 
Path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: Connexion secondaire [Running], 
Path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: Connexions réseau [Running], 
Path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: DDE réseau [Stopped], 
Path: C:\WINDOWS\system32
etdde.exe
Service Name: Détection matériel noyau [Running], 
Path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: Distributed Transaction Coordinator [Running], 
Path: C:\WINDOWS\system32\msdtc.exe
Service Name: DSDM DDE réseau [Stopped], 
Path: C:\WINDOWS\system32
etdde.exe
Service Name: Emplacement protégé [Running], 
Path: C:\WINDOWS\system32\lsass.exe
Service Name: Explorateur d'ordinateur [Stopped], 
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Service Name: Extensions du pilote WMI [Stopped], 
Path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: Fax [Stopped], 
Path: C:\WINDOWS\system32\fxssvc.exe
Service Name: Fournisseur de la prise en charge de sécurité LM NT [Stopped], 
Path: C:\WINDOWS\system32\lsass.exe
Service Name: Gestion d'applications [Stopped], 
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Service Name: Gestionnaire de comptes de sécurité [Running], 
Path: C:\WINDOWS\system32\lsass.exe
Service Name: Gestionnaire de connexion automatique d'accès distant [Stopped], 
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Service Name: Gestionnaire de connexions d'accès distant [Running], 
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Service Name: Gestionnaire de disque logique [Stopped], 
Path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: Gestionnaire de l'Album [Stopped], 
Path: C:\WINDOWS\system32\clipsrv.exe
Service Name: Gestionnaire de session d'aide sur le Bureau à distance [Stopped], 
Path: C:\WINDOWS\system32\sessmgr.exe
Service Name: Google Desktop Manager 5.7.802.22438 [Stopped], 
Path: "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe"
Service Name: Google Updater Service [Running], 
Path: "C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe"
Service Name: GoToAssist [Stopped], 
Path: "C:\Program Files\Citrix\GoToAssist\480\g2aservice.exe" Start=service
Service Name: Hôte de périphérique universel Plug-and-Play [Stopped], 
Path: C:\WINDOWS\system32\svchost.exe -k LocalService
Service Name: hpqcxs08 [Running], 
Path: C:\WINDOWS\system32\svchost.exe -k hpdevmgmt
Service Name: HTTP SSL [Running], 
Path: C:\WINDOWS\System32\svchost.exe -k HTTPFilter
Service Name: Infrastructure de gestion Windows [Running], 
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Service Name: Intel(R) PROSet/Wireless Event Log [Running], 
Path: C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
Service Name: Intel(R) PROSet/Wireless Registry Service [Running], 
Path: C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
Service Name: Intel(R) PROSet/Wireless Service [Running], 
Path: C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
Service Name: Intel(R) PROSet/Wireless SSO Service [Running], 
Path: C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
Service Name: Java Quick Starter [Running], 
Path: "C:\Program Files\Java\jre6\bin\jqs.exe" -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf"
Service Name: Journal des événements [Running], 
Path: C:\WINDOWS\system32\services.exe
Service Name: Journaux et alertes de performance [Stopped], 
Path: C:\WINDOWS\system32\smlogsvc.exe
Service Name: Lanceur de processus serveur DCOM [Running], 
Path: C:\WINDOWS\system32\svchost -k DcomLaunch
Service Name: Localisateur d'appels de procédure distante (RPC) [Stopped], 
Path: C:\WINDOWS\system32\locator.exe
Service Name: Mises à jour automatiques [Running], 
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Service Name: MS Software Shadow Copy Provider [Stopped], 
Path: C:\WINDOWS\system32\dllhost.exe /Processid:{E5856F59-B4FB-418C-B711-0C0AB2CE420A}
Service Name: Net Driver HPZ12 [Stopped], 
Path: C:\WINDOWS\System32\svchost.exe -k HPZ12
Service Name: NICCONFIGSVC [Running], 
Path: C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
Service Name: NLA (Network Location Awareness) [Running], 
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Service Name: Notification d'événement système [Running], 
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Service Name: NTRU TSS v1.2.1.25 TCS [Running], 
Path: "C:\Program Files\NTRU Cryptosystems\NTRU TCG Software Stack\bin	csd_win32.exe"
Service Name: NVIDIA Display Driver Service [Running], 
Path: C:\WINDOWS\system32
vsvc32.exe
Service Name: Office Source Engine [Stopped], 
Path: "C:\Program Files\Fichiers communs\Microsoft Shared\Source Engine\OSE.EXE"
Service Name: Onduleur [Stopped], 
Path: C:\WINDOWS\System32\ups.exe
Service Name: Ouverture de session réseau [Stopped], 
Path: C:\WINDOWS\system32\lsass.exe
Service Name: Pare-feu Windows / Partage de connexion Internet [Running], 
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Service Name: Partage de Bureau à distance NetMeeting [Stopped], 
Path: C:\WINDOWS\system32\mnmsrvc.exe
Service Name: Planificateur de tâches [Running], 
Path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: Plug-and-Play [Running], 
Path: C:\WINDOWS\system32\services.exe
Service Name: Pml Driver HPZ12 [Running], 
Path: C:\WINDOWS\System32\svchost.exe -k HPZ12
Service Name: QoS RSVP [Stopped], 
Path: C:\WINDOWS\system32svp.exe
Service Name: Routage et accès distant [Stopped], 
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Service Name: SecureStorageService [Stopped], 
Path: "C:\Program Files\Wave Systems Corp\Secure Storage Manager\SecureStorageService.exe"
Service Name: Serveur [Running], 
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Service Name: Service Bonjour [Running], 
Path: "C:\Program Files\Bonjour\mDNSResponder.exe"
Service Name: Service COM de gravage de CD IMAPI [Stopped], 
Path: C:\WINDOWS\system32\imapi.exe
Service Name: Service d'administration du Gestionnaire de disque logique [Stopped], 
Path: C:\WINDOWS\System32\dmadmin.exe /com
Service Name: Service d'approvisionnement réseau [Stopped], 
Path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: Service de découvertes SSDP [Running], 
Path: C:\WINDOWS\system32\svchost.exe -k LocalService
Service Name: Service de la passerelle de la couche Application [Running], 
Path: C:\WINDOWS\System32\alg.exe
Service Name: Service de l'iPod [Running], 
Path: "C:\Program Files\iPod\bin\iPodService.exe"
Service Name: Service de numéro de série du lecteur multimédia portable [Stopped], 
Path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: Service de rapport d'erreurs [Running], 
Path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: Service de restauration système [Running], 
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Service Name: Service de transfert intelligent en arrière-plan [Stopped], 
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Service Name: Service d'indexation [Stopped], 
Path: C:\WINDOWS\system32\cisvc.exe
Service Name: Service Gestion des clés et des certificats d'intégrité [Stopped], 
Path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: Service HP CUE DeviceDiscovery [Running], 
Path: C:\WINDOWS\system32\svchost.exe -k hpdevmgmt
Service Name: Service Partage réseau du Lecteur Windows Media [Stopped], 
Path: "C:\Program Files\Windows Media Player\WMPNetwk.exe"
Service Name: Service Protocole EAP (Extensible Authentication Protocol) [Stopped], 
Path: C:\WINDOWS\System32\svchost.exe -k eapsvcs
Service Name: Services de cryptographie [Running], 
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Service Name: Services IPSEC [Running], 
Path: C:\WINDOWS\system32\lsass.exe
Service Name: Services Terminal Server [Running], 
Path: C:\WINDOWS\System32\svchost -k DComLaunch
Service Name: Spouleur d'impression [Running], 
Path: C:\WINDOWS\system32\spoolsv.exe
Service Name: Station de travail [Running], 
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Service Name: stllssvr [Stopped], 
Path: "C:\Program Files\Fichiers communs\SureThing Shared\stllssvr.exe"
Service Name: Stockage amovible [Stopped], 
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Service Name: Système d'événements de COM+ [Running], 
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Service Name: TdmService [Running], 
Path: C:\Program Files\Wave Systems Corp\Trusted Drive Manager\TdmService.exe
Service Name: Téléphonie [Running], 
Path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: Telnet [Stopped], 
Path: C:\WINDOWS\system32	lntsvr.exe
Service Name: Thèmes [Running], 
Path: C:\WINDOWS\System32\svchost.exe -k netsvcs
Service Name: Ulead Burning Helper [Running], 
Path: C:\Program Files\Fichiers communs\Ulead Systems\DVD\ULCDRSvr.exe
Service Name: Wave UCSPlus [Running], 
Path: C:\WINDOWS\system32\dllhost.exe /Processid:{BDFEFE06-0F3F-44F4-984D-3BF2A1CA8D75}
Service Name: WaveEnrollmentService [Stopped], 
Path: "C:\Program Files\Wave Systems Corp\Authentication Manager\WaveEnrollmentService.exe"
Service Name: WebClient [Running], 
Path: C:\WINDOWS\system32\svchost.exe -k LocalService
Service Name: Windows Driver Foundation - User-mode Driver Framework [Stopped], 
Path: C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
Service Name: Windows Installer [Stopped], 
Path: C:\WINDOWS\system32\msiexec.exe /V
Service Name: Windows Time [Running], 
Path: C:\WINDOWS\system32\svchost.exe -k netsvcs
Finished...

pimprenelle27 · Answer

il a trouvé ça en virus Infected with Sys32.netprovcredman - File C:\WINDOWS\system32
etprovcredman.dll
Infected with Sys32.wvauth - File C:\WINDOWS\system32\wvauth.dll 

tu as fait le nettoyage pour ces 2 là?

laurdav · Answer

Est-ce que je peux juste les supprimer manuellement ?

pimprenelle27 · Answer

oui ensuite un nouvel hijackthis.

lesane662 · Answer

wow ! 1105 fichiers infecté mais il a le sida ton pc ! 

du jamais vu ! 

avec les bon outil des truc comme ça n'arriverai pas . 

déja en premier lieu tu devrai virer avast et intaller avira antivir qui est beaucoup plus performant ensuite  

un bon antispyware comme spyware terminator ou spybot , 

malwarebytes c'est  le top mais payant pour avoir le résident ! 

avec ça un bon pare feu du style zone alarm ou Kerio et fini l'abus d'infections !

lesane662 · Answer

oui oui faut d abord virer avast avant d'installer avira ! 

comment va ton pc maintenant ?

pimprenelle27 · Answer

tu as virer les 2 virus restant?

Infections

15 réponses

Discussions similaires