Voulez-vous analyser mon log svp ?

Merci de m'avoir répondu,
et merci du conseil pour anti virus

Voici le rapport, il n'y à rien...
Sinon rien d'autre à fixer sr hijack qui ne servirait à rien ? Genre toolbar yahoo

Merci

Malwarebytes' Anti-Malware 1.34
Version de la base de données: 1887
Windows 6.0.6001 Service Pack 1

23/03/2009 13:47:08
mbam-log-2009-03-23 (13-47-08).txt

Type de recherche: Examen complet (C:\|D:\|E:\|F:\|G:\|H:\|)
Eléments examinés: 192947
Temps écoulé: 1 hour(s), 38 minute(s), 55 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

Bonjour,

Merci de me répondre, voici le rapport
Au début il m'a mis erreur : pas trouvé la clé spécifiée... qqchose comme ça.


Rapport GenProc 2.491 [1] - 24/03/2009 à 10:57:50 - Windows Vista

GenProc n'a détecté aucune infection caractéristique et suggère de suivre la procédure suivante :


Poste un rapport Nod32 https://www.eset.com/ (il faut utiliser Internet Explorer)
- coche toutes les cases à chaque fois, et lorsque c'est terminé, colle le rapport :
- C:\Program Files\EsetOnlineScanner\log.txt

----------------------------------------------------------------------
Sites officiels GenProc : www.alt-shift-return.org et www.genproc.com
----------------------------------------------------------------------

Le scan est en cours depuis 6h, c'est normal ?

Pfiouuu ca y est.
Voici le rapport
Merci


SUPERAntiSpyware Scan Log
https://www.superantispyware.com/

Generated 03/24/2009 at 08:09 PM

Application Version : 4.25.1014

Core Rules Database Version : 3811
Trace Rules Database Version: 1765

Scan type : Complete Scan
Total Scan Time : 08:15:58

Memory items scanned : 760
Memory threats detected : 0
Registry items scanned : 7238
Registry threats detected : 0
File items scanned : 1036832
File threats detected : 5

Adware.Tracking Cookie
C:\Users\Cé\AppData\Roaming\Microsoft\Windows\Cookies\cé@serving-sys[2].txt
C:\Users\Cé\AppData\Roaming\Microsoft\Windows\Cookies\cé@bs.serving-sys[2].txt
C:\Users\Cé\AppData\Roaming\Microsoft\Windows\Cookies\cé@xiti[1].txt
C:\Users\Cé\Application Data\Microsoft\Windows\Cookies\cé@xiti[1].txt
C:\Users\Cé\Cookies\cé@xiti[1].txt

Il a trouvé 2 virus
Comment on fais pour poster le rapport ?

RemoveIT Pro v4 - SE (Build date: 6.6.2008) full information log file.
Generated at: 24/03/2009 on 21:15:13
Microsoft Windows Vista Home Edition Service Pack 1 (Build 6001)
Author: Damjan Irgolic
https://www.incodesolutions.com/
support@incodesolutions.com


Running processes: (25)
c:\PROGRA~1\mcafee.com\agent\mcagent.exe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
C:\Program Files\Windows Live\Family Safety\fsui.exe
C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\ehome\ehtray.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\InCode Solutions\RemoveIT Pro v4 - SE\removeit.exe
C:\Program Files\InCode Solutions\RemoveIT Pro v4 - SE\removeit.exe

Startup files:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\Sidebar
[C:\Program Files\Windows Sidebar\sidebar.exe /autoRun]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\IncrediMail
[C:\Program Files\IncrediMail\bin\IncMail.exe /c]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\ehTray.exe
[C:\Windows\ehome\ehTray.exe]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\EPSON Stylus DX8400 Series
[C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATICEE.EXE /FU "C:\Windows\TEMP\E_SD3DF.tmp" /EF "HKCU"]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\MsnMsgr
["C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\WMPNSCFG
[C:\Program Files\Windows Media Player\WMPNSCFG.exe]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\SUPERAntiSpyware
[C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\ISUSPM Startup
[C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\ISUSScheduler
["C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\mcagent_exe
["C:\Program Files\McAfee.com\Agent\mcagent.exe" /runkey]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\McENUI
[C:\PROGRA~1\McAfee\MHN\McENUI.exe /hide]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\RoxWatchTray
["C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Adobe Reader Speed Launcher
["C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\fssui
["C:\Program Files\Windows Live\Family Safety\fsui.exe" -autorun]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\TrueImageMonitor.exe
[C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\AcronisTimounterMonitor
[C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Acronis Scheduler2 Service
["C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe"]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\NvCplDaemon
[RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\NvMediaCenter
[RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\QuickTime Task
["C:\Program Files\QuickTime\QTTask.exe" -atboottime]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\iTunesHelper
["C:\Program Files\iTunes\iTunesHelper.exe"]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\SunJavaUpdateSched
["C:\Program Files\Java\jre6\bin\jusched.exe"]

Detail report: (98)
Clsid c:\program files\superantispyware\saswinlo.dll[972edede23ac8d59aac0c09799c6f18a][356352]
Clsid C:\Windows\system32\iconcodecservice.dll[08578f3ca5365f896d90ce2bf97fd000][9728]
Proc c:\PROGRA~1\mcafee.com\agent\mcagent.exe[88a8eba41a7fe46167d10975dc15bc4a][645328]
Proc C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe[230ae1c6bcfda952bea0b789e8ec09e1][961432]
Proc C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe[a57536b3c770c5de175d466facb6dbaa][4375312]
Proc C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe[8e9adb9fd3bfe2896d0a575e85004b0f][165144]
Proc C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe[0711524e77be0747927d18385468d36e][81920]
Proc C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe[2d2d6cea233f2b87dd7c3ff561295b9d][17656]
Proc C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe[df4d71b853e2a40ed457279d7dc99c6e][228088]
Proc C:\Program Files\InCode Solutions\RemoveIT Pro v4 - SE\removeit.exe[5f3e76c6be90c901c7a3058f05a5dc33][550912]
Proc C:\Program Files\iTunes\iTunesHelper.exe[44a93074fb1777e7946fd38d684cb63a][342312]
Proc C:\Program Files\Mozilla Firefox\firefox.exe[762d1d11bb4e7c8d238d957e5ab60d0e][307704]
Proc C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe[11afbca9eac51cf988918bffe935e6ee][1830128]
Proc C:\Program Files\Windows Live\Contacts\wlcomm.exe[654480ea67078c7b4c6c8ba871b07d5d][27512]
Proc C:\Program Files\Windows Live\Family Safety\fsui.exe[f0ae48a813a3371eba17ca8bd58c7e48][454000]
Proc C:\Program Files\Windows Live\Messenger\msnmsgr.exe[35b9fa77b73358d9063cd61aa3d83ee8][3885408]
Proc C:\Program Files\Windows Media Player\wmpnscfg.exe[35937ead711207544e219c2a19a78a7d][202240]
Proc C:\Program Files\Windows Sidebar\sidebar.exe[fd278e51a7d6f52d22fce6c67e037ad6][1233920]
Proc C:\Windows\ehome\ehmsas.exe[0f4195b9b348de5cf9b822f81704b20e][37376]
Proc C:\Windows\ehome\ehtray.exe[bf08674925f151bd4537b89a493e3e0c][125952]
Proc C:\Windows\Explorer.EXE[4f554999d7d5f05daaebba7b5ba1089d][2927104]
Proc C:\Windows\system32\Dwm.exe[59903071d7ace6a02093c47e9e38af97][81920]
Proc C:\Windows\System32\rundll32.exe[4b555106290bd117334e9a08761c035a][44544]
Proc C:\Windows\system32\taskeng.exe[5f109032ce46b7184ed9e50f9fe8489e][169472]
Proc C:\Windows\system32\wbem\unsecapp.exe[25873356e52849c3f5b3f1b02317e8c8][37888]
RegRun c:\progra~1\common~1\instal~1\update~1\isuspm.exe [45f2c61bd30137f7bd7f5339a34df601][221184]
RegRun c:\progra~1\mcafee\mhn\mcenui.exe [0dd0db7e281e50ad2ef3ddb4c06dfd23][1176808]
RegRun c:\program files\acronis\trueimagehome\timountermonitor.exe[230ae1c6bcfda952bea0b789e8ec09e1][961432]
RegRun c:\program files\acronis\trueimagehome\trueimagemonitor.exe[a57536b3c770c5de175d466facb6dbaa][4375312]
RegRun c:\program files\adobe\reader 8.0\reader\reader_sl.exe[8b9145d229d4e89d15acb820d4a3a90f][39792]
RegRun c:\program files\common files\acronis\schedule2\schedhlp.exe[8e9adb9fd3bfe2896d0a575e85004b0f][165144]
RegRun c:\program files\common files\installshield\updateservice\issch.exe [0711524e77be0747927d18385468d36e][81920]
RegRun c:\program files\common files\roxio shared\9.0\sharedcom\roxwatchtray9.exe[df4d71b853e2a40ed457279d7dc99c6e][228088]
RegRun c:\program files\incredimail\bin\incmail.exe [3d5cbe4f8f35dd2c26f9951b5a2ebeaf][251264]
RegRun c:\program files\itunes\ituneshelper.exe[44a93074fb1777e7946fd38d684cb63a][342312]
RegRun c:\program files\java\jre6\bin\jusched.exe[a2d390f1f2408b94ef34bfe3a00c29d3][148888]
RegRun c:\program files\mcafee.com\agent\mcagent.exe [88a8eba41a7fe46167d10975dc15bc4a][645328]
RegRun c:\program files\quicktime\qttask.exe [0ab3c83fcb8ef6f56e4fb22089f0d3b9][413696]
RegRun c:\program files\superantispyware\superantispyware.exe[11afbca9eac51cf988918bffe935e6ee][1830128]
RegRun c:\program files\windows live\family safety\fsui.exe [f0ae48a813a3371eba17ca8bd58c7e48][454000]
RegRun c:\program files\windows live\messenger\msnmsgr.exe [35b9fa77b73358d9063cd61aa3d83ee8][3885408]
RegRun c:\program files\windows media player\wmpnscfg.exe[35937ead711207544e219c2a19a78a7d][202240]
RegRun c:\program files\windows sidebar\sidebar.exe [fd278e51a7d6f52d22fce6c67e037ad6][1233920]
RegRun c:\windows\ehome\ehtray.exe[bf08674925f151bd4537b89a493e3e0c][125952]
RegRun c:\windows\system32\nvcpl.dll[d76615bd370039309c7d9a8ebf0d16d9][13580832]
RegRun c:\windows\system32\nvmctray.dll[95b8975a500804f104f45185d7888387][92704]
RegRun c:\windows\system32\spool\drivers\w32x86\3\e_faticee.exe [9ad31d8018b72e1013cfd012619e0232][182272]
Service c:\progra~1\common~1\mcafee\mcproxy\mcproxy.exe[5a8d1acd2070b8261236d5484ae63721][359952]
Service c:\progra~1\common~1\mcafee\mna\mcnasvc.exe[aa490bfb95998686af46fdcd8093443b][2482848]
Service c:\progra~1\mcafee\msc\mcmscsvc.exe[5f2e238661f79cc2d0347f0265bf0063][797864]
Service c:\progra~1\mcafee\viruss~1\mcods.exe[6b970146ffab581c40aef16d5b677f8e][365072]
Service c:\progra~1\mcafee\viruss~1\mcshield.exe[323648ae20c5a29039e85578089f9a03][144704]
Service c:\progra~1\mcafee\viruss~1\mcsysmon.exe[f7401d3c01309371acb3419d10eab9dc][606736]
Service c:\program files\a-squared free\a2service.exe[b2d205564a3b9329b32c6ccb504437e0][425080]
Service c:\program files\bonjour\mdnsresponder.exe[3f56903e124e820aeece6d471583c6c1][238888]
Service c:\program files\common files\acronis\schedule2\schedul2.exe[76da89b6b38ae8399f6141db60a0998b][554264]
Service c:\program files\common files\apple\mobile device support\bin\applemobiledeviceservice.exe[367592efca7ff8b4ce11ab6b0744e1e2][132424]
Service c:\program files\common files\installshield\driver\1050\intel 32\idrivert.exe[6f95324909b502e2651442c1548ab12f][73728]
Service c:\program files\common files\roxio shared\9.0\sharedcom\roxmediadb9.exe[9c19e4419a6acf8fff53f1dd1c305e9e][887544]
Service c:\program files\common files\roxio shared\9.0\sharedcom\roxwatch9.exe[9d95da35ec22511a1ceb38a8c3a0bc7e][166648]
Service c:\program files\common files\surething shared\stllssvr.exe[51778fd315c9882f1cbd932743e62a72][73728]
Service c:\program files\ipod\bin\ipodservice.exe[6534fa115b2134c67b4908fabc2af993][656168]
Service c:\program files\mcafee\mbk\mbackmonitor.exe[c303690432c3681a67308c9d24c07977][68112]
Service c:\program files\mcafee\mpf\mpfsrv.exe[545b1165bca3990a3f2579170c7f34d1][884360]
Service c:\program files\mcafee\msk\msksrver.exe[9a55cfa5f970bb407c7f639d19578a89][26640]
Service c:\program files\mcafee\siteadvisor\mcsacore.exe[2ed44415685945d691f5089cc33dd237][210216]
Service c:\program files\microsoft\search enhancement pack\seaport\seaport.exe[d358e077a0a05d9b12da22d137ee8464][226656]
Service c:\program files\spybot - search & destroy\sdwinsec.exe[55c1e4fdfd62a48fb5a2ce25f3aa8ae8][809296]
Service c:\program files\windows live\family safety\fsssvc.exe[9b1622ebeb31b3411b13382ffcb8737d][533360]
Service c:\program files\windows media player\wmpnetwk.exe[3978704576a121a9204f8cc49a301a9b][896512]
Service c:\windows\ehome\ehrecvr.exe[9be3744d295a7701eb425332014f0797][292352]
Service c:\windows\ehome\ehsched.exe[ad1870c8e5d6dd340c829e6074bf3c3f][131072]
Service c:\windows\microsoft.net\framework\v2.0.50727\mscorsvw.exe[d87acaed61e417bba546ced5e7e36d9c][69632]
Service c:\windows\microsoft.net\framework\v3.0\windows communication foundation\infocard.exe[7b630acaed64fef0c3e1cf255cb56686][881664]
Service c:\windows\microsoft.net\framework\v3.0\windows communication foundation\smsvchost.exe[0ad5876ef4e9eb77c8f93eb5b2fff386][132096]
Service c:\windows\microsoft.net\framework\v3.0\wpf\presentationfontcache.exe[c9be08664611ddaf98e2331e9288b00b][46104]
Service c:\windows\servicing\trustedinstaller.exe[16613a1bad034d4ecf957af18b7c2ff5][39424]
Service c:\windows\system32\alg.exe[a1545b731579895d8cc44fc0481c1192][59392]
Service c:\windows\system32\dfsr.exe[fa3463f25f9cc9c3bcf1e7912feff099][2091520]
Service c:\windows\system32\dllhost.exe [be01e566d1f569aab32d0335613e1eea][7168]
Service c:\windows\system32\lexbces.exe[a1043645d16915df12a6f2e049922a18][311296]
Service c:\windows\system32\locator.exe[5123f83cbc4349d065534eeb6bbdc42b][7680]
Service c:\windows\system32\lsass.exe[dcf733788c7d088d814e5f80eb4b3e0f][9728]
Service c:\windows\system32\msdtc.exe[fd7520cc3a80c5fc8c48852bb24c6ded][105984]
Service c:\windows\system32\msiexec.exe [a1716d02eb4de411e0cec7cf2c165f5a][71680]
Service c:\windows\system32\nvvsvc.exe[24a4ad50c9b79c47da3414b82b94c71c][196608]
Service c:\windows\system32\searchindexer.exe [7778bdfa3f6f6fba0e75b9594098f737][439808]
Service c:\windows\system32\slsvc.exe[0ba91e1358ad25236863039bb2609a2e][2623488]
Service c:\windows\system32\snmptrap.exe[2a146a055b4401c16ee62d18b8e2a032][12800]
Service c:\windows\system32\spoolsv.exe[846cdf9a3cf4da9b306adfb7d55ee4c2][125952]
Service c:\windows\system32\svchost.exe [3794b461c45882e06856f282eef025af][21504]
Service c:\windows\system32\ui0detect.exe[ecef404f62863755951e09c802c94ad5][35840]
Service c:\windows\system32\vds.exe[b13bc395b9d6116628f5af47e0802ac4][382976]
Service c:\windows\system32\vssvc.exe[d5fb73d19c46ade183f968e13f186b23][1054720]
Service c:\windows\system32\wbem\wmiapsrv.exe[aba4cf9f856d9a3a25f4ddd7690a6e9d][137728]
Startup c:\programdata\microsoft\windows\start menu\programs\startup\desktop.ini[7f1698bab066b764a314a589d338daae][174]
Startup c:\users\cé\appdata\roaming\microsoft\windows\start menu\programs\startup\desktop.ini[7f1698bab066b764a314a589d338daae][174]
System.ini c:\windows\system32\svchost.exe [3794b461c45882e06856f282eef025af][21504]

Startup folder: (2)
Startup name: desktop.ini
Command: C:\Users\Cé\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
Startup name: desktop.ini
Command: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini

Win.ini Startup: (1)
Path: No additional driver found!

Win.ini Startup: (1)
Path: No additional driver found!

Keyboard drivers: (1)
Name: No Keyboard Filter driver found!

Services: (151)
Service Name: Accès du périphérique d'interface utilisateur [Stopped],
Path: C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Acquisition d'image Windows (WIA) [Running],
Path: C:\Windows\system32\svchost.exe -k imgsvc
Service Name: Acronis Scheduler2 Service [Running],
Path: "C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe"
Service Name: Agent de protection d’accès réseau [Stopped],
Path: C:\Windows\System32\svchost.exe -k NetworkService
Service Name: Agent de stratégie IPsec [Running],
Path: C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
Service Name: Appel de procédure distante (RPC) [Running],
Path: C:\Windows\system32\svchost.exe -k rpcss
Service Name: Apple Mobile Device [Running],
Path: "C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe"
Service Name: Application système COM+ [Stopped],
Path: C:\Windows\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}
Service Name: a-squared Free Service [Running],
Path: "C:\Program Files\a-squared Free\a2service.exe"
Service Name: Assistance IP [Running],
Path: C:\Windows\System32\svchost.exe -k NetSvcs
Service Name: Assistance NetBIOS sur TCP/IP [Running],
Path: C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted
Service Name: Audio Windows [Running],
Path: C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
Service Name: Cache de police de Windows Presentation Foundation 3.0.0.0 [Stopped],
Path: C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
Service Name: Carte à puce [Stopped],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Carte de performance WMI [Stopped],
Path: C:\Windows\system32\wbem\WmiApSrv.exe
Service Name: Centre de sécurité [Running],
Path: C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
Service Name: Cliché instantané de volume [Stopped],
Path: C:\Windows\system32\vssvc.exe
Service Name: Client de stratégie de groupe [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Client de suivi de lien distribué [Running],
Path: C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Client DHCP [Running],
Path: C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted
Service Name: Client DNS [Running],
Path: C:\Windows\system32\svchost.exe -k NetworkService
Service Name: Collecteur d'événements de Windows [Stopped],
Path: C:\Windows\system32\svchost.exe -k NetworkService
Service Name: Configuration automatique de réseau câblé [Stopped],
Path: C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Configuration des services Terminal Server [Running],
Path: C:\Windows\System32\svchost.exe -k netsvcs
Service Name: Connaissance des emplacements réseau [Running],
Path: C:\Windows\System32\svchost.exe -k NetworkService
Service Name: Connexions réseau [Running],
Path: C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Contrôle parental [Stopped],
Path: C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted
Service Name: Coordinateur de transactions distribuées [Stopped],
Path: C:\Windows\System32\msdtc.exe
Service Name: Découverte SSDP [Running],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Détection de services interactifs [Stopped],
Path: C:\Windows\system32\UI0Detect.exe
Service Name: Détection matériel noyau [Running],
Path: C:\Windows\System32\svchost.exe -k netsvcs
Service Name: Disque virtuel [Stopped],
Path: C:\Windows\System32\vds.exe
Service Name: Emplacement protégé [Stopped],
Path: C:\Windows\system32\lsass.exe
Service Name: Énumérateur de bus IP PnP-X [Stopped],
Path: C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Expérience audio-vidéo haute qualité Windows [Stopped],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Expérience d’application [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Explorateur d'ordinateurs [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Fournisseur de cliché instantané de logiciel Microsoft [Stopped],
Path: C:\Windows\System32\svchost.exe -k swprv
Service Name: Générateur de points de terminaison du service Audio Windows [Running],
Path: C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Gestion à distance de Windows (Gestion WSM) [Stopped],
Path: C:\Windows\System32\svchost.exe -k NetworkService
Service Name: Gestion des clés et des certificats d'intégrité [Stopped],
Path: C:\Windows\System32\svchost.exe -k netsvcs
Service Name: Gestionnaire de comptes de sécurité [Running],
Path: C:\Windows\system32\lsass.exe
Service Name: Gestionnaire de connexion automatique d'accès distant [Stopped],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Gestionnaire de connexions d'accès distant [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Gestionnaire de sessions du Gestionnaire de fenêtrage [Running],
Path: C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Gestionnaire d'identité réseau homologue [Stopped],
Path: C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
Service Name: Groupement de mise en réseau de pairs [Stopped],
Path: C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
Service Name: Horloge Windows [Running],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Hôte de périphérique UPnP [Running],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Hôte du fournisseur de découverte de fonctions [Running],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Hôte système de diagnostics [Running],
Path: C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Informations d'application [Stopped],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Infrastructure de gestion Windows [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: InstallDriver Table Manager [Stopped],
Path: "C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe"
Service Name: Interruption SNMP [Stopped],
Path: C:\Windows\System32\snmptrap.exe
Service Name: Isolation de clé CNG [Stopped],
Path: C:\Windows\system32\lsass.exe
Service Name: Journal d’événements Windows [Running],
Path: C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
Service Name: Journaux & alertes de performance [Stopped],
Path: C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork
Service Name: Lanceur de processus serveur DCOM [Running],
Path: C:\Windows\system32\svchost.exe -k DcomLaunch
Service Name: Lanceur des services Windows Media Center [Stopped],
Path: C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
Service Name: LexBce Server [Running],
Path: C:\Windows\System32\LEXBCES.EXE
Service Name: Licence du logiciel [Running],
Path: C:\Windows\system32\SLsvc.exe
Service Name: Localisateur d'appels de procédure distante (RPC) [Stopped],
Path: C:\Windows\system32\locator.exe
Service Name: Mappage de découverte de topologie de la couche de liaison [Stopped],
Path: C:\Windows\System32\svchost.exe -k LocalService
Service Name: MBackMonitor [Stopped],
Path: "C:\Program Files\McAfee\MBK\MBackMonitor.exe"
Service Name: McAfee Anti-Spam Service [Running],
Path: "C:\Program Files\McAfee\MSK\MskSrver.exe"
Service Name: McAfee Application Installer Cleanup (0216321237865424) [Stopped],
Path: C:\Windows\TEMP\021632~1.EXE C:\PROGRA~1\COMMON~1\McAfee\INSTAL~1\cleanup.ini -cleanup -nolog -service
Service Name: McAfee Network Agent [Running],
Path: "c:\PROGRA~1\COMMON~1\mcafee\mna\mcnasvc.exe"
Service Name: McAfee Personal Firewall Service [Running],
Path: "C:\Program Files\McAfee\MPF\MPFSrv.exe"
Service Name: McAfee Proxy Service [Running],
Path: c:\PROGRA~1\COMMON~1\mcafee\mcproxy\mcproxy.exe
Service Name: McAfee Real-time Scanner [Running],
Path: C:\PROGRA~1\McAfee\VIRUSS~1\mcshield.exe
Service Name: McAfee Scanner [Stopped],
Path: C:\PROGRA~1\McAfee\VIRUSS~1\mcods.exe
Service Name: McAfee Services [Running],
Path: C:\PROGRA~1\McAfee\MSC\mcmscsvc.exe
Service Name: McAfee SiteAdvisor Service [Running],
Path: "C:\Program Files\McAfee\SiteAdvisor\McSACore.exe"
Service Name: McAfee SystemGuards [Running],
Path: C:\PROGRA~1\McAfee\VIRUSS~1\mcsysmon.exe
Service Name: Microsoft .NET Framework NGEN v2.0.50727_X86 [Stopped],
Path: C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
Service Name: Modules de génération de clés IKE et AuthIP [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Moteur de filtrage de base [Running],
Path: C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
Service Name: Net.Tcp Port Sharing Service [Stopped],
Path: "C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe"
Service Name: Netlogon [Stopped],
Path: C:\Windows\system32\lsass.exe
Service Name: NVIDIA Display Driver Service [Running],
Path: C:\Windows\system32\nvvsvc.exe
Service Name: Ouverture de session secondaire [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Pare-feu Windows [Running],
Path: C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
Service Name: Partage de connexion Internet (ICS) [Stopped],
Path: C:\Windows\System32\svchost.exe -k netsvcs
Service Name: Planificateur de classes multimédias [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Planificateur de tâches [Running],
Path: C:\Windows\System32\svchost.exe -k netsvcs
Service Name: Plug-and-Play [Running],
Path: C:\Windows\system32\svchost.exe -k DcomLaunch
Service Name: Prise en charge de l’application Rapports et solutions aux problèmes du Panneau de configuration [Stopped],
Path: C:\Windows\System32\svchost.exe -k netsvcs
Service Name: Programme d’installation de modules Windows [Stopped],
Path: C:\Windows\servicing\TrustedInstaller.exe
Service Name: Propagation du certificat [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Protocole de résolution de noms d'homologues [Stopped],
Path: C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
Service Name: Protocole EAP (Extensible Authentication Protocol) [Stopped],
Path: C:\Windows\System32\svchost.exe -k netsvcs
Service Name: Publication des ressources de découverte de fonctions [Running],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Registre à distance [Stopped],
Path: C:\Windows\system32\svchost.exe -k regsvc
Service Name: Réplication DFS [Stopped],
Path: C:\Windows\system32\DFSR.exe
Service Name: Routage et accès distant [Stopped],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Roxio Hard Drive Watcher 9 [Running],
Path: "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe"
Service Name: RoxMediaDB9 [Running],
Path: "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe"
Service Name: Sauvegarde Windows [Stopped],
Path: C:\Windows\system32\svchost.exe -k SDRSVC
Service Name: SBSD Security Center Service [Running],
Path: C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
Service Name: SeaPort [Running],
Path: "C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe"
Service Name: Serveur [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Serveur de priorités des threads [Stopped],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Service Bonjour [Running],
Path: "C:\Program Files\Bonjour\mDNSResponder.exe"
Service Name: Service de configuration automatique WLAN [Stopped],
Path: C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Service de découverte automatique de Proxy Web pour les services HTTP Windows [Stopped],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Service de l’Assistant Compatibilité des programmes [Running],
Path: C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Service de l’iPod [Running],
Path: "C:\Program Files\iPod\bin\iPodService.exe"
Service Name: Service de la passerelle de la couche Application [Stopped],
Path: C:\Windows\System32\alg.exe
Service Name: Service de notification d’événements système [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Service de notification de l’interface utilisateur SL [Stopped],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Service de planification Windows Media Center [Stopped],
Path: C:\Windows\ehome\ehsched.exe
Service Name: Service de profil utilisateur [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Service de publication des noms d’ordinateurs PNRP [Stopped],
Path: C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
Service Name: Service de rapport d'erreurs Windows [Running],
Path: C:\Windows\System32\svchost.exe -k WerSvcGroup
Service Name: Service de réception Windows Media Center [Stopped],
Path: C:\Windows\ehome\ehRecvr.exe
Service Name: Service de stratégie de diagnostic [Running],
Path: C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork
Service Name: Service de transfert intelligent en arrière-plan [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Service Énumérateur d’appareil mobile [Running],
Path: C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Service hôte WDIServiceHost [Stopped],
Path: C:\Windows\System32\svchost.exe -k wdisvc
Service Name: Service Initiateur iSCSI de Microsoft [Stopped],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Service Interface du magasin réseau [Running],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Service KtmRm pour Distributed Transaction Coordinator [Running],
Path: C:\Windows\System32\svchost.exe -k NetworkService
Service Name: Service Liste des réseaux [Running],
Path: C:\Windows\System32\svchost.exe -k LocalService
Service Name: Service Panneau de saisie Tablet PC [Running],
Path: C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Service Partage réseau du Lecteur Windows Media [Running],
Path: "C:\Program Files\Windows Media Player\wmpnetwk.exe"
Service Name: Service ReadyBoost [Running],
Path: C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Service Windows Media Center Extender [Stopped],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Service SSTP (Secure Socket Tunneling Protocol) [Running],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Services de base de module de plateforme sécurisée [Stopped],
Path: C:\Windows\System32\svchost.exe -k LocalService
Service Name: Services de chiffrement [Running],
Path: C:\Windows\system32\svchost.exe -k NetworkService
Service Name: Services Terminal Server [Running],
Path: C:\Windows\System32\svchost.exe -k NetworkService
Service Name: Spouleur d'impression [Running],
Path: C:\Windows\System32\spoolsv.exe
Service Name: Station de travail [Running],
Path: C:\Windows\System32\svchost.exe -k LocalService
Service Name: stllssvr [Stopped],
Path: "C:\Program Files\Common Files\SureThing Shared\stllssvr.exe"
Service Name: Stratégie de retrait de la carte à puce [Stopped],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Superfetch [Running],
Path: C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Symantec Lic NetConnect service [Stopped],
Path: "C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon
Service Name: Système de couleurs Windows [Stopped],
Path: C:\Windows\system32\svchost.exe -k wcssvc
Service Name: Système d'événement COM+ [Running],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Téléphonie [Running],
Path: C:\Windows\System32\svchost.exe -k NetworkService
Service Name: Thèmes [Running],
Path: C:\Windows\System32\svchost.exe -k netsvcs
Service Name: WebClient [Running],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Windows CardSpace [Stopped],
Path: "C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe"
Service Name: Windows Connect Now - Registre de configuration [Stopped],
Path: C:\Windows\System32\svchost.exe -k LocalService
Service Name: Windows Defender [Running],
Path: C:\Windows\System32\svchost.exe -k secsvcs
Service Name: Windows Driver Foundation - Infrastructure de pilote mode-utilisateur [Running],
Path: C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Windows Installer [Stopped],
Path: C:\Windows\system32\msiexec.exe /V
Service Name: Windows Live Contrôle parental [Running],
Path: "C:\Program Files\Windows Live\Family Safety\fsssvc.exe"
Service Name: Windows Search [Running],
Path: C:\Windows\system32\SearchIndexer.exe /Embedding
Service Name: Windows Update [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Finished...

Bonjour,

;***********************************************************************************************************************************************************************************
ANALYSIS: 2009-03-25 08:11:26
PROTECTIONS: 3
MALWARE: 3
SUSPECTS: 0
;***********************************************************************************************************************************************************************************
PROTECTIONS
Description Version Active Updated
;===================================================================================================================================================================================
Spybot - Search and Destroy 1.0.0.6 No Yes
Windows Defender 1.1.1505.0 No Yes
SUPERAntiSpyware 4, 25, 0, 1014 No Yes
;===================================================================================================================================================================================
MALWARE
Id Description Type Active Severity Disinfectable Disinfected Location
;===================================================================================================================================================================================
00039738 Exploit/URLSpoof HackTools No 0 Yes No C:\Program Files\OFFICE ONE 7.0\share\template\fr\Présentations Arrière-Plan\Marbre.otp[meta.xml]
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Users\Cé\AppData\Roaming\Microsoft\Windows\Cookies\cé@serving-sys[1].txt
00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Users\Cé\AppData\Roaming\Microsoft\Windows\Cookies\cé@bs.serving-sys[1].txt
;===================================================================================================================================================================================
SUSPECTS
Sent Location
��J��.39$
;===================================================================================================================================================================================
;===================================================================================================================================================================================
VULNERABILITIES
Id Severity Description
��J��.39$
;===================================================================================================================================================================================
;===================================================================================================================================================================================

Je ne vois pas ce que c'est
J'en fais quoi ? Je le supprime, et comment ?
merci

Ok
Merci