Quelqu un peut verifier mon rapport

re voila mon rapport hijackthis: Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:13:44, on 09/05/2009
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16830)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\WINDOWS\SMINST\scheduler.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Hewlett-Packard\IAM\bin\asghost.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\WINDOWS\System32\rundll32.exe
C:\Program Files\PDF Complete\pdfsty.exe
C:\WINDOWS\System32\rundll32.exe
C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\pthosttr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
C:\Program Files\Java\jre1.6.0\bin\jusched.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Hp\HP Software Update\hpwuSchd2.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Users\admin\Desktop\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/...
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Credential Manager for HP ProtectTools - {DF21F1DB-80C6-11D3-9483-B03D0EC10000} - C:\Program Files\Hewlett-Packard\IAM\Bin\ItIEAddIn.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [PDF Complete] "C:\Program Files\PDF Complete\pdfsty.exe"
O4 - HKLM\..\Run: [PTHOSTTR] C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE /Start
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [hpWirelessAssistant] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [WAWifiMessage] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
O4 - HKLM\..\Run: [HP Health Check Scheduler] C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0\bin\jusched.exe"
O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start
O4 - HKLM\..\Run: [CognizanceTS] rundll32.exe C:\PROGRA~1\HEWLET~1\IAM\Bin\ASTSVCC.dll,RegisterModule
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\RunOnce: [ST Recovery Launcher] %WINDIR%\SMINST\launcher.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter
O4 - HKCU\..\Run: [LightScribe Control Panel] C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O4 - Global Startup: DVD Check.lnk = C:\Program Files\InterVideo\DVD Check\DVDCheck.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0\bin\ssv.dll
O13 - Gopher Prefix:
O20 - AppInit_DLLs: APSHook.dll
O20 - Winlogon Notify: DeviceNP - C:\Windows\SYSTEM32\DeviceNP.dll
O23 - Service: Andrea ADI Filters Service (AEADIFilters) - Andrea Electronics Corporation - C:\Windows\system32\AEADISRV.EXE
O23 - Service: Avira AntiVir Personal - Free Antivirus Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: Avira AntiVir Personal - Free Antivirus Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Verrouillage des périphériques / Audition HP ProtectTools (FLCDLOCK) - Hewlett-Packard Ltd - C:\Windows\system32\flcdlock.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe
O23 - Service: HP Service (hpsrv) - Unknown owner - C:\Windows\system32\Hpservice.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: PDF Document Manager (pdfcDispatcher) - PDF Complete Inc - C:\Program Files\PDF Complete\pdfsvc.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - c:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

voila c est fait: Rapport GenProc 2.544 [1]
@ 09/05/2009 à 16:34:02
@ Windows Vista
@ Mozilla Firefox (3.0.10) [Navigateur par défaut]

GenProc n'a détecté aucune infection caractéristique et suggère de suivre la procédure suivante :


Poste un rapport Nod32 https://www.eset.com/ (il faut utiliser Internet Explorer)
- coche toutes les cases à chaque fois, et lorsque c'est terminé, colle le rapport :
- C:\Program Files\EsetOnlineScanner\log.txt

----------------------------------------------------------------------
Sites officiels GenProc : www.alt-shift-return.org et www.genproc.com
----------------------------------------------------------------------

voila:Malwarebytes' Anti-Malware 1.36
Version de la base de données: 2099
Windows 6.0.6000

09/05/2009 17:26:45
mbam-log-2009-05-09 (17-26-45).txt

Type de recherche: Examen complet (C:\|D:\|E:\|F:\|)
Eléments examinés: 169493
Temps écoulé: 42 minute(s), 8 second(s)

Processus mémoire infecté(s): 0
Module(s) mémoire infecté(s): 0
Clé(s) du Registre infectée(s): 0
Valeur(s) du Registre infectée(s): 0
Elément(s) de données du Registre infecté(s): 0
Dossier(s) infecté(s): 0
Fichier(s) infecté(s): 0

Processus mémoire infecté(s):
(Aucun élément nuisible détecté)

Module(s) mémoire infecté(s):
(Aucun élément nuisible détecté)

Clé(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Valeur(s) du Registre infectée(s):
(Aucun élément nuisible détecté)

Elément(s) de données du Registre infecté(s):
(Aucun élément nuisible détecté)

Dossier(s) infecté(s):
(Aucun élément nuisible détecté)

Fichier(s) infecté(s):
(Aucun élément nuisible détecté)

ca y est: SUPERAntiSpyware Scan Log
https://www.superantispyware.com/

Generated 05/09/2009 at 06:12 PM

Application Version : 4.26.1002

Core Rules Database Version : 3885
Trace Rules Database Version: 1833

Scan type : Complete Scan
Total Scan Time : 00:29:06

Memory items scanned : 733
Memory threats detected : 0
Registry items scanned : 6248
Registry threats detected : 0
File items scanned : 22979
File threats detected : 7

Adware.Tracking Cookie
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@atdmt[1].txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@doubleclick[1].txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@serving-sys[2].txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@mediaplex[1].txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@tradedoubler[1].txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@bs.serving-sys[1].txt
C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@apmebf[1].txt

re: rien trouver non plus

RemoveIT Pro v4 - SE (Build date: 6.6.2008) full information log file.
Generated at: 10/05/2009 on 06:49:57
Microsoft Windows Vista Professional (Build 6000)
Author: Damjan Irgolic
https://www.incodesolutions.com/
support@incodesolutions.com


Running processes: (23)
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Hewlett-Packard\IAM\bin\asghost.exe
C:\Windows\Explorer.EXE
C:\WINDOWS\SMINST\scheduler.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\WINDOWS\System32\rundll32.exe
C:\Program Files\PDF Complete\pdfsty.exe
C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\pthosttr.exe
C:\WINDOWS\System32\rundll32.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe
C:\Program Files\Java\jre1.6.0\bin\jusched.exe
C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe
C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\Hp\HP Software Update\hpwuSchd2.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\InCode Solutions\RemoveIT Pro v4 - SE\removeit.exe

Startup files:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\Sidebar
[C:\Program Files\Windows Sidebar\sidebar.exe /autoRun]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\WindowsWelcomeCenter
[rundll32.exe oobefldr.dll,ShowWelcomeCenter]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\LightScribe Control Panel
[C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe -hidden]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\SUPERAntiSpyware
[C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Windows Defender
[%ProgramFiles%\Windows Defender\MSASCui.exe -hide]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\SoundMAXPnP
[C:\Program Files\Analog Devices\Core\smax4pnp.exe]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\NvSvc
[RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\NvCplDaemon
[RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\NvMediaCenter
[RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\PDF Complete
["C:\Program Files\PDF Complete\pdfsty.exe"]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\PTHOSTTR
[C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\PTHOSTTR.EXE /Start]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\SynTPEnh
[C:\Program Files\Synaptics\SynTP\SynTPEnh.exe]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\hpWirelessAssistant
[%ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\WAWifiMessage
[%ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\HP Health Check Scheduler
[C:\Program Files\Hewlett-Packard\HP Health Check\HPHC_Scheduler.exe]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\SunJavaUpdateSched
["C:\Program Files\Java\jre1.6.0\bin\jusched.exe"]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\QlbCtrl
[%ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\CognizanceTS
[rundll32.exe C:\PROGRA~1\HEWLET~1\IAM\Bin\ASTSVCC.dll,RegisterModule]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\avgnt
["C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe" /min]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\HP Software Update
[C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce\ST Recovery Launcher
[%WINDIR%\SMINST\launcher.exe]

Detail report: (85)
Clsid c:\program files\superantispyware\saswinlo.dll[972edede23ac8d59aac0c09799c6f18a][356352]
Clsid C:\Windows\system32\apshook.dll[26d017054ea002b6fe4e2aaa9cae04b8][70144]
Clsid C:\Windows\system32\devicenp.dll[b51c799aa8e10e2315df8cef33ad681e][49152]
Clsid C:\Windows\system32\iconcodecservice.dll[08578f3ca5365f896d90ce2bf97fd000][9728]
Proc C:\Program Files\Analog Devices\Core\smax4pnp.exe[5616e23703ddbb615d41923d0768be84][1183744]
Proc C:\Program Files\Avira\AntiVir PersonalEdition Classic\avgnt.exe[6e812818306d460d62b4abea9fdc6679][266497]
Proc C:\Program Files\Common Files\LightScribe\LightScribeControlPanel.exe[9b6414517444980f2ecad8fa5f66e162][484904]
Proc C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\pthosttr.exe[3ba17e105df34db078ca0673952c0b48][145184]
Proc C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QLBCTRL.exe[1eea95a7483a678551108b6dcf308cc1][177456]
Proc C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe[af849798eca383184c88ed436cf3efb2][472776]
Proc C:\Program Files\Hewlett-Packard\HP Wireless Assistant\WiFiMsg.exe[f533507fe318b46629e84df630a316f8][317128]
Proc C:\Program Files\Hewlett-Packard\IAM\bin\asghost.exe[3f91d1056d2cebef374be0e55428190a][65536]
Proc C:\Program Files\Hp\HP Software Update\hpwuSchd2.exe[21293443961a4e2597453ee7a9347f22][54840]
Proc C:\Program Files\InCode Solutions\RemoveIT Pro v4 - SE\removeit.exe[b2bf3a935b301fe84be4c9b768b4c61a][551424]
Proc C:\Program Files\Java\jre1.6.0\bin\jusched.exe[ab74aa8defc1ca82759788a55b673629][77824]
Proc C:\Program Files\Mozilla Firefox\firefox.exe[ca2ac84aa6c67f742d9785e553848927][307704]
Proc C:\Program Files\PDF Complete\pdfsty.exe[189143a3943760112de09b584dd7ed81][331552]
Proc C:\Program Files\Synaptics\SynTP\SynTPEnh.exe[450497c656d16b45ee9d121d64d3289f][827392]
Proc C:\Program Files\Windows Defender\MSASCui.exe[9ad9e2fb2811123da13de84cc154ab77][1006264]
Proc C:\Program Files\Windows Sidebar\sidebar.exe[582f3a0ba61d8f0d50c66b592808b6d6][1232896]
Proc C:\Windows\Explorer.EXE[37440d09deae0b672a04dccf7abf06be][2923520]
Proc C:\WINDOWS\SMINST\scheduler.exe[1d26d9993d5da7d0c3452b9ded597097][715912]
Proc C:\Windows\system32\Dwm.exe[e87b968f3d49117445893eb0503fe34f][83456]
Proc C:\WINDOWS\System32\rundll32.exe[4b555106290bd117334e9a08761c035a][44544]
Proc C:\Windows\system32\taskeng.exe[1226e9fae5b8508801ec974e3c9d9c14][166400]
Proc C:\Windows\system32\wuauclt.exe[e654b78d2f1d791b30d0ed9a8195ec22][51224]
RegRun c:\progra~1\hewlet~1\iam\bin\astsvcc.dll[09b9f07e4d91b4ec48d7271110136881][17920]
RegRun c:\program files\analog devices\core\smax4pnp.exe[5616e23703ddbb615d41923d0768be84][1183744]
RegRun c:\program files\avira\antivir personaledition classic\avgnt.exe [6e812818306d460d62b4abea9fdc6679][266497]
RegRun c:\program files\common files\lightscribe\lightscribecontrolpanel.exe [9b6414517444980f2ecad8fa5f66e162][484904]
RegRun c:\program files\hewlett-packard\hp health check\hphc_scheduler.exe[06b28c3cfd5c995b82f5ef1e5a0a576c][50696]
RegRun c:\program files\hewlett-packard\hp protecttools security manager\pthosttr.exe [3ba17e105df34db078ca0673952c0b48][145184]
RegRun c:\program files\hp\hp software update\hpwuschd2.exe[21293443961a4e2597453ee7a9347f22][54840]
RegRun c:\program files\java\jre1.6.0\bin\jusched.exe[ab74aa8defc1ca82759788a55b673629][77824]
RegRun c:\program files\pdf complete\pdfsty.exe[189143a3943760112de09b584dd7ed81][331552]
RegRun c:\program files\superantispyware\superantispyware.exe[38f8bd45fb8860399db4fb082ae9589c][1830128]
RegRun c:\program files\synaptics\syntp\syntpenh.exe[450497c656d16b45ee9d121d64d3289f][827392]
RegRun c:\program files\windows sidebar\sidebar.exe [582f3a0ba61d8f0d50c66b592808b6d6][1232896]
RegRun c:\windows\sminst\launcher.exe[200da7478004a87e3f85ece59e2b0c75][44168]
RegRun c:\windows\system32\nvcpl.dll[c299bdef5825491969a706b9124c4f39][8429568]
RegRun c:\windows\system32\nvmctray.dll[26cb27b3c48a672c00fa08f5ce6c9056][81920]
RegRun c:\windows\system32\nvsvc.dll[9e0d39e1095ec28dd7f8fcfc0b70e3e9][86016]
Service c:\program files\avira\antivir personaledition classic\avguard.exe[335a142923fe7f97e8c8388acd067568][151297]
Service c:\program files\avira\antivir personaledition classic\sched.exe[d6c8942bea3698a2e7559bd423bfa5d7][68865]
Service c:\program files\common files\installshield\driver\1050\intel 32\idrivert.exe[6f95324909b502e2651442c1548ab12f][73728]
Service c:\program files\common files\intervideo\regmgr\iviregmgr.exe[213822072085b5bbad9af30ab577d817][112152]
Service c:\program files\common files\lightscribe\lssrvc.exe[31d8b705dcd5f2366186e731f87c7a71][75304]
Service c:\program files\common files\roxio shared\9.0\sharedcom\roxmediadb9.exe[ad1411a7ea50f2f97a73a3f51153066e][887544]
Service c:\program files\common files\surething shared\stllssvr.exe[b254b1434208f280edf3785613dcc41b][73728]
Service c:\program files\hewlett-packard\hp health check\hphc_service.exe[2ceeb349216febd91a907013d4abcff7][62984]
Service c:\program files\hewlett-packard\shared\hpqwmiex.exe[f8968c9778f25a90a35755c3c97c7f62][144688]
Service c:\program files\msn messenger\usnsvc.exe[c5b70a6aa947667ce0e5fc84a05ec8b6][97136]
Service c:\program files\pdf complete\pdfsvc.exe [b6d347c26f861ddd4ad4863f5a1596b9][540448]
Service c:\program files\windows media player\wmpnetwk.exe[acb2e63d50157e3ea7140f29d9e76a48][895488]
Service c:\windows\microsoft.net\framework\v2.0.50727\mscorsvw.exe[d3bf342f47996e18490970fcfb8126a8][59392]
Service c:\windows\microsoft.net\framework\v3.0\windows communication foundation\infocard.exe[6d1d3cab85ba0c63cb83296a8a1825f9][741376]
Service c:\windows\microsoft.net\framework\v3.0\windows communication foundation\smsvchost.exe[b418382de04ff58567aa07a2b66b2332][122880]
Service c:\windows\microsoft.net\framework\v3.0\wpf\presentationfontcache.exe[7ef57375636991f794bf40b522a8e7ef][36864]
Service c:\windows\servicing\trustedinstaller.exe[34e388a395fedba1d0511ed39bbf4074][27136]
Service c:\windows\system32\aeadisrv.exe[12d23758621b00b8d3134095ec3325fd][69632]
Service c:\windows\system32\alg.exe[e69fb0e3112c40fdc0ef7d21a52dc951][58880]
Service c:\windows\system32\dfsr.exe[e0d584aa76c7d845ba9f3a788260528f][2089984]
Service c:\windows\system32\dllhost.exe [be01e566d1f569aab32d0335613e1eea][7168]
Service c:\windows\system32\drivers\xaudio.exe[15a317674a08df26be65164d959e9203][386560]
Service c:\windows\system32\flcdlock.exe[42daa2e32758858c774e48ea089127c4][172131]
Service c:\windows\system32\fxssvc.exe[93f75490b02033df8edf4d7089c7e1d8][521216]
Service c:\windows\system32\hpservice.exe[16d5b0e0740088639f727c554d9cc42e][18944]
Service c:\windows\system32\locator.exe[5123f83cbc4349d065534eeb6bbdc42b][7680]
Service c:\windows\system32\lsass.exe[59de082968fdd257fff0d209b9a5b460][7680]
Service c:\windows\system32\msdtc.exe[bc64a92d821efea8bab8e8caf1b668bc][106496]
Service c:\windows\system32\searchindexer.exe [5de40982e3ae45dc00586a93637b351b][287744]
Service c:\windows\system32\slsvc.exe[a1dcd30534835cb67733ad00175125a6][2605568]
Service c:\windows\system32\snmptrap.exe[2a146a055b4401c16ee62d18b8e2a032][12800]
Service c:\windows\system32\spoolsv.exe[da612ef2556776df2630b68bf2d48935][124928]
Service c:\windows\system32\svchost.exe [10da15933d582d2fedcf705efe394b09][22016]
Service c:\windows\system32\ui0detect.exe[24a333f4f14dcfb6ff6d5a1b9e5d79dd][35840]
Service c:\windows\system32\vds.exe[c9d0bafee0d0a2681f048ca61bc0da96][392704]
Service c:\windows\system32\vssvc.exe[e0e29d9ef2524abd11749c7c2fd7f607][924160]
Service c:\windows\system32\wbem\wmiapsrv.exe[a279323bee5fffafda222910bce92132][137216]
Service c:\windows\system32\wbengine.exe[6d2f099d4ce88777e46cb1808c87b132][562176]
Startup c:\program files\intervideo\dvd check\dvdcheck.exe[7456065b48a2be77e6de5e6dc754f454][192512]
Startup c:\programdata\microsoft\windows\start menu\programs\startup\desktop.ini[7f1698bab066b764a314a589d338daae][174]
Startup c:\users\admin\appdata\roaming\microsoft\windows\start menu\programs\startup\desktop.ini[7f1698bab066b764a314a589d338daae][174]
Startup c:\users\admin\desktop\virus removal tool\is-f5972\startup.exe[c841b2bb4808cf708aa55f0ddbaecba9][65536]
System.ini c:\windows\system32\drivers\xaudio.exe[15a317674a08df26be65164d959e9203][386560]

Startup folder: (4)
Startup name: desktop.ini
Command: C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
Startup name: is-F5972.lnk
Command: C:\Users\admin\Desktop\Virus Removal Tool\is-F5972\startup.exe
Startup name: desktop.ini
Command: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
Startup name: DVD Check.lnk
Command: C:\Program Files\InterVideo\DVD Check\DVDCheck.exe

Win.ini Startup: (1)
Path: No additional driver found!

Win.ini Startup: (1)
Path: No additional driver found!

Keyboard drivers: (1)
Name: No Keyboard Filter driver found!

Services: (142)
Service Name: Accès du périphérique d'interface utilisateur [Stopped],
Path: C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Acquisition d'image Windows (WIA) [Running],
Path: C:\Windows\system32\svchost.exe -k imgsvc
Service Name: Agent de protection d’accès réseau [Stopped],
Path: C:\Windows\System32\svchost.exe -k NetworkService
Service Name: Agent de stratégie IPsec [Running],
Path: C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
Service Name: Andrea ADI Filters Service [Running],
Path: C:\Windows\system32\AEADISRV.EXE
Service Name: Appel de procédure distante (RPC) [Running],
Path: C:\Windows\system32\svchost.exe -k rpcss
Service Name: Application système COM+ [Stopped],
Path: C:\Windows\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}
Service Name: Assistance IP [Running],
Path: C:\Windows\System32\svchost.exe -k NetSvcs
Service Name: Assistance NetBIOS sur TCP/IP [Running],
Path: C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted
Service Name: Audio Windows [Running],
Path: C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
Service Name: Avira AntiVir Personal - Free Antivirus Guard [Running],
Path: "C:\Program Files\Avira\AntiVir PersonalEdition Classic\avguard.exe"
Service Name: Avira AntiVir Personal - Free Antivirus Scheduler [Running],
Path: "C:\Program Files\Avira\AntiVir PersonalEdition Classic\sched.exe"
Service Name: Cache de police de Windows Presentation Foundation 3.0.0.0 [Stopped],
Path: C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
Service Name: Canal de communication local [Running],
Path: C:\Windows\System32\svchost.exe -k Cognizance
Service Name: Carte à puce [Running],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Carte de performance WMI [Stopped],
Path: C:\Windows\system32\wbem\WmiApSrv.exe
Service Name: Centre de sécurité [Running],
Path: C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
Service Name: Cliché instantané de volume [Stopped],
Path: C:\Windows\system32\vssvc.exe
Service Name: Client de stratégie de groupe [Running],
Path: C:\Windows\system32\svchost.exe -k GPSvcGroup
Service Name: Client de suivi de lien distribué [Running],
Path: C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Client DHCP [Running],
Path: C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted
Service Name: Client DNS [Running],
Path: C:\Windows\system32\svchost.exe -k NetworkService
Service Name: Collecteur d'événements de Windows [Stopped],
Path: C:\Windows\system32\svchost.exe -k NetworkService
Service Name: Configuration automatique de réseau câblé [Stopped],
Path: C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Configuration des services Terminal Server [Stopped],
Path: C:\Windows\System32\svchost.exe -k netsvcs
Service Name: Connaissance des emplacements réseau [Running],
Path: C:\Windows\System32\svchost.exe -k NetworkService
Service Name: Connexions réseau [Running],
Path: C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Coordinateur de transactions distribuées [Stopped],
Path: C:\Windows\System32\msdtc.exe
Service Name: Courtier de session de connexion [Running],
Path: C:\Windows\System32\svchost.exe -k Cognizance
Service Name: Découverte SSDP [Running],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Détection de services interactifs [Stopped],
Path: C:\Windows\system32\UI0Detect.exe
Service Name: Détection matériel noyau [Running],
Path: C:\Windows\System32\svchost.exe -k netsvcs
Service Name: Disque virtuel [Stopped],
Path: C:\Windows\System32\vds.exe
Service Name: Emplacement protégé [Stopped],
Path: C:\Windows\system32\lsass.exe
Service Name: Énumérateur de bus IP PnP-X [Stopped],
Path: C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Expérience audio-vidéo haute qualité Windows [Stopped],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Expérience d’application [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Explorateur d'ordinateurs [Stopped],
Path: C:\Windows\System32\svchost.exe -k netsvcs
Service Name: Fichiers hors connexion [Running],
Path: C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Fournisseur de cliché instantané de logiciel Microsoft [Stopped],
Path: C:\Windows\System32\svchost.exe -k swprv
Service Name: Générateur de points de terminaison du service Audio Windows [Running],
Path: C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Gestion à distance de Windows (Gestion WSM) [Stopped],
Path: C:\Windows\System32\svchost.exe -k NetworkService
Service Name: Gestion d'applications [Stopped],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Gestion des clés et des certificats d'intégrité [Stopped],
Path: C:\Windows\System32\svchost.exe -k netsvcs
Service Name: Gestionnaire de comptes de sécurité [Running],
Path: C:\Windows\system32\lsass.exe
Service Name: Gestionnaire de connexion automatique d'accès distant [Stopped],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Gestionnaire de connexions d'accès distant [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Gestionnaire de sessions du Gestionnaire de fenêtrage [Running],
Path: C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Gestionnaire d'identité réseau homologue [Stopped],
Path: C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
Service Name: Groupement de mise en réseau de pairs [Stopped],
Path: C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
Service Name: Horloge Windows [Running],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Hôte de périphérique UPnP [Running],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Hôte du fournisseur de découverte de fonctions [Stopped],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Hôte système de diagnostics [Running],
Path: C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: HP Health Check Service [Running],
Path: "C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe"
Service Name: HP Service [Stopped],
Path: C:\Windows\system32\Hpservice.exe
Service Name: hpqwmiex [Running],
Path: C:\Program Files\Hewlett-Packard\Shared\hpqWmiEx.exe
Service Name: Informations d'application [Stopped],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Infrastructure de gestion Windows [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: InstallDriver Table Manager [Stopped],
Path: "C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe"
Service Name: Interruption SNMP [Stopped],
Path: C:\Windows\System32\snmptrap.exe
Service Name: Isolation de clé CNG [Running],
Path: C:\Windows\system32\lsass.exe
Service Name: IviRegMgr [Running],
Path: C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
Service Name: Journal d’événements Windows [Running],
Path: C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
Service Name: Journaux & alertes de performance [Stopped],
Path: C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork
Service Name: Lanceur de processus serveur DCOM [Running],
Path: C:\Windows\system32\svchost.exe -k DcomLaunch
Service Name: Licence du logiciel [Running],
Path: C:\Windows\system32\SLsvc.exe
Service Name: LightScribeService Direct Disc Labeling Service [Running],
Path: "C:\Program Files\Common Files\LightScribe\LSSrvc.exe"
Service Name: Localisateur d'appels de procédure distante (RPC) [Stopped],
Path: C:\Windows\system32\locator.exe
Service Name: Mappage de découverte de topologie de la couche de liaison [Stopped],
Path: C:\Windows\System32\svchost.exe -k LocalService
Service Name: Microsoft .NET Framework NGEN v2.0.50727_X86 [Stopped],
Path: C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
Service Name: Modules de génération de clés IKE et AuthIP [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Moteur de filtrage de base [Running],
Path: C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
Service Name: Netlogon [Stopped],
Path: C:\Windows\system32\lsass.exe
Service Name: Ouverture de session secondaire [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Pare-feu Windows [Running],
Path: C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
Service Name: Partage de connexion Internet (ICS) [Stopped],
Path: C:\Windows\System32\svchost.exe -k netsvcs
Service Name: PDF Document Manager [Running],
Path: C:\Program Files\PDF Complete\pdfsvc.exe /startedbyscm:66B66708-40E2BE4D-pdfcService
Service Name: Planificateur de classes multimédias [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Planificateur de tâches [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Plug-and-Play [Running],
Path: C:\Windows\system32\svchost.exe -k DcomLaunch
Service Name: Prise en charge de l’application Rapports et solutions aux problèmes du Panneau de configuration [Stopped],
Path: C:\Windows\System32\svchost.exe -k netsvcs
Service Name: Programme d’installation de modules Windows [Running],
Path: C:\Windows\servicing\TrustedInstaller.exe
Service Name: Propagation du certificat [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Protocole de résolution de noms d'homologues [Stopped],
Path: C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
Service Name: Protocole EAP (Extensible Authentication Protocol) [Running],
Path: C:\Windows\System32\svchost.exe -k netsvcs
Service Name: Publication des ressources de découverte de fonctions [Running],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Recherche Windows [Running],
Path: C:\Windows\system32\SearchIndexer.exe /Embedding
Service Name: Redirecteur de port du mode utilisateur des services Terminal Server [Stopped],
Path: C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Registre à distance [Stopped],
Path: C:\Windows\system32\svchost.exe -k regsvc
Service Name: Réplication DFS [Stopped],
Path: C:\Windows\system32\DFSR.exe
Service Name: Routage et accès distant [Stopped],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: RoxMediaDB9 [Stopped],
Path: "c:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe"
Service Name: Sauvegarde Windows [Stopped],
Path: C:\Windows\system32\svchost.exe -k SDRSVC
Service Name: Serveur [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Serveur de priorités des threads [Stopped],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Service de configuration automatique WLAN [Running],
Path: C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Service de découverte automatique de Proxy Web pour les services HTTP Windows [Running],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Service de l’Assistant Compatibilité des programmes [Running],
Path: C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Service de la passerelle de la couche Application [Stopped],
Path: C:\Windows\System32\alg.exe
Service Name: Service de moteur de sauvegarde en mode bloc [Stopped],
Path: "C:\Windows\system32\wbengine.exe"
Service Name: Service de notification d’événements système [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Service de notification de l’interface utilisateur SL [Stopped],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Service de partage de ports Net.Tcp [Stopped],
Path: "C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe"
Service Name: Service de prise en charge Bluetooth [Running],
Path: C:\Windows\system32\svchost.exe -k bthsvcs
Service Name: Service de profil utilisateur [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Service de publication des noms d’ordinateurs PNRP [Stopped],
Path: C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
Service Name: Service de rapport d'erreurs Windows [Running],
Path: C:\Windows\System32\svchost.exe -k WerSvcGroup
Service Name: Service de stratégie de diagnostic [Running],
Path: C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork
Service Name: Service de transfert intelligent en arrière-plan [Running],
Path: C:\Windows\System32\svchost.exe -k netsvcs
Service Name: Service Énumérateur d’appareil mobile [Running],
Path: C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Service hôte WDIServiceHost [Stopped],
Path: C:\Windows\System32\svchost.exe -k wdisvc
Service Name: Service Initiateur iSCSI de Microsoft [Stopped],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Service Interface du magasin réseau [Running],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Service KtmRm pour Distributed Transaction Coordinator [Running],
Path: C:\Windows\System32\svchost.exe -k NetworkService
Service Name: Service Liste des réseaux [Running],
Path: C:\Windows\System32\svchost.exe -k LocalService
Service Name: Service Messenger Sharing Folders USN Journal Reader [Stopped],
Path: "C:\Program Files\MSN Messenger\usnsvc.exe"
Service Name: Service Panneau de saisie Tablet PC [Running],
Path: C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Service Partage réseau du Lecteur Windows Media [Stopped],
Path: "C:\Program Files\Windows Media Player\wmpnetwk.exe"
Service Name: Service ReadyBoost [Running],
Path: C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Services de base de module de plateforme sécurisée [Stopped],
Path: C:\Windows\System32\svchost.exe -k LocalService
Service Name: Services de chiffrement [Running],
Path: C:\Windows\system32\svchost.exe -k NetworkService
Service Name: Services Terminal Server [Running],
Path: C:\Windows\System32\svchost.exe -k NetworkService
Service Name: Spouleur d'impression [Running],
Path: C:\Windows\System32\spoolsv.exe
Service Name: Station de travail [Running],
Path: C:\Windows\System32\svchost.exe -k LocalService
Service Name: stllssvr [Stopped],
Path: "c:\Program Files\Common Files\SureThing Shared\stllssvr.exe"
Service Name: Stratégie de retrait de la carte à puce [Stopped],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Superfetch [Running],
Path: C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Système de couleurs Windows [Stopped],
Path: C:\Windows\system32\svchost.exe -k wcssvc
Service Name: Système d'événement COM+ [Running],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Télécopie [Stopped],
Path: C:\Windows\system32\fxssvc.exe
Service Name: Téléphonie [Running],
Path: C:\Windows\System32\svchost.exe -k NetworkService
Service Name: Thèmes [Running],
Path: C:\Windows\System32\svchost.exe -k netsvcs
Service Name: Verrouillage des périphériques / Audition HP ProtectTools [Stopped],
Path: C:\Windows\system32\flcdlock.exe
Service Name: WebClient [Running],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Windows CardSpace [Stopped],
Path: "C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe"
Service Name: Windows Connect Now - Registre de configuration [Stopped],
Path: C:\Windows\System32\svchost.exe -k LocalService
Service Name: Windows Defender [Running],
Path: C:\Windows\System32\svchost.exe -k secsvcs
Service Name: Windows Driver Foundation - Infrastructure de pilote mode-utilisateur [Running],
Path: C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Windows Installer [Stopped],
Path: C:\Windows\system32\msiexec /V
Service Name: Windows Update [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: XAudioService [Running],
Path: C:\Windows\system32\DRIVERS\xaudio.exe
Finished...

non pas de virus trouver

rapport du scan: ;***********************************************************************************************************************************************************************************
ANALYSIS: 2009-05-10 17:32:07
PROTECTIONS: 3
MALWARE: 6
SUSPECTS: 0
;***********************************************************************************************************************************************************************************
PROTECTIONS
Description Version Active Updated
;===================================================================================================================================================================================
Avira AntiVir PersonalEdition 8.0.1.30 Yes Yes
Windows Defender 1.1.1505.0 No Yes
SUPERAntiSpyware 4, 26, 0, 1002 No Yes
;===================================================================================================================================================================================
MALWARE
Id Description Type Active Severity Disinfectable Disinfected Location
;===================================================================================================================================================================================
00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@atdmt[1].txt
00145393 Cookie/Tradedoubler TrackingCookie No 0 Yes No C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@tradedoubler[1].txt
00145738 Cookie/Mediaplex TrackingCookie No 0 Yes No C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@mediaplex[1].txt
00168061 Cookie/Apmebf TrackingCookie No 0 Yes No C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@apmebf[1].txt
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@serving-sys[2].txt
00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@bs.serving-sys[1].txt
;===================================================================================================================================================================================
SUSPECTS
Sent Location 9�����
;===================================================================================================================================================================================
;===================================================================================================================================================================================
VULNERABILITIES
Id Severity Description 9�����
;===================================================================================================================================================================================
184379 MEDIUM MS08-001 9�����
182048 HIGH MS07-069 9�����
182045 HIGH MS07-066 9�����
182043 HIGH MS07-064 9�����
176382 HIGH MS07-057 9�����
170906 HIGH MS07-045 9�����
164913 HIGH MS07-033 9�����
;===================================================================================================================================================================================

Bonsoir,

tu ne te trompe jamais, non. Ba tans mieux pour toi, alors.

salut dlld je pense que tu a raison ça doit venir de msn je viens de changer mon mot de passe et j attend de voir si mes contact recoive encore des liens...merci quand vous d avoir pris le temps de m aider