Bonjour,
Il a trouvé 14 virus ! :( a croire que mon ordi est verolé...
Voici le rapport:
RemoveIT Pro v4 - SE (Build date: 6.6.2008) full information log file.
Generated at: 31/03/2009 on 18:41:05
Microsoft Windows Vista Professional Service Pack 1 (Build 6001)
Author: Damjan Irgolic
http://www.incodesolutions.com
support@incodesolutions.com
Running processes: (15)
C:\WINDOWS\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Dell Support Center\bin\sprtcmd.exe
C:\Windows\System32\rundll32.exe
C:\Windows\WindowsMobile\wmdSync.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\System32\rundll32.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Vidalia Bundle\Privoxy\privoxy.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\InCode Solutions\RemoveIT Pro v4 - SE\removeit.exe
Startup files:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\Sidebar
[C:\Program Files\Windows Sidebar\sidebar.exe /autoRun]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\ctfmon.exe
[C:\WINDOWS\system32\ctfmon.exe]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\IncrediMail
[C:\Program Files\IncrediMail\bin\IncMail.exe /c]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\msnmsgr
["C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\ISUSPM Startup
[C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\DellSupportCenter
["C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\Messenger (Yahoo!)
["C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\NetSP - restore settings on power failure
["C:\Program Files\AT&T Global Network Client\NetSP.exe" -show]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\Vidalia
["C:\Program Files\Vidalia Bundle\Vidalia\vidalia.exe"]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\Steam
["C:\Program Files\Steam\Steam.exe" -silent]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\WMPNSCFG
[C:\Program Files\Windows Media Player\WMPNSCFG.exe]
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\SUPERAntiSpyware
[C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\dscactivate
["C:\Program Files\Dell Support Center\gs_agent\custom\dsca.exe"]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Spamihilator
["C:\Program Files\Spamihilator\spamihilator.exe"]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Kernel and Hardware Abstraction Layer
[KHALMNPR.EXE]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\DellSupportCenter
["C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\NvSvc
[RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\NvCplDaemon
[RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\NvMediaCenter
[RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Windows Mobile-based device management
[%windir%\WindowsMobile\wmdSync.exe]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\AppleSyncNotifier
[C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\QuickTime Task
["C:\Program Files\QuickTime\QTTask.exe" -atboottime]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\iTunesHelper
["C:\Program Files\iTunes\iTunesHelper.exe"]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\SunJavaUpdateSched
["C:\Program Files\Java\jre6\bin\jusched.exe"]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Adobe Reader Speed Launcher
["C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\AVP
["C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"]
Detail report: (87)
Clsid c:\progra~1\kasper~1\kasper~1\mzvkbd.dll[42d13f21ac4dc7f5674d18697ccfc8ab][79112]
Clsid c:\program files\superantispyware\saswinlo.dll[972edede23ac8d59aac0c09799c6f18a][356352]
Clsid C:\Windows\system32\iconcodecservice.dll[08578f3ca5365f896d90ce2bf97fd000][9728]
Clsid c:\windows\system32\klogon.dll[a09ef6a4793948a74060c70ad423f067][218376]
Clsid C:\Windows\system32\wgalogon.dll[90261fa191103a9912ead72a77909089][236928]
Proc C:\Program Files\Dell Support Center\bin\sprtcmd.exe[3917664c26b4344768c288bba6fefcb6][206064]
Proc C:\Program Files\InCode Solutions\RemoveIT Pro v4 - SE\removeit.exe[0852da33822cd6d79e71416cc199656d][551424]
Proc C:\Program Files\iTunes\iTunesHelper.exe[e6a4e341e4304b34aa280d3e73818c90][290088]
Proc C:\Program Files\Vidalia Bundle\Privoxy\privoxy.exe[df5cf18a5d452a1634ced071c82834de][250368]
Proc C:\Program Files\Windows Media Player\wmpnscfg.exe[35937ead711207544e219c2a19a78a7d][202240]
Proc C:\Program Files\Windows Sidebar\sidebar.exe[fd278e51a7d6f52d22fce6c67e037ad6][1233920]
Proc C:\Windows\Explorer.EXE[4f554999d7d5f05daaebba7b5ba1089d][2927104]
Proc C:\Windows\system32\Dwm.exe[59903071d7ace6a02093c47e9e38af97][81920]
Proc C:\Windows\System32\mobsync.exe[9b89b3bb79ea1acf041f40a7b6fc5827][95744]
Proc C:\Windows\System32\rundll32.exe[4b555106290bd117334e9a08761c035a][44544]
Proc C:\WINDOWS\system32\taskeng.exe[5f109032ce46b7184ed9e50f9fe8489e][169472]
Proc C:\Windows\system32\wbem\unsecapp.exe[25873356e52849c3f5b3f1b02317e8c8][37888]
Proc C:\Windows\WindowsMobile\wmdSync.exe[4ab05041d5c922b9a7a5d9059f5538cd][215552]
RegRun c:\progra~1\common~1\instal~1\update~1\isuspm.exe [053d8d245118bea6e21e1812871f67ba][221184]
RegRun c:\program files\adobe\reader 9.0\reader\reader_sl.exe[452fa961163ef4aee4815796a13ab2cf][35696]
RegRun c:\program files\at&t global network client\netsp.exe [7ff7716f17077ff79ae96d24d045d0a2][87320]
RegRun c:\program files\common files\apple\mobile device support\bin\applesyncnotifier.exe[3c59cb80d1849128c14ff2b3245419be][111936]
RegRun c:\program files\dell support center\bin\sprtcmd.exe [3917664c26b4344768c288bba6fefcb6][206064]
RegRun c:\program files\dell support center\gs_agent\custom\dsca.exe[267b3a856e9f4db1cabd4e6db71e07d2][16384]
RegRun c:\program files\incredimail\bin\incmail.exe [3d5cbe4f8f35dd2c26f9951b5a2ebeaf][251264]
RegRun c:\program files\itunes\ituneshelper.exe[e6a4e341e4304b34aa280d3e73818c90][290088]
RegRun c:\program files\java\jre6\bin\jusched.exe[b98ffa8288efaabc436c30d198608345][136600]
RegRun c:\program files\kaspersky lab\kaspersky internet security 2009\avp.exe[b66d20e5ee3082c5d9ca008e412572d2][206088]
RegRun c:\program files\quicktime\qttask.exe [9c9b6807425cef840c117654d8b033d1][413696]
RegRun c:\program files\spamihilator\spamihilator.exe[f4c1ac3cffbe8dbaa61be070159b952e][1223680]
RegRun c:\program files\steam\steam.exe [e2f041f209d4adda9882778a11eab922][1410296]
RegRun c:\program files\superantispyware\superantispyware.exe[b715b35ca9c21e511ec83a316e20a466][1830128]
RegRun c:\program files\vidalia bundle\vidalia\vidalia.exe[2a689d76966099942827ac29ee772706][4033618]
RegRun c:\program files\windows live\messenger\msnmsgr.exe [35b9fa77b73358d9063cd61aa3d83ee8][3885408]
RegRun c:\program files\windows media player\wmpnscfg.exe[35937ead711207544e219c2a19a78a7d][202240]
RegRun c:\program files\windows sidebar\sidebar.exe [fd278e51a7d6f52d22fce6c67e037ad6][1233920]
RegRun c:\program files\yahoo!\messenger\yahoomessenger.exe [165a310ca2d2b167354a61514409adc9][4347120]
RegRun C:\Windows\khalmnpr.exe[90e4ed0445f73ca0d625023bbbf426d1][69632]
RegRun c:\windows\system32\ctfmon.exe[22bfd03df51065a9ed8d17f8fb72296b][8704]
RegRun c:\windows\system32\nvcpl.dll[8cb1418febc2dff96e5682ffd1da714b][8497696]
RegRun c:\windows\system32\nvmctray.dll[2c9d055c83da968f2b7c6377899a91c3][81920]
RegRun c:\windows\system32\nvsvc.dll[ce7da358e05f2beeee7b3f5b65e6c5ee][86016]
RegRun c:\windows\windowsmobile\wmdsync.exe[4ab05041d5c922b9a7a5d9059f5538cd][215552]
Service c:\program files\at&t global network client\netcfgsvr.exe[7dad09ba92d3660088673ca8cd11d37e][562456]
Service c:\program files\bonjour\mdnsresponder.exe[3f56903e124e820aeece6d471583c6c1][238888]
Service c:\program files\common files\apple\mobile device support\bin\applemobiledeviceservice.exe[a8aa9d47f971570a5162b862b80f87e8][132424]
Service c:\program files\common files\boonty shared\service\boonty.exe[f347f272c27aef22cd97e943c1418030][69120]
Service c:\program files\common files\logishrd\bluetooth\lbtserv.exe[45b7d6bd6f59cba3fb6bf202223f4264][121360]
Service c:\program files\common files\microsoft shared\source engine\ose.exe[7a56cf3e3f12e8af599963b16f50fb6a][89136]
Service c:\program files\common files\steam\steamservice.exe [5a64a3645a6364126b6764a416845674][316664]
Service c:\program files\dell support center\bin\sprtsvc.exe [777115c9cc675bd98127660712d2f784][201968]
Service c:\program files\ipod\bin\ipodservice.exe[62937a89470af8ff172f0980ca8aefc9][536872]
Service c:\program files\kaspersky lab\kaspersky internet security 2009\avp.exe [b66d20e5ee3082c5d9ca008e412572d2][206088]
Service c:\program files\no-ip\duc20.exe [74d679b8f4331e453431efb423aecece][1172992]
Service c:\program files\tightvnc\winvnc.exe [390caf4986e4cbc18e5abf9825895b40][589824]
Service c:\program files\vidalia bundle\tor\tor.exe [1a60f36f543e2b7f316d40aed2724fdf][2151936]
Service c:\program files\windows media player\wmpnetwk.exe[3978704576a121a9204f8cc49a301a9b][896512]
Service c:\windows\microsoft.net\framework\v2.0.50727\mscorsvw.exe[d87acaed61e417bba546ced5e7e36d9c][69632]
Service c:\windows\microsoft.net\framework\v3.0\windows communication foundation\infocard.exe[7b630acaed64fef0c3e1cf255cb56686][881664]
Service c:\windows\microsoft.net\framework\v3.0\windows communication foundation\smsvchost.exe[0ad5876ef4e9eb77c8f93eb5b2fff386][132096]
Service c:\windows\microsoft.net\framework\v3.0\wpf\presentationfontcache.exe[c9be08664611ddaf98e2331e9288b00b][46104]
Service c:\windows\servicing\trustedinstaller.exe[16613a1bad034d4ecf957af18b7c2ff5][39424]
Service c:\windows\system32\alg.exe[a1545b731579895d8cc44fc0481c1192][59392]
Service c:\windows\system32\dfsr.exe[fa3463f25f9cc9c3bcf1e7912feff099][2091520]
Service c:\windows\system32\dllhost.exe [be01e566d1f569aab32d0335613e1eea][7168]
Service c:\windows\system32\fxssvc.exe[dfba0f60fa301e5b1bfb1403a93ee23e][523776]
Service c:\windows\system32\locator.exe[5123f83cbc4349d065534eeb6bbdc42b][7680]
Service c:\windows\system32\lsass.exe[dcf733788c7d088d814e5f80eb4b3e0f][9728]
Service c:\windows\system32\msdtc.exe[fd7520cc3a80c5fc8c48852bb24c6ded][105984]
Service c:\windows\system32\searchindexer.exe [7778bdfa3f6f6fba0e75b9594098f737][439808]
Service c:\windows\system32\slsvc.exe[0ba91e1358ad25236863039bb2609a2e][2623488]
Service c:\windows\system32\snmptrap.exe[2a146a055b4401c16ee62d18b8e2a032][12800]
Service c:\windows\system32\spoolsv.exe[846cdf9a3cf4da9b306adfb7d55ee4c2][125952]
Service c:\windows\system32\svchost.exe [3794b461c45882e06856f282eef025af][21504]
Service c:\windows\system32\tlntsvr.exe[a33dbe2e8a58319e03b4c98507a3c9b4][75776]
Service c:\windows\system32\ui0detect.exe[ecef404f62863755951e09c802c94ad5][35840]
Service c:\windows\system32\vds.exe[b13bc395b9d6116628f5af47e0802ac4][382976]
Service c:\windows\system32\vssvc.exe[d5fb73d19c46ade183f968e13f186b23][1054720]
Service c:\windows\system32\wbem\wmiapsrv.exe[aba4cf9f856d9a3a25f4ddd7690a6e9d][137728]
Service c:\windows\system32\wbengine.exe[f0e594dd07b2163df9f5d5b6b471ddfa][917504]
Startup c:\program files\hp\digital imaging\bin\hpqtra08.exe[1ba45cdef852381da4a95d056ddb4b48][210520]
Startup c:\program files\logitech\setpoint\setpoint.exe[bee697e8f1c3d88f5dcb14e3b246b6cb][809488]
Startup c:\program files\vidalia bundle\privoxy\privoxy.exe[df5cf18a5d452a1634ced071c82834de][250368]
Startup c:\programdata\microsoft\windows\start menu\programs\startup\desktop.ini 53ecf44e868145468a128bdc83.exe[7f1698bab066b764a314a589d338daae][174]
Startup c:\users\steph\appdata\roaming\microsoft\windows\start menu\programs\startup\desktop.ini[7f1698bab066b764a314a589d338daae][174]
Startup c:\windows\installer\{2019affe-e71f-4ba3-9ac4-4bac6641ed91}\netgm1_89563e53ecf44e868145468a128bdc83.exe[af02eea1e0ab88ff65cf22a8cdf4e246][69632]
System.ini c:\windows\system32\svchost.exe [3794b461c45882e06856f282eef025af][21504]
Startup folder: (6)
Startup name: desktop.ini
Command: C:\Users\steph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
Startup name: AT&T Global Network Client Monitor.lnk
Command: C:\Windows\Installer\{2019AFFE-E71F-4BA3-9AC4-4BAC6641ED91}\NetGM1_89563E53ECF44E868145468A128BDC83.exe
Startup name: desktop.ini
Command: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini 53ECF44E868145468A128BDC83.exe
Startup name: HP Digital Imaging Monitor.lnk
Command: C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
Startup name: Logitech SetPoint.lnk
Command: C:\Program Files\Logitech\SetPoint\SetPoint.exe
Startup name: Privoxy.lnk
Command: C:\Program Files\Vidalia Bundle\Privoxy\privoxy.exe
Win.ini Startup: (1)
Path: No additional driver found!
Win.ini Startup: (1)
Path: No additional driver found!
Keyboard drivers: (1)
Name: No Keyboard Filter driver found!
Services: (149)
Service Name: Accès du périphérique d'interface utilisateur [Running],
Path: C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Acquisition d'image Windows (WIA) [Running],
Path: C:\Windows\system32\svchost.exe -k imgsvc
Service Name: Agent de protection d’accès réseau [Stopped],
Path: C:\Windows\System32\svchost.exe -k NetworkService
Service Name: Agent de stratégie IPsec [Running],
Path: C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
Service Name: Appel de procédure distante (RPC) [Running],
Path: C:\Windows\system32\svchost.exe -k rpcss
Service Name: Apple Mobile Device [Running],
Path: "C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe"
Service Name: Application système COM+ [Stopped],
Path: C:\Windows\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}
Service Name: Assistance IP [Running],
Path: C:\Windows\System32\svchost.exe -k NetSvcs
Service Name: Assistance NetBIOS sur TCP/IP [Running],
Path: C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted
Service Name: Audio Windows [Running],
Path: C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
Service Name: Boonty Games [Stopped],
Path: "C:\Program Files\Common Files\BOONTY Shared\Service\Boonty.exe"
Service Name: Cache de police de Windows Presentation Foundation 3.0.0.0 [Stopped],
Path: C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
Service Name: Carte à puce [Stopped],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Carte de performance WMI [Stopped],
Path: C:\Windows\system32\wbem\WmiApSrv.exe
Service Name: Centre de sécurité [Running],
Path: C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
Service Name: Cliché instantané de volume [Stopped],
Path: C:\Windows\system32\vssvc.exe
Service Name: Client de stratégie de groupe [Running],
Path: C:\Windows\system32\svchost.exe -k GPSvcGroup
Service Name: Client de suivi de lien distribué [Running],
Path: C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Client DHCP [Running],
Path: C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted
Service Name: Client DNS [Stopped],
Path: C:\Windows\system32\svchost.exe -k NetworkService
Service Name: Collecteur d'événements de Windows [Stopped],
Path: C:\Windows\system32\svchost.exe -k NetworkService
Service Name: Configuration automatique de réseau câblé [Stopped],
Path: C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Configuration des services Terminal Server [Stopped],
Path: C:\Windows\System32\svchost.exe -k netsvcs
Service Name: Connaissance des emplacements réseau [Running],
Path: C:\Windows\System32\svchost.exe -k NetworkService
Service Name: Connectivité de l'appareil Windows Mobile [Running],
Path: C:\Windows\system32\svchost.exe -k WindowsMobile
Service Name: Connectivité de l'appareil Windows Mobile 2003 [Running],
Path: C:\Windows\system32\svchost.exe -k WindowsMobile
Service Name: Connexions réseau [Running],
Path: C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Coordinateur de transactions distribuées [Stopped],
Path: C:\Windows\System32\msdtc.exe
Service Name: Découverte SSDP [Running],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Détection de services interactifs [Stopped],
Path: C:\Windows\system32\UI0Detect.exe
Service Name: Détection matériel noyau [Running],
Path: C:\Windows\System32\svchost.exe -k netsvcs
Service Name: Disque virtuel [Stopped],
Path: C:\Windows\System32\vds.exe
Service Name: Emplacement protégé [Running],
Path: C:\Windows\system32\lsass.exe
Service Name: Énumérateur de bus IP PnP-X [Stopped],
Path: C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Expérience audio-vidéo haute qualité Windows [Stopped],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Expérience d’application [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Explorateur d'ordinateurs [Running],
Path: C:\Windows\System32\svchost.exe -k netsvcs
Service Name: Fichiers hors connexion [Running],
Path: C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Fournisseur de cliché instantané de logiciel Microsoft [Stopped],
Path: C:\Windows\System32\svchost.exe -k swprv
Service Name: Générateur de points de terminaison du service Audio Windows [Running],
Path: C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Gestion à distance de Windows (Gestion WSM) [Stopped],
Path: C:\Windows\System32\svchost.exe -k NetworkService
Service Name: Gestion d'applications [Stopped],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Gestion des clés et des certificats d'intégrité [Stopped],
Path: C:\Windows\System32\svchost.exe -k netsvcs
Service Name: Gestionnaire de comptes de sécurité [Running],
Path: C:\Windows\system32\lsass.exe
Service Name: Gestionnaire de connexion automatique d'accès distant [Stopped],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Gestionnaire de connexions d'accès distant [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Gestionnaire de sessions du Gestionnaire de fenêtrage [Running],
Path: C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Gestionnaire d'identité réseau homologue [Running],
Path: C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
Service Name: Groupement de mise en réseau de pairs [Stopped],
Path: C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
Service Name: Horloge Windows [Running],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Hôte de périphérique UPnP [Running],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Hôte du fournisseur de découverte de fonctions [Stopped],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Hôte système de diagnostics [Running],
Path: C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: hpqcxs08 [Running],
Path: C:\Windows\system32\svchost.exe -k hpdevmgmt
Service Name: Informations d'application [Stopped],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Infrastructure de gestion Windows [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Interruption SNMP [Stopped],
Path: C:\Windows\System32\snmptrap.exe
Service Name: Isolation de clé CNG [Running],
Path: C:\Windows\system32\lsass.exe
Service Name: Journal d’événements Windows [Running],
Path: C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
Service Name: Journaux & alertes de performance [Stopped],
Path: C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork
Service Name: Kaspersky Internet Security [Running],
Path: "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe" -r
Service Name: Kwari.xLoader [Stopped],
Path: C:\Users\steph\AppData\Local\Micro Forte\Kwari\Kwari.xLoader.32
Service Name: Lanceur de processus serveur DCOM [Running],
Path: C:\Windows\system32\svchost.exe -k DcomLaunch
Service Name: Licence du logiciel [Running],
Path: C:\Windows\system32\SLsvc.exe
Service Name: Localisateur d'appels de procédure distante (RPC) [Stopped],
Path: C:\Windows\system32\locator.exe
Service Name: Logitech Bluetooth Service [Stopped],
Path: C:\Program Files\Common Files\Logishrd\Bluetooth\LBTServ.exe
Service Name: Mappage de découverte de topologie de la couche de liaison [Stopped],
Path: C:\Windows\System32\svchost.exe -k LocalService
Service Name: Microsoft .NET Framework NGEN v2.0.50727_X86 [Stopped],
Path: C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
Service Name: Modules de génération de clés IKE et AuthIP [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Moteur de filtrage de base [Running],
Path: C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
Service Name: Net Driver HPZ12 [Running],
Path: C:\Windows\System32\svchost.exe -k HPZ12
Service Name: Netlogon [Stopped],
Path: C:\Windows\system32\lsass.exe
Service Name: Network Configuration Service [Running],
Path: "C:\Program Files\AT&T Global Network Client\netcfgsvr.exe"
Service Name: NoIPDUCService [Running],
Path: C:\Program Files\No-IP\DUC20.exe -service
Service Name: Office Source Engine [Stopped],
Path: "C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"
Service Name: Ouverture de session secondaire [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Pare-feu Windows [Running],
Path: C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
Service Name: Partage de connexion Internet (ICS) [Stopped],
Path: C:\Windows\System32\svchost.exe -k netsvcs
Service Name: Planificateur de classes multimédias [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Planificateur de tâches [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Plug-and-Play [Running],
Path: C:\Windows\system32\svchost.exe -k DcomLaunch
Service Name: Pml Driver HPZ12 [Running],
Path: C:\Windows\System32\svchost.exe -k HPZ12
Service Name: Prise en charge de l’application Rapports et solutions aux problèmes du Panneau de configuration [Stopped],
Path: C:\Windows\System32\svchost.exe -k netsvcs
Service Name: Programme d’installation de modules Windows [Running],
Path: C:\Windows\servicing\TrustedInstaller.exe
Service Name: Propagation du certificat [Stopped],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Protocole de résolution de noms d'homologues [Running],
Path: C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
Service Name: Protocole EAP (Extensible Authentication Protocol) [Running],
Path: C:\Windows\System32\svchost.exe -k netsvcs
Service Name: Publication des ressources de découverte de fonctions [Running],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Redirecteur de port du mode utilisateur des services Terminal Server [Stopped],
Path: C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Registre à distance [Stopped],
Path: C:\Windows\system32\svchost.exe -k regsvc
Service Name: Réplication DFS [Stopped],
Path: C:\Windows\system32\DFSR.exe
Service Name: Routage et accès distant [Stopped],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Sauvegarde Windows [Stopped],
Path: C:\Windows\system32\svchost.exe -k SDRSVC
Service Name: Serveur [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Serveur de priorités des threads [Stopped],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Service Bonjour [Running],
Path: "C:\Program Files\Bonjour\mDNSResponder.exe"
Service Name: Service de configuration automatique WLAN [Running],
Path: C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Service de découverte automatique de Proxy Web pour les services HTTP Windows [Stopped],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Service de l’Assistant Compatibilité des programmes [Running],
Path: C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Service de l’iPod [Running],
Path: "C:\Program Files\iPod\bin\iPodService.exe"
Service Name: Service de la passerelle de la couche Application [Stopped],
Path: C:\Windows\System32\alg.exe
Service Name: Service de moteur de sauvegarde en mode bloc [Stopped],
Path: "C:\Windows\system32\wbengine.exe"
Service Name: Service de notification d’événements système [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Service de notification de l’interface utilisateur SL [Stopped],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Service de partage de ports Net.Tcp [Stopped],
Path: "C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe"
Service Name: Service de prise en charge Bluetooth [Running],
Path: C:\Windows\system32\svchost.exe -k bthsvcs
Service Name: Service de profil utilisateur [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Service de publication des noms d’ordinateurs PNRP [Stopped],
Path: C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
Service Name: Service de rapport d'erreurs Windows [Running],
Path: C:\Windows\System32\svchost.exe -k WerSvcGroup
Service Name: Service de stratégie de diagnostic [Running],
Path: C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork
Service Name: Service de transfert intelligent en arrière-plan [Running],
Path: C:\Windows\System32\svchost.exe -k netsvcs
Service Name: Service Énumérateur d’appareil mobile [Running],
Path: C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Service hôte WDIServiceHost [Stopped],
Path: C:\Windows\System32\svchost.exe -k wdisvc
Service Name: Service HP CUE DeviceDiscovery [Running],
Path: C:\Windows\system32\svchost.exe -k hpdevmgmt
Service Name: Service Initiateur iSCSI de Microsoft [Stopped],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Service Interface du magasin réseau [Running],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Service KtmRm pour Distributed Transaction Coordinator [Running],
Path: C:\Windows\System32\svchost.exe -k NetworkService
Service Name: Service Liste des réseaux [Running],
Path: C:\Windows\System32\svchost.exe -k LocalService
Service Name: Service Panneau de saisie Tablet PC [Running],
Path: C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Service Partage réseau du Lecteur Windows Media [Running],
Path: "C:\Program Files\Windows Media Player\wmpnetwk.exe"
Service Name: Service ReadyBoost [Running],
Path: C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Service SSTP (Secure Socket Tunneling Protocol) [Running],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Services de base de module de plateforme sécurisée [Stopped],
Path: C:\Windows\System32\svchost.exe -k LocalService
Service Name: Services de chiffrement [Running],
Path: C:\Windows\system32\svchost.exe -k NetworkService
Service Name: Services Terminal Server [Running],
Path: C:\Windows\System32\svchost.exe -k NetworkService
Service Name: Spouleur d'impression [Running],
Path: C:\Windows\System32\spoolsv.exe
Service Name: Station de travail [Running],
Path: C:\Windows\System32\svchost.exe -k LocalService
Service Name: Steam Client Service [Stopped],
Path: C:\Program Files\Common Files\Steam\SteamService.exe /RunAsService
Service Name: Stratégie de retrait de la carte à puce [Stopped],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Superfetch [Running],
Path: C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: SupportSoft Sprocket Service (dellsupportcenter) [Running],
Path: C:\Program Files\Dell Support Center\bin\sprtsvc.exe /service /p dellsupportcenter
Service Name: Système de couleurs Windows [Stopped],
Path: C:\Windows\system32\svchost.exe -k wcssvc
Service Name: Système d'événement COM+ [Running],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Télécopie [Stopped],
Path: C:\Windows\system32\fxssvc.exe
Service Name: Téléphonie [Running],
Path: C:\Windows\System32\svchost.exe -k NetworkService
Service Name: Telnet [Stopped],
Path: C:\Windows\System32\tlntsvr.exe
Service Name: Thèmes [Running],
Path: C:\Windows\System32\svchost.exe -k netsvcs
Service Name: Tor Win32 Service [Running],
Path: "C:\Program Files\Vidalia Bundle\Tor\tor.exe" --nt-service -f "C:\Users\steph\AppData\Roaming\Vidalia\torrc" ControlPort 9051
Service Name: User Privilege Service [Stopped],
Path: C:\Windows\System32\svchost.exe -k netsvcs
Service Name: VNC Server [Running],
Path: "C:\Program Files\TightVNC\WinVNC.exe" -service
Service Name: WebClient [Running],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Windows CardSpace [Stopped],
Path: "C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe"
Service Name: Windows Connect Now - Registre de configuration [Stopped],
Path: C:\Windows\System32\svchost.exe -k LocalService
Service Name: Windows Defender [Running],
Path: C:\Windows\System32\svchost.exe -k secsvcs
Service Name: Windows Driver Foundation - Infrastructure de pilote mode-utilisateur [Running],
Path: C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Windows Installer [Stopped],
Path: C:\Windows\system32\msiexec /V
Service Name: Windows Search [Running],
Path: C:\Windows\system32\SearchIndexer.exe /Embedding
Service Name: Windows Update [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: WMP54Gv4SVC [Stopped],
Path: "C:\Program Files\Linksys Wireless-G PCI Wireless Network Monitor\WLService.exe" "WMP54Gv4.exe"
Finished...
Aide infecté virus jolieanne
