d4d0u
9Messages postés
12 mai 2009Date d'inscription
12 mai 2009 à 14:36
Alors pour le 1er fichier C:\WINDOWS\system32\SearchIndexer.exe
voici le rapport
Fichier searchindexer.exe reçu le 2009.05.12 14:20:38 (CET)
Situation actuelle: en cours de chargement ... mis en file d'attente en attente en cours d'analyse terminé NON TROUVE ARRETE
Résultat: 0/40 (0%)
en train de charger les informations du serveur...
Votre fichier est dans la file d'attente, en position: 2.
L'heure estimée de démarrage est entre 44 et 63 secondes.
Ne fermez pas la fenêtre avant la fin de l'analyse.
L'analyseur qui traitait votre fichier est actuellement stoppé, nous allons attendre quelques secondes pour tenter de récupérer vos résultats.
Si vous attendez depuis plus de cinq minutes, vous devez renvoyer votre fichier.
Votre fichier est, en ce moment, en cours d'analyse par VirusTotal,
les résultats seront affichés au fur et à mesure de leur génération.
Formaté Impression des résultats
Votre fichier a expiré ou n'existe pas.
Le service est en ce moment, stoppé, votre fichier attend d'être analysé (position : ) depuis une durée indéfinie.
Vous pouvez attendre une réponse du Web (re-chargement automatique) ou taper votre e-mail dans le formulaire ci-dessous et cliquer "Demande" pour que le système vous envoie une notification quand l'analyse sera terminée.
Email:
Antivirus Version Dernière mise à jour Résultat
a-squared 4.0.0.101 2009.05.12 -
AhnLab-V3 5.0.0.2 2009.05.12 -
AntiVir 7.9.0.166 2009.05.12 -
Antiy-AVL 2.0.3.1 2009.05.12 -
Authentium 5.1.2.4 2009.05.12 -
Avast 4.8.1335.0 2009.05.11 -
AVG 8.5.0.327 2009.05.12 -
BitDefender 7.2 2009.05.12 -
CAT-QuickHeal 10.00 2009.05.12 -
ClamAV 0.94.1 2009.05.12 -
Comodo 1157 2009.05.08 -
DrWeb 5.0.0.12182 2009.05.12 -
eSafe 7.0.17.0 2009.05.10 -
eTrust-Vet 31.6.6501 2009.05.12 -
F-Prot 4.4.4.56 2009.05.12 -
F-Secure 8.0.14470.0 2009.05.12 -
Fortinet 3.117.0.0 2009.05.12 -
GData 19 2009.05.12 -
Ikarus T3.1.1.49.0 2009.05.12 -
K7AntiVirus 7.10.732 2009.05.11 -
Kaspersky 7.0.0.125 2009.05.12 -
McAfee 5612 2009.05.11 -
McAfee+Artemis 5612 2009.05.11 -
McAfee-GW-Edition 6.7.6 2009.05.12 -
Microsoft 1.4602 2009.05.12 -
NOD32 4067 2009.05.12 -
Norman 6.01.05 2009.05.12 -
nProtect 2009.1.8.0 2009.05.12 -
Panda 10.0.0.14 2009.05.11 -
PCTools 4.4.2.0 2009.05.07 -
Prevx 3.0 2009.05.12 -
Rising 21.29.13.00 2009.05.12 -
Sophos 4.41.0 2009.05.12 -
Sunbelt 3.2.1858.2 2009.05.12 -
Symantec 1.4.4.12 2009.05.12 -
TheHacker 6.3.4.1.324 2009.05.09 -
TrendMicro 8.950.0.1092 2009.05.12 -
VBA32 3.12.10.4 2009.05.12 -
ViRobot 2009.5.12.1731 2009.05.12 -
VirusBuster 4.6.5.0 2009.05.11 -
Information additionnelle
File size: 439808 bytes
MD5...: 7778bdfa3f6f6fba0e75b9594098f737
SHA1..: ed3a478772bddf65d413479f61812d981fefb655
SHA256: 50992333a9d31cf69c13573c24455422791199bd7c63c3fc7c3f0e4cc1bc6fa4
SHA512: 5f41af534e56dbb861b857274f6cb560ba41967d0afe7def6e8279d03882fcaf
141d2e4938394d1551b2e2df25d947139426f81d49d5671602dea15059cfec56
ssdeep: 6144:s3jJYfwynmxpY2jGPqkWDZnsZenhO31dRXdtOADVOGx7HNdc5h8TQ81BXAw
Q:uYo0mxpxfpOBjDOGJTc5h8Tb1AwQ
PEiD..: -
TrID..: File type identification
Win32 Executable MS Visual C++ (generic) (65.2%)
Win32 Executable Generic (14.7%)
Win32 Dynamic Link Library (generic) (13.1%)
Generic Win/DOS Executable (3.4%)
DOS Executable Generic (3.4%)
PEInfo: PE Structure information
( base data )
entrypointaddress.: 0xe504
timedatestamp.....: 0x483b99af (Tue May 27 05:18:39 2008)
machinetype.......: 0x14c (I386)
( 4 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x4b52e 0x4b600 6.29 aa92f12631cd6026fe0fc967b87b15b8
.data 0x4d000 0x3f6c 0x3e00 0.61 ac463a8c78c0922c8426263b7d1a8d91
.rsrc 0x51000 0x17628 0x17800 4.39 c0e18ba42acd28ab385387cd5b063398
.reloc 0x69000 0x45fc 0x4600 6.67 e0558200b9225229c16695039fe1c2d5
( 14 imports )
> ADVAPI32.dll: RegDeleteKeyW, RegCloseKey, RegNotifyChangeKeyValue, RegCreateKeyExW, RegOpenKeyExW, RegQueryValueExW, RegSetValueExW, RegisterTraceGuidsW, UnregisterTraceGuids, TraceEvent, OpenProcessToken, GetTraceEnableFlags, GetTraceEnableLevel, GetTraceLoggerHandle, InitializeAcl, InitializeSecurityDescriptor, RegDeleteValueW, RegQueryInfoKeyW, RegEnumKeyExW, AdjustTokenPrivileges, LookupPrivilegeValueW, RegLoadKeyW, RegUnLoadKeyW, GetLengthSid, IsValidSid, SetSecurityDescriptorOwner, SetSecurityDescriptorGroup, GetTokenInformation, AddAce, GetAce, GetAclInformation, AddAccessAllowedAce, StartServiceCtrlDispatcherW, SetSecurityDescriptorDacl, OpenThreadToken, LookupAccountNameW, SetServiceStatus, RegisterServiceCtrlHandlerExW, RegEnumValueW, ImpersonateLoggedOnUser, GetSecurityDescriptorLength, GetSidSubAuthority, RevertToSelf, InitializeSid, GetSidLengthRequired, AddAccessDeniedAce, LookupAccountSidW, CreateWellKnownSid, ConvertSidToStringSidW, SetTokenInformation, IsValidAcl, DeregisterEventSource, RegisterEventSourceW, ReportEventW, ConvertStringSecurityDescriptorToSecurityDescriptorA, CheckTokenMembership, CopySid
> KERNEL32.dll: FormatMessageW, UnmapViewOfFile, ReleaseMutex, OpenMutexW, LCMapStringW, FileTimeToSystemTime, SystemTimeToTzSpecificLocalTime, GetTimeFormatW, LocalFree, CreateFileW, lstrcmpW, CompareFileTime, RemoveDirectoryW, FindFirstFileW, FindNextFileW, GetDriveTypeW, FindClose, DuplicateHandle, GetCurrentThread, GetSystemDefaultLCID, VerSetConditionMask, VerifyVersionInfoW, UnhandledExceptionFilter, TerminateProcess, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, GetModuleHandleA, SetUnhandledExceptionFilter, RtlUnwind, OutputDebugStringA, GetStartupInfoA, InterlockedCompareExchange, GetStringTypeExW, GetEnvironmentVariableW, lstrlenA, InterlockedExchange, HeapSize, HeapReAlloc, HeapAlloc, HeapDestroy, GetVersionExA, OutputDebugStringW, LoadLibraryW, CreateFileMappingW, GetLocaleInfoW, GetSystemDefaultUILanguage, GetUserDefaultUILanguage, SearchPathW, ExpandEnvironmentStringsW, GetFileAttributesW, DeleteFileW, HeapSetInformation, GetCurrentProcessId, SetPriorityClass, SetEnvironmentVariableW, CreateMutexW, CreateFileA, GetLocalTime, FlushViewOfFile, DeleteFileA, CopyFileA, GetSystemTimeAsFileTime, MapViewOfFile, Sleep, MultiByteToWideChar, lstrcmpiW, LeaveCriticalSection, EnterCriticalSection, SetLastError, GetVersionExW, GetProcessHeap, HeapFree, DeleteCriticalSection, InitializeCriticalSection, RaiseException, GetCurrentProcess, GetModuleFileNameW, LoadLibraryExW, InterlockedDecrement, InterlockedIncrement, GetSystemDirectoryW, GetUserDefaultLCID, GetModuleHandleW, SizeofResource, LockResource, LoadResource, FindResourceW, FindResourceExW, GetModuleHandleExW, GetProcAddress, GetLastError, WideCharToMultiByte, CompareStringW, FreeLibrary, CreateEventW, CreateThread, WaitForMultipleObjects, GetVolumeInformationW, SetEvent, WaitForSingleObject, CloseHandle, lstrlenW, GetCommandLineW
> USER32.dll: UnregisterClassA, LoadStringW, PeekMessageW, DispatchMessageW, MsgWaitForMultipleObjects, CharNextW, GetKeyboardLayout
> msvcrt.dll: _lseeki64, _fileno, wcspbrk, __pioinfo, __badioinfo, ferror, _itoa, _snprintf, _iob, isleadbyte, __mb_cur_max, mbtowc, isdigit, _controlfp, memmove, realloc, _onexit, _lock, __dllonexit, _unlock, _terminate@@YAXXZ, __1type_info@@UAE@XZ, __set_app_type, __p__fmode, __p__commode, _adjust_fdiv, __setusermatherr, _amsg_exit, _write, _acmdln, exit, _ismbblead, _XcptFilter, _exit, _cexit, __getmainargs, _wcslwr, _errno, __CxxFrameHandler, wcsstr, malloc, memcpy, wcsrchr, memset, _wcsnicmp, wcsncmp, _vsnwprintf, calloc, free, _vscwprintf, _wcsicmp, _CxxThrowException, qsort, bsearch, _isatty, strncmp, _vsnprintf, _initterm, fprintf, wcschr, iswspace, _wtol, swscanf
> ole32.dll: CoCreateInstance, CoUninitialize, CoInitialize, CoInitializeEx, CoTaskMemAlloc, CoTaskMemRealloc, CoRevokeClassObject, CoRegisterClassObject, CoImpersonateClient, CoRevertToSelf, CoInitializeSecurity, CoTaskMemFree
> OLEAUT32.dll: -, -, -, -, -, -, -, -, -, -, -, -
> WTSAPI32.dll: WTSQueryUserToken, WTSFreeMemory, WTSEnumerateSessionsW
> TQUERY.DLL: _ciNewNoThrow@@YGPAXI@Z, _ciNew@@YGPAXI@Z, _ciDelete@@YGXPAX@Z
> SHELL32.dll: -, SHGetFolderPathW, SHFileOperationW
> USERENV.dll: GetUserProfileDirectoryW, GetProfilesDirectoryW, GetAllUsersProfileDirectoryW, GetDefaultUserProfileDirectoryW
> MPR.dll: WNetGetConnectionW
> MSSRCH.DLL: __1CSearchServiceObj@@QAE@XZ, __0CSearchServiceObj@@QAE@XZ
> NETAPI32.dll: NetShareEnum, NetApiBufferFree
> SHLWAPI.dll: SHGetValueW, PathIsUNCServerShareW, PathSkipRootW, PathIsUNCW, PathStripToRootW, SHCopyKeyW, -, SHEnumKeyExW, SHEnumValueW, SHStrDupW, SHRegGetValueW, PathFileExistsW, -, SHDeleteKeyW, PathAppendW, SHDeleteValueW, PathIsUNCServerW, SHSetValueW, PathAddBackslashW, PathRemoveBackslashW
( 0 exports )
PDFiD.: -
RDS...: NSRL Reference Data Set
Et pour le 2eme fichier C:\1K\1KSQL75.EXE il est trop gros pour etre analysé 25 mo
voici le rapport
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:22:55, on 12/05/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16791)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\r_server.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\RealVNC\VNC4\WinVNC4.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe
C:\Program Files\Nero\Nero 7\InCD\InCD.exe
C:\Program Files\Secway\SimpPro 2.2\SimpPro.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Desktop Search\WindowsSearch.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\VideoLAN\VLC\vlc.exe
C:\1K\1KSQL75.EXE
C:\WINDOWS\system32\ntvdm.exe
C:\Program Files\RealVNC\VNC4\vncviewer.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Fichiers Internet temporaires\Content.IE5\J63ZK9ET\HiJackThis[1].exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hassidout.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\pdfforge Toolbar\SearchSettings.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\WidgiToolbarIE.dll
O2 - BHO: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\pdfforge Toolbar\SearchSettings.dll
O3 - Toolbar: pdfforge Toolbar - {B922D405-6D13-4A2B-AE89-08A030DA4402} - C:\Program Files\pdfforge Toolbar\WidgiToolbarIE.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe"
O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\pdfforge Toolbar\SearchSettings.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Fichiers communs\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SecurDisc] C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Nero\Nero 7\InCD\InCD.exe
O4 - HKLM\..\Run: [TrojanScanner] C:\Program Files\Trojan Remover\Trjscan.exe /boot
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe"
O4 - HKCU\..\Run: [Simp] C:\Program Files\Secway\SimpPro 2.2\SimpPro.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: 1kupdate.lnk = C:\1K\1KUPDATE.EXE
O4 - Global Startup: Windows Search.lnk = C:\Program Files\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: Ajouter à Kaspersky Anti-Bannière - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\ie_banner_deny.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Statistiques d’Anti-Virus Internet - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\SCIEPlgn.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {210D0CBC-8B17-48D1-B294-1A338DD2EB3A} (VatCtrl Class) - http://78.227.84.42:118/VatDec.cab
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - http://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab
O16 - DPF: {F0C46420-B50B-4BA1-ADBE-C1ECF47E0916} (XViewer Control) - http://192.168.0.202/XViewer.cab
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Fichiers communs\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Kaspersky Internet Security 7.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: Service Google Update (gupdate1c9bd025d6c165e) (gupdate1c9bd025d6c165e) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Fichiers communs\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Remote Administrator Service (r_server) - Unknown owner - C:\WINDOWS\system32\r_server.exe
O23 - Service: VNC Server Version 4 (WinVNC4) - RealVNC Ltd. - C:\Program Files\RealVNC\VNC4\WinVNC4.exe