Bonjour,voila mon PC est infecté de trojan downloader,virtumonde et d'autres trucs encore, j'ai tout essayé mais sans succés
voici le log hijackthis:
Logfile of Trend Micro HijackThis v2.0.0
(BETA)
Scan saved at 02:49:29, on
13/05/2007
Platform: Windows XP SP2 (WinNT
5.01.2600)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\FICHIE~1
\AOL\ACS\AOLacsd.exe
c:\APPS\Powercinema\Kernel\TV\CLCapS
vc.exe
C:\Program Files\CyberLink\Shared
Files\CLML_NTService\CLMLServer.exe
C:\Program Files\CyberLink\Shared
Files\CLML_NTService\CLMLService.exe
C:\Program Files\Fichiers
communs\McAfee\HackerWatch\HWAP
I.exe
C:\PROGRA~1
\McAfee\MSC\mcmscsvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
c:\program files\fichiers
communs\mcafee\mna\mcnasvc.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\McAfee\VIRUSS~1
\mcods.exe
C:\PROGRA~1
\McAfee\MSC\mcpromgr.exe
c:\PROGRA~1\FICHIE~1
\mcafee\mcproxy\mcproxy.exe
c:\PROGRA~1\FICHIE~1
\mcafee\redirsvc\redirsvc.exe
C:\PROGRA~1\McAfee\VIRUSS~1
\mcshield.exe
C:\PROGRA~1\McAfee\VIRUSS~1
\mcsysmon.exe
C:\Program
Files\McAfee\MPF\MPFSrv.exe
C:\PROGRA~1\McAfee\MPS\mps.exe
c:\PROGRA~1
\mcafee.com\agent\mcagent.exe
C:\Program
Files\McAfee\MSK\MskSrver.exe
C:\Program Files\Spyware
Doctor\svcntaux.exe
C:\Program
Files\McAfee\MPS\mpsevh.exe
C:\Program Files\SiteAdvisor\6066
\SAService.exe
C:\WINDOWS\System32\snmp.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers
communs\Ulead
Systems\DVD\ULCDRSvr.exe
c:\APPS\Powercinema\Kernel\TV\CLSche
d.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\ATI Technologies\ATI Control
Panel\atiptaxx.exe
C:\Program Files\Java\jre1.5.0_11
\bin\jusched.exe
C:\PROGRA~1\GOTOSO~1\VADERE~1
\Vaderetro_oe.exe
C:\Program Files\Fichiers
communs\Ulead
Systems\AutoDetector\monitor.exe
C:\Apps\Powercinema\PCMService.exe
C:\apps\ABoard\ABoard.exe
C:\Program
Files\ScanSoft\OmniPageSE2.0
\OpwareSE2.exe
C:\apps\ABoard\AOSD.exe
C:\Program Files\Fichiers
communs\Real\Update_OB\realsched.ex
e
D:\Documents and Settings\All
Users\Documents\moffice.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program
Files\McAfee\MSK\MskAgent.exe
C:\Program Files\SiteAdvisor\6066
\SiteAdv.exe
C:\Program Files\OFFICE One6.5\OFFICE
One PDF Manager\OoPDFSettingsv6.exe
C:\Program Files\Spyware
Doctor\SDTrayApp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN
Messenger\MsnMsgr.Exe
D:\Documents and Settings\All
Users\Documents\MOUSE32A.EXE
C:\Program
Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\OFFICE One6.5\OFFICE
One Notes\oonotesv65.exe
C:\Program Files\OFFICE One6.5
\program\soffice.exe
C:\Program Files\Fichiers
communs\Logitech\KHAL\KHALMNPR.E
XE
C:\WINDOWS\System32\alg.exe
C:\Program Files\Spyware
Doctor\swdsvc.exe
C:\Program Files\Spyware
Doctor\swdoctor.exe
C:\Program Files\Internet
Explorer\IEXPLORE.EXE
D:\Documents and
Settings\Olivier.111544170316
\Bureau\HiJackThis_v2.exe
c:\PROGRA~1\mcafee\VIRUSS~1
\mcvsshld.exe
R1 - HKCU\Software\Microsoft\Internet
Explorer\Main,Search Bar =
http://format.packardbell.com/cgi-
bin/redirect/?
country=FR&range=AD&phase=6&key=S
EARCH
R1 - HKCU\Software\Microsoft\Internet
Explorer\Main,Search Page =
http://fr.rd.yahoo.com/customize/ycom
p/defaults/sp/*http://fr.yahoo.com
R0 - HKCU\Software\Microsoft\Internet
Explorer\Main,Start Page =
http://fr.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet
Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?
LinkId=69157
R1 - HKLM\Software\Microsoft\Internet
Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?
LinkId=54896
R1 - HKLM\Software\Microsoft\Internet
Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?
LinkId=54896
R0 - HKLM\Software\Microsoft\Internet
Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?
LinkId=69157
R1 - HKCU\Software\Microsoft\Internet
Explorer\SearchURL,(Default) =
http://fr.rd.yahoo.com/customize/ycom
p/defaults/su/*http://fr.yahoo.com
R1 - HKCU\Software\Microsoft\Internet
Connection Wizard,ShellNext =
wmplayer.exe //ICWLaunch
R0 - HKCU\Software\Microsoft\Internet
Explorer\Toolbar,LinksFolderName =
Liens
R3 - URLSearchHook: Yahoo! Toolbar -
{EF99BD32-C1FB-11D2-892F-
0090271D4F88} - C:\Program
Files\Yahoo!
\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper -
{02478D38-C3F9-4EFB-9B51-
7695ECA05670} - C:\Program
Files\Yahoo!
\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link
Helper - {06849E9F-C8D7-4D59-
B87D-784B7D6BE0B3} - C:\Program
Files\Adobe\Acrobat 7.0
\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {073C6254-
33EF-4555-BCE4-249D95AD5B78} -
C:\WINDOWS\system32\tuvsttt.dll
O2 - BHO: (no name) - {089FD14D-
132B-48FC-8861-0048AE113215} -
C:\Program Files\SiteAdvisor\6066
\SiteAdv.dll
O2 - BHO: (no name) - {1FA15CB2-
AC6E-48DD-848C-961A6FFD69Da} -
C:\WINDOWS\system32\ftmeotno.dll
O2 - BHO: (no name) - {31852086-
BC0D-49B2-B181-3E4321BF5D56} -
C:\WINDOWS\system32\jkklm.dll
O2 - BHO: (no name) - {4692D832-
6185-4B51-F23D-6DE339E4FA95} -
C:\WINDOWS\system32\lnihjrwb.dll
(file missing)
O2 - BHO: SSVHelper Class -
{761497BB-D6F0-462C-B6EB-
D4DAF1D92D43} - C:\Program
Files\Java\jre1.5.0_11\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-
7241-4E79-B68D-6309F01C5231} -
c:\program
files\mcafee\virusscan\scriptcl.dll
O2 - BHO: (no name) - {7E853D72-
626A-48EC-A868-BA8D5E23E045} -
(no file)
O2 - BHO: Windows Live Sign-in Helper
- {9030D464-4C02-4ABF-8ECC-
5164760863C6} - C:\Program
Files\Fichiers communs\Microsoft
Shared\Windows
Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper -
{AA58ED58-01DD-4d91-8333-
CF10577473F7} - c:\program
files\google\googletoolbar2.dll
O2 - BHO: (no name) - {E2EE5C44-
C66D-499d-BEAE-A2A79189A63A} -
C:\WINDOWS\system32\astwwtrl.dll
O3 - Toolbar: Easy-WebPrint -
{327C2873-E90D-4c37-AA9D-
10AC9BABA46C} - C:\Program
Files\Canon\Easy-WebPrint\Toolband.dll
O3 - Toolbar: Yahoo! Toolbar -
{EF99BD32-C1FB-11D2-892F-
0090271D4F88} - C:\Program
Files\Yahoo!
\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-
4965-11d4-9B18-009027A5CD4F} -
c:\program
files\google\googletoolbar2.dll
O3 - Toolbar: McAfee SiteAdvisor -
{0BF43445-2F28-4351-9252-
17FE6E806AA0} - C:\Program
Files\SiteAdvisor\6066\SiteAdv.dll
O4 - HKLM\..\Run: [PHIME2002ASync]
C:\WINDOWS\system32
\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A]
C:\WINDOWS\system32
\IME\TINTLGNT\TINTSETP.EXE
/IMEName
O4 - HKLM\..\Run: [SoundMan]
SOUNDMAN.EXE
O4 - HKLM\..\Run: [ATIPTA] "C:\ATI
Technologies\ATI Control
Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched]
"C:\Program Files\Java\jre1.5.0_11
\bin\jusched.exe"
O4 - HKLM\..\Run: [Vade Retro Outlook
Express] "C:\PROGRA~1\GOTOSO~1
\VADERE~1\Vaderetro_oe.exe"
O4 - HKLM\..\Run: [Ulead AutoDetector
v2] C:\Program Files\Fichiers
communs\Ulead
Systems\AutoDetector\monitor.exe
O4 - HKLM\..\Run: [PCMService]
"c:\Apps\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [IMJPMIG8.1]
"C:\WINDOWS\IME\imjp8_1
\IMJPMIG.EXE /Spoil /RemAdvDef
/Migration32"
O4 - HKLM\..\Run: [ACTIVBOARD]
c:\apps\ABoard\ABoard.exe
O4 - HKLM\..\Run: [OpwareSE2]
"C:\Program
Files\ScanSoft\OmniPageSE2.0
\OpwareSE2.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program
Files\Fichiers
communs\Real\Update_OB\realsched.ex
e" -osboot
O4 - HKLM\..\Run:
[FLMOFFICE4DMOUSE] D:\Documents
and Settings\All
Users\Documents\moffice.exe
O4 - HKLM\..\Run: [BOOT] C:\Program
Files\ISSENDIS\ISSENDIS WebUpdate
v6\issendiswebupdatev6.exe /BOOT
O4 - HKLM\..\Run: [Logitech Hardware
Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [QuickTime Task]
"C:\Program Files\QuickTime\qttask.exe"
-atboottime
O4 - HKLM\..\Run: [WindowsHive]
C:\WINDOWS\system32\rpcc.exe
O4 - HKLM\..\Run: [runner1]
C:\WINDOWS\retadpu1000272.exe
61A847B5BBF72813329B385475FB0
1F0B3E35B6638993F4661AA4EBD86
D67C56389B284534F310
O4 - HKLM\..\Run: [SManager]
smanager.7.exe
O4 - HKLM\..\Run: [MskAgentexe]
C:\Program
Files\McAfee\MSK\MskAgent.exe
O4 - HKLM\..\Run: [SiteAdvisor]
C:\Program Files\SiteAdvisor\6066
\SiteAdv.exe
O4 - HKLM\..\Run: [SDTray] "C:\Program
Files\Spyware Doctor\SDTrayApp.exe"
O4 - HKCU\..\Run: [CTFMON.EXE]
C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr]
"C:\Program Files\MSN
Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-19\..\Run:
[CTFMON.EXE]
C:\WINDOWS\system32\CTFMON.EXE
(User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run:
[CTFMON.EXE]
C:\WINDOWS\system32\CTFMON.EXE
(User 'SERVICE RÉSEAU')
O4 - HKUS\S-1-5-18\..\Run:
[CTFMON.EXE]
C:\WINDOWS\system32\CTFMON.EXE
(User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run:
[CTFMON.EXE]
C:\WINDOWS\system32\CTFMON.EXE
(User 'Default user')
O4 - Startup: Adobe Gamma.lnk =
C:\Program Files\Fichiers
communs\Adobe\Calibration\Adobe
Gamma Loader.exe
O4 - Startup: OFFICE One 6.5.lnk =
C:\Program Files\OFFICE One6.5
\program\quickstart.exe
O4 - Global Startup: Lancement rapide
d'Adobe Reader.lnk = C:\Program
Files\Adobe\Acrobat 7.0
\Reader\reader_sl.exe
O4 - Global Startup: Logitech
SetPoint.lnk = C:\Program
Files\Logitech\SetPoint\SetPoint.exe
O4 - Global Startup: OFFICE One Notes
v6.5.lnk = C:\Program Files\OFFICE
One6.5\OFFICE One
Notes\oonotesv65.exe
O9 - Extra button: (no name) -
{08B0E5C0-4FCB-11CF-AAA5-
00401C608501} - C:\Program
Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Console
Java (Sun) - {08B0E5C0-4FCB-11CF-
AAA5-00401C608501} - C:\Program
Files\Java\jre1.5.0_11\bin\ssv.dll
O9 - Extra button: Real.com -
{CD67F990-D8E9-11d2-98FE-
00C0F0318AFE} -
C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: (no name) -
{e2e2dd38-d088-4134-82b7-
f2ba38496583} - %windir%\Network
Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem:
@xpsp3res.dll,-20001 - {e2e2dd38-
d088-4134-82b7-f2ba38496583} -
%windir%\Network
Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger -
{FB5F1910-F110-11d2-BB9E-
00C04F795683} - C:\Program
Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows
Messenger - {FB5F1910-F110-11d2-
BB9E-00C04F795683} - C:\Program
Files\Messenger\msmsgs.exe
O14 - IERESET.INF:
START_PAGE_URL=file://C:\APPS\IE\offli
ne\fr.htm
O16 - DPF: {4ED9DDF0-7479-4BBE-
9335-5A1EDB1D8A21} (McAfee.com
Operating System Class) -
http://download.mcafee.com/molbin/s
hared/mcinsctl/4,0,0,101/mcinsctl.cab
O16 - DPF: {4F1E5B1A-2A80-42CA-
8532-2D05CB959537} (MSN Photo
Upload Tool) -
http://by113fd.bay113.hotmail.msn.co
m/resources/MsnPUpld.cab
O16 - DPF: {512FC5A1-7DE1-43F1-
BC0C-371622FCB409} (Installer Class)
-
http://www.nanoscan.com/as/v1/cabs
/ascinstie.cab
O16 - DPF: {5D6F45B3-9043-443D-
A792-115447494D24} (UnoCtrl Class)
- http://messenger.zone.msn.com/FR-
FR/a-UNO1/GAME_UNO1.cab
O16 - DPF: {8436FE12-31DB-48BF-
83BF-FE682F9160B4} (NanoInstaller
Class) -
http://www.nanoscan.com/cabs/nanoi
nst.cab
O16 - DPF: {BB21F850-63F4-4EC9-
BF9D-565BD30C9AE9} (a-squared
Scanner) -
http://ax.emsisoft.com/asquared.cab
O16 - DPF: {BCC0FF27-31D9-4614-
A68E-C18E1ADA4389}
(DwnldGroupMgr Class) -
http://download.mcafee.com/molbin/s
hared/mcgdmgr/1,0,0,26/mcgdmgr.ca
b
O16 - DPF: {C3F79A2B-B9B4-4A66-
B012-3EE46475B072}
(MessengerStatsClient Class) -
http://messenger.zone.msn.com/binary/
MessengerStatsPAClient.cab56907.cab
O20 - AppInit_DLLs:
C:\WINDOWS\system32\perfc000.dat
O20 - Winlogon Notify: jkklm -
C:\WINDOWS\system32\jkklm.dll
O20 - Winlogon Notify: tuvsttt -
C:\WINDOWS\SYSTEM32\tuvsttt.dll
O20 - Winlogon Notify: wineil32 -
C:\WINDOWS\SYSTEM32\wineil32.dll
O22 - SharedTaskScheduler: Pré-
chargeur Browseui - {438755C2-A8BA
-11D1-B96B-00A0C90312E1} -
C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Démon de
cache des catégories de composant -
{8C7461EF-2B13-11d2-BE35-
3078302C2030} -
C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe LM Service -
Adobe Systems - C:\Program
Files\Fichiers communs\Adobe Systems
Shared\Service\Adobelmsvc.exe
O23 - Service: AOL Connectivity Service
(AOL ACS) - America Online, Inc. -
C:\PROGRA~1\FICHIE~1
\AOL\ACS\AOLacsd.exe
O23 - Service: Ares Chatroom server
(AresChatServer) - Unknown owner -
C:\Program Files\Ares\chatServer.exe (file
missing)
O23 - Service: Ati HotKey Poller - ATI
Technologies Inc. -
C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: CyberLink Background
Capture Service (CBCS) (CLCapSvc) -
Unknown owner -
c:\APPS\Powercinema\Kernel\TV\CLCapS
vc.exe
O23 - Service: CyberLink Task Scheduler
(CTS) (CLSched) - Unknown owner -
c:\APPS\Powercinema\Kernel\TV\CLSche
d.exe
O23 - Service: CyberLink Media Library
Service - Cyberlink - C:\Program
Files\CyberLink\Shared
Files\CLML_NTService\CLMLServer.exe
O23 - Service: Service d'administration
du Gestionnaire de disque logique
(dmadmin) - Unknown owner -
C:\WINDOWS\System32\dmadmin.exe
O23 - Service: McAfee E-mail Proxy
(Emproxy) - McAfee, Inc. -
C:\PROGRA~1\FICHIE~1
\McAfee\EmProxy\emproxy.exe
O23 - Service: Journal des événements
(Eventlog) - Unknown owner -
C:\WINDOWS\system32\services.exe
O23 - Service: Fax - Unknown owner -
C:\WINDOWS\system32\fxssvc.exe
O23 - Service: Generic Service for HID
Keyboard Input Collections
(GenericHidService) - Unknown owner -
c:\APPS\HIDSERVICE\HIDSERVICE.exe
(file missing)
O23 - Service: Google Updater Service
(gusvc) - Google - C:\Program
Files\Google\Common\Google
Updater\GoogleUpdaterService.exe
O23 - Service: Service COM de gravage
de CD IMAPI (ImapiService) - Unknown
owner - C:\WINDOWS\system32
\imapi.exe
O23 - Service: McAfee HackerWatch
Service - McAfee, Inc. - C:\Program
Files\Fichiers
communs\McAfee\HackerWatch\HWAP
I.exe
O23 - Service: McAfee Update Manager
(mcmispupdmgr) - McAfee, Inc. -
C:\PROGRA~1
\McAfee\MSC\mcupdmgr.exe
O23 - Service: McAfee Services
(mcmscsvc) - McAfee, Inc. -
C:\PROGRA~1
\McAfee\MSC\mcmscsvc.exe
O23 - Service: McAfee Network Agent
(McNASvc) - McAfee, Inc. - c:\program
files\fichiers
communs\mcafee\mna\mcnasvc.exe
O23 - Service: McAfee Scanner
(McODS) - McAfee, Inc. - C:\PROGRA~1
\McAfee\VIRUSS~1\mcods.exe
O23 - Service: McAfee Protection
Manager (mcpromgr) - McAfee, Inc. -
C:\PROGRA~1
\McAfee\MSC\mcpromgr.exe
O23 - Service: McAfee Proxy Service
(McProxy) - McAfee, Inc. - c:\PROGRA~1
\FICHIE~1\mcafee\mcproxy\mcproxy.exe
O23 - Service: McAfee Redirector
Service (McRedirector) - McAfee, Inc. -
c:\PROGRA~1\FICHIE~1
\mcafee\redirsvc\redirsvc.exe
O23 - Service: McAfee Real-time
Scanner (McShield) - McAfee, Inc. -
C:\PROGRA~1\McAfee\VIRUSS~1
\mcshield.exe
O23 - Service: McAfee SystemGuards
(McSysmon) - McAfee, Inc. -
C:\PROGRA~1\McAfee\VIRUSS~1
\mcsysmon.exe
O23 - Service: Partage de Bureau à
distance NetMeeting (mnmsrvc) -
Unknown owner -
C:\WINDOWS\system32\mnmsrvc.exe
O23 - Service: McAfee Personal Firewall
Service (MpfService) - McAfee, Inc. -
C:\Program
Files\McAfee\MPF\MPFSrv.exe
O23 - Service: McAfee Privacy Service
(MPS9) - McAfee, Inc. - C:\PROGRA~1
\McAfee\MPS\mps.exe
O23 - Service: McAfee SpamKiller
Service (MSK80Service) - McAfee Inc. -
C:\Program
Files\McAfee\MSK\MskSrver.exe
O23 - Service: MysqlInventime -
Unknown owner - C:\Apps\INVENT~1
\mysql\bin\mysqld-nt.exe
O23 - Service: Plug-and-Play (PlugPlay) -
Unknown owner -
C:\WINDOWS\system32\services.exe
O23 - Service: Gestionnaire de session
d'aide sur le Bureau à distance
(RDSessMgr) - Unknown owner -
C:\WINDOWS\system32\sessmgr.exe
O23 - Service: Carte à puce (SCardSvr) -
Unknown owner -
C:\WINDOWS\System32\SCardSvr.exe
O23 - Service: Spyware Doctor Auxiliary
Service (sdAuxService) - Unknown
owner - C:\Program Files\Spyware
Doctor\svcntaux.exe
O23 - Service: Spyware Doctor Service
(sdCoreService) - PC Tools - C:\Program
Files\Spyware Doctor\swdsvc.exe
O23 - Service: SiteAdvisor Service -
McAfee, Inc. - C:\Program
Files\SiteAdvisor\6066\SAService.exe
O23 - Service: Service SNMP (SNMP) -
Unknown owner -
C:\WINDOWS\System32\snmp.exe
O23 - Service: Journaux et alertes de
performance (SysmonLog) - Unknown
owner - C:\WINDOWS\system32
\smlogsvc.exe
O23 - Service: Ulead Burning Helper
(UleadBurningHelper) - Ulead Systems,
Inc. - C:\Program Files\Fichiers
communs\Ulead
Systems\DVD\ULCDRSvr.exe
O23 - Service: Cliché instantané de
volume (VSS) - Unknown owner -
C:\WINDOWS\System32\vssvc.exe
O23 - Service: Carte de performance
WMI (WmiApSrv) - Unknown owner -
C:\WINDOWS\system32
\wbem\wmiapsrv.exe
O23 - Service: Service Partage réseau du
Lecteur Windows Media
(WMPNetworkSvc) - Unknown owner -
C:\Program Files\Windows Media
Player\WMPNetwk.exe
End of file - 16500 bytes