Virus Gen:Adware.Heur.0131

bonsoir voici ce rapport et merci


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:28:15, on 03/04/2009
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16809)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe
C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.msn.com/fr-fr?cobrand=hp-notebook.msn.com&ocid=HPDHP&pc=HPNTDF
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2008\IEToolbar.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [hpWirelessAssistant] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://dl8-cdn-01.sun.com/s/ESD5/JSCDL/jre/6u11-b90/jinstall-6u11-windows-i586-jc.cab?e=1232813647667&h=573b1f425fafec3701adecb489737770/&filename=jinstall-6u11-windows-i586-jc.cab
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://jeuxenligne.orange.fr/Gameshell/GameHost/1.0/OberonGameHost.cab
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe
O23 - Service: Com4Qlb - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender SRL - C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S.R.L. - C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
O23 - Service: BitDefender Communicator (XCOMM) - BitDefender - C:\Program Files\Common Files\BitDefender\BitDefender Communicator\xcommsvr.exe

bonsoir voici le de genproc a+



Rapport GenProc 2.512 [1] - 04/04/2009 à 0:03:15 - Windows Vista

GenProc n'a détecté aucune infection caractéristique et suggère de suivre la procédure suivante :


Poste un rapport Nod32 https://www.eset.com/ (il faut utiliser Internet Explorer)
- coche toutes les cases à chaque fois, et lorsque c'est terminé, colle le rapport :
- C:\Program Files\EsetOnlineScanner\log.txt

----------------------------------------------------------------------
Sites officiels GenProc : www.alt-shift-return.org et www.genproc.com
----------------------------------------------------------------------

bonsoir voici le scan

SUPERAntiSpyware Scan Log
https://www.superantispyware.com/

Generated 04/04/2009 at 00:59 AM

Application Version : 4.26.1000

Core Rules Database Version : 3828
Trace Rules Database Version: 1784

Scan type : Complete Scan
Total Scan Time : 00:26:39

Memory items scanned : 607
Memory threats detected : 0
Registry items scanned : 7490
Registry threats detected : 0
File items scanned : 21128
File threats detected : 47

Adware.Tracking Cookie
C:\Users\Holin\AppData\Roaming\Microsoft\Windows\Cookies\holin@serving-sys[1].txt
C:\Users\Holin\AppData\Roaming\Microsoft\Windows\Cookies\holin@mediaplex[1].txt
C:\Users\Holin\AppData\Roaming\Microsoft\Windows\Cookies\holin@weborama[2].txt
C:\Users\Holin\AppData\Roaming\Microsoft\Windows\Cookies\holin@kitkat.solution.weborama[2].txt
C:\Users\Holin\AppData\Roaming\Microsoft\Windows\Cookies\holin@advertising[2].txt
C:\Users\Holin\AppData\Roaming\Microsoft\Windows\Cookies\holin@doubleclick[1].txt
C:\Users\Holin\AppData\Roaming\Microsoft\Windows\Cookies\holin@bs.serving-sys[2].txt
C:\Users\Holin\AppData\Roaming\Microsoft\Windows\Cookies\holin@fr.sitestat[1].txt
C:\Users\Holin\AppData\Roaming\Microsoft\Windows\Cookies\holin@ads.tetesacl.streamtheworld[2].txt
C:\Users\Holin\AppData\Roaming\Microsoft\Windows\Cookies\holin@buggy.solution.weborama[2].txt
C:\Users\Holin\AppData\Roaming\Microsoft\Windows\Cookies\holin@smartadserver[2].txt
C:\Users\Holin\AppData\Roaming\Microsoft\Windows\Cookies\holin@ehg-eset.hitbox[1].txt
C:\Users\Holin\AppData\Roaming\Microsoft\Windows\Cookies\holin@hollywood.solution.weborama[2].txt
C:\Users\Holin\AppData\Roaming\Microsoft\Windows\Cookies\holin@lorealpariselseve.solution.weborama[2].txt
C:\Users\Holin\AppData\Roaming\Microsoft\Windows\Cookies\holin@xiti[1].txt
C:\Users\Holin\AppData\Roaming\Microsoft\Windows\Cookies\holin@tradedoubler[1].txt
C:\Users\Holin\AppData\Roaming\Microsoft\Windows\Cookies\holin@2o7[1].txt
C:\Users\Holin\AppData\Roaming\Microsoft\Windows\Cookies\holin@ad.yieldmanager[1].txt
C:\Users\Holin\AppData\Roaming\Microsoft\Windows\Cookies\holin@msnaccountservices.112.2o7[1].txt
C:\Users\Holin\AppData\Roaming\Microsoft\Windows\Cookies\holin@aimfar.solution.weborama[2].txt
C:\Users\Holin\AppData\Roaming\Microsoft\Windows\Cookies\holin@bluestreak[2].txt
C:\Users\Holin\AppData\Roaming\Microsoft\Windows\Cookies\holin@atdmt[2].txt
C:\Users\Holin\AppData\Roaming\Microsoft\Windows\Cookies\holin@perf.overture[1].txt
C:\Users\Holin\AppData\Roaming\Microsoft\Windows\Cookies\holin@cetelem.solution.weborama[2].txt
C:\Users\Holin\AppData\Roaming\Microsoft\Windows\Cookies\holin@adtech[1].txt
C:\Users\Holin\AppData\Roaming\Microsoft\Windows\Cookies\holin@kaspersky.122.2o7[1].txt
C:\Users\Holin\AppData\Roaming\Microsoft\Windows\Cookies\holin@msnportal.112.2o7[1].txt
C:\Users\Holin\AppData\Roaming\Microsoft\Windows\Cookies\holin@hitbox[2].txt
C:\Users\Holin\AppData\Local\Temp\Cookies\holin@cetelem.solution.weborama[2].txt
C:\Users\Holin\AppData\Local\Temp\Cookies\holin@bs.serving-sys[2].txt
C:\Users\Holin\AppData\Local\Temp\Cookies\holin@weborama[1].txt
C:\Users\Holin\AppData\Local\Temp\Cookies\holin@serving-sys[1].txt
C:\Users\Holin\AppData\Local\Temp\Cookies\holin@atdmt[2].txt
C:\Users\Holin\AppData\Roaming\Microsoft\Windows\Cookies\Low\holin@zedo[1].txt
C:\Users\Holin\AppData\Roaming\Microsoft\Windows\Cookies\Low\holin@ad.yieldmanager[2].txt
C:\Users\Holin\AppData\Roaming\Microsoft\Windows\Cookies\Low\holin@doubleclick[1].txt
C:\Users\Holin\AppData\Roaming\Microsoft\Windows\Cookies\Low\holin@adserver.aol[1].txt
C:\Users\Holin\AppData\Roaming\Microsoft\Windows\Cookies\Low\holin@smartadserver[2].txt
C:\Users\Holin\AppData\Roaming\Microsoft\Windows\Cookies\Low\holin@advertising[1].txt
C:\Users\Holin\AppData\Roaming\Microsoft\Windows\Cookies\Low\holin@tradedoubler[1].txt
C:\Users\Holin\AppData\Roaming\Microsoft\Windows\Cookies\Low\holin@ad.zanox[1].txt
C:\Users\Holin\AppData\Roaming\Microsoft\Windows\Cookies\Low\holin@2o7[1].txt
C:\Users\Holin\AppData\Roaming\Microsoft\Windows\Cookies\Low\holin@mediaplex[2].txt
C:\Users\Holin\AppData\Roaming\Microsoft\Windows\Cookies\Low\holin@weborama[1].txt
C:\Users\Holin\AppData\Roaming\Microsoft\Windows\Cookies\Low\holin@cetelem.solution.weborama[2].txt
C:\Users\Holin\AppData\Roaming\Microsoft\Windows\Cookies\Low\holin@ads.sun[1].txt

Trojan.Dropper/Gen
C:\USERS\HOLIN\APPDATA\LOCAL\TEMP\TEMP1_GENPROC.ZIP\GENPROC\OUTIL\CURL.EXE



pour le ccleaner je vient de le faire maintenant




si reste a faire autre chose je le ferais toute a heure je te souhaite bonne nuit et merci

re peut etre le rapport


emoveIT Pro v4 - SE (Build date: 6.6.2008)Quelques dossiers dangereux ont été trouvés sur votre ordinateur. Car bien les raisons cliquez s'il vous plaît sur le bouton de <Scan> pour le processus de scanner complet de tous les trajets et des dossiers dans vous l'ordinateur. Notez : Cela pourrait p
Quelques dossiers dangereux ont été trouvés sur votre ordinateur. Car bien les raisons cliquez s'il vous plaît sur le bouton de <Scan> pour le processus de scanner complet de tous les trajets et des dossiers dans vous l'ordinateur. Notez : Cela pourrait p04/04/2009Quelques dossiers dangereux ont été trouvés sur votre ordinateur. Car bien les raisons cliquez s'il vous plaît sur le bouton de <Scan> pour le processus de scanner complet de tous les trajets et des dossiers dans vous l'ordinateur. Notez : Cela pourrait p14:55:59
Microsoft Windows Vista Home Edition (Build 6000)
Author: Damjan Irgolic
https://www.incodesolutions.com/
support@incodesolutions.com


Course a pied des processus : (8)
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe
C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
C:\Program Files\InCode Solutions\RemoveIT Pro v4 - SE\removeit.exe
C:\Program Files\InCode Solutions\RemoveIT Pro v4 - SE\removeit.exe

Startup files:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\msnmsgr
["C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\hpWirelessAssistant
[%ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe]
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\BDAgent
["C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe"]

Rapport de détail : (57)
Clsid c:\program files\superantispyware\saswinlo.dll[972edede23ac8d59aac0c09799c6f18a][356352]
Clsid C:\Windows\system32\iconcodecservice.dll[08578f3ca5365f896d90ce2bf97fd000][9728]
Proc C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe[4985f3e01d8c953e41967d1982b9ca16][368640]
Proc C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe[af849798eca383184c88ed436cf3efb2][472776]
Proc C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe[241b74792cc295dfdcb7940bbf52b226][677576]
Proc C:\Program Files\InCode Solutions\RemoveIT Pro v4 - SE\removeit.exe[0852da33822cd6d79e71416cc199656d][551424]
Proc C:\Windows\Explorer.EXE[37440d09deae0b672a04dccf7abf06be][2923520]
Proc C:\Windows\system32\Dwm.exe[e87b968f3d49117445893eb0503fe34f][83456]
Proc C:\Windows\system32\taskeng.exe[1226e9fae5b8508801ec974e3c9d9c14][166400]
RegRun c:\program files\bitdefender\bitdefender 2008\bdagent.exe[4985f3e01d8c953e41967d1982b9ca16][368640]
RegRun c:\program files\windows live\messenger\msnmsgr.exe [35b9fa77b73358d9063cd61aa3d83ee8][3885408]
Service c:\progra~1\symantec\liveup~1\lucoms~1.exe[a97eeb81f05bce3d7aa6c81f04ef39a4][2999664]
Service c:\program files\bitdefender\bitdefender 2008\vsserv.exe [09a889886a2e34b61fdc5a0b4b183f0f][1261568]
Service c:\program files\common files\bitdefender\bitdefender communicator\xcommsvr.exe [979f6c6a2a1e31e7bcc6d5d527c98927][86016]
Service c:\program files\common files\bitdefender\bitdefender update service\livesrv.exe [47c35f4a0ad07c753e125c4ee97c26c5][1179648]
Service c:\program files\common files\installshield\driver\1050\intel 32\idrivert.exe[6f95324909b502e2651442c1548ab12f][73728]
Service c:\program files\common files\lightscribe\lssrvc.exe[559c9b7800fac92fc515cd0003d7c631][61440]
Service c:\program files\common files\microsoft shared\office12\odserv.exe[e54aa592a65f317390eee386a8821692][443776]
Service c:\program files\common files\microsoft shared\source engine\ose.exe[5a432a042dae460abe7199b758e8606c][145184]
Service c:\program files\common files\roxio shared\9.0\sharedcom\roxmediadb9.exe[08fb7d968805001c7adcbb14b0651fa2][880640]
Service c:\program files\common files\surething shared\stllssvr.exe[a9a23c8af361f7a93fd632e91a8c346f][74656]
Service c:\program files\common files\symantec shared\pif\{b8e1dd85-8582-4c61-b58f-2f227fca9a08}\pifsvc.exe [2d1389e05a807d956829f44bd4b60389][583048]
Service c:\program files\hewlett-packard\hp health check\hphc_service.exe[2ceeb349216febd91a907013d4abcff7][62984]
Service c:\program files\hewlett-packard\hp quick launch buttons\com4qlb.exe[a5aaa656403e5e7afa9647ce73dbf944][110592]
Service c:\program files\hewlett-packard\shared\hpqwmiex.exe[04c1dcbb226c6ae647b794833ce3ceb6][135168]
Service c:\program files\hp\quickplay\kernel\tv\clcapsvc.exe[dbafc6734c054feef9087754bd80f847][262243]
Service c:\program files\hp\quickplay\kernel\tv\clsched.exe[e67f8f036fd882e4ab62501c0d45b536][106593]
Service c:\program files\intel\intel matrix storage manager\iaantmon.exe[582f2d900a3ac34c98fbdc2c0abef6b9][355096]
Service c:\program files\microsoft\search enhancement pack\seaport\seaport.exe[d358e077a0a05d9b12da22d137ee8464][226656]
Service c:\program files\symantec\liveupdate\aluschedulersvc.exe[b5d974c1fd078a68c7536c561b031d39][554352]
Service c:\program files\windows live\family safety\fsssvc.exe[9b1622ebeb31b3411b13382ffcb8737d][533360]
Service c:\program files\windows media player\wmpnetwk.exe[acb2e63d50157e3ea7140f29d9e76a48][895488]
Service c:\windows\ehome\ehrecvr.exe[b4580122b0a7b263b6ee9acba69c8013][291840]
Service c:\windows\ehome\ehsched.exe[ad1870c8e5d6dd340c829e6074bf3c3f][131072]
Service c:\windows\microsoft.net\framework\v2.0.50727\mscorsvw.exe[d3bf342f47996e18490970fcfb8126a8][59392]
Service c:\windows\microsoft.net\framework\v3.0\windows communication foundation\infocard.exe[6d1d3cab85ba0c63cb83296a8a1825f9][741376]
Service c:\windows\microsoft.net\framework\v3.0\windows communication foundation\smsvchost.exe[b418382de04ff58567aa07a2b66b2332][122880]
Service c:\windows\microsoft.net\framework\v3.0\wpf\presentationfontcache.exe[7ef57375636991f794bf40b522a8e7ef][36864]
Service c:\windows\servicing\trustedinstaller.exe[34e388a395fedba1d0511ed39bbf4074][27136]
Service c:\windows\system32\alg.exe[e69fb0e3112c40fdc0ef7d21a52dc951][58880]
Service c:\windows\system32\dfsr.exe[e0d584aa76c7d845ba9f3a788260528f][2089984]
Service c:\windows\system32\dllhost.exe [be01e566d1f569aab32d0335613e1eea][7168]
Service c:\windows\system32\locator.exe[5123f83cbc4349d065534eeb6bbdc42b][7680]
Service c:\windows\system32\lsass.exe[6a0e382e74280e4cc0df17fe2661d003][7680]
Service c:\windows\system32\msdtc.exe[bc64a92d821efea8bab8e8caf1b668bc][106496]
Service c:\windows\system32\searchindexer.exe [5de40982e3ae45dc00586a93637b351b][287744]
Service c:\windows\system32\slsvc.exe[a1dcd30534835cb67733ad00175125a6][2605568]
Service c:\windows\system32\snmptrap.exe[2a146a055b4401c16ee62d18b8e2a032][12800]
Service c:\windows\system32\spoolsv.exe[da612ef2556776df2630b68bf2d48935][124928]
Service c:\windows\system32\svchost.exe [10da15933d582d2fedcf705efe394b09][22016]
Service c:\windows\system32\ui0detect.exe[24a333f4f14dcfb6ff6d5a1b9e5d79dd][35840]
Service c:\windows\system32\vds.exe[c9d0bafee0d0a2681f048ca61bc0da96][392704]
Service c:\windows\system32\vssvc.exe[e0e29d9ef2524abd11749c7c2fd7f607][924160]
Service c:\windows\system32\wbem\wmiapsrv.exe[a279323bee5fffafda222910bce92132][137216]
Startup c:\programdata\microsoft\windows\start menu\programs\startup\desktop.ini[7f1698bab066b764a314a589d338daae][174]
Startup c:\users\holin\appdata\roaming\microsoft\windows\start menu\programs\startup\desktop.ini[7f1698bab066b764a314a589d338daae][174]
System.ini c:\windows\system32\svchost.exe [10da15933d582d2fedcf705efe394b09][22016]

Startup folder: (2)
Startup name: desktop.ini
Command: C:\Users\Holin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
Startup name: desktop.ini
Command: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini

Win.ini Startup: (1)
Path: No additional driver found!

Win.ini Startup: (1)
Path: No additional driver found!

Keyboard drivers: (1)
Name: No Keyboard Filter driver found!

Services: (146)
Service Name: Accès du périphérique d'interface utilisateur [Running],
Path: C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Acquisition d'image Windows (WIA) [Running],
Path: C:\Windows\system32\svchost.exe -k imgsvc
Service Name: Agent de protection d’accès réseau [Stopped],
Path: C:\Windows\System32\svchost.exe -k NetworkService
Service Name: Agent de stratégie IPsec [Running],
Path: C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
Service Name: Appel de procédure distante (RPC) [Running],
Path: C:\Windows\system32\svchost.exe -k rpcss
Service Name: Application système COM+ [Stopped],
Path: C:\Windows\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}
Service Name: Assistance IP [Running],
Path: C:\Windows\System32\svchost.exe -k NetSvcs
Service Name: Assistance NetBIOS sur TCP/IP [Running],
Path: C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted
Service Name: Audio Windows [Running],
Path: C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
Service Name: BitDefender Communicator [Running],
Path: "C:\Program Files\Common Files\BitDefender\BitDefender Communicator\xcommsvr.exe" /service
Service Name: BitDefender Desktop Update Service [Running],
Path: "C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe" /service
Service Name: BitDefender Threat Scanner [Running],
Path: C:\Windows\System32\svchost.exe -kbdx
Service Name: BitDefender Virus Shield [Running],
Path: "C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe" /service
Service Name: Cache de police de Windows Presentation Foundation 3.0.0.0 [Stopped],
Path: C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
Service Name: Carte à puce [Stopped],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Carte de performance WMI [Stopped],
Path: C:\Windows\system32\wbem\WmiApSrv.exe
Service Name: Centre de sécurité [Running],
Path: C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
Service Name: Cliché instantané de volume [Stopped],
Path: C:\Windows\system32\vssvc.exe
Service Name: Client de stratégie de groupe [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Client de suivi de lien distribué [Running],
Path: C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Client DHCP [Running],
Path: C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted
Service Name: Client DNS [Running],
Path: C:\Windows\system32\svchost.exe -k NetworkService
Service Name: Collecteur d'événements de Windows [Stopped],
Path: C:\Windows\system32\svchost.exe -k NetworkService
Service Name: Com4Qlb [Stopped],
Path: "C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe"
Service Name: Configuration automatique de réseau câblé [Stopped],
Path: C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Configuration des services Terminal Server [Stopped],
Path: C:\Windows\System32\svchost.exe -k netsvcs
Service Name: Connaissance des emplacements réseau [Running],
Path: C:\Windows\System32\svchost.exe -k NetworkService
Service Name: Connexions réseau [Running],
Path: C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Contrôle parental [Stopped],
Path: C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted
Service Name: Coordinateur de transactions distribuées [Stopped],
Path: C:\Windows\System32\msdtc.exe
Service Name: CyberLink Background Capture Service (CBCS) [Running],
Path: "C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe"
Service Name: CyberLink Task Scheduler (CTS) [Stopped],
Path: "C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe"
Service Name: Découverte SSDP [Running],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Détection de services interactifs [Stopped],
Path: C:\Windows\system32\UI0Detect.exe
Service Name: Détection matériel noyau [Running],
Path: C:\Windows\System32\svchost.exe -k netsvcs
Service Name: Disque virtuel [Stopped],
Path: C:\Windows\System32\vds.exe
Service Name: Emplacement protégé [Stopped],
Path: C:\Windows\system32\lsass.exe
Service Name: Énumérateur de bus IP PnP-X [Stopped],
Path: C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Expérience audio-vidéo haute qualité Windows [Stopped],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Expérience d’application [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Explorateur d'ordinateurs [Running],
Path: C:\Windows\System32\svchost.exe -k netsvcs
Service Name: Fournisseur de cliché instantané de logiciel Microsoft [Stopped],
Path: C:\Windows\System32\svchost.exe -k swprv
Service Name: Générateur de points de terminaison du service Audio Windows [Running],
Path: C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Gestion à distance de Windows (Gestion WSM) [Stopped],
Path: C:\Windows\System32\svchost.exe -k NetworkService
Service Name: Gestion des clés et des certificats d'intégrité [Stopped],
Path: C:\Windows\System32\svchost.exe -k netsvcs
Service Name: Gestionnaire de comptes de sécurité [Running],
Path: C:\Windows\system32\lsass.exe
Service Name: Gestionnaire de connexion automatique d'accès distant [Stopped],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Gestionnaire de connexions d'accès distant [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Gestionnaire de sessions du Gestionnaire de fenêtrage [Running],
Path: C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Gestionnaire d'identité réseau homologue [Stopped],
Path: C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
Service Name: Groupement de mise en réseau de pairs [Stopped],
Path: C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
Service Name: Horloge Windows [Running],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Hôte de périphérique UPnP [Running],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Hôte du fournisseur de découverte de fonctions [Running],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Hôte système de diagnostics [Running],
Path: C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: HP Health Check Service [Running],
Path: "C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe"
Service Name: hpqwmiex [Running],
Path: C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
Service Name: Informations d'application [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Infrastructure de gestion Windows [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: InstallDriver Table Manager [Stopped],
Path: "C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe"
Service Name: Intel(R) Matrix Storage Event Monitor [Running],
Path: C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
Service Name: Interruption SNMP [Stopped],
Path: C:\Windows\System32\snmptrap.exe
Service Name: Isolation de clé CNG [Running],
Path: C:\Windows\system32\lsass.exe
Service Name: Journal d’événements Windows [Running],
Path: C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
Service Name: Journaux & alertes de performance [Stopped],
Path: C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork
Service Name: Lanceur de processus serveur DCOM [Running],
Path: C:\Windows\system32\svchost.exe -k DcomLaunch
Service Name: Lanceur des services Windows Media Center [Stopped],
Path: C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
Service Name: Licence du logiciel [Running],
Path: C:\Windows\system32\SLsvc.exe
Service Name: LightScribeService Direct Disc Labeling Service [Running],
Path: "C:\Program Files\Common Files\LightScribe\LSSrvc.exe"
Service Name: LiveUpdate [Stopped],
Path: "C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE"
Service Name: LiveUpdate Notice Service [Running],
Path: "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" /m "C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PifEng.dll"
Service Name: LiveUpdate Notice Service Ex [Stopped],
Path: "c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe" /h ccCommon
Service Name: Localisateur d'appels de procédure distante (RPC) [Stopped],
Path: C:\Windows\system32\locator.exe
Service Name: Mappage de découverte de topologie de la couche de liaison [Stopped],
Path: C:\Windows\System32\svchost.exe -k LocalService
Service Name: Microsoft .NET Framework NGEN v2.0.50727_X86 [Stopped],
Path: C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
Service Name: Microsoft Office Diagnostics Service [Stopped],
Path: "C:\Program Files\Common Files\Microsoft Shared\OFFICE12\ODSERV.EXE"
Service Name: Modules de génération de clés IKE et AuthIP [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Moteur de filtrage de base [Running],
Path: C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
Service Name: Netlogon [Stopped],
Path: C:\Windows\system32\lsass.exe
Service Name: Office Source Engine [Stopped],
Path: "C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE"
Service Name: Ouverture de session secondaire [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Pare-feu Windows [Running],
Path: C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
Service Name: Partage de connexion Internet (ICS) [Stopped],
Path: C:\Windows\System32\svchost.exe -k netsvcs
Service Name: Planificateur de classes multimédias [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Planificateur de tâches [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Planificateur LiveUpdate automatique [Running],
Path: "C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe"
Service Name: Plug-and-Play [Running],
Path: C:\Windows\system32\svchost.exe -k DcomLaunch
Service Name: Prise en charge de l’application Rapports et solutions aux problèmes du Panneau de configuration [Stopped],
Path: C:\Windows\System32\svchost.exe -k netsvcs
Service Name: Programme d’installation de modules Windows [Stopped],
Path: C:\Windows\servicing\TrustedInstaller.exe
Service Name: Propagation du certificat [Stopped],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Protocole de résolution de noms d'homologues [Stopped],
Path: C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
Service Name: Protocole EAP (Extensible Authentication Protocol) [Running],
Path: C:\Windows\System32\svchost.exe -k netsvcs
Service Name: Publication des ressources de découverte de fonctions [Running],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Recherche Windows [Running],
Path: C:\Windows\system32\SearchIndexer.exe /Embedding
Service Name: Registre à distance [Stopped],
Path: C:\Windows\system32\svchost.exe -k regsvc
Service Name: Réplication DFS [Stopped],
Path: C:\Windows\system32\DFSR.exe
Service Name: Routage et accès distant [Stopped],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: RoxMediaDB9 [Stopped],
Path: "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe"
Service Name: Sauvegarde Windows [Stopped],
Path: C:\Windows\system32\svchost.exe -k SDRSVC
Service Name: SeaPort [Running],
Path: "C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe"
Service Name: Serveur [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Serveur de priorités des threads [Stopped],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Service de configuration automatique WLAN [Running],
Path: C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Service de découverte automatique de Proxy Web pour les services HTTP Windows [Stopped],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Service de l’Assistant Compatibilité des programmes [Running],
Path: C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Service de la passerelle de la couche Application [Stopped],
Path: C:\Windows\System32\alg.exe
Service Name: Service de notification d’événements système [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Service de notification de l’interface utilisateur SL [Stopped],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Service de partage de ports Net.Tcp [Stopped],
Path: "C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe"
Service Name: Service de planification Windows Media Center [Stopped],
Path: C:\Windows\ehome\ehsched.exe
Service Name: Service de profil utilisateur [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Service de publication des noms d’ordinateurs PNRP [Stopped],
Path: C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
Service Name: Service de rapport d'erreurs Windows [Running],
Path: C:\Windows\System32\svchost.exe -k WerSvcGroup
Service Name: Service de réception Windows Media Center [Stopped],
Path: C:\Windows\ehome\ehRecvr.exe
Service Name: Service de stratégie de diagnostic [Running],
Path: C:\Windows\System32\svchost.exe -k LocalServiceNoNetwork
Service Name: Service de transfert intelligent en arrière-plan [Running],
Path: C:\Windows\System32\svchost.exe -k netsvcs
Service Name: Service Énumérateur d’appareil mobile [Running],
Path: C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Service hôte WDIServiceHost [Stopped],
Path: C:\Windows\System32\svchost.exe -k wdisvc
Service Name: Service Initiateur iSCSI de Microsoft [Stopped],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Service Interface du magasin réseau [Running],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Service KtmRm pour Distributed Transaction Coordinator [Running],
Path: C:\Windows\System32\svchost.exe -k NetworkService
Service Name: Service Liste des réseaux [Running],
Path: C:\Windows\System32\svchost.exe -k LocalService
Service Name: Service Panneau de saisie Tablet PC [Running],
Path: C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Service Partage réseau du Lecteur Windows Media [Stopped],
Path: "C:\Program Files\Windows Media Player\wmpnetwk.exe"
Service Name: Service ReadyBoost [Running],
Path: C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Service Windows Media Center Extender [Stopped],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Services de base de module de plateforme sécurisée [Stopped],
Path: C:\Windows\System32\svchost.exe -k LocalService
Service Name: Services de chiffrement [Running],
Path: C:\Windows\system32\svchost.exe -k NetworkService
Service Name: Services Terminal Server [Running],
Path: C:\Windows\System32\svchost.exe -k NetworkService
Service Name: Spouleur d'impression [Running],
Path: C:\Windows\System32\spoolsv.exe
Service Name: Station de travail [Running],
Path: C:\Windows\System32\svchost.exe -k LocalService
Service Name: stllssvr [Stopped],
Path: "C:\Program Files\Common Files\SureThing Shared\stllssvr.exe"
Service Name: Stratégie de retrait de la carte à puce [Stopped],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Service Name: Superfetch [Running],
Path: C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Système de couleurs Windows [Stopped],
Path: C:\Windows\system32\svchost.exe -k wcssvc
Service Name: Système d'événement COM+ [Running],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Téléphonie [Running],
Path: C:\Windows\System32\svchost.exe -k NetworkService
Service Name: Thèmes [Running],
Path: C:\Windows\System32\svchost.exe -k netsvcs
Service Name: WebClient [Running],
Path: C:\Windows\system32\svchost.exe -k LocalService
Service Name: Windows CardSpace [Stopped],
Path: "C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe"
Service Name: Windows Connect Now - Registre de configuration [Stopped],
Path: C:\Windows\System32\svchost.exe -k LocalService
Service Name: Windows Defender [Running],
Path: C:\Windows\System32\svchost.exe -k secsvcs
Service Name: Windows Driver Foundation - Infrastructure de pilote mode-utilisateur [Running],
Path: C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted
Service Name: Windows Installer [Stopped],
Path: C:\Windows\system32\msiexec /V
Service Name: Windows Live Contrôle parental [Stopped],
Path: "C:\Program Files\Windows Live\Family Safety\fsssvc.exe"
Service Name: Windows Update [Running],
Path: C:\Windows\system32\svchost.exe -k netsvcs
Quelques dossiers dangereux ont été trouvés sur votre ordinateur. Car bien les raisons cliquez s'il vous plaît sur le bouton de <Scan> pour le processus de scanner complet de tous les trajets et des dossiers dans vous l'ordinateur. Notez : Cela pourrait p

le scan ? c'est bon


emoveIT Pro v4 - SE (Build date: 6.6.2008)Quelques dossiers dangereux ont été trouvés sur votre ordinateur. Car bien les raisons cliquez s'il vous plaît sur le bouton de <Scan> pour le processus de scanner complet de tous les trajets et des dossiers dans vous l'ordinateur. Notez : Cela pourrait p
Quelques dossiers dangereux ont été trouvés sur votre ordinateur. Car bien les raisons cliquez s'il vous plaît sur le bouton de <Scan> pour le processus de scanner complet de tous les trajets et des dossiers dans vous l'ordinateur. Notez : Cela pourrait p04/04/2009Quelques dossiers dangereux ont été trouvés sur votre ordinateur. Car bien les raisons cliquez s'il vous plaît sur le bouton de <Scan> pour le processus de scanner complet de tous les trajets et des dossiers dans vous l'ordinateur. Notez : Cela pourrait p15:49:16
Microsoft Windows Vista Home Edition (Build 6000)
Author: Damjan Irgolic
https://www.incodesolutions.com/
support@incodesolutions.com



Rapport de détail : (55)
Clsid c:\program files\superantispyware\saswinlo.dll[972edede23ac8d59aac0c09799c6f18a][356352]
Clsid C:\Windows\system32\iconcodecservice.dll[08578f3ca5365f896d90ce2bf97fd000][9728]
Proc C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe[4985f3e01d8c953e41967d1982b9ca16][368640]
Proc C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe[241b74792cc295dfdcb7940bbf52b226][677576]
Proc C:\Program Files\InCode Solutions\RemoveIT Pro v4 - SE\removeit.exe[0852da33822cd6d79e71416cc199656d][551424]
Proc C:\Windows\Explorer.EXE[37440d09deae0b672a04dccf7abf06be][2923520]
Proc C:\Windows\system32\Dwm.exe[e87b968f3d49117445893eb0503fe34f][83456]
Proc C:\Windows\system32\NOTEPAD.EXE[ff7f14fda901090e337488a1900e3660][151040]
Proc C:\Windows\system32\taskeng.exe[1226e9fae5b8508801ec974e3c9d9c14][166400]
Service c:\progra~1\symantec\liveup~1\lucoms~1.exe[a97eeb81f05bce3d7aa6c81f04ef39a4][2999664]
Service c:\program files\bitdefender\bitdefender 2008\vsserv.exe [09a889886a2e34b61fdc5a0b4b183f0f][1261568]
Service c:\program files\common files\bitdefender\bitdefender communicator\xcommsvr.exe [979f6c6a2a1e31e7bcc6d5d527c98927][86016]
Service c:\program files\common files\bitdefender\bitdefender update service\livesrv.exe [47c35f4a0ad07c753e125c4ee97c26c5][1179648]
Service c:\program files\common files\installshield\driver\1050\intel 32\idrivert.exe[6f95324909b502e2651442c1548ab12f][73728]
Service c:\program files\common files\lightscribe\lssrvc.exe[559c9b7800fac92fc515cd0003d7c631][61440]
Service c:\program files\common files\microsoft shared\office12\odserv.exe[e54aa592a65f317390eee386a8821692][443776]
Service c:\program files\common files\microsoft shared\source engine\ose.exe[5a432a042dae460abe7199b758e8606c][145184]
Service c:\program files\common files\roxio shared\9.0\sharedcom\roxmediadb9.exe[08fb7d968805001c7adcbb14b0651fa2][880640]
Service c:\program files\common files\surething shared\stllssvr.exe[a9a23c8af361f7a93fd632e91a8c346f][74656]
Service c:\program files\common files\symantec shared\pif\{b8e1dd85-8582-4c61-b58f-2f227fca9a08}\pifsvc.exe [2d1389e05a807d956829f44bd4b60389][583048]
Service c:\program files\hewlett-packard\hp health check\hphc_service.exe[2ceeb349216febd91a907013d4abcff7][62984]
Service c:\program files\hewlett-packard\hp quick launch buttons\com4qlb.exe[a5aaa656403e5e7afa9647ce73dbf944][110592]
Service c:\program files\hewlett-packard\shared\hpqwmiex.exe[04c1dcbb226c6ae647b794833ce3ceb6][135168]
Service c:\program files\hp\quickplay\kernel\tv\clcapsvc.exe[dbafc6734c054feef9087754bd80f847][262243]
Service c:\program files\hp\quickplay\kernel\tv\clsched.exe[e67f8f036fd882e4ab62501c0d45b536][106593]
Service c:\program files\intel\intel matrix storage manager\iaantmon.exe[582f2d900a3ac34c98fbdc2c0abef6b9][355096]
Service c:\program files\microsoft\search enhancement pack\seaport\seaport.exe[d358e077a0a05d9b12da22d137ee8464][226656]
Service c:\program files\symantec\liveupdate\aluschedulersvc.exe[b5d974c1fd078a68c7536c561b031d39][554352]
Service c:\program files\windows live\family safety\fsssvc.exe[9b1622ebeb31b3411b13382ffcb8737d][533360]
Service c:\program files\windows media player\wmpnetwk.exe[acb2e63d50157e3ea7140f29d9e76a48][895488]
Service c:\windows\ehome\ehrecvr.exe[b4580122b0a7b263b6ee9acba69c8013][291840]
Service c:\windows\ehome\ehsched.exe[ad1870c8e5d6dd340c829e6074bf3c3f][131072]
Service c:\windows\microsoft.net\framework\v2.0.50727\mscorsvw.exe[d3bf342f47996e18490970fcfb8126a8][59392]
Service c:\windows\microsoft.net\framework\v3.0\windows communication foundation\infocard.exe[6d1d3cab85ba0c63cb83296a8a1825f9][741376]
Service c:\windows\microsoft.net\framework\v3.0\windows communication foundation\smsvchost.exe[b418382de04ff58567aa07a2b66b2332][122880]
Service c:\windows\microsoft.net\framework\v3.0\wpf\presentationfontcache.exe[7ef57375636991f794bf40b522a8e7ef][36864]
Service c:\windows\servicing\trustedinstaller.exe[34e388a395fedba1d0511ed39bbf4074][27136]
Service c:\windows\system32\alg.exe[e69fb0e3112c40fdc0ef7d21a52dc951][58880]
Service c:\windows\system32\dfsr.exe[e0d584aa76c7d845ba9f3a788260528f][2089984]
Service c:\windows\system32\dllhost.exe [be01e566d1f569aab32d0335613e1eea][7168]
Service c:\windows\system32\locator.exe[5123f83cbc4349d065534eeb6bbdc42b][7680]
Service c:\windows\system32\lsass.exe[6a0e382e74280e4cc0df17fe2661d003][7680]
Service c:\windows\system32\msdtc.exe[bc64a92d821efea8bab8e8caf1b668bc][106496]
Service c:\windows\system32\searchindexer.exe [5de40982e3ae45dc00586a93637b351b][287744]
Service c:\windows\system32\slsvc.exe[a1dcd30534835cb67733ad00175125a6][2605568]
Service c:\windows\system32\snmptrap.exe[2a146a055b4401c16ee62d18b8e2a032][12800]
Service c:\windows\system32\spoolsv.exe[da612ef2556776df2630b68bf2d48935][124928]
Service c:\windows\system32\svchost.exe [10da15933d582d2fedcf705efe394b09][22016]
Service c:\windows\system32\ui0detect.exe[24a333f4f14dcfb6ff6d5a1b9e5d79dd][35840]
Service c:\windows\system32\vds.exe[c9d0bafee0d0a2681f048ca61bc0da96][392704]
Service c:\windows\system32\vssvc.exe[e0e29d9ef2524abd11749c7c2fd7f607][924160]
Service c:\windows\system32\wbem\wmiapsrv.exe[a279323bee5fffafda222910bce92132][137216]
Startup c:\programdata\microsoft\windows\start menu\programs\startup\desktop.ini[7f1698bab066b764a314a589d338daae][174]
Startup c:\users\holin\appdata\roaming\microsoft\windows\start menu\programs\startup\desktop.ini[7f1698bab066b764a314a589d338daae][174]
System.ini c:\windows\system32\svchost.exe [10da15933d582d2fedcf705efe394b09][22016]

Keyboard drivers: (1)

bonjour je pense , par contre pour holin ,l'ordi est sur un autre prenom et j'ai fait comme tu ma dit et rien ne change ???

je fait autre chose a+

ok pour l'instant je n'est pas son ordi portable , a tal et bonne soirée

bonjour voici rien de grave je pense c'est quoi ce 8 VULNERABILITIES


ANALYSIS: 2009-04-05 11:26:38
PROTECTIONS: 4
MALWARE: 4
SUSPECTS: 0
;***********************************************************************************************************************************************************************************
PROTECTIONS
Description Version Active Updated
;===================================================================================================================================================================================
Bitdefender Antivirus 8.0 Yes Yes
BitDefender AntiSpam 8.0 No Yes
Windows Defender 1.1.1505.0 No Yes
SUPERAntiSpyware 4, 26, 0, 1000 No Yes
;===================================================================================================================================================================================
MALWARE
Id Description Type Active Severity Disinfectable Disinfected Location
;===================================================================================================================================================================================
00139061 Cookie/Doubleclick TrackingCookie No 0 Yes No C:\Users\Holin\AppData\Roaming\Microsoft\Windows\Cookies\Low\holin@doubleclick[1].txt
00139064 Cookie/Atlas DMT TrackingCookie No 0 Yes No C:\Users\Holin\AppData\Roaming\Microsoft\Windows\Cookies\holin@atdmt[2].txt
00168090 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Users\Holin\AppData\Roaming\Microsoft\Windows\Cookies\holin@serving-sys[1].txt
00168093 Cookie/Serving-sys TrackingCookie No 0 Yes No C:\Users\Holin\AppData\Roaming\Microsoft\Windows\Cookies\holin@bs.serving-sys[2].txt
;===================================================================================================================================================================================
SUSPECTS
Sent Location ��W��g39

;===================================================================================================================================================================================
;===================================================================================================================================================================================
VULNERABILITIES
Id Severity Description ��W��g39

;===================================================================================================================================================================================
184379 MEDIUM MS08-001 ��W��g39

182048 HIGH MS07-069 ��W��g39

182045 HIGH MS07-066 ��W��g39

182043 HIGH MS07-064 ��W��g39

176382 HIGH MS07-057 ��W��g39

170906 HIGH MS07-045 ��W��g39

164913 HIGH MS07-033 ��W��g39

160623 HIGH MS07-027 ��W��g39

;===================================================================================================================================================================================

bonjour voici le rapport

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:28:15, on 03/04/2009
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16809)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe
C:\Program Files\Adobe\Reader 9.0\Reader\reader_sl.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Hewlett-Packard\Shared\HpqToaster.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.orange.fr/portail
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ie.redirect.hp.com/...
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = https://www.bing.com/?toHttps=1&redig=5FC791212101479BAFBE1A679848B1AF
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://ie.redirect.hp.com/...
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2008\IEToolbar.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [hpWirelessAssistant] %ProgramFiles%\Hewlett-Packard\HP Wireless Assistant\HPWAMain.exe
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\BitDefender\BitDefender 2008\bdagent.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICE LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICE RÉSEAU')
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - http://dl8-cdn-01.sun.com/s/ESD5/JSCDL/jre/6u11-b90/jinstall-6u11-windows-i586-jc.cab?e=1232813647667&h=573b1f425fafec3701adecb489737770/&filename=jinstall-6u11-windows-i586-jc.cab
O16 - DPF: {D0C0F75C-683A-4390-A791-1ACFD5599AB8} (Oberon Flash Game Host) - http://jeuxenligne.orange.fr/Gameshell/GameHost/1.0/OberonGameHost.cab
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe
O23 - Service: Com4Qlb - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\Com4Qlb.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:\Program Files\Intel\Intel Matrix Storage Manager\IAANTMon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - BitDefender SRL - C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: Planificateur LiveUpdate automatique - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - BitDefender S.R.L. - C:\Program Files\BitDefender\BitDefender 2008\vsserv.exe
O23 - Service: BitDefender Communicator (XCOMM) - BitDefender - C:\Program Files\Common Files\BitDefender\BitDefender Communicator\xcommsvr.exe

j'ai un grave problème je n'arrive plus a ouvrir internet mozilla ou explorer

message

impossible de lancer le composant de sécurité de l'application. la cause la plus probable est un problème avec les fichiers du répertoire des profils de votre

application veuillez vérifier que ce répertoire n'a pas de restritions de lecture/écriture et que votre disque dur n'est pas plein ou pret de l'etre. il est

recommandé de quiter l'application pour résoutre ce problème. si vous continuez cette session votre application risque d'avoir un

comportement incorrect quant a l'utilisation du système de sécurité


que faire ???? MERCI A VOUS

AUCUNE SOLUTION JE NOTE RESOLU

je peut meme pas telecharger

slt peut on restaurer a une date avant par ex: samedi si c-est possible comment faire


j'ai supprimer mozilla et maintenant j'arrive plus a le telecharger meme autre chose

c'est arriver cette a-midi a-

bonjour je suis entrain de reformater mon pc portable en parametre usine , je pense que c'est mieux du moins de l"espere a tal et bonne soirée

bonsoir voila j'ai fini de formaté le pc de ma fille tout est ok , je te remercie pour ton aide bonne soirée a bientot