Dom28130

Bonsoir, J'ai trouvé en m'inspirant d'un internaute sur le forum qui disait que le son venait de son pare-feux. En fait c'est mon logiciel antispyware LookNStop qui sonnait à chaque tentative d'intrusion. Cordialement. Dom28130 Bonjour, Sorte de petit carillon qui sonne de temps en temps, à peu près comme une touche de clavier bloqué. Ne serait ce pas un spyware ou autre ??? Quelqu'un a t il une idée. J'ai scanné avec 5 anti spyware différents, 1 anti virus.. Rien n'y fait. Dans l'attente. Cordialement. Dom28130 Petite précision concernant ce petit carillon intempestif, ci joint rapport de GIANT AntiSpyware qui a été le seul qui a détecter ce malware. A noter que quelque soit mon choix : Destruction ou Mise en Quarantaine, celui revient toujours. A t il un lien de cause à effet ???? Merci de m'aider. 09/06/2009 23:09:52::------------------------------------------------------------------ 09/06/2009 23:09:52::Initializing Clean - (ScanID: 0D757813-0393-485A-9D86-5DDE5D) 09/06/2009 23:09:52::Clean Threat Surf Player (ID:11831) 09/06/2009 23:09:53::Removing file c:\windows\system32\l3codecx.acm 09/06/2009 23:09:53::Disable file c:\windows\system32\l3codecx.acm and quarantine to C:\Program Files\GIANT Company Software\GIANT AntiSpyware\Quarantine\8B36C3DD-6696-431A-A1ED-990838\9DDABF9D-4F29-4407-8001-E71648 09/06/2009 23:09:53::Clean Threat Surf Player (ID:11831) Complete 09/06/2009 23:09:53::Unititializing Clean 09/06/2009 23:09:53::------------------------------------------------------------------ 09/06/2009 23:15:08::------------------------------------------------------------------ 09/06/2009 23:15:08::Initializing Clean - (ScanID: 69906E28-945F-4DB9-8748-0ED6E5) 09/06/2009 23:15:08::Clean Threat Possible Browser Hijack (ID:14831) 09/06/2009 23:15:08::Run custom cleaner Internet Explorer Start Page: http://www.orange.fr/ (148311) 09/06/2009 23:15:08::Restore IE URL settings 09/06/2009 23:15:09::Clean Threat Possible Browser Hijack (ID:14831) Complete 09/06/2009 23:15:09::Unititializing Clean 09/06/2009 23:15:09::------------------------------------------------------------------ 10/06/2009 10:39:46::------------------------------------------------------------------ 10/06/2009 10:39:46::Initializing Clean - (ScanID: BC6101AA-D853-4BAB-B6C2-639649) 10/06/2009 10:39:46::Remove Threat (ID:14897) 10/06/2009 10:39:46::Clean Threat WinPCap (ID:14897) 10/06/2009 10:39:47::Removing file c:\program files\utorrent turbo booster\packet.dll 10/06/2009 10:39:51::Disable file c:\program files\utorrent turbo booster\packet.dll and quarantine to C:\Program Files\GIANT Company Software\GIANT AntiSpyware\Quarantine\47AFEEC4-C323-4842-A8B1-FB8CF2\B1C3FF1C-9CB9-4583-8E2A-7A1466 10/06/2009 10:39:51::Clean Threat WinPCap (ID:14897) Complete 10/06/2009 10:39:51::Remove Threat (ID:14897) Complete 10/06/2009 10:39:51::Remove Threat (ID:5494) 10/06/2009 10:39:51::Clean Threat Fresh Devices Software (ID:5494) 10/06/2009 10:39:51::Removing file c:\program files\freshdevices\freshdiagnose\fresh.tmp 10/06/2009 10:39:51::Disable file c:\program files\freshdevices\freshdiagnose\fresh.tmp and quarantine to C:\Program Files\GIANT Company Software\GIANT AntiSpyware\Quarantine\4F885CD0-D523-43DC-9D31-F2B152\B6D59E48-B3B3-46F5-909E-0E1839 10/06/2009 10:39:51::Delete folder c:\program files\freshdevices\ 10/06/2009 10:39:59::Clean Threat Fresh Devices Software (ID:5494) Complete 10/06/2009 10:39:59::Remove Threat (ID:5494) Complete 10/06/2009 10:39:59::Remove Threat (ID:14831) 10/06/2009 10:39:59::Clean Threat Possible Browser Hijack (ID:14831) 10/06/2009 10:40:00::Run custom cleaner Internet Explorer Start Page: http://www.orange.fr/ (148311) 10/06/2009 10:40:00::Restore IE URL settings 10/06/2009 10:40:00::Clean Threat Possible Browser Hijack (ID:14831) Complete 10/06/2009 10:40:00::Remove Threat (ID:14831) Complete 10/06/2009 10:40:01::Unititializing Clean 10/06/2009 10:40:01::------------------------------------------------------------------ 10/06/2009 11:38:08::------------------------------------------------------------------ 10/06/2009 11:38:08::Initializing Clean - (ScanID: 88D0570C-8E71-4344-A796-DEA225) 10/06/2009 11:38:08::Remove Threat (ID:14831) 10/06/2009 11:38:08::Clean Threat Possible Browser Hijack (ID:14831) 10/06/2009 11:38:09::Run custom cleaner Internet Explorer Start Page: http://www.orange.fr/ (148311) 10/06/2009 11:38:09::Restore IE URL settings 10/06/2009 11:38:09::Clean Threat Possible Browser Hijack (ID:14831) Complete 10/06/2009 11:38:09::Remove Threat (ID:14831) Complete 10/06/2009 11:38:09::Unititializing Clean 10/06/2009 11:38:09::------------------------------------------------------------------ 10/06/2009 11:42:52::------------------------------------------------------------------ 10/06/2009 11:42:52::Initializing Clean - (ScanID: 596809A1-C19E-4CB2-B0CD-4EC8E8) 10/06/2009 11:42:52::Remove Threat (ID:14831) 10/06/2009 11:42:52::Clean Threat Possible Browser Hijack (ID:14831) 10/06/2009 11:42:53::Run custom cleaner Internet Explorer Start Page: http://www.orange.fr/ (148311) 10/06/2009 11:42:53::Restore IE URL settings 10/06/2009 11:42:53::Clean Threat Possible Browser Hijack (ID:14831) Complete 10/06/2009 11:42:53::Remove Threat (ID:14831) Complete 10/06/2009 11:42:53::Unititializing Clean 10/06/2009 11:42:53::------------------------------------------------------------------ 10/06/2009 11:45:53::------------------------------------------------------------------ 10/06/2009 11:45:53::Initializing Clean - (ScanID: CC925935-D98F-48FB-8F83-632CDC) 10/06/2009 11:45:53::Clean Threat Possible Browser Hijack (ID:14831) 10/06/2009 11:45:53::Run custom cleaner Internet Explorer Start Page: http://www.orange.fr/ (148311) 10/06/2009 11:45:53::Restore IE URL settings 10/06/2009 11:45:53::Clean Threat Possible Browser Hijack (ID:14831) Complete 10/06/2009 11:45:53::Unititializing Clean 10/06/2009 11:45:53::------------------------------------------------------------------

Bonsoir, J'ai parlé trop vite : le petit carillon est revenu... Dom28130

Bonsoir, Merci cela à fonctionner, plus de carillon, explorer ne me fait plus de caprice et plus de message indésirable à la fermeture de Xp. Merci encore. Cordialement. Dom28130

Bonsoir à tous, Depuis quelques temps j'ai un petit carillon qui sonne de temps en temps, tout comme j'ai explorer qui plante de temps en temps avec apparition de la petite fenêtre bleue Windows qui signale une erreur et qu'explorer se ferme. J'ai scanner mon disque dur avec plusieurs anti spyware et un anti virus, rien n'y fait. Pourtant j'ai un sérieux doute. Quelqu'un peut il m'aider. Je vous joint le rapport HijackThis que j'ai du mal à lire. Dans l'attente. Cordialement. Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 23:31:37, on 08/06/2009 Platform: Windows XP SP3 (WinNT 5.01.2600) MSIE: Internet Explorer v8.00 (8.00.6001.18702) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\Program Files\Webroot\Spy Sweeper\WRConsumerService.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\spoolsv.exe C:\Program Files\a-squared Anti-Malware\a2service.exe C:\Program Files\AMD\RAIDXpert\jetty\extra\win32\Wrapper.exe C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe C:\Program Files\Fichiers communs\Microsoft Shared\VS7DEBUG\MDM.EXE C:\Program Files\Clarus\Samsung SecretZone\MSSvc.exe C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe C:\Program Files\Norton Ghost\Agent\VProSvc.exe C:\Program Files\AMD\RAIDXpert\_jvm\bin\java.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\oodag.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\dllhost.exe C:\WINDOWS\System32\TUProgSt.exe C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe C:\WINDOWS\system32\dllhost.exe C:\WINDOWS\system32\wbem\unsecapp.exe C:\WINDOWS\system32\wbem\wmiprvse.exe C:\Program Files\Norton Ghost\Shared\Drivers\SymSnapService.exe C:\WINDOWS\system32\msdtc.exe C:\WINDOWS\System32\alg.exe C:\WINDOWS\system32\oodtray.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe C:\Program Files\Norton Ghost\Agent\VProTray.exe C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe C:\PROGRA~1\Wanadoo\TaskBarIcon.exe C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe C:\PROGRAM FILES\A-SQUARED ANTI-MALWARE\a2guard.exe C:\Program Files\Soft4Ever\looknstop\looknstop.exe C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe C:\Program Files\Rainlendar2\Rainlendar2.exe C:\Program Files\Fichiers communs\LightScribe\LightScribeControlPanel.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Weather Watcher\ww.exe C:\WINDOWS\system32\wuauclt.exe C:\PROGRA~1\Wanadoo\GestionnaireInternet.exe C:\PROGRA~1\Wanadoo\ComComp.exe C:\PROGRA~1\Wanadoo\Toaster.exe C:\PROGRA~1\Wanadoo\Inactivity.exe C:\PROGRA~1\Wanadoo\PollingModule.exe C:\WINDOWS\System32\ALERTM~1\ALERTM~1.EXE C:\PROGRA~1\Wanadoo\Watch.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Program Files\Webroot\Spy Sweeper\SSU.EXE C:\Program Files\Trend Micro\HijackThis\HijackThis.exe C:\WINDOWS\system32\wbem\wmiprvse.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.orange.fr R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896 R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://fr.msn.com/ R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens O2 - BHO: ContributeBHO Class - {074C1DC5-9320-4A9A-947D-C042949C6216} - C:\Program Files\Adobe\/Adobe Contribute CS4/contributeieplugin.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: Adobe PDF Conversion Toolbar Helper - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll O2 - BHO: MegaIEMn - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll O2 - BHO: SmartSelect - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll O3 - Toolbar: Contribute Toolbar - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - C:\Program Files\Adobe\/Adobe Contribute CS4/contributeieplugin.dll O3 - Toolbar: Copernic Agent - {F2E259E8-0FC8-438C-A6E0-342DD80FA53E} - C:\PROGRA~1\COPERN~1\COPERN~1.DLL O4 - HKLM\..\Run: [WOOWATCH] "C:\PROGRA~1\Wanadoo\Watch.exe" O4 - HKLM\..\Run: [WOOTASKBARICON] "C:\PROGRA~1\Wanadoo\GestMaj.exe" TaskBarIcon.exe O4 - HKLM\..\Run: [startCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKLM\..\Run: [OODefragTray] "C:\WINDOWS\system32\oodtray.exe" O4 - HKLM\..\Run: [Norton Ghost 14.0] "C:\Program Files\Norton Ghost\Agent\VProTray.exe" O4 - HKLM\..\Run: [iSUSScheduler] "C:\Program Files\Fichiers communs\InstallShield\UpdateService\issch.exe" -start O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice O4 - HKLM\..\Run: [CanonSolutionMenu] "C:\Program Files\Canon\SolutionMenu\CNSLMAIN.exe" /logon O4 - HKLM\..\Run: [Alcmtr] "C:\WINDOWS\ALCMTR.EXE" O4 - HKLM\..\Run: [Adobe_ID0ENQBO] "C:\PROGRA~1\FICHIE~1\Adobe\ADOBEV~1\Server\bin\VERSIO~2.EXE" O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Fichiers communs\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin O4 - HKLM\..\Run: [Acrobat Assistant 8.0] "C:\Program Files\Adobe\Acrobat 9.0\Acrobat\Acrotray.exe" O4 - HKLM\..\Run: [Ad-Watch] "C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe" O4 - HKLM\..\Run: [a-squared] "C:\PROGRAM FILES\A-SQUARED ANTI-MALWARE\a2guard.exe" /d=60 O4 - HKLM\..\Run: [Look 'n' Stop] "C:\Program Files\Soft4Ever\looknstop\looknstop.exe" -auto O4 - HKLM\..\Run: [spySweeper] "C:\Program Files\Webroot\Spy Sweeper\SpySweeperUI.exe" /startintray O4 - HKCU\..\Run: [WOOKIT] "C:\PROGRA~1\Wanadoo\Shell.exe" appLaunchClientZone.shl|PARAM= cnx O4 - HKCU\..\Run: [Rainlendar2] "C:\Program Files\Rainlendar2\Rainlendar2.exe" O4 - HKCU\..\Run: [LightScribe Control Panel] "C:\Program Files\Fichiers communs\LightScribe\LightScribeControlPanel.exe" -hidden O4 - HKCU\..\Run: [ctfmon.exe] "C:\WINDOWS\system32\ctfmon.exe" O4 - HKCU\..\Run: [WeatherWatcher] "C:\Program Files\Weather Watcher\ww.exe" O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user') O4 - Global Startup: uTorrent Turbo Booster.lnk = C:\Program Files\uTorrent Turbo Booster\uTorrent Turbo Booster.exe O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present O9 - Extra button: Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - -{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra button: Copernic Agent - {688DC797-DC11-46A7-9F1B-445F4F58CE6E} - C:\PROGRA~1\COPERN~1\COPERN~1.EXE O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: Barre de recherche Encarta - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Program Files\Fichiers communs\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL O16 - DPF: {0742B9EF-8C83-41CA-BFBA-830A59E23533} (Microsoft Data Collection Control) - https://support.microsoft.com/OAS/ActiveX/MSDcode.cab O16 - DPF: {5AE58FCF-6F6A-49B2-B064-02492C66E3F4} (MUCatalogWebControl Class) - http://catalog.update.microsoft.com/v7/sit...b?1223707714279 O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://www.bitdefender.fr/scan_fr/scan8/oscan8.cab O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupd...b?1223994126156 O16 - DPF: {680285A8-96D3-43DA-9D3D-51DD987D0B77} (NeroVersionCheckerControl Control) - http://www.nero.com/doc/NeroVersionCheckerControl.cab O16 - DPF: {6B75345B-AA36-438A-BBE6-4078B4C6984D} (HpProductDetection Class) - http://h20270.www2.hp.com/ediags/gmn2/inst...ctDetection.cab O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdat...b?1179466952203 O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} - http://fichiers.touslesdrivers.com/fichier...on_3_0_0_29.cab O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab O23 - Service: a-squared Anti-Malware Service (a2AntiMalware) - Emsi Software GmbH - C:\Program Files\a-squared Anti-Malware\a2service.exe O23 - Service: AMD RAIDXpert (AMDRAIDXpert) - Unknown owner - C:\Program Files\AMD\RAIDXpert\jetty\extra\win32\Wrapper.exe O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Fichiers communs\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: France Telecom Routing Table Service (FTRTSVC) - France Telecom - C:\WINDOWS\System32\FTRTSVC.exe O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: Inkjet Printer/Scanner Extended Survey Program (IJPLMSVC) - Unknown owner - C:\Program Files\Canon\IJPLM\IJPLMSVC.EXE O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Fichiers communs\LightScribe\LSSrvc.exe O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE O23 - Service: Virtual Disk Service Manager (MSR Service) - Unknown owner - C:\Program Files\Clarus\Samsung SecretZone\MSSvc.exe O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Fichiers communs\Nero\Nero BackItUp 4\NBService.exe O23 - Service: Norton Ghost - Symantec Corporation - C:\Program Files\Norton Ghost\Agent\VProSvc.exe O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe O23 - Service: SymSnapService - Symantec - C:\Program Files\Norton Ghost\Shared\Drivers\SymSnapService.exe O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe O23 - Service: Moteur Webroot Spy Sweeper (WebrootSpySweeperService) - Webroot Software, Inc. (www.webroot.com) - C:\Program Files\Webroot\Spy Sweeper\SpySweeper.exe O23 - Service: Webroot Client Service (WRConsumerService) - Webroot Software, Inc. - C:\Program Files\Webroot\Spy Sweeper\WRConsumerService.exe -- End of file - 12411 bytes