Cateyes13

Hello tout le monde, Voici le rapport du scan AD REMOVER que je viens de lancer. Que dois-je faire maintenant ??? Merci pour votre aide ;o) ======= RAPPORT D'AD-REMOVER 2.0.0.2,G | UNIQUEMENT XP/VISTA/7 ======= Mis à jour par TeamXscript le 12/04/11 Contact: AdRemover[DOT]contact[AT]gmail[DOT]com Site web: http://www.teamxscript.org C:\Program Files (x86)\Ad-Remover\main.exe (SCAN [1]) -> Lancé à 06:38:06 le 11/01/2012, Mode normal Microsoft Windows 7 Édition Familiale Premium Service Pack 1 (X64) DO or DIE@DOORDIE-PC (Acer Aspire 7745G) ============== RECHERCHE ============== Dossier trouvé: C:\Users\DO or DIE\AppData\LocalLow\Conduit Dossier trouvé: C:\Users\DO or DIE\AppData\Roaming\OpenCandy Dossier trouvé: C:\ProgramData\Trymedia Clé trouvée: HKLM\Software\Classes\ASAPCom.ASAPClass Clé trouvée: HKLM\Software\Classes\ASAPCom.ASAPClass.1 Clé trouvée: HKLM\Software\Classes\ASAPCom.ASAPEnvelope Clé trouvée: HKLM\Software\Classes\ASAPCom.ASAPEnvelope.1 Clé trouvée: HKLM\Software\Classes\ASAPCom.ASAPMain Clé trouvée: HKLM\Software\Classes\ASAPCom.ASAPMain.1 Clé trouvée: HKLM\Software\Classes\ASAPCom.ASAPMessage Clé trouvée: HKLM\Software\Classes\ASAPCom.ASAPMessage.1 Clé trouvée: HKLM\Software\Classes\ASAPCom.ASAPRecipients Clé trouvée: HKLM\Software\Classes\ASAPCom.ASAPRecipients.1 Clé trouvée: HKLM\Software\Conduit Clé trouvée: HKCU\Software\Conduit Clé trouvée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6708E590-4E72-4E25-9070-9BDE8C47A6F8} Clé trouvée: HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B} Clé trouvée: HKLM\Software\Microsoft\Internet Explorer\SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B} Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{D4027C7F-154A-4066-A1AD-4243D8127440} Clé trouvée: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{D4027C7F-154A-4066-A1AD-4243D8127440} Valeur trouvée: HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440} ============== SCAN ADDITIONNEL ============== **** Mozilla Firefox Version [7.0.1 (fr)] **** HKLM_MozillaPlugins\Adobe Reader (x) HKLM_MozillaPlugins\ZEON/PDF,version=2.0 (x) Searchplugins\bing.xml ( hxxp://www.bing.com/search) Components\browsercomps.dll (Mozilla Foundation) Extensions\{906305f7-aafc-45e9-8bbd-941950a84dad} (G Data BankGuard) Extensions\{9AA46F4F-4DC7-4c06-97AF-5035170633FE} (G Data Filtre Internet) HKCU_Extensions|[email protected] - C:\Users\DO or DIE\AppData\Roaming\IDM\idmmzcc5 -- C:\Users\DO or DIE\AppData\Roaming\Mozilla\FireFox\Profiles\2bngtueo.default -- Prefs.js - browser.download.lastDir, C:\\Users\\DO or DIE\\Pictures\\Documents\\Downloads Prefs.js - browser.startup.homepage, www.google.be Prefs.js - browser.startup.homepage_override.buildID, 20110928134238 Prefs.js - browser.startup.homepage_override.mstone, rv:7.0.1 -- C:\Users\Administrateur\AppData\Roaming\Mozilla\FireFox\Profiles\9ybq8c8t.default -- Prefs.js - browser.startup.homepage_override.buildID, 20110902133214 Prefs.js - browser.startup.homepage_override.mstone, rv:6.0.2 ======================================== **** Internet Explorer Version [8.0.7601.17514] **** HKCU_Main|Start Page - hxxp://www.google.be/ HKLM_Main|Default_Page_URL - hxxp://go.microsoft.com/fwlink/?LinkId=69157 HKLM_Main|Default_Search_URL - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Search Page - hxxp://go.microsoft.com/fwlink/?LinkId=54896 HKLM_Main|Start Page - hxxp://www.msn.com/ HKCU_URLSearchHooks|{a1e75a0e-4397-4ba8-bb50-e19fb66890f4} (x) HKCU_SearchScopes\{6708E590-4E72-4E25-9070-9BDE8C47A6F8} - "Ask Search" (hxxp://websearch.ask.com/redirect?client=ie&tb=FF&o=14594&src=crm&q={searchTerms...) HKCU_SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64} - "?" (?) HKCU_SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B} - "MyAshampoo Customized Web Search" (hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT...) HKLM_SearchScopes\{AFDBDDAA-5D3F-42EE-B79C-185A7020515B} - "MyAshampoo Customized Web Search" (hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT...) HKCU_Toolbar\WebBrowser|{D4027C7F-154A-4066-A1AD-4243D8127440} (x) HKLM_Toolbar|{E3286BF1-E654-42FF-B4A6-5E111731DF6B} (C:\Program Files (x86)\Nuance\PDFCreate\Bin\ZeonIEFavClient.dll) HKLM_Toolbar|{0124123D-61B4-456f-AF86-78C53A0790C5} (C:\Program Files (x86)\G Data\TotalCare\WebFilter\AVKWebIE.dll) HKCU_ElevationPolicy\{1902485B-CE75-42C1-BA2D-57E660793D9A} - C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe (Tonec Inc.) HKCU_ElevationPolicy\{E0DACC63-037F-46EE-AC02-E4C7B0FBFEB4} - C:\Program Files (x86)\Internet Download Manager\IDMan.exe (Tonec Inc.) HKLM_ElevationPolicy\{02073B90-44EE-47B1-9633-732376A8A3C8} - C:\Program Files (x86)\Veetle\Player\VeetleNet.exe (x) HKLM_ElevationPolicy\{07d873dc-b9b9-44f5-af0b-fb59fa54fb7a} - C:\Windows\SysWOW64\wpcer.exe (x) HKLM_ElevationPolicy\{0a402d70-1f10-4ae7-bec9-286a98240695} - C:\Windows\SysWOW64\winfxdocobj.exe (x) HKLM_ElevationPolicy\{70f641fd-9ffc-4d5b-a4dc-962af4ed7999} - C:\Program Files (x86)\Internet Explorer\iedw.exe (x) HKLM_ElevationPolicy\{A6E2003F-95C5-4591-BA9A-0093080FDB5C} - C:\Program Files (x86)\Common Files\Oberon Media\OberonBroker\1.0.0.63\OberonBroker.exe (?) HKLM_ElevationPolicy\{B43A0C1E-B63F-4691-B68F-CD807A45DA01} - C:\Windows\system32\TSWbPrxy.exe (x) HKLM_ElevationPolicy\{C8D05139-D04A-44A1-822E-6E3737CC880B} - C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe (G Data Software AG) HKLM_ElevationPolicy\{E0DACC63-037F-46EE-AC02-E4C7B0FBFEB4} - C:\Program Files (x86)\Internet Download Manager\IDMan.exe (Tonec Inc.) BHO\{0055C089-8582-441B-A0BF-17B458C2A3A8} - "IDM integration (IDMIEHlprObj Class)" (C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll) BHO\{551A852F-39A6-44A7-9C13-AFBEC9185A9D} - "PlusIEEventHelper Class" (C:\Program Files (x86)\Nuance\PDF Viewer Plus\Bin\PlusIEContextMenu.dll) BHO\{BA3295CF-17ED-4F49-9E95-D999A0ADBFDC} - "G Data BankGuard" (C:\Program Files (x86)\Common Files\G Data\AVKProxy\BanksafeBHO.dll) BHO\{DA986D7D-CCAF-47B2-84FE-BFA1549BEBF9} - "ZeonIEEventHelper Class" (C:\Program Files (x86)\Nuance\PDFCreate\Bin\ZeonIEFavClient.dll) ======================================== C:\Program Files (x86)\Ad-Remover\Quarantine: 0 Fichier(s) C:\Program Files (x86)\Ad-Remover\Backup: 1 Fichier(s) C:\Ad-Report-SCAN[1].txt - 11/01/2012 06:38:14 (6424 Octet(s)) Fin à: 06:40:22, 11/01/2012 ============== E.O.F ==============

Voici le rapport Rapport de ZHPFix 1.12.3360 par Nicolas Coolman, Update du 29/08/2011 Fichier d'export Registre : Run by DO or DIE at 5/09/2011 21:07:48 Windows 7 Home Premium Edition, 64-bit Service Pack 1 (Build 7601) Web site : ZHPFix Fix de rapport ========== Clé(s) du Registre ========== SUPPRIME Key: HKLM\Software\WOW6432Node\Classes\Interface\{21447c90-6ec1-4fc1-9379-bd515008aedb} SUPPRIME Key: HKLM\Software\WOW6432Node\Classes\CLSID\{286e500c-ef0a-4aa3-a94d-e495f653ef4b} SUPPRIME Key: HKLM\Software\WOW6432Node\Classes\CLSID\{319260ab-be0c-4025-8569-7a27ed2faab9} SUPPRIME Key: HKLM\Software\WOW6432Node\Classes\Interface\{32c97a37-e2b8-4097-9330-5f3e1125e181} SUPPRIME Key: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{83ff80f4-8c74-4b80-b5ba-c8ddd434e5c4} SUPPRIME Key: HKLM\Software\WOW6432Node\Classes\CLSID\{9809a6b4-70b1-4bb2-b3b5-b415763a534e} SUPPRIME Key: HKLM\Software\WOW6432Node\Classes\Interface\{b0c3de1b-e3ff-4dd0-9229-f452cf9c678e} SUPPRIME Key: HKLM\Software\Classes\TypeLib\{bce2e826-d0f5-41c8-97be-28a6f540ceeb} SUPPRIME Key: HKLM\Software\WOW6432Node\Classes\Interface\{d2d94732-a74d-433c-98f7-9ed740e82ae9} SUPPRIME Key: HKLM\Software\WOW6432Node\Classes\CLSID\{d5178f77-c5e6-4e8f-9787-48b5d7eccce8} SUPPRIME Key: HKLM\Software\WOW6432Node\Classes\Interface\{dfd5d79b-ef2f-4a51-9821-5b469f05262e} ABSENT Key: Service: gpsvc SUPPRIME Key**: StartupReg: MDS_Menu ABSENT StartMenuInternet: (.Not Key.) ABSENT Key: CLSID BHO: {D4027C7F-154A-4066-A1AD-4243D8127440} SUPPRIME Key: HKCU\Software\AppDataLow\AskToolbarInfo SUPPRIME Key: HKCU\Software\AppDataLow\Software\AskToolbar SUPPRIME Key: HKCU\Software\Ask.com SUPPRIME Key: HKLM\Software\WOW6432Node\Classes\AppID\GenericAskToolbar.DLL SUPPRIME Key: HKLM\Software\WOW6432Node\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC} SUPPRIME Key: HKLM\Software\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56} SUPPRIME Key: HKLM\Software\WOW6432Node\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456} SUPPRIME Key: HKLM\Software\WOW6432Node\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92} SUPPRIME Key: HKLM\Software\WOW6432Node\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874} SUPPRIME Key: HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A} SUPPRIME Key: HKLM\Software\WOW6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A} SUPPRIME Key: HKLM\Software\WOW6432Node\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E} SUPPRIME Key: HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440} ========== Valeur(s) du Registre ========== SUPPRIME RunValue: TaskTray SUPPRIME {070D1E10-691A-433E-97E5-137B526769DD} SUPPRIME {1F3A8BDA-845E-4D3F-ACA6-BBB3F8B5C6BF} ========== Dossier(s) ========== SUPPRIME Folder: C:\ProgramData\Partner SUPPRIME Folder: C:\Users\DO or DIE\AppData\Roaming\Mozilla\Firefox\Profiles\s6cafvgh.default\extensions\[email protected] ========== Fichier(s) ========== ABSENT Folder/File: c:\users\do or die\appdata\local\temp\bassmod.dll ABSENT Folder/File: c:\users\do or die\appdata\local\temp\installer SUPPRIME File: c:\webcam.log SUPPRIME File: c:\rhdsetup.log SUPPRIME File: c:\program files (x86)\acer arcade deluxe\mediashow espresso\muitransfer\muistartmenu.exe ABSENT Folder/File: c:\users\do or die\appdata\local\temp\asksearch ABSENT Folder/File: c:\users\do or die\appdata\roaming\mozilla\firefox\profiles\s6cafvgh.default\extensions\[email protected] ABSENT Folder/File: c:\windows\system32\tasks\scheduled update for ask toolbar ========== Tache planifiée ========== SUPPRIME Task: Scheduled Update for Ask Toolbar ========== Récapitulatif ========== 28 : Clé(s) du Registre 3 : Valeur(s) du Registre 2 : Dossier(s) 8 : Fichier(s) 1 : Tache planifiée End of the scan in 00mn 21s ========== Chemin de fichier rapport ========== C:\ZHP\ZHPFix[R1].txt - 5/09/2011 21:07:48 [4063]

Bonjour, Merci pour votre réponse. Voici le lien avec les résultats de mon rapport : Confirmation de création

Bonjour à tous, Inscrite depuis peu sur votre site, je m'en remets à vous pour l'analyse du rapport HIJACKTHIS ci-joint. J'ai réinstaller ma machine avec un B-U de 04/2011 mais qui n'était malheureusement pas "clean" Etant donné que je souhaite repartir sur de bonnes bases avec mon pc, je voudrais que tout soit enfin entièrement en ordre Quelqu'un peut-il m'aider ? Merci d'avance !!!! Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 19:21:11, on 2/09/2011 Platform: Unknown Windows (WinNT 6.01.3505 SP1) MSIE: Unable to get Internet Explorer version! Boot mode: Normal Running processes: C:\Program Files (x86)\Mozilla Firefox\firefox.exe C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe C:\Program Files (x86)\jv16 PowerTools 2011\jv16PT.exe C:\Program Files (x86)\RegSupreme\RegSupreme.exe C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://homepage.acer.com/rdr.aspx?b=ACAW&l=080c&m=aspire_7745g&r=27360911t806l0493z1k5t4551l607 R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Google R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&l=080c&m=aspire_7745g&r=27360911t806l0493z1k5t4551l607 R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = F2 - REG:system.ini: UserInit=userinit.exe, O2 - BHO: G Data WebFilter Class - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Program Files (x86)\G Data\TotalCare\WebFilter\AVKWebIE.dll O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file) O2 - BHO: BHO - {BA3295CF-17ED-4F49-9E95-D999A0ADBFDC} - C:\Program Files (x86)\Common Files\G DATA\AVKProxy\BanksafeBHO.dll O3 - Toolbar: G Data WebFilter - {0124123D-61B4-456f-AF86-78C53A0790C5} - C:\Program Files (x86)\G Data\TotalCare\WebFilter\AVKWebIE.dll O4 - HKLM\..\Run: [GDFirewallTray] C:\Program Files (x86)\G Data\TotalCare\Firewall\GDFirewallTray.exe O4 - HKLM\..\Run: [G Data AntiVirus Tray Application] C:\Program Files (x86)\G Data\TotalCare\AVKTray\AVKTray.exe O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware (reboot)] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent O4 - HKUS\S-1-5-19\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVICE RÉSEAU') O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office12\EXCEL.EXE/3000 O9 - Extra button: Ajout Direct - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra 'Tools' menuitem: &Ajout Direct dans Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~2\MICROS~1\Office12\ONBttnIE.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~1\Office12\REFIEBAR.DLL O13 - Gopher Prefix: O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing) O23 - Service: G Data AntiVirus Proxy (AVKProxy) - G Data Software AG - C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe O23 - Service: Planificateur G Data (AVKService) - G Data Software AG - C:\Program Files (x86)\G Data\TotalCare\AVK\AVKService.exe O23 - Service: G Data Gardien (AVKWCtl) - G Data Software AG - C:\Program Files (x86)\G Data\TotalCare\AVK\AVKWCtlX64.exe O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files (x86)\Launch Manager\dsiwmis.exe O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing) O23 - Service: Acer ePower Service (ePowerSvc) - Acer Incorporated - C:\Program Files\Acer\Acer PowerSmart Manager\ePowerSvc.exe O23 - Service: Service G Data Backup (GDBackupSvc) - G Data Software AG - C:\Program Files (x86)\G Data\TotalCare\AVKBackup\AVKBackupService.exe O23 - Service: Pare-feu personnel G Data (GDFwSvc) - G Data Software AG - C:\Program Files (x86)\G Data\TotalCare\Firewall\GDFwSvcx64.exe O23 - Service: G Data Scanner (GDScan) - G Data Software AG - C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe O23 - Service: G Data Tuner Service (GDTunerSvc) - G Data Software AG - C:\Program Files (x86)\G Data\TotalCare\AVKTuner\AVKTunerService.exe O23 - Service: Intel® Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: Intel® Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing) O23 - Service: NTI IScheduleSvc - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\Acer Backup Manager\IScheduleSvc.exe O23 - Service: NTI Backup Now 5 Backup Service (NTIBackupSvc) - NewTech InfoSystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\BackupSvc.exe O23 - Service: NTI Backup Now 5 Scheduler Service (NTISchedulerSvc) - NewTech Infosystems, Inc. - C:\Program Files (x86)\NewTech Infosystems\NTI Backup Now 5\SchedulerSvc.exe O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing) O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing) O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing) O23 - Service: Intel® Management & Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe O23 - Service: Updater Service - Acer Group - C:\Program Files\Acer\Acer Updater\UpdaterService.exe O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing) O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing) O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing) O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing) O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)