[Résolu] Virus Win32:horst-C [trj]

Canon560 · le 25 mai 2006

Voila Avast! en ce moment me trouve beaucoup de virus marqués Win32:horst-C dans mon pc ils sont dans C:\Documents and Settings\PC\Local Settings\Temp. Il y a des fichiers temporaires (surment en rapport avec le virus) et les virus se nomment par exemple 78exmodul32 ou encore 84exmodul32.Ces chevaux de troie sont trèsx embêtants j'ai passé des antispyware, des antivirus et je n'arrive pas a les supprimer. En esperant que quelqu'un puisse m'aider, je vous donne mon rapport HijackThis:

Logfile of HijackThis v1.99.1

Scan saved at 09:25:39, on 05/25/2006

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Windows Defender\MsMpEng.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe

C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe

C:\WINDOWS\system32\LEXBCES.EXE

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\system32\LEXPPS.EXE

C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

C:\Program Files\Alwil Software\Avast4\ashServ.exe

C:\WINDOWS\system32\drivers\CDAC11BA.EXE

C:\WINDOWS\System32\nvsvc32.exe

C:\WINDOWS\system32\slserv.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

C:\Program Files\HP\hpcoretech\hpcmpmgr.exe

C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe

C:\PROGRA~1\MI948F~1\GAMECO~1\common\swtrayv4.exe

C:\WINDOWS\system32\rundll32.exe

C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe

C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe

C:\WINDOWS\system32\svchost.exe

C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

C:\Program Files\Windows Defender\MSASCui.exe

C:\Program Files\MessengerPlus! 3\MsgPlus.exe

C:\Program Files\Steganos Trace Destructor 6.5\itd.exe

C:\Program Files\InterVideo\WinDVR\WinScheduler.exe

C:\Program Files\Internet Explorer\iexplore.exe

C:\Documents and Settings\PC\Mes documents\mes logiciels\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.tele2internet.fr

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,SearchAssistant = about:blank

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.tele2internet.fr

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.tele2internet.fr

R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.tele2internet.fr

R1 - HKLM\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://www.tele2internet.fr

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =

F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\Userinit.exe

O3 - Toolbar: (no name) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - (no file)

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll

O4 - HKLM\..\Run: [HP Component Manager] "C:\Program Files\HP\hpcoretech\hpcmpmgr.exe"

O4 - HKLM\..\Run: [tF8Q3mP] dfrquoui.exe

O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot

O4 - HKLM\..\Run: [Openwares LiveUpdate] C:\Program Files\LiveUpdate\LiveUpdate.exe

O4 - HKLM\..\Run: [nwiz] nwiz.exe /installquiet

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [sideWinderTrayV4] C:\PROGRA~1\MI948F~1\GAMECO~1\common\swtrayv4.exe

O4 - HKLM\..\Run: [AdslTaskBar] rundll32.exe stmctrl.dll,TaskBar

O4 - HKLM\..\Run: [sunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe

O4 - HKLM\..\Run: [.nvsvc] C:\WINDOWS\system\smss.exe /w

O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe"

O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide

O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"

O4 - HKCU\..\Run: [iTD65_ITD] "C:\Program Files\Steganos Trace Destructor 6.5\itd.exe" /booting

O4 - Global Startup: InterVideo WinScheduler.lnk = C:\Program Files\InterVideo\WinDVR\WinScheduler.exe

O4 - Global Startup: Lancement rapide d'Adobe Reader.lnk = C:\ACROREAD\Reader\reader_sl.exe

O8 - Extra context menu item: &Traduire à partir de l'anglais - res://c:\program files\google\GoogleToolbar2.dll/cmwordtrans.html

O8 - Extra context menu item: Pages liées - res://c:\program files\google\GoogleToolbar2.dll/cmbacklinks.html

O8 - Extra context menu item: Pages similaires - res://c:\program files\google\GoogleToolbar2.dll/cmsimilar.html

O8 - Extra context menu item: Recherche &Google - res://c:\program files\google\GoogleToolbar2.dll/cmsearch.html

O8 - Extra context menu item: Version de la page actuelle disponible dans le cache Google - res://c:\program files\google\GoogleToolbar2.dll/cmcache.html

O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll

O9 - Extra 'Tools' menuitem: Console Java (Sun) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll

O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)

O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - %windir%\bdoscandel.exe (file missing)

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O12 - Plugin for .mov: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin.dll

O12 - Plugin for .mpeg: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin3.dll

O12 - Plugin for .mpg: C:\Program Files\Internet Explorer\PLUGINS\npqtplugin3.dll

O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/pcpitstop.cab

O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} -

O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204

O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1131789185968

O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} -

O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab

O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} -

O16 - DPF: {C36112BF-2FA3-4694-8603-3B510EA3B465} -

O16 - DPF: {F6BF0D00-0B2A-4A75-BF7B-F385591623AF} -

O16 - DPF: {FC67BB52-AAB6-4282-9D51-2DAFFE73AFD0} -

O17 - HKLM\System\CCS\Services\Tcpip\..\{BF299106-F478-44E7-B0A6-7F30FF09C558}: NameServer = 212.151.137.170 212.151.136.246

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)

O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe

O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)

O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)

O23 - Service: Bluetooth Service (btwdins) - Unknown owner - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe (file missing)

O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE

O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe

O23 - Service: Symantec Password Validation (ccPwdSvc) - Unknown owner - C:\Program Files\Fichiers communs\Symantec Shared\ccPwdSvc.exe (file missing)

O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe

O23 - Service: ISSvc (ISSVC) - Unknown owner - C:\Program Files\Norton Internet Security\ISSVC.exe (file missing)

O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE

O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

O23 - Service: SmartLinkService (SLService) - - C:\WINDOWS\SYSTEM32\slserv.exe

O23 - Service: X10 Device Network Service (x10nets) - Unknown owner - C:\WINDOWS\System32\x10nets.exe (file missing)

En esperant que quelqu'un puisse m'aider, merci d'avance

Modifié le 27 mai 2006 par Canon560

Gof · le 25 mai 2006

Bonjour Canon560, bienvenue sur les forums de zebulon et plus particulièrement sur Sécurité !

Commence par appliquer la procédure de pré-nettoyage d'un pc infecté : http://forum.zebulon.fr/index.php?showtopic=85544

La procédure peut te sembler fastidieuse, mais ce n'est pas le cas, elle est juste très détaillée.

Lorsque tu auras effectué cette procédure, reviens ici poster le rapport Antivir (que tu auras sauvegardé avant de le désinstaller) et un nouveau log HijackThis. Un membre de l'équipe sécurité, un autre junior ou moi seront là pour t'aider.

Bon courage

Canon560 · le 25 mai 2006

si j'installe antivir, cela ne va t-il pas faire des conflits avec avast?

Gof · le 25 mai 2006

si j'installe antivir, cela ne va t-il pas faire des conflits avec avast?

Si les deux fonctionnent en même temps, oui cela créera certainement des conflits. Tu dois télécharger Antivir, désactiver Avast le temps de mettre à jour antivir. Tu désactives Antivir et réactives Avast.

Ensuite tu scannes en mode sans échec avec Antivir (donc pas de soucis, en mode sans échec Avast sera désactivé). Tu sauvegardes le rapport Antivir sur le bureau par exemple, et tu le désinstalles. Au démarrage suivant, tu n'auras plus qu'Avast, comme avant, et pas de conflits.

J'en profite pour attirer ton attention sur le paramétrage d'antivir qui est important (voir le tuto dans la procédure) et sur la phase 3 du nettoyage.

Canon560 · le 25 mai 2006

La procédure de pré desinfection est faite et l'analyse Antivir est en cours je vous comminique le rapport dès que c'est terminé.

Canon560 · le 25 mai 2006

Voilà le rapport Antivir:

AntiVir PersonalEdition Classic

Report file date: jeudi 25 mai 2006 13:59

Jobname: 'Manual Selection'

Scanning for 390394 virus strains and unwanted programs.

Licensed to: AntiVir PersonalEdition Classic

Serial number: 0000149996-WURGE-0001

Platform: Windows XP

Windows version: (Service Pack 2) [5.1.2600]

Username: PC

Computer name: SN401445610005

Version informations:

AVSCAN.EXE : 7.0.0.35 540712 04/21/2006 12:47:04

AVSCAN.DLL : 7.0.0.34 41000 04/05/2006 11:03:57

LUKE.DLL : 7.0.0.34 114728 04/05/2006 11:03:58

LUKERES.DLL : 7.0.0.34 25640 04/05/2006 11:03:58

ANTIVIR0.VDF : 6.32.0.60 4323840 05/02/2006 08:29:08

ANTIVIR1.VDF : 6.34.1.87 2215424 05/25/2006 11:53:57

ANTIVIR2.VDF : 6.34.1.112 75776 05/25/2006 11:53:57

ANTIVIR3.VDF : 6.34.1.141 38400 05/25/2006 11:53:57

AVEWIN32.DLL : 7.0.0.11 1229312 05/25/2006 11:53:57

AVPREF.DLL : 6.34.0.0 38440 01/18/2006 12:06:00

AVREP.DLL : 6.34.1.130 622632 05/25/2006 11:53:57

AVPACK32.DLL : 7.0.0.4 335912 03/29/2006 09:44:25

AVREG.DLL : 6.31.0.90 27688 07/28/2005 10:06:36

NETNT.DLL : 6.32.0.0 6696 09/27/2005 07:56:49

NETNW.DLL : 6.32.0.0 9768 09/27/2005 07:56:49

Start of the scan: jeudi 25 mai 2006 13:59

Start scanning boot sectors:

Boot sector 'C:'

[NOTE] No virus was found!

Starting to scan the registry.

The registry was scanned ( 37 files ).

Starting the file scan:

C:\hiberfil.sys

[WARNING] The file could not be opened!

C:\pagefile.sys

[WARNING] The file could not be opened!

C:\Documents and Settings\LocalService\NTUSER.DAT

[WARNING] The file could not be opened!

C:\Documents and Settings\LocalService\ntuser.dat.LOG

[WARNING] The file could not be opened!

C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat

[WARNING] The file could not be opened!

C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG

[WARNING] The file could not be opened!

C:\Documents and Settings\NetworkService\NTUSER.DAT

[WARNING] The file could not be opened!

C:\Documents and Settings\NetworkService\ntuser.dat.LOG

[WARNING] The file could not be opened!

C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat

[WARNING] The file could not be opened!

C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG

[WARNING] The file could not be opened!

C:\Documents and Settings\PC\ntuser.dat

[WARNING] The file could not be opened!

C:\Documents and Settings\PC\ntuser.dat.LOG

[WARNING] The file could not be opened!

C:\Documents and Settings\PC\Bureau\seb\Tablatures\Tabs Guitare Pro (Pop, Rock).ace

[0] Archive type: ACE

--> PopRock\Marilyn Manson\Antchrist Superstar.gtp

[WARNING] Error creating the file

--> PopRock\Brassens Georges\Auprs De Mon Arbre.gtp

[WARNING] Error creating the file

--> PopRock\Noir Dsir\Aux Sombres Hros De L' Amer.gtp

[WARNING] Error creating the file

--> PopRock\Goldman Jean-Jacques\Bonne Ide.gtp

[WARNING] Error creating the file

--> PopRock\Annegarn Dick\Bb Elphant.gtp

[WARNING] Error creating the file

--> PopRock\Cabrel Francis\C'tait L'hiver.gtp

[WARNING] Error creating the file

--> PopRock\Morse Steve\Cascades (arpges).gtp

[WARNING] Error creating the file

--> PopRock\Noir Dsir\Come Elle Vient.gtp

[WARNING] Error creating the file

--> PopRock\Renaud\Ds Que Le Vent Soufflera.gtp

[WARNING] Error creating the file

--> PopRock\Nosso Recanto 2\Essa M£sica NÆo E Repetitiva, NÆo!.gtp

[WARNING] Error creating the file

--> PopRock\Skawi¤ski Grzegorz\Gdyby kto.gtp

[WARNING] Error creating the file

--> PopRock\Cabrel Francis\Je L'aime Mourir.gtp

[WARNING] Error creating the file

--> PopRock\Noir Dsir\L'homme Press.gtp

[WARNING] Error creating the file

--> PopRock\Monsieur Toad (Nouvelle Horreur)\La Commre.gtp

[WARNING] Error creating the file

--> PopRock\Cabrel Francis\La Cabane Du Pcheur.gtp

[WARNING] Error creating the file

--> PopRock\Ferrer Nino\La Maison Prs De La Fontaine.gtp

[WARNING] Error creating the file

--> PopRock\Cabrel Francis\Les Murs De Poussire.gtp

[WARNING] Error creating the file

--> PopRock\Noir Dsir\Marlne.gtp

[WARNING] Error creating the file

--> PopRock\Franois Claude\My Way.gtp

[WARNING] Error creating the file

--> PopRock\Brurier Noir\Nuit Apache.gtp

[WARNING] Error creating the file

--> PopRock\Caf Tacvba\Pez-Verde.gtp

[WARNING] Error creating the file

--> PopRock\Stone Temple Pilots\Ride The Clich.gtp

[WARNING] Error creating the file

--> PopRock\Cabrel Francis\Rpondez Moi (2).gtp

[WARNING] Error creating the file

--> PopRock\Cabrel Francis\Rpondez-moi.gtp

[WARNING] Error creating the file

--> PopRock\Il Etait Une Fois\Rv d'Elle.gtp

[WARNING] Error creating the file

--> PopRock\Brurier Noir\Salut Toi.gtp

[WARNING] Error creating the file

--> PopRock\Noir Dsir\Un Jour En France.gtp

[WARNING] Error creating the file

--> PopRock\ONA\Znalazam.gtp

[WARNING] Error creating the file

C:\Documents and Settings\PC\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat

[WARNING] The file could not be opened!

C:\Documents and Settings\PC\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG

[WARNING] The file could not be opened!

C:\Documents and Settings\PC\Local Settings\Application Data\Microsoft\Windows Defender\FileTracker\{5CD97A60-16AA-4DF5-B4DD-B12F9DFA5A5C}

[WARNING] The file could not be opened!

C:\Program Files\eMule\Incoming\divers cd\jean louis aubert concert prive album complet+pochette par mayran.ace

[0] Archive type: ACE

--> Concert Prive\01 Le Jour Se Lve Encore.wma

[WARNING] Error creating the file

--> Concert Prive\02 Ocan.wma

[WARNING] Error creating the file

--> Concert Prive\09 Temps · Nouveau.wma

[WARNING] Error creating the file

--> Concert Prive\11 Vivant Pome.wma

[WARNING] Error creating the file

C:\WINDOWS\system32\CatRoot2\edb.log

[WARNING] The file could not be opened!

C:\WINDOWS\system32\CatRoot2\tmp.edb

[WARNING] The file could not be opened!

C:\WINDOWS\system32\config\DEFAULT

[WARNING] The file could not be opened!

C:\WINDOWS\system32\config\default.LOG

[WARNING] The file could not be opened!

C:\WINDOWS\system32\config\SAM

[WARNING] The file could not be opened!

C:\WINDOWS\system32\config\SAM.LOG

[WARNING] The file could not be opened!

C:\WINDOWS\system32\config\SECURITY

[WARNING] The file could not be opened!

C:\WINDOWS\system32\config\SECURITY.LOG

[WARNING] The file could not be opened!

C:\WINDOWS\system32\config\SOFTWARE

[WARNING] The file could not be opened!

C:\WINDOWS\system32\config\software.LOG

[WARNING] The file could not be opened!

C:\WINDOWS\system32\config\SYSTEM

[WARNING] The file could not be opened!

C:\WINDOWS\system32\config\system.LOG

[WARNING] The file could not be opened!

C:\WINDOWS\Temp\Perflib_Perfdata_754.dat

[WARNING] The file could not be opened!

C:\WINDOWS\Temp\_avast4_\Webshlock.txt

[WARNING] The file could not be opened!

End of the scan: jeudi 25 mai 2006 16:51

Used time: 2:51:48 min

The scan has been done completely.

6362 Scanning directories

312369 Files were scanned

0 viruses and/or unwanted programs was found

0 files were deleted

0 files were repaired

0 files were moved to quarantine

0 files were renamed

7868 Archives were scanned

61 Warnings

1 Notes

P.S: Puis-je désinstaller Antivir?

Et voici le dernier rapport HjackThis:

Logfile of HijackThis v1.99.1

Scan saved at 18:21:07, on 05/25/2006

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\Program Files\Windows Defender\MsMpEng.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\Explorer.EXE

C:\Program Files\Fichiers communs\Symantec Shared\ccSetMgr.exe

C:\Program Files\Fichiers communs\Symantec Shared\ccEvtMgr.exe

C:\WINDOWS\system32\LEXBCES.EXE

C:\WINDOWS\system32\spoolsv.exe

C:\WINDOWS\system32\LEXPPS.EXE

C:\Program Files\AntiVir PersonalEdition Classic\sched.exe

C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe

C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

C:\Program Files\Alwil Software\Avast4\ashServ.exe

C:\WINDOWS\system32\drivers\CDAC11BA.EXE

C:\WINDOWS\System32\nvsvc32.exe

C:\WINDOWS\system32\slserv.exe

C:\WINDOWS\System32\svchost.exe

C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

C:\Program Files\HP\hpcoretech\hpcmpmgr.exe

C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe

C:\PROGRA~1\MI948F~1\GAMECO~1\common\swtrayv4.exe

C:\WINDOWS\system32\rundll32.exe

C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe

C:\Program Files\Fichiers communs\Symantec Shared\ccApp.exe

C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

C:\Program Files\Windows Defender\MSASCui.exe

C:\Program Files\MessengerPlus! 3\MsgPlus.exe

C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe