Merci bcp voici le rapport de look2me-destroyer:



Look2Me-Destroyer V1.0.12

Scanning for infected files.....
Scan started at 19/09/2006 18:47:03

Infected! C:\WINDOWS\system32\dgkquoui.dll
Infected! C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP51\A0015286.dll
Infected! C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP51\A0015287.dll
Infected! C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP51\A0017423.dll
Infected! C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP51\A0017447.dll
Infected! C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP51\A0017449.dll
Infected! C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP51\A0017458.dll
Infected! C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP51\A0017471.dll
Infected! C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP51\A0018474.dll
Infected! C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP52\A0018494.dll
Infected! C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP52\A0018498.dll
Infected! C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP52\A0018504.dll
Infected! C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP52\A0018507.dll
Infected! C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP52\A0018512.dll
Infected! C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP52\A0018517.dll
Infected! C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP52\A0018522.dll
Infected! C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP52\A0018531.dll
Infected! C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP52\A0018537.dll
Infected! C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP52\A0018550.dll
Infected! C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP52\A0018555.dll
Infected! C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP53\A0018597.dll
Infected! C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP53\A0018604.dll
Infected! C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP53\A0018610.dll
Infected! C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP53\A0018613.dll
Infected! C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP53\A0018620.dll
Infected! C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP53\A0018630.dll
Infected! C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP53\A0019637.dll
Infected! C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP53\A0019640.dll
Infected! C:\WINDOWS\system32\aestream.dll
Infected! C:\WINDOWS\system32\dgkquoui.dll
Infected! C:\WINDOWS\system32\gcu32.dll
Infected! C:\WINDOWS\system32\gp4ql3h51.dll
Infected! C:\WINDOWS\system32\gp84l3lq1.dll
Infected! C:\WINDOWS\system32\h4l2le3o1h.dll
Infected! C:\WINDOWS\system32\ir04l5dq1.dll
Infected! C:\WINDOWS\system32\irl8l53u1.dll
Infected! C:\WINDOWS\system32\jt4m07h1e.dll
Infected! C:\WINDOWS\system32\k0jsla171d.dll
Infected! C:\WINDOWS\system32\kmduzb.dll
Infected! C:\WINDOWS\system32\kpdhela2.dll
Infected! C:\WINDOWS\system32\kudur.dll
Infected! C:\WINDOWS\system32\kzdycl.dll
Infected! C:\WINDOWS\system32\lvju0919e.dll
Infected! C:\WINDOWS\system32\lvp6097se.dll
Infected! C:\WINDOWS\system32\m082lalo1dqc.dll
Infected! C:\WINDOWS\system32\syorprop.dll
Infected! C:\WINDOWS\system32\wlbhits.dll

Attempting to delete infected files...

Attempting to delete: C:\WINDOWS\system32\dgkquoui.dll
C:\WINDOWS\system32\dgkquoui.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP51\A0015286.dll
C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP51\A0015286.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP51\A0015287.dll
C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP51\A0015287.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP51\A0017423.dll
C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP51\A0017423.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP51\A0017447.dll
C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP51\A0017447.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP51\A0017449.dll
C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP51\A0017449.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP51\A0017458.dll
C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP51\A0017458.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP51\A0017471.dll
C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP51\A0017471.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP51\A0018474.dll
C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP51\A0018474.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP52\A0018494.dll
C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP52\A0018494.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP52\A0018498.dll
C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP52\A0018498.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP52\A0018504.dll
C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP52\A0018504.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP52\A0018507.dll
C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP52\A0018507.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP52\A0018512.dll
C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP52\A0018512.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP52\A0018517.dll
C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP52\A0018517.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP52\A0018522.dll
C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP52\A0018522.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP52\A0018531.dll
C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP52\A0018531.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP52\A0018537.dll
C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP52\A0018537.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP52\A0018550.dll
C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP52\A0018550.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP52\A0018555.dll
C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP52\A0018555.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP53\A0018597.dll
C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP53\A0018597.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP53\A0018604.dll
C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP53\A0018604.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP53\A0018610.dll
C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP53\A0018610.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP53\A0018613.dll
C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP53\A0018613.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP53\A0018620.dll
C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP53\A0018620.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP53\A0018630.dll
C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP53\A0018630.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP53\A0019637.dll
C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP53\A0019637.dll Deleted successfully!

Attempting to delete: C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP53\A0019640.dll
C:\System Volume Information\_restore{3C2615CB-9BDE-4A8B-860F-2A1101B658BD}\RP53\A0019640.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\aestream.dll
C:\WINDOWS\system32\aestream.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\dgkquoui.dll
C:\WINDOWS\system32\dgkquoui.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\gcu32.dll
C:\WINDOWS\system32\gcu32.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\gp4ql3h51.dll
C:\WINDOWS\system32\gp4ql3h51.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\gp84l3lq1.dll
C:\WINDOWS\system32\gp84l3lq1.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\h4l2le3o1h.dll
C:\WINDOWS\system32\h4l2le3o1h.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\ir04l5dq1.dll
C:\WINDOWS\system32\ir04l5dq1.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\irl8l53u1.dll
C:\WINDOWS\system32\irl8l53u1.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\jt4m07h1e.dll
C:\WINDOWS\system32\jt4m07h1e.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\k0jsla171d.dll
C:\WINDOWS\system32\k0jsla171d.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\kmduzb.dll
C:\WINDOWS\system32\kmduzb.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\kpdhela2.dll
C:\WINDOWS\system32\kpdhela2.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\kudur.dll
C:\WINDOWS\system32\kudur.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\kzdycl.dll
C:\WINDOWS\system32\kzdycl.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\lvju0919e.dll
C:\WINDOWS\system32\lvju0919e.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\lvp6097se.dll
C:\WINDOWS\system32\lvp6097se.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\m082lalo1dqc.dll
C:\WINDOWS\system32\m082lalo1dqc.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\syorprop.dll
C:\WINDOWS\system32\syorprop.dll Deleted successfully!

Attempting to delete: C:\WINDOWS\system32\wlbhits.dll
C:\WINDOWS\system32\wlbhits.dll Deleted successfully!

Making registry repairs.

Removing: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Themes

Removing: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved "{DC5E21EF-13EC-40D0-9ABA-71E92A551E1A}"
HKCR\Clsid\{DC5E21EF-13EC-40D0-9ABA-71E92A551E1A}

Removing: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved "{7200616D-3604-451B-B631-A501B2BF75B2}"
HKCR\Clsid\{7200616D-3604-451B-B631-A501B2BF75B2}

Removing: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved "{4D4BE891-8F13-4CDE-BACE-4C54F550A2AB}"
HKCR\Clsid\{4D4BE891-8F13-4CDE-BACE-4C54F550A2AB}

Removing: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved "{5D8206F0-C1C4-4BAA-AC9D-E7F7AC713999}"
HKCR\Clsid\{5D8206F0-C1C4-4BAA-AC9D-E7F7AC713999}

Removing: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved "{43E0F458-18D1-4381-B98D-0EF25DDC7BA9}"
HKCR\Clsid\{43E0F458-18D1-4381-B98D-0EF25DDC7BA9}

Removing: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved "{C3EE6B2A-1BEF-4F08-A5C8-DD2DF06BA646}"
HKCR\Clsid\{C3EE6B2A-1BEF-4F08-A5C8-DD2DF06BA646}

Removing: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved "{6C002839-A71D-46DB-8090-C4313A2294FC}"
HKCR\Clsid\{6C002839-A71D-46DB-8090-C4313A2294FC}

Removing: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved "{B35E255B-A9FC-4317-B458-6FADDD0BD19F}"
HKCR\Clsid\{B35E255B-A9FC-4317-B458-6FADDD0BD19F}

Removing: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved "{D79CF6A6-DD6B-4C80-89C0-8F4DD060CBBC}"
HKCR\Clsid\{D79CF6A6-DD6B-4C80-89C0-8F4DD060CBBC}

Restoring Windows certificates.

Replaced hosts file with default windows hosts file


Restoring SeDebugPrivilege for Administrateurs - Succeeded









Voici celui de hijackthis :

Logfile of HijackThis v1.99.1
Scan saved at 18:53:32, on 19/09/2006
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe
C:\WINDOWS\U3AzYw\command.exe
C:\WINDOWS\System32\CTsvcCDA.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpm.exe
C:\WINDOWS\system32\ssmc.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\wdfmgr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe
C:\Program Files\MessengerPlus! 3\MsgPlus.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\WINDOWS\System32\wuauclt.exe
C:\WINDOWS\System32\NOTEPAD.EXE
C:\Program Files\Hijackthis Version Française\VERSION TRADUITE ORIGINALE.EXE

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.fr/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchbar.findthewebsiteyouneed.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://searchbar.findthewebsiteyouneed.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
R3 - URLSearchHook: (no name) - {A8B28872-3324-4CD2-8AA3-7D555C872D96} - (no file)
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
O4 - HKLM\..\Run: [AVPCC] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe" /wait
O4 - HKLM\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe"
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKLM\..\RunServices: [mysvcig38] mysvcc.exe
O4 - HKLM\..\RunServices: [Windows MS Update 32] fhm.exe
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Program Files\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab31267.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - update.microsoft.com
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab31267.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: AVP Control Centre Service (AVPCC) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe" /service (file missing)
O23 - Service: Command Service (cmdService) - Unknown owner - C:\WINDOWS\U3AzYw\command.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\System32\CTsvcCDA.exe
O23 - Service: KAV Monitor Service (KAVMonitorService) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpm.exe" /service (file missing)
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: MSDN Driver (msdndr) - Unknown owner - C:\WINDOWS\System32\msdndr.pif (file missing)
O23 - Service: Network Monitor - Unknown owner - C:\Program Files\Network Monitor\netmon.exe
O23 - Service: Remote Reader Machine - Unknown owner - C:\WINDOWS\system32\ssmc.exe
O23 - Service: Windows Reg Service - Unknown owner - C:\WINDOWS\system32\lsyss.exe (file missing)